dev-demo: update oauth config and create an resource for user identities

AdminForth/1731/security-audit

Author: yaroslav8765

dev-demo/index.ts

@@ -30,6 +30,8 @@ import { FICTIONAL_CAR_BRANDS, FICTIONAL_CAR_MODELS_BY_BRAND, ENGINE_TYPES, BODY
 import passkeysResource from './resources/passkeys.js';
 import carsDescriptionImage from './resources/cars_description_image.js';
 import translations from "./resources/translations.js";
+import adminExternalIdentitiesResource from './resources/adminUserExternalIdentities.js';
+
 import { logger } from '../adminforth/modules/logger.js';
 
 const ADMIN_BASE_URL = '';
@@ -142,6 +144,7 @@ export const admin = new AdminForth({
     sessionsResource,
     turnsResource,
     dashboardConfigsResource,
+    adminExternalIdentitiesResource,
   ],
   menu: [
     { type: 'heading', label: 'SYSTEM' },

dev-demo/migrations/prisma/sqlite/migrations/20260622090624_add_admin_user_external_identities/migration.sql

@@ -0,0 +1,20 @@
+-- CreateTable
+CREATE TABLE "AdminUserExternalIdentity" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "adminUserId" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "subject" TEXT NOT NULL,
+    "externalUserId" TEXT,
+    "email" TEXT,
+    "phone" TEXT,
+    "fullName" TEXT,
+    "avatarUrl" TEXT,
+    "meta" JSONB,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- CreateIndex
+CREATE INDEX "AdminUserExternalIdentity_adminUserId_idx" ON "AdminUserExternalIdentity"("adminUserId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "AdminUserExternalIdentity_provider_subject_key" ON "AdminUserExternalIdentity"("provider", "subject");

dev-demo/migrations/prisma/sqlite/schema.prisma

@@ -136,4 +136,21 @@ model dashboard_configs {
   config    Json
 
   @@index([slug])
+}
+
+model AdminUserExternalIdentity {
+  id             String   @id @default(uuid())
+  adminUserId    String
+  provider       String
+  subject        String
+  externalUserId String?
+  email          String?
+  phone          String?
+  fullName       String?
+  avatarUrl      String?
+  meta           Json?
+  createdAt      DateTime @default(now())
+
+  @@unique([provider, subject])
+  @@index([adminUserId])
 }

dev-demo/resources/adminUserExternalIdentities.ts

@@ -0,0 +1,33 @@
+import { AdminForthDataTypes, type AdminForthResourceInput } from 'adminforth';
+import { randomUUID } from 'crypto';
+
+export default {
+  dataSource: 'sqlite',
+  table: 'AdminUserExternalIdentity',
+  resourceId: 'admin_user_external_identities',
+  label: 'Admin User External Identities',
+  columns: [
+    {
+      name: 'id',
+      type: AdminForthDataTypes.STRING,
+      primaryKey: true,
+      fillOnCreate: () => randomUUID(),
+      showIn: { create: false, edit: false },
+    },
+    { name: 'adminUserId', type: AdminForthDataTypes.STRING, required: true },
+    { name: 'provider', type: AdminForthDataTypes.STRING, required: true },
+    { name: 'subject', type: AdminForthDataTypes.STRING, required: true },
+    { name: 'externalUserId', type: AdminForthDataTypes.STRING },
+    { name: 'email', type: AdminForthDataTypes.STRING },
+    { name: 'phone', type: AdminForthDataTypes.STRING },
+    { name: 'fullName', type: AdminForthDataTypes.STRING },
+    { name: 'avatarUrl', type: AdminForthDataTypes.STRING },
+    { name: 'meta', type: AdminForthDataTypes.JSON },
+    {
+      name: 'createdAt',
+      type: AdminForthDataTypes.DATETIME,
+      fillOnCreate: () => new Date().toISOString(),
+      showIn: { create: false, edit: false },
+    },
+  ],
+} satisfies AdminForthResourceInput;

dev-demo/resources/adminuser.ts

@@ -215,6 +215,14 @@ export default {
           role: 'user',
         },
       },
+      externalIdentityResource: {
+        resourceId: 'admin_user_external_identities',
+        emailField: 'email',
+        phoneField: 'phone',
+        fullNameField: 'fullName',
+        avatarUrlField: 'avatarUrl',
+        metaField: 'meta',
+      },
     }),
     ...(process.env.OPENAI_API_KEY ? 
     [