flagon-io/g1t

public

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

31 lines1,066 bytesCode Blame

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

OAuth 2.1 sign-in for MCP clients and other applications4d ago	1	-- OAuth 2.1 sign-in for applications, such as MCP clients.
	2	-- Clients are not stored: a client id carries its own name and redirect
	3	-- addresses, so registering one writes nothing.
	4
	5	CREATE TABLE oauth_codes (
	6	-- SHA-256 of the authorization code.
	7	id TEXT PRIMARY KEY,
	8	user_id TEXT NOT NULL REFERENCES users (id) ON DELETE CASCADE,
	9	client_id TEXT NOT NULL,
	10	client_name TEXT NOT NULL,
	11	redirect_uri TEXT NOT NULL,
	12	-- PKCE, method S256.
	13	code_challenge TEXT NOT NULL,
	14	expires_at TEXT NOT NULL
	15	);
	16
	17	-- One per application a person has signed in to.
	18	CREATE TABLE oauth_grants (
	19	id TEXT PRIMARY KEY,
	20	user_id TEXT NOT NULL REFERENCES users (id) ON DELETE CASCADE,
	21	client_id TEXT NOT NULL,
	22	client_name TEXT NOT NULL,
	23	-- SHA-256 of the current refresh token; replaced on every use.
	24	refresh_hash TEXT UNIQUE,
	25	-- The access token issued with it, revoked when the grant is refreshed.
	26	access_token_id TEXT,
	27	created_at TEXT NOT NULL,
	28	last_used_at TEXT NOT NULL,
	29	expires_at TEXT
	30	);
	31	CREATE INDEX oauth_grants_by_user ON oauth_grants (user_id);