First crack

db/migrate/20251023053651_create_users.rb

@@ -0,0 +1,11 @@
+class CreateUsers < ActiveRecord::Migration[8.1]
+  def change
+    create_table :users do |t|
+      t.string :email_address, null: false
+      t.string :password_digest, null: false
+
+      t.timestamps
+    end
+    add_index :users, :email_address, unique: true
+  end
+end

db/migrate/20251023053652_create_sessions.rb

@@ -0,0 +1,11 @@
+class CreateSessions < ActiveRecord::Migration[8.1]
+  def change
+    create_table :sessions do |t|
+      t.references :user, null: false, foreign_key: true
+      t.string :ip_address
+      t.string :user_agent
+
+      t.timestamps
+    end
+  end
+end

db/migrate/20251023053722_add_auth_fields_to_users.rb

@@ -0,0 +1,11 @@
+class AddAuthFieldsToUsers < ActiveRecord::Migration[8.1]
+  def change
+    add_column :users, :admin, :boolean, default: false, null: false
+    add_column :users, :totp_secret, :string
+    add_column :users, :totp_required, :boolean, default: false, null: false
+    add_column :users, :backup_codes, :text
+    add_column :users, :status, :string, default: "active", null: false
+
+    add_index :users, :status
+  end
+end

db/migrate/20251023053740_add_device_tracking_to_sessions.rb

@@ -0,0 +1,11 @@
+class AddDeviceTrackingToSessions < ActiveRecord::Migration[8.1]
+  def change
+    add_column :sessions, :device_name, :string
+    add_column :sessions, :remember_me, :boolean, default: false, null: false
+    add_column :sessions, :expires_at, :datetime
+    add_column :sessions, :last_activity_at, :datetime
+
+    add_index :sessions, :expires_at
+    add_index :sessions, :last_activity_at
+  end
+end

db/migrate/20251023053836_create_groups.rb

@@ -0,0 +1,11 @@
+class CreateGroups < ActiveRecord::Migration[8.1]
+  def change
+    create_table :groups do |t|
+      t.string :name, null: false
+      t.text :description
+
+      t.timestamps
+    end
+    add_index :groups, :name, unique: true
+  end
+end

db/migrate/20251023053837_create_user_groups.rb

@@ -0,0 +1,12 @@
+class CreateUserGroups < ActiveRecord::Migration[8.1]
+  def change
+    create_table :user_groups do |t|
+      t.references :user, null: false, foreign_key: true
+      t.references :group, null: false, foreign_key: true
+
+      t.timestamps
+    end
+
+    add_index :user_groups, [ :user_id, :group_id ], unique: true
+  end
+end

db/migrate/20251023053927_create_applications.rb

@@ -0,0 +1,19 @@
+class CreateApplications < ActiveRecord::Migration[8.1]
+  def change
+    create_table :applications do |t|
+      t.string :name, null: false
+      t.string :slug, null: false
+      t.string :app_type, null: false
+      t.string :client_id
+      t.string :client_secret
+      t.text :redirect_uris
+      t.text :metadata
+      t.boolean :active, default: true, null: false
+
+      t.timestamps
+    end
+    add_index :applications, :slug, unique: true
+    add_index :applications, :client_id, unique: true
+    add_index :applications, :active
+  end
+end

db/migrate/20251023053938_create_application_groups.rb

@@ -0,0 +1,12 @@
+class CreateApplicationGroups < ActiveRecord::Migration[8.1]
+  def change
+    create_table :application_groups do |t|
+      t.references :application, null: false, foreign_key: true
+      t.references :group, null: false, foreign_key: true
+
+      t.timestamps
+    end
+
+    add_index :application_groups, [ :application_id, :group_id ], unique: true
+  end
+end

db/migrate/20251023054038_create_oidc_authorization_codes.rb

@@ -0,0 +1,18 @@
+class CreateOidcAuthorizationCodes < ActiveRecord::Migration[8.1]
+  def change
+    create_table :oidc_authorization_codes do |t|
+      t.string :code, null: false
+      t.references :application, null: false, foreign_key: true
+      t.references :user, null: false, foreign_key: true
+      t.string :redirect_uri, null: false
+      t.string :scope
+      t.datetime :expires_at, null: false
+      t.boolean :used, default: false, null: false
+
+      t.timestamps
+    end
+    add_index :oidc_authorization_codes, :code, unique: true
+    add_index :oidc_authorization_codes, :expires_at
+    add_index :oidc_authorization_codes, [ :application_id, :user_id ]
+  end
+end

db/migrate/20251023054039_create_oidc_access_tokens.rb

@@ -0,0 +1,16 @@
+class CreateOidcAccessTokens < ActiveRecord::Migration[8.1]
+  def change
+    create_table :oidc_access_tokens do |t|
+      t.string :token, null: false
+      t.references :application, null: false, foreign_key: true
+      t.references :user, null: false, foreign_key: true
+      t.string :scope
+      t.datetime :expires_at, null: false
+
+      t.timestamps
+    end
+    add_index :oidc_access_tokens, :token, unique: true
+    add_index :oidc_access_tokens, :expires_at
+    add_index :oidc_access_tokens, [ :application_id, :user_id ]
+  end
+end