schema: Distinct Source Rules Schema Upgrade File

Move the schema upgrades to a distinct schema upgrade file and readd the
ck_source_bcrypt_listener_password_hash constraint to these files,
initially added in dc4396a.

Author: oxzi

schema/mysql/schema.sql

@@ -212,7 +212,6 @@ CREATE TABLE source (
     -- will likely need a distinguishing value for multiple sources of the same type in the future, like for example
     -- the Icinga DB environment ID for Icinga 2 sources
 
-    -- The column listener_password_hash is type-dependent.
     -- This column is required to limit API access for incoming connections to the Listener.
     -- The username will be "source-${id}", allowing early verification.
     listener_password_hash text,

schema/mysql/upgrades/001.sql renamed to schema/mysql/upgrades/0.2.0-source-rules.sql

@@ -1,11 +1,15 @@
-ALTER TABLE source DROP CONSTRAINT ck_source_icinga2_has_config;
+ALTER TABLE source
+  DROP CONSTRAINT ck_source_icinga2_has_config,
+  DROP CONSTRAINT ck_source_bcrypt_listener_password_hash;
 ALTER TABLE source
   DROP COLUMN icinga2_base_url,
   DROP COLUMN icinga2_auth_user,
   DROP COLUMN icinga2_auth_pass,
   DROP COLUMN icinga2_ca_pem,
   DROP COLUMN icinga2_common_name,
-  DROP COLUMN icinga2_insecure_tls;
+  DROP COLUMN icinga2_insecure_tls,
+  ADD CONSTRAINT ck_source_bcrypt_listener_password_hash CHECK (
+    listener_password_hash IS NULL OR listener_password_hash LIKE '$2_$%');
 
 ALTER TABLE rule
   ADD COLUMN source_id bigint DEFAULT NULL AFTER timeperiod_id,

schema/pgsql/schema.sql

@@ -244,7 +244,6 @@ CREATE TABLE source (
     -- will likely need a distinguishing value for multiple sources of the same type in the future, like for example
     -- the Icinga DB environment ID for Icinga 2 sources
 
-    -- The column listener_password_hash is type-dependent.
     -- This column is required to limit API access for incoming connections to the Listener.
     -- The username will be "source-${id}", allowing early verification.
     listener_password_hash text,

schema/pgsql/upgrades/001.sql renamed to schema/pgsql/upgrades/0.2.0-source-rules.sql

@@ -1,11 +1,15 @@
-ALTER TABLE source DROP CONSTRAINT ck_source_icinga2_has_config;
+ALTER TABLE source
+  DROP CONSTRAINT ck_source_icinga2_has_config,
+  DROP CONSTRAINT ck_source_bcrypt_listener_password_hash;
 ALTER TABLE source
   DROP COLUMN icinga2_base_url,
   DROP COLUMN icinga2_auth_user,
   DROP COLUMN icinga2_auth_pass,
   DROP COLUMN icinga2_ca_pem,
   DROP COLUMN icinga2_common_name,
-  DROP COLUMN icinga2_insecure_tls;
+  DROP COLUMN icinga2_insecure_tls,
+  ADD CONSTRAINT ck_source_bcrypt_listener_password_hash CHECK (
+    listener_password_hash IS NULL OR listener_password_hash LIKE '$2_$%');
 
 ALTER TABLE rule
   ADD COLUMN source_id bigint DEFAULT NULL,