1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/db/session.lua	Tue Feb 07 17:27:07 2012 +0100
     1.3 @@ -0,0 +1,15 @@
     1.4 +CREATE TABLE "session" (
     1.5 +        "ident"                 TEXT            PRIMARY KEY,
     1.6 +        "additional_secret"     TEXT,
     1.7 +        "expiry"                TIMESTAMPTZ     NOT NULL DEFAULT now() + '24 hours',
     1.8 +        "member_id"             INT8            REFERENCES "member" ("id") ON DELETE SET NULL,
     1.9 +        "lang"                  TEXT );
    1.10 +CREATE INDEX "session_expiry_idx" ON "session" ("expiry");
    1.11 +
    1.12 +COMMENT ON TABLE "session" IS 'Sessions, i.e. for a web-frontend';
    1.13 +
    1.14 +COMMENT ON COLUMN "session"."ident"             IS 'Secret session identifier (i.e. random string)';
    1.15 +COMMENT ON COLUMN "session"."additional_secret" IS 'Additional field to store a secret, which can be used against CSRF attacks';
    1.16 +COMMENT ON COLUMN "session"."member_id"         IS 'Reference to member, who is logged in';
    1.17 +COMMENT ON COLUMN "session"."lang"              IS 'Language code of the selected language';
    1.18 +