caterium/caterium-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

db: add temporary-password marker backfill

Browse Source
This commit is contained in:
pavlov346346-source 2026-09-11 10:09:45 +03:00
parent 46b4e94689
commit 93d13d3878
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
ops/sql/SUPABASE-V17.7.4-PASSWORD-SECURITY.sql Normal file
View File

@ -0,0 +1,15 @@
-- Caterium v17.7.4: move mandatory temporary-password state to server-controlled app metadata.
-- Legacy user_metadata is client-editable and must not be trusted for this security state.
begin;
update auth.users
set raw_app_meta_data = coalesce(raw_app_meta_data, '{}'::jsonb)
|| jsonb_build_object(
'must_change_password', true,
'password_policy_version', 'v1774'
)
where lower(coalesce(raw_user_meta_data->>'must_change_password', '')) = 'true'
and lower(coalesce(raw_app_meta_data->>'must_change_password', 'false')) <> 'true';
commit;