chengcheng
2e5a90731b
部分已配对环境在 0090 首次执行后缺少 oidc_client_id，导致统一认证完成投影后无法写入 Gateway 服务端会话。新增幂等前向迁移补齐该列，并为 Token 处理及会话创建增加不泄露凭据的稳定失败分类和关联诊断。\n\n验证：OIDC Session 全量单测、HTTP 回调定向测试、迁移升级集成测试、隔离 PostgreSQL 跨仓库 OIDC E2E 和本地 Chrome 真实登录均通过。
6 lines
295 B
SQL
6 lines
295 B
SQL
-- 0090 was already applied by some local installations before oidc_client_id
|
|
-- was added to that migration. Keep migrations immutable and repair those
|
|
-- installations with a forward-only, idempotent migration.
|
|
ALTER TABLE gateway_oidc_sessions
|
|
ADD COLUMN IF NOT EXISTS oidc_client_id text;
|