mirror of
https://github.com/goharbor/harbor.git
synced 2025-01-19 22:21:24 +01:00
0a2343f542
As CLI does not support oauth flow, we'll use secret for help OIDC user to authenticate via CLI. Add column to store secret and token, and add code to support verify/refresh token associates with secret. Such that when the user is removed from OIDC provider the secret will no longer work. Signed-off-by: Daniel Jiang <jiangd@vmware.com>
25 lines
686 B
Go
25 lines
686 B
Go
package models
|
|
|
|
import (
|
|
"time"
|
|
)
|
|
|
|
// OIDCUser ...
|
|
type OIDCUser struct {
|
|
ID int64 `orm:"pk;auto;column(id)" json:"id"`
|
|
UserID int `orm:"column(user_id)" json:"user_id"`
|
|
// encrypted secret
|
|
Secret string `orm:"column(secret)" json:"-"`
|
|
// secret in plain text
|
|
PlainSecret string `orm:"-" json:"secret"`
|
|
SubIss string `orm:"column(subiss)" json:"subiss"`
|
|
Token string `orm:"column(token)" json:"-"`
|
|
CreationTime time.Time `orm:"column(creation_time);auto_now_add" json:"creation_time"`
|
|
UpdateTime time.Time `orm:"column(update_time);auto_now" json:"update_time"`
|
|
}
|
|
|
|
// TableName ...
|
|
func (o *OIDCUser) TableName() string {
|
|
return "oidc_user"
|
|
}
|