CB-5738 api for tokens

server/bundles/io.cloudbeaver.model/src/io/cloudbeaver/registry/WebAuthProviderDescriptor.java

@@ -54,6 +54,7 @@ public class WebAuthProviderDescriptor extends AbstractDescriptor {
     private final boolean configurable;
     private final boolean trusted;
     private final boolean isPrivate;
+    private final boolean isAuthHidden;
     private final String[] requiredFeatures;
     private final boolean isRequired;
     private final String[] types;
@@ -67,6 +68,7 @@ public WebAuthProviderDescriptor(IConfigurationElement cfg) {
         this.trusted = CommonUtils.toBoolean(cfg.getAttribute("trusted"));
         this.isPrivate = CommonUtils.toBoolean(cfg.getAttribute("private"));
         this.isRequired = CommonUtils.toBoolean(cfg.getAttribute("required"));
+        this.isAuthHidden = CommonUtils.toBoolean(cfg.getAttribute("authHidden"));
 
         for (IConfigurationElement cfgElement : cfg.getChildren("configuration")) {
             List<WebAuthProviderProperty> properties = WebAuthProviderRegistry.readProperties(cfgElement);
@@ -126,6 +128,10 @@ public boolean isRequired() {
         return isRequired;
     }
 
+    public boolean isAuthHidden() {
+        return isAuthHidden;
+    }
+
     public List<WebAuthProviderProperty> getConfigurationParameters() {
         return new ArrayList<>(configurationParameters.values());
     }

server/bundles/io.cloudbeaver.server/schema/schema.graphqls

@@ -2,6 +2,7 @@
 scalar Object
 # Date/Time
 scalar DateTime
+scalar Date
 
 input PageInput {
     limit: Int

server/bundles/io.cloudbeaver.server/src/io/cloudbeaver/model/user/WebAuthProviderInfo.java

@@ -90,7 +90,12 @@
     public boolean isRequired() {
         return descriptor.isRequired();
     }
+
+    public boolean isAuthHidden() {
+        return descriptor.isAuthHidden();
+    }
+
     public boolean isAuthRoleProvided(SMAuthProviderCustomConfiguration configuration) {
         if (descriptor.getInstance() instanceof SMProvisioner provisioner) {
             return provisioner.isAuthRoleProvided(configuration);
         }

server/bundles/io.cloudbeaver.server/src/io/cloudbeaver/server/graphql/GraphQLBindingContext.java

@@ -41,6 +41,7 @@ RuntimeWiring buildRuntimeWiring() {
         runtimeWiring = RuntimeWiring.newRuntimeWiring();
         runtimeWiring
             .scalar(ExtendedScalars.DateTime)
+            .scalar(ExtendedScalars.Date)
             .scalar(ExtendedScalars.Object);
         queryType = TypeRuntimeWiring.newTypeWiring("Query");
         mutationType = TypeRuntimeWiring.newTypeWiring("Mutation");

server/bundles/io.cloudbeaver.service.auth/schema/service.auth.graphqls

@@ -61,6 +61,7 @@ type AuthProviderInfo {
     defaultProvider: Boolean!
     trusted: Boolean!
     private: Boolean!
+    authHidden: Boolean! @since(version: "24.2.4")
     supportProvisioning: Boolean!
 
     # Configurable providers must be configured first. See configurations field.

server/bundles/io.cloudbeaver.service.auth/src/io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java

@@ -309,5 +309,4 @@ public WebUserInfo setUserConfigurationParameters(
             throw new DBWebException("Error setting user parameters", e);
         }
     }
-
 }

server/bundles/io.cloudbeaver.service.security/db/cb_schema_create.sql

@@ -283,3 +283,16 @@ CREATE TABLE {table_prefix}CB_TASKS
 
     PRIMARY KEY (TASK_ID)
 );
+
+CREATE TABLE {table_prefix}CB_ACCESS_TOKEN
+(
+    TOKEN_ID        VARCHAR(128) NOT NULL,
+    USER_ID         VARCHAR(128) NOT NULL,
+    TOKEN_NAME      VARCHAR(128) NOT NULL,
+    CREATE_TIME     TIMESTAMP DEFAULT CURRENT_TIMESTAMP NOT NULL,
+    EXPIRATION_TIME TIMESTAMP NULL,
+
+    PRIMARY KEY (USER_ID, TOKEN_ID),
+    UNIQUE (USER_ID, TOKEN_NAME),
+    FOREIGN KEY (USER_ID) REFERENCES {table_prefix}CB_USER(USER_ID) ON DELETE CASCADE
+);

server/bundles/io.cloudbeaver.service.security/db/cb_schema_update_22.sql

@@ -0,0 +1,12 @@
+CREATE TABLE {table_prefix}CB_ACCESS_TOKEN
+(
+    TOKEN_ID        VARCHAR(128) NOT NULL,
+    USER_ID         VARCHAR(128) NOT NULL,
+    TOKEN_NAME      VARCHAR(128) NOT NULL,
+    CREATE_TIME     TIMESTAMP DEFAULT CURRENT_TIMESTAMP NOT NULL,
+    EXPIRATION_TIME TIMESTAMP NULL,
+
+    PRIMARY KEY (USER_ID, TOKEN_ID),
+    UNIQUE (USER_ID, TOKEN_NAME),
+    FOREIGN KEY (USER_ID) REFERENCES {table_prefix}CB_USER(USER_ID) ON DELETE CASCADE
+);

server/bundles/io.cloudbeaver.service.security/src/io/cloudbeaver/service/security/db/CBDatabase.java

@@ -76,7 +76,7 @@ public class CBDatabase {
     public static final String SCHEMA_UPDATE_SQL_PATH = "db/cb_schema_update_";
 
     private static final int LEGACY_SCHEMA_VERSION = 1;
-    private static final int CURRENT_SCHEMA_VERSION = 21;
+    private static final int CURRENT_SCHEMA_VERSION = 22;
 
     private static final String DEFAULT_DB_USER_NAME = "cb-data";
     private static final String DEFAULT_DB_PWD_FILE = ".database-credentials.dat";

webapp/packages/core-root/src/EAdminPermission.ts

@@ -8,4 +8,5 @@
 
 export enum EAdminPermission {
   admin = 'admin',
+  developer = 'database-developer',
 }

webapp/packages/core-sdk/src/queries/fragments/AuthProviderInfo.gql

@@ -8,6 +8,7 @@ fragment AuthProviderInfo on AuthProviderInfo {
   private
   supportProvisioning
   required
+  authHidden
 
   #configurationParameters {
   #  id

webapp/packages/plugin-authentication/src/Dialog/useAuthDialogState.ts

@@ -67,7 +67,7 @@ export function useAuthDialogState(accessRequest: boolean, providerId: string |
   const providers = authProvidersResource.data.filter(notEmptyProvider).sort(compareProviders);
 
   const activeProviders = providers.filter(provider => {
-    if (provider.federated || provider.trusted || provider.private) {
+    if (provider.federated || provider.trusted || provider.private || provider.authHidden) {
       return false;
     }
 

webapp/packages/plugin-user-profile-settings/src/UserProfileSettingsPluginBootstrap.ts

@@ -53,7 +53,7 @@ export class UserProfileSettingsPluginBootstrap extends Bootstrap {
     this.userProfileTabsService.tabContainer.add({
       key: SETTINGS_TAB_ID,
       name: 'plugin_user_profile_settings_tab_label',
-      order: 2,
+      order: 3,
       panel: () => UserProfileSettings,
     });