ms2k
bf028161ae
OIDC validation, principal mapping, remora:v1 roles, and current-authz filtering with kind acceptance on Keycloak and ZITADEL.
10 lines
321 B
SQL
10 lines
321 B
SQL
-- Stable principal mapping from OIDC issuer+subject pairs.
|
|
-- Feature package remora-identity owns this schema.
|
|
|
|
CREATE TABLE principal_identities (
|
|
principal_id TEXT PRIMARY KEY,
|
|
issuer TEXT NOT NULL,
|
|
subject TEXT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
|
|
UNIQUE (issuer, subject)
|
|
);
|