grandwizard28 f7d5555aae fix(authtypes): migrate the persisted auth domain config to the envelope shape ...

A new sqlmigration rewrites auth_domain.data from the flat legacy
document into {enabled, config: {kind, spec}, roleMapping} with the
renamed saml keys, so all legacy-shape code goes away: the storable
twins, the google_auth translation and the four per-kind conversion
switches collapse into a single variant registry that UnmarshalJSON,
JSONSchemaOneOf and the discriminator mapping derive from. AuthDomain
now exposes the domain shape (Enabled, Kind, Config, RoleMapping and
typed spec accessors) instead of the persisted document, creates build
the row directly instead of re-parsing their own marshal output, and
config presence is enforced explicitly on Postable and Updatable — the
old PUT path never enforced it at all. A new PATCH endpoint flips SSO
enforcement without rewriting the provider configuration, and secret
fields are marked format password in the schema.

2026-08-12 18:21:57 +05:30

..

handler.go

fix(authtypes): rename google_auth kind to google and saml ssoUrl to location

2026-08-12 18:13:08 +05:30

module.go

fix(authtypes): migrate the persisted auth domain config to the envelope shape

2026-08-12 18:21:57 +05:30