login-credentials without RBAC (#173)

Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/173
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>

src/main/resources/db/changelog/9-hs-global/950-credentials/9510-hs-credentials.sql

@@ -0,0 +1,91 @@
+--liquibase formatted sql
+
+
+-- ============================================================================
+--changeset michael.hoennig:hs-credentials-CREDENTIALS-TABLE endDelimiter:--//
+-- ----------------------------------------------------------------------------
+
+create table hs_credentials.credentials
+(
+    uuid             uuid PRIMARY KEY references rbac.subject (uuid) initially deferred,
+    version          int not null default 0,
+
+    person_uuid      uuid not null references hs_office.person(uuid),
+
+    active           bool,
+    global_uid       int unique,     -- w/o
+    global_gid       int unique,     -- w/o
+    onboarding_token text,           -- w/o
+
+    two_factor_auth  text,
+    phone_password   text,
+    email_address    text,
+    sms_number       text
+);
+--//
+
+
+-- ============================================================================
+--changeset michael.hoennig:hs-credentials-context-CONTEXT-TABLE endDelimiter:--//
+-- ----------------------------------------------------------------------------
+
+create table hs_credentials.context
+(
+    uuid            uuid PRIMARY KEY,
+    version         int not null default 0,
+
+    type            varchar(16),
+    qualifier       varchar(80),
+
+    unique (type, qualifier)
+);
+--//
+
+
+-- ============================================================================
+--changeset michael.hoennig:hs-credentials-CONTEXT-IMMUTABLE-TRIGGER endDelimiter:--//
+-- ----------------------------------------------------------------------------
+CREATE OR REPLACE FUNCTION hs_credentials.prevent_context_update()
+RETURNS TRIGGER AS $$
+BEGIN
+    RAISE EXCEPTION 'Updates to hs_credentials.context are not allowed.';
+END;
+$$ LANGUAGE plpgsql;
+
+-- Trigger to enforce immutability
+CREATE TRIGGER context_immutable_trigger
+BEFORE UPDATE ON hs_credentials.context
+FOR EACH ROW EXECUTE FUNCTION hs_credentials.prevent_context_update();
+--//
+
+
+-- ============================================================================
+--changeset michael.hoennig:hs_credentials-CONTEXT-MAPPING endDelimiter:--//
+-- ----------------------------------------------------------------------------
+
+create table hs_credentials.context_mapping
+(
+    uuid                    uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+    credentials_uuid        uuid references hs_credentials.credentials(uuid) ON DELETE CASCADE,
+    context_uuid            uuid references hs_credentials.context(uuid) ON DELETE RESTRICT
+);
+--//
+
+
+-- ============================================================================
+--changeset michael.hoennig:hs-hs_credentials-JOURNALS endDelimiter:--//
+-- ----------------------------------------------------------------------------
+
+call base.create_journal('hs_credentials.context_mapping');
+call base.create_journal('hs_credentials.context');
+call base.create_journal('hs_credentials.credentials');
+--//
+
+
+-- ============================================================================
+--changeset michael.hoennig:hs_credentials-HISTORICIZATION endDelimiter:--//
+-- ----------------------------------------------------------------------------
+call base.tx_create_historicization('hs_credentials.context_mapping');
+call base.tx_create_historicization('hs_credentials.context');
+call base.tx_create_historicization('hs_credentials.credentials');
+--//