| | | 1 | | using ArturRios.Data.Relational.Core.Configuration; |
| | | 2 | | using ArturRios.Heimdall.Data.EntityMaps; |
| | | 3 | | using ArturRios.Heimdall.Domain.Entities; |
| | | 4 | | using Microsoft.AspNetCore.DataProtection.EntityFrameworkCore; |
| | | 5 | | using Microsoft.EntityFrameworkCore; |
| | | 6 | | using Microsoft.Extensions.Logging; |
| | | 7 | | |
| | | 8 | | namespace ArturRios.Heimdall.Data.Configuration; |
| | | 9 | | |
| | | 10 | | public class AppDbContext( |
| | | 11 | | DbContextOptions options, |
| | | 12 | | ILoggerFactory loggerFactory, |
| | 7903 | 13 | | DbContextDiagnosticsOptions diagnostics) : BaseDbContext(options), IDataProtectionKeyContext |
| | | 14 | | { |
| | | 15 | | private const string Schema = "heimdall"; |
| | | 16 | | |
| | 10956 | 17 | | public DbSet<Person> Persons { get; init; } |
| | 8747 | 18 | | public DbSet<Scope> Scopes { get; init; } |
| | 8884 | 19 | | public DbSet<Role> Roles { get; init; } |
| | 8103 | 20 | | public DbSet<Application> Applications { get; init; } |
| | 8009 | 21 | | public DbSet<ApplicationCredential> ApplicationCredentials { get; init; } |
| | 8090 | 22 | | public DbSet<GoogleUser> GoogleUsers { get; init; } |
| | 8280 | 23 | | public DbSet<ScopeOwner> ScopeOwners { get; init; } |
| | 8138 | 24 | | public DbSet<ScopeUser> ScopeUsers { get; init; } |
| | 7984 | 25 | | public DbSet<ScopePermission> ScopePermissions { get; init; } |
| | 8004 | 26 | | public DbSet<PasswordResetToken> PasswordResetTokens { get; init; } |
| | 7989 | 27 | | public DbSet<EmailVerificationToken> EmailVerificationTokens { get; init; } |
| | 7992 | 28 | | public DbSet<PendingRegistration> PendingRegistrations { get; init; } |
| | 8167 | 29 | | public DbSet<TwoFactorAuth> TwoFactorAuths { get; init; } |
| | 7972 | 30 | | public DbSet<TwoFactorEmailCode> TwoFactorEmailCodes { get; init; } |
| | 7991 | 31 | | public DbSet<TwoFactorRecoveryCode> TwoFactorRecoveryCodes { get; init; } |
| | 7973 | 32 | | public DbSet<AuditLog> AuditLogs { get; init; } |
| | 7922 | 33 | | public DbSet<ErasedSubject> ErasedSubjects { get; init; } |
| | 7912 | 34 | | public DbSet<AttemptNoticeBudget> AttemptNoticeBudgets { get; init; } |
| | 8086 | 35 | | public DbSet<ScopeOwnerInvitation> ScopeOwnerInvitations { get; init; } |
| | 7908 | 36 | | public DbSet<GoogleIdTokenUse> GoogleIdTokenUses { get; init; } |
| | | 37 | | |
| | | 38 | | /// <summary> |
| | | 39 | | /// ASP.NET Core's Data Protection key ring, kept in the database rather than on a local |
| | | 40 | | /// filesystem (<see cref="IDataProtectionKeyContext" />). |
| | | 41 | | /// </summary> |
| | | 42 | | /// <remarks> |
| | | 43 | | /// Not a domain table, and the only one here that no entity map configures — its shape |
| | | 44 | | /// belongs to Data Protection. It is in this context because the keys have to outlive the |
| | | 45 | | /// container and be reachable from every instance: the TOTP secrets of UC-36 are encrypted |
| | | 46 | | /// with them (NFR-16), and a key ring that is lost or not shared makes every one of those |
| | | 47 | | /// secrets undecryptable, which silently stops the authenticator-app factor from ever |
| | | 48 | | /// verifying again. The default is a directory on the local filesystem, which the image does |
| | | 49 | | /// not persist and two instances do not share. |
| | | 50 | | /// </remarks> |
| | 8875 | 51 | | public DbSet<DataProtectionKey> DataProtectionKeys { get; init; } |
| | | 52 | | |
| | | 53 | | protected override void OnConfiguring(DbContextOptionsBuilder optionsBuilder) |
| | | 54 | | { |
| | 7308 | 55 | | optionsBuilder |
| | 7308 | 56 | | .UseLoggerFactory(loggerFactory) |
| | 7308 | 57 | | .UseSnakeCaseNamingConvention() |
| | 7308 | 58 | | .EnableDetailedErrors(diagnostics.DetailedErrors) |
| | 7308 | 59 | | .EnableSensitiveDataLogging(diagnostics.SensitiveDataLogging); |
| | 7308 | 60 | | } |
| | | 61 | | |
| | | 62 | | protected override void OnModelCreating(ModelBuilder modelBuilder) |
| | | 63 | | { |
| | 4 | 64 | | modelBuilder.HasDefaultSchema(Schema); |
| | | 65 | | |
| | 4 | 66 | | modelBuilder.Entity<Person>().Configure(); |
| | 4 | 67 | | modelBuilder.Entity<Scope>().Configure(); |
| | 4 | 68 | | modelBuilder.Entity<Role>().Configure(); |
| | 4 | 69 | | modelBuilder.Entity<Application>().Configure(); |
| | 4 | 70 | | modelBuilder.Entity<ApplicationCredential>().Configure(); |
| | 4 | 71 | | modelBuilder.Entity<GoogleUser>().Configure(); |
| | 4 | 72 | | modelBuilder.Entity<ScopePermission>().Configure(); |
| | 4 | 73 | | modelBuilder.Entity<ScopeOwner>().Configure(); |
| | 4 | 74 | | modelBuilder.Entity<ScopeUser>().Configure(); |
| | 4 | 75 | | modelBuilder.Entity<PasswordResetToken>().Configure(); |
| | 4 | 76 | | modelBuilder.Entity<EmailVerificationToken>().Configure(); |
| | 4 | 77 | | modelBuilder.Entity<PendingRegistration>().Configure(); |
| | 4 | 78 | | modelBuilder.Entity<TwoFactorAuth>().Configure(); |
| | 4 | 79 | | modelBuilder.Entity<TwoFactorEmailCode>().Configure(); |
| | 4 | 80 | | modelBuilder.Entity<TwoFactorRecoveryCode>().Configure(); |
| | 4 | 81 | | modelBuilder.Entity<AuditLog>().Configure(); |
| | 4 | 82 | | modelBuilder.Entity<ErasedSubject>().Configure(); |
| | 4 | 83 | | modelBuilder.Entity<AttemptNoticeBudget>().Configure(); |
| | 4 | 84 | | modelBuilder.Entity<ScopeOwnerInvitation>().Configure(); |
| | 4 | 85 | | modelBuilder.Entity<GoogleIdTokenUse>().Configure(); |
| | 4 | 86 | | } |
| | | 87 | | } |