Consolidate migrations, update README

README.md

@@ -17,13 +17,13 @@ View API documentation at http://localhost:8080/swagger/index.html.
 | DATABASE_URL | Yes | PostgreSQL database connection URL |
 | EMAIL_FROM_ADDRESS | Yes | Email address used as sender for verification emails |
 | BASE_URL | Yes | Base URL of the service |
+| JWT_KEY | Yes | Secret key for JWT signing |
+| OPAQUE_SECRET_KEY | Yes | OPAQUE server secret key |
+| OPAQUE_PUBLIC_KEY | Yes | OPAQUE server public key |
+| PREMIUM_AUTH_REDIRECT_URL | Yes | Redirect URL for premium service authentication |
 | AWS_ENDPOINT | No | Custom AWS endpoint for testing |
 | LOG_PRETTY | No | Enable pretty logging format if set to 'true' |
 | LOG_LEVEL | No | Logging level (default: info) |
 | SERVE_SWAGGER | No | Serve Swagger UI if set to 'true' |
 | PASSWORD_AUTH_ENABLED | No | Enable password authentication if set to 'true' |
-| OPAQUE_SECRET_KEY | Yes | OPAQUE server secret key |
-| OPAQUE_PUBLIC_KEY | Yes | OPAQUE server public key |
-| OPAQUE_FAKE_RECORD | No | OPAQUE fake record for rate limiting |
-| JWT_KEY | Yes | Secret key for JWT signing |
-| PREMIUM_AUTH_REDIRECT_URL | Yes | Redirect URL for premium service authentication |
+| OPAQUE_FAKE_RECORD | No | Use OPAQUE fake record to prevent client enumeration attacks |

migrations/20241021231751_init.down.sql

@@ -0,0 +1,6 @@
+DROP TABLE verifications;
+DROP TABLE sessions;
+DROP TABLE registration_states;
+DROP TABLE ake_states;
+DROP TABLE accounts;
+DROP TABLE oprf_seeds;

migrations/20241021231751_init.up.sql

@@ -1,10 +1,32 @@
+CREATE TABLE oprf_seeds (
+    id SERIAL PRIMARY KEY,
+    seed BYTEA NOT NULL,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
 CREATE TABLE accounts (
     id UUID PRIMARY KEY,
     email TEXT NOT NULL,
+    oprf_seed_id INT REFERENCES oprf_seeds(id),
+    opaque_registration BYTEA,
     created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
     UNIQUE(email)
 );
 
+CREATE TABLE ake_states (
+    id UUID PRIMARY KEY,
+    account_id UUID REFERENCES accounts(id),
+    oprf_seed_id INT REFERENCES oprf_seeds(id),
+    state BYTEA NOT NULL,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE registration_states (
+    email TEXT PRIMARY KEY,
+    oprf_seed_id INT REFERENCES oprf_seeds(id),
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
 CREATE TABLE sessions (
     id UUID PRIMARY KEY,
     account_id UUID NOT NULL REFERENCES accounts(id),