rpc/migration: limit email migration to conf'd projects

0xsequence · Aug 23, 2024 · 0c51977 · 0c51977
1 parent 94e2543
commit 0c51977
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 2 deletions.
diff --git a/config/migrations.go b/config/migrations.go
@@ -12,6 +12,7 @@ type OIDCToStytchConfig struct {
 }
 
 type EmailMigrationConfig struct {
-	Enabled      bool   `toml:"enabled"`
-	IssuerPrefix string `toml:"issuer_prefix"`
+	Enabled      bool     `toml:"enabled"`
+	IssuerPrefix string   `toml:"issuer_prefix"`
+	Projects     []uint64 `toml:"projects"`
 }
diff --git a/etc/waas-auth.dev.conf b/etc/waas-auth.dev.conf
@@ -62,4 +62,5 @@ QwIDAQAB
 [migrations.oidc_to_email]
     enabled = true
     issuer_prefix = "https://cognito-idp.ca-central-1.amazonaws.com/"
+    projects = [694]
 
diff --git a/rpc/migration/oidc_to_email.go b/rpc/migration/oidc_to_email.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"slices"
 	"strings"
 
 	"github.com/0xsequence/waas-authenticator/config"
@@ -28,6 +29,9 @@ func (m *OIDCToEmail) OnRegisterSession(ctx context.Context, originalAccount *da
 	if originalAccount.ProjectID != tntData.ProjectID {
 		return errors.New("project id does not match")
 	}
+	if !slices.Contains(m.config.Projects, originalAccount.ProjectID) {
+		return nil
+	}
 	if originalAccount.Identity.Type != proto.IdentityType_OIDC {
 		return nil
 	}