c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
63 lines
2.4 KiB
TypeScript
63 lines
2.4 KiB
TypeScript
// Copyright © 2024 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
import { execSync } from "child_process"
|
|
|
|
/**
|
|
* Extracts the SQLite file path from the TEST_DATABASE_SQLITE env var.
|
|
*
|
|
* Expected format: sqlite:///path/to/db.sqlite?_fk=true
|
|
*/
|
|
export function getSqliteDbPath(): string {
|
|
const dsn = process.env["TEST_DATABASE_SQLITE"]
|
|
if (!dsn) {
|
|
throw new Error(
|
|
"TEST_DATABASE_SQLITE is not set — cannot manipulate legacy data",
|
|
)
|
|
}
|
|
|
|
// Strip the sqlite:// prefix and any query parameters
|
|
const withoutScheme = dsn.replace(/^sqlite:\/\//, "")
|
|
const pathOnly = withoutScheme.split("?")[0]
|
|
return pathOnly
|
|
}
|
|
|
|
/**
|
|
* Downgrades an identity created via admin API to simulate a legacy (pre-normalization)
|
|
* record in the database. This reverts the E.164 normalization that the admin API applies
|
|
* on creation, making the DB state match what an old Kratos version would have stored.
|
|
*
|
|
* Updates:
|
|
* - identity_credential_identifiers: replaces normalized identifier with legacy format
|
|
* - identity_credentials: sets version to 0 (pre-normalization)
|
|
* - identity_verifiable_addresses: replaces normalized value with legacy format
|
|
* - identity_recovery_addresses: replaces normalized value with legacy format
|
|
*/
|
|
export function downgradeLegacyIdentity(
|
|
identityId: string,
|
|
legacyPhone: string,
|
|
normalizedPhone: string,
|
|
) {
|
|
const dbPath = getSqliteDbPath()
|
|
const escapedLegacy = legacyPhone.replace(/'/g, "''")
|
|
const escapedNormalized = normalizedPhone.replace(/'/g, "''")
|
|
|
|
const queries = [
|
|
// Revert credential identifiers to legacy format
|
|
`UPDATE identity_credential_identifiers SET identifier = '${escapedLegacy}' WHERE identifier = '${escapedNormalized}' AND identity_credential_id IN (SELECT id FROM identity_credentials WHERE identity_id = '${identityId}');`,
|
|
// Set credential version to 0 (pre-normalization)
|
|
`UPDATE identity_credentials SET version = 0 WHERE identity_id = '${identityId}';`,
|
|
// Revert verifiable addresses
|
|
`UPDATE identity_verifiable_addresses SET value = '${escapedLegacy}' WHERE value = '${escapedNormalized}' AND identity_id = '${identityId}';`,
|
|
// Revert recovery addresses
|
|
`UPDATE identity_recovery_addresses SET value = '${escapedLegacy}' WHERE value = '${escapedNormalized}' AND identity_id = '${identityId}';`,
|
|
]
|
|
|
|
for (const query of queries) {
|
|
execSync(`sqlite3 "${dbPath}" "${query}"`, {
|
|
encoding: "utf-8",
|
|
timeout: 5000,
|
|
})
|
|
}
|
|
}
|