OAuth providers

Signed-off-by: Ronni Skansing <rskansing@gmail.com>

backend/database/oauthProvider.go

@@ -0,0 +1,55 @@
+package database
+
+import (
+	"time"
+
+	"github.com/google/uuid"
+	"gorm.io/gorm"
+)
+
+const (
+	OAUTH_PROVIDER_TABLE = "oauth_providers"
+)
+
+// OAuthProvider is the gorm data model for oauth providers
+type OAuthProvider struct {
+	ID        uuid.UUID  `gorm:"primary_key;not null;unique;type:uuid"`
+	CreatedAt *time.Time `gorm:"not null;index;"`
+	UpdatedAt *time.Time `gorm:"not null;index;"`
+
+	Name string `gorm:"not null;uniqueIndex:idx_oauth_providers_unique_name_and_company_id;"`
+
+	// oauth endpoints (user configurable)
+	AuthURL  string `gorm:"not null;type:varchar(512);"`
+	TokenURL string `gorm:"not null;type:varchar(512);"`
+	Scopes   string `gorm:"not null;type:varchar(512);"`
+
+	// user's oauth app credentials (stored as plain text like smtp passwords)
+	ClientID     string `gorm:"not null;type:varchar(255);"`
+	ClientSecret string `gorm:"not null;type:varchar(255);"`
+
+	// current token state (stored as plain text)
+	AccessToken    string     `gorm:"type:varchar(4096);"`
+	RefreshToken   string     `gorm:"type:varchar(4096);"`
+	TokenExpiresAt *time.Time `gorm:"index;"`
+
+	// authorization metadata
+	AuthorizedEmail string     `gorm:"type:varchar(255);"`
+	AuthorizedAt    *time.Time `gorm:"index;"`
+
+	// status
+	IsAuthorized bool `gorm:"not null;default:false;"`
+
+	// can belong-to
+	CompanyID *uuid.UUID `gorm:"uniqueIndex:idx_oauth_providers_unique_name_and_company_id;"`
+	Company   *Company   `gorm:"foreignkey:CompanyID;"`
+}
+
+func (o *OAuthProvider) Migrate(db *gorm.DB) error {
+	// ensure name + company id is unique
+	return UniqueIndexNameAndNullCompanyID(db, "oauth_providers")
+}
+
+func (OAuthProvider) TableName() string {
+	return OAUTH_PROVIDER_TABLE
+}