Merge pull request #20736 from gustavotrott/remove-user_connection_auth

remove (gql-server): Removes old PG user/tabled created for Meteor auth
This commit is contained in:
Gustavo Trott 2024-07-19 13:40:26 -03:00 committed by GitHub
commit 0cf7c90663
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 0 additions and 46 deletions

View File

@ -449,13 +449,6 @@ AS SELECT "user"."userId",
"user"."inactivityWarningTimeoutSecs" "user"."inactivityWarningTimeoutSecs"
FROM "user"; FROM "user";
--This view will be used by Meteor to validate if the provided authToken is valid
--It is temporary while Meteor is not removed
create view "v_user_connection_auth" as
select "meetingId", "userId", "authToken"
from "v_user_current"
where "isOnline" is true;
CREATE OR REPLACE VIEW "v_user_guest" AS CREATE OR REPLACE VIEW "v_user_guest" AS
SELECT u."meetingId", u."userId", SELECT u."meetingId", u."userId",
u."guestStatus", u."guestStatus",

View File

@ -25,22 +25,6 @@ sudo runuser -u postgres -- psql -q -c "alter database bbb_graphql set timezone
echo "Creating tables in bbb_graphql" echo "Creating tables in bbb_graphql"
sudo runuser -u postgres -- psql -U postgres -d bbb_graphql -q -f bbb_schema.sql --set ON_ERROR_STOP=on sudo runuser -u postgres -- psql -U postgres -d bbb_graphql -q -f bbb_schema.sql --set ON_ERROR_STOP=on
echo "Creating frontend in bbb_graphql"
DATABASE_FRONTEND_USER="bbb_frontend"
FRONT_USER_EXISTS=$(sudo -u postgres psql -U postgres -tAc "SELECT 1 FROM pg_roles WHERE rolname = '$DATABASE_FRONTEND_USER'")
if [ "$FRONT_USER_EXISTS" = '1' ]
then
echo "User $DATABASE_FRONTEND_USER already exists"
else
sudo -u postgres psql -q -c "CREATE USER $DATABASE_FRONTEND_USER WITH PASSWORD '$DATABASE_FRONTEND_USER'"
sudo -u postgres psql -q -c "GRANT CONNECT ON DATABASE bbb_graphql TO $DATABASE_FRONTEND_USER"
sudo -u postgres psql -q -d bbb_graphql -c "REVOKE ALL ON ALL TABLES IN SCHEMA public FROM $DATABASE_FRONTEND_USER"
sudo -u postgres psql -q -d bbb_graphql -c "GRANT USAGE ON SCHEMA public TO $DATABASE_FRONTEND_USER"
echo "User $DATABASE_FRONTEND_USER created on database bbb_graphql"
fi
sudo -u postgres psql -q -d bbb_graphql -c "GRANT SELECT ON v_user_connection_auth TO $DATABASE_FRONTEND_USER"
echo "Starting Hasura" echo "Starting Hasura"
sudo systemctl start bbb-graphql-server sudo systemctl start bbb-graphql-server

View File

@ -1123,13 +1123,6 @@ public:
- coffeeshop.jpg - coffeeshop.jpg
- board.jpg - board.jpg
private: private:
postgresql:
host: localhost
port: 5432
database: bbb_graphql
user: bbb_frontend
password: bbb_frontend
timeout: 30000
analytics: analytics:
includeChat: true includeChat: true
app: app:

View File

@ -21,22 +21,6 @@ case "$1" in
echo "Database $DATABASE_NAME created" echo "Database $DATABASE_NAME created"
fi fi
# Create a readonly user that will be used by Meteor to check authToken (while Meteor not removed from the project)
DATABASE_FRONTEND_USER="bbb_frontend"
FRONT_USER_EXISTS=$(sudo -u postgres psql -U postgres -tAc "SELECT 1 FROM pg_roles WHERE rolname = '$DATABASE_FRONTEND_USER'")
if [ "$FRONT_USER_EXISTS" = '1' ]
then
echo "User $DATABASE_FRONTEND_USER already exists"
else
sudo -u postgres psql -q -c "CREATE USER $DATABASE_FRONTEND_USER WITH PASSWORD '$DATABASE_FRONTEND_USER'"
sudo -u postgres psql -q -c "GRANT CONNECT ON DATABASE bbb_graphql TO $DATABASE_FRONTEND_USER"
sudo -u postgres psql -q -d bbb_graphql -c "REVOKE ALL ON ALL TABLES IN SCHEMA public FROM $DATABASE_FRONTEND_USER"
sudo -u postgres psql -q -d bbb_graphql -c "GRANT USAGE ON SCHEMA public TO $DATABASE_FRONTEND_USER"
echo "User $DATABASE_FRONTEND_USER created on database bbb_graphql"
fi
sudo -u postgres psql -q -d bbb_graphql -c "GRANT SELECT ON v_user_connection_auth TO $DATABASE_FRONTEND_USER"
echo "Postgresql configured" echo "Postgresql configured"
#Generate a random password to Hasura to improve security #Generate a random password to Hasura to improve security