Begin implementation of new daemon authentication scheme

This commit is contained in:
Dane Everitt 2017-09-23 20:45:25 -05:00
parent 8722571037
commit 906a699ee2
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
23 changed files with 796 additions and 145 deletions

View file

@ -0,0 +1,35 @@
<?php
use Illuminate\Support\Facades\Schema;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Database\Migrations\Migration;
class CreateDaemonKeysTable extends Migration
{
/**
* Run the migrations.
*/
public function up()
{
Schema::create('daemon_keys', function (Blueprint $table) {
$table->increments('id');
$table->unsignedInteger('server_id');
$table->unsignedInteger('user_id');
$table->string('secret')->unique();
$table->timestamp('expires_at');
$table->timestamps();
$table->index(['server_id', 'user_id']);
$table->foreign('server_id')->references('id')->on('servers')->onDelete('cascade');
$table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
});
}
/**
* Reverse the migrations.
*/
public function down()
{
Schema::dropIfExists('daemon_keys');
}
}

View file

@ -0,0 +1,51 @@
<?php
use Carbon\Carbon;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Schema;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Database\Migrations\Migration;
class RemoveDaemonSecretFromServersTable extends Migration
{
/**
* Run the migrations.
*/
public function up()
{
$inserts = [];
$servers = DB::table('servers')->select('id', 'owner_id')->get();
$servers->each(function ($server) use (&$inserts) {
$inserts[] = [
'user_id' => $server->owner_id,
'server_id' => $server->id,
'secret' => 'i_' . str_random(40),
'expires_at' => Carbon::now()->addHours(24),
'created_at' => Carbon::now(),
'updated_at' => Carbon::now(),
];
});
DB::transaction(function () use ($inserts) {
DB::table('daemon_keys')->insert($inserts);
});
Schema::table('servers', function (Blueprint $table) {
$table->dropUnique(['daemonSecret']);
$table->dropColumn('daemonSecret');
});
}
/**
* Reverse the migrations.
*/
public function down()
{
Schema::table('servers', function (Blueprint $table) {
$table->char('daemonSecret', 36)->after('startup')->unique();
});
DB::table('daemon_keys')->truncate();
}
}

View file

@ -0,0 +1,52 @@
<?php
use Carbon\Carbon;
use Illuminate\Support\Facades\Schema;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Database\Migrations\Migration;
class RemoveDaemonSecretFromSubusersTable extends Migration
{
/**
* Run the migrations.
*/
public function up()
{
$inserts = [];
$subusers = DB::table('subusers')->get();
$subusers->each(function ($subuser) use (&$inserts) {
$inserts[] = [
'user_id' => $subuser->user_id,
'server_id' => $subuser->server_id,
'secret' => 'i_' . str_random(40),
'expires_at' => Carbon::now()->addHours(24),
'created_at' => Carbon::now(),
'updated_at' => Carbon::now(),
];
});
DB::transaction(function () use ($inserts) {
DB::table('daemon_keys')->insert($inserts);
});
Schema::table('subusers', function (Blueprint $table) {
$table->dropUnique(['daemonSecret']);
$table->dropColumn('daemonSecret');
});
}
/**
* Reverse the migrations.
*/
public function down()
{
Schema::table('subusers', function (Blueprint $table) {
$table->char('daemonSecret', 36)->after('server_id')->unique();
});
$subusers = DB::table('subusers')->get();
$subusers->each(function ($subuser) {
DB::table('daemon_keys')->delete($subuser->id);
});
}
}