951dd8d26b
Some checks failed
ci / go (push) Has been cancelled
ci / admin-ui (push) Has been cancelled
ci / runtime-sdk (push) Has been cancelled
ci / helm (push) Has been cancelled
ci / openapi (push) Has been cancelled
ci / container (push) Has been cancelled
ci / release-config (push) Has been cancelled
ci / shared styling (push) Has been cancelled
ci / security (push) Has been cancelled
ci / all green (push) Has been cancelled
19 lines
No EOL
1,009 B
SQL
19 lines
No EOL
1,009 B
SQL
-- Drop the machine-credential table.
|
|
--
|
|
-- API keys were removed: the runtime API is public by design and the admin API is
|
|
-- for people, so there is no machine caller left to authenticate. The table is
|
|
-- dropped rather than left behind, because an unused table holding SHA-256 digests
|
|
-- of credentials that no longer authenticate anything is a liability with no
|
|
-- upside, and its presence in the schema implies a capability that no longer exists.
|
|
--
|
|
-- The rows go with it. That is destructive by definition, which is why this is a
|
|
-- migration rather than a code change: it happens once, in order, and is recorded in
|
|
-- schema_migrations so a restore from an older backup is visible rather than silent.
|
|
--
|
|
-- A backup taken before this migration still contains the table and its rows. The
|
|
-- credentials in it do not work against any version of this service, so restoring
|
|
-- one is harmless.
|
|
|
|
DROP INDEX IF EXISTS idx_api_keys_hash;
|
|
DROP INDEX IF EXISTS idx_api_keys_live;
|
|
DROP TABLE IF EXISTS api_keys; |