fs
f36b169f67
Fresh installs now come up with working dev test connections for Microsoft SSO and Business Central without manual configuration: - init.sql appends the live breadcrumb + icoreon tenants (idempotent by uuid), Felix as a 6th user with all five roles, the live departments, plus tenant_auth_microsoft (SSO enabled for breadcrumb), tenant_auth_ldap stubs, and the global Microsoft shared-app credentials. The MusterMandant demo seed is preserved as tenant 1. - A new helpdesk migration 011 seeds the per-tenant BC connection rows in helpdesk_tenant_settings and the helpdesk.bc_* fallback settings — module-owned data stays in module migrations. - .env.example sets APP_CRYPTO_KEY so the AES-256-GCM blobs in the seed (Microsoft client secret, BC basic auth passwords) actually decrypt out-of-the-box. Verified by decrypting all four blobs end-to-end through Crypto::decryptString. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
52 lines
2.6 KiB
SQL
52 lines
2.6 KiB
SQL
-- Helpdesk module: seed test BC connections for the live dev tenants.
|
|
-- Idempotent: re-running is a no-op.
|
|
-- Encrypted secrets (basic_password_enc) are AES-256-GCM blobs produced with
|
|
-- APP_CRYPTO_KEY=9792a9ce0def59c034a651f2f6f26f3dcda2f78c1e3513e67be4da06afc24680
|
|
-- (set in .env.example). Decryption fails if the key differs.
|
|
-- Tenant lookup uses uuid so this only matches the live dev tenants seeded
|
|
-- by core init.sql; on environments without those tenants the inserts are
|
|
-- no-ops (FROM-clause yields zero rows).
|
|
|
|
-- ─── Per-tenant override: breadcrumb mediasolutions GmbH ───
|
|
INSERT INTO `helpdesk_tenant_settings` (
|
|
`tenant_id`, `override_enabled`, `auth_mode`, `odata_base_url`, `company_name`,
|
|
`basic_user`, `basic_password_enc`, `created_at`, `updated_at`
|
|
)
|
|
SELECT t.id, 1, 'basic',
|
|
'https://bc.icoreon.de:7048/BusinessCentral-NUP/ODataV4',
|
|
'breadcrumb mediasolutions GmbH', 'ICCONNECT',
|
|
'eyJ2IjoxLCJpdiI6IjJYb2NuZENuTnNSaFo4U3kiLCJ0YWciOiJqbHJpcUVkSElXbDBSU1FreFlhSXR3IiwiY3QiOiJlcVVfTXU3SEU2ZVA3aS0wUDBFbUswY3hIdyJ9',
|
|
NOW(), NOW()
|
|
FROM tenants t
|
|
WHERE t.uuid = '57349d01-262e-11f1-8ada-dab0b621b876'
|
|
AND NOT EXISTS (
|
|
SELECT 1 FROM helpdesk_tenant_settings hts WHERE hts.tenant_id = t.id
|
|
);
|
|
|
|
-- ─── Per-tenant override: icoreon GmbH ───
|
|
INSERT INTO `helpdesk_tenant_settings` (
|
|
`tenant_id`, `override_enabled`, `auth_mode`, `odata_base_url`, `company_name`,
|
|
`basic_user`, `basic_password_enc`, `created_at`, `updated_at`
|
|
)
|
|
SELECT t.id, 1, 'basic',
|
|
'https://bc.icoreon.de:7048/BusinessCentral-NUP/ODataV4',
|
|
'icoreon GmbH', 'ICCONNECT',
|
|
'eyJ2IjoxLCJpdiI6InAxdDJZWnlVT3JOenNPeDEiLCJ0YWciOiI2bW93dTJHTUdwdzVQSXBqVmlFcm93IiwiY3QiOiIwVW1sTGVuSEJDX21OTmRORThBN3pvRWdvdyJ9',
|
|
NOW(), NOW()
|
|
FROM tenants t
|
|
WHERE t.uuid = 'ab99e81c-471a-4db0-aa24-c198a5c58557'
|
|
AND NOT EXISTS (
|
|
SELECT 1 FROM helpdesk_tenant_settings hts WHERE hts.tenant_id = t.id
|
|
);
|
|
|
|
-- ─── Global fallback (used when override_enabled = 0) ───
|
|
INSERT INTO `settings` (`key`, `value`, `description`)
|
|
VALUES
|
|
('helpdesk.bc_auth_mode', 'basic', 'helpdesk.bc_auth_mode'),
|
|
('helpdesk.bc_basic_user', 'ICCONNECT', 'helpdesk.bc_basic_user'),
|
|
('helpdesk.bc_basic_password_enc', 'eyJ2IjoxLCJpdiI6IlhReDVxbHo3Q1dJSVFINkYiLCJ0YWciOiJyaFV1MHBlc1pSS1Vwb0YxTENyWVhnIiwiY3QiOiI0N2NNMWtjZVNlT3QzcGpfd0lqaDROWEJmUSJ9', 'helpdesk.bc_basic_password_enc'),
|
|
('helpdesk.bc_company_name', 'breadcrumb mediasolutions GmbH', 'helpdesk.bc_company_name'),
|
|
('helpdesk.bc_odata_base_url', 'https://bc.icoreon.de:7048/BusinessCentral-NUP/ODataV4', 'helpdesk.bc_odata_base_url')
|
|
ON DUPLICATE KEY UPDATE
|
|
`value` = VALUES(`value`);
|