Bilal Godil cbd2e3fca3 feat(backend): add SAML SSO Prisma models + migration ... Adds three tables to back per-user SAML accounts and the in-flight AuthnRequest temp store: - ProjectUserSamlAccount (mirrors ProjectUserOAuthAccount): one row per (tenancy, samlConnectionId, NameID). The unique constraint on (tenancyId, samlConnectionId, nameId) is what enforces multi-tenant connection isolation at the DB level — the same NameID from a different connection is treated as a distinct identity. - SamlAuthMethod (mirrors OAuthAuthMethod): connects an AuthMethod to a ProjectUserSamlAccount via composite FK. - SamlOuterInfo (mirrors OAuthOuterInfo): keyed by AuthnRequest ID so the ACS handler can look up the original context when the IdP POSTs the assertion back via the browser. ID is TEXT (not UUID) because SAML AuthnRequest IDs are XML xs:ID strings. Per-connection config (entity ID, IdP cert, ACS URL, attribute mapping, domain) is intentionally NOT a Prisma model — it lives in tenancy.config.auth.saml.connections JSON, matching how OAuth provider config (clientId/clientSecret) is stored.		2026-04-29 16:46:22 -07:00
..
migrations	feat(backend): add SAML SSO Prisma models + migration	2026-04-29 16:46:22 -07:00
schema.prisma	feat(backend): add SAML SSO Prisma models + migration	2026-04-29 16:46:22 -07:00
seed.ts	Speed up seed script by a lot	2026-04-18 17:29:21 -07:00