Add multi-IP binding modes and deployment guide
This commit is contained in:
@@ -4,20 +4,22 @@ CREATE TABLE token_bindings (
|
||||
id BIGSERIAL PRIMARY KEY,
|
||||
token_hash VARCHAR(64) NOT NULL UNIQUE,
|
||||
token_display VARCHAR(20) NOT NULL,
|
||||
bound_ip CIDR NOT NULL,
|
||||
bound_ip TEXT NOT NULL,
|
||||
binding_mode VARCHAR(16) NOT NULL DEFAULT 'single',
|
||||
allowed_ips JSONB NOT NULL DEFAULT '[]'::jsonb,
|
||||
status SMALLINT NOT NULL DEFAULT 1,
|
||||
first_used_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
||||
last_used_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
||||
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
||||
);
|
||||
CREATE INDEX idx_token_bindings_hash ON token_bindings(token_hash);
|
||||
CREATE INDEX idx_token_bindings_ip ON token_bindings USING GIST (bound_ip inet_ops);
|
||||
CREATE INDEX idx_token_bindings_ip ON token_bindings(bound_ip);
|
||||
|
||||
CREATE TABLE intercept_logs (
|
||||
id BIGSERIAL PRIMARY KEY,
|
||||
token_hash VARCHAR(64) NOT NULL,
|
||||
token_display VARCHAR(20) NOT NULL,
|
||||
bound_ip CIDR NOT NULL,
|
||||
bound_ip TEXT NOT NULL,
|
||||
attempt_ip INET NOT NULL,
|
||||
alerted BOOLEAN NOT NULL DEFAULT FALSE,
|
||||
intercepted_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
||||
|
||||
Reference in New Issue
Block a user