init: 클린 기반 auth 서버 설계

infrastructure/build/resources/main/db/migration/V1__create_users_table.sql

@@ -0,0 +1,30 @@
+create schema if not exists auth;
+
+create or replace function auth.set_updated_at()
+returns trigger as $$
+begin
+    new.updated_at := current_timestamp;
+    return new;
+end;
+$$ language plpgsql;
+
+create table auth.users (
+    id uuid not null,
+    email text not null,
+    encoded_password text not null,
+    name text not null,
+    provider text not null,
+    created_at timestamp with time zone not null default current_timestamp,
+    updated_at timestamp with time zone not null default current_timestamp,
+    constraint pk_users primary key (id),
+    constraint uq_users__email unique (email),
+    constraint ck_users__provider check (provider in ('LOCAL', 'GOOGLE', 'GITHUB'))
+);
+
+create index ix_users__created_at on auth.users (created_at);
+
+create trigger trg_users__set_updated_at
+before update on auth.users
+for each row
+when (old.* is distinct from new.*)
+execute function auth.set_updated_at();

infrastructure/build/resources/main/db/migration/V2__add_oauth_login_columns.sql

@@ -0,0 +1,6 @@
+alter table auth.users alter column encoded_password drop not null;
+
+alter table auth.users add column provider_subject text;
+
+alter table auth.users
+    add constraint uq_users__provider_provider_subject unique (provider, provider_subject);

infrastructure/build/resources/main/db/migration/V3__add_user_provider_field_constraints.sql

@@ -0,0 +1,13 @@
+alter table auth.users
+    add constraint ck_users__local_password_required
+        check (
+            (provider = 'LOCAL' and encoded_password is not null and provider_subject is null)
+            or (provider <> 'LOCAL')
+        );
+
+alter table auth.users
+    add constraint ck_users__social_subject_required
+        check (
+            (provider <> 'LOCAL' and provider_subject is not null and encoded_password is null)
+            or (provider = 'LOCAL')
+        );

infrastructure/build/resources/main/db/migration/V4__add_keycloak_provider.sql

@@ -0,0 +1,4 @@
+alter table auth.users drop constraint ck_users__provider;
+
+alter table auth.users
+    add constraint ck_users__provider check (provider in ('LOCAL', 'KEYCLOAK', 'GOOGLE', 'GITHUB'));

infrastructure/build/resources/main/db/migration/V5__keycloak_only_provider.sql

@@ -0,0 +1,10 @@
+alter table auth.users drop constraint if exists ck_users__local_password_required;
+alter table auth.users drop constraint if exists ck_users__social_subject_required;
+alter table auth.users drop constraint if exists ck_users__provider;
+
+alter table auth.users drop column if exists encoded_password;
+
+alter table auth.users alter column provider_subject set not null;
+
+alter table auth.users
+    add constraint ck_users__provider check (provider = 'KEYCLOAK');