chore: add claims to oauth link in db for debug

coder · Emyrk · Nov 27, 2023 · Nov 21, 2023 · Nov 21, 2023 · Nov 22, 2023
commit 4f94342e14732ed38409819cf8ee6117b0366b56
diff --git a/coderd/coderd.go b/coderd/coderd.go
@@ -958,6 +958,10 @@ func New(options *Options) *API {
 			r.Get("/tailnet", api.debugTailnet)
 			r.Get("/health", api.debugDeploymentHealth)
 			r.Get("/ws", (&healthcheck.WebsocketEchoServer{}).ServeHTTP)
+			r.Route("/{user}", func(r chi.Router) {
+				r.Use(httpmw.ExtractUserParam(options.Database))
+				r.Get("/debug-link", api.userDebugOIDC)
+			})
 		})
 	})
 

diff --git a/coderd/database/dump.sql b/coderd/database/dump.sql
diff --git a/coderd/database/migrations/000171_oidc_debug_claims.down.sql b/coderd/database/migrations/000171_oidc_debug_claims.down.sql
@@ -0,0 +1,5 @@
+BEGIN;
+
+ALTER TABLE user_links DROP COLUMN debug_context jsonb;
+
+COMMIT;
diff --git a/coderd/database/migrations/000171_oidc_debug_claims.up.sql b/coderd/database/migrations/000171_oidc_debug_claims.up.sql
@@ -0,0 +1,6 @@
+BEGIN;
+
+ALTER TABLE user_links ADD COLUMN debug_context jsonb DEFAULT '{}' NOT NULL;
+COMMENT ON COLUMN user_links.debug_context IS 'Debug information includes information like id_token and userinfo claims.';
+
+COMMIT;
diff --git a/coderd/database/models.go b/coderd/database/models.go
diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go
diff --git a/coderd/database/queries/user_links.sql b/coderd/database/queries/user_links.sql
@@ -27,10 +27,11 @@ INSERT INTO
 		oauth_access_token_key_id,
 		oauth_refresh_token,
 		oauth_refresh_token_key_id,
-		oauth_expiry
+		oauth_expiry,
+	    debug_context
 	)
 VALUES
-	( $1, $2, $3, $4, $5, $6, $7, $8 ) RETURNING *;
+	( $1, $2, $3, $4, $5, $6, $7, $8, $9 ) RETURNING *;
 
 -- name: UpdateUserLinkedID :one
 UPDATE
@@ -48,6 +49,7 @@ SET
 	oauth_access_token_key_id = $2,
 	oauth_refresh_token = $3,
 	oauth_refresh_token_key_id = $4,
-	oauth_expiry = $5
+	oauth_expiry = $5,
+	debug_context = $6
 WHERE
-	user_id = $6 AND login_type = $7 RETURNING *;
+	user_id = $7 AND login_type = $8 RETURNING *;