non auto-ddl database changes

core/db/schema-create.sql

@@ -1119,9 +1119,9 @@
 
     create table PASSWORD (
         ID BIGINT not null,
-        PASSWORD_IV BYTEA,
-        PASSWORD_SALT BYTEA,
-        ENCRYPTED_PASSWORD BYTEA,
+        PASSWORD_IV BYTEA unique,
+        PASSWORD_SALT BYTEA unique,
+        ENCRYPTED_PASSWORD BYTEA unique,
         PASSWORD_HASH_SALT BYTEA unique,
         PASSWORD_HASH BYTEA unique,
         DEPARTMENT_PASSWORD_SALT BYTEA not null unique,
@@ -1139,6 +1139,12 @@
         MAX_WRONG_PASSWORD_ATTEMPTS_SINCE_LAST_SUCCESSFUL_LOGON BIGINT,
         WRONG_PASSWORD_ATTEMPTS_SINCE_LAST_SUCCESSFUL_LOGON BIGINT not null,
         LAST_LOGON_ATTEMPT_TIMESTAMP TIMESTAMP WITHOUT TIME ZONE,
+        ENABLE2FA BOOLEAN not null,
+        OTP_TYPE CHARACTER VARYING(1024),
+        OTP_SECRET_SALT BYTEA unique,
+        OTP_SECRET_IV BYTEA unique,
+        ENCRYPTED_OTP_SECRET BYTEA unique,
+        SHOW_OTP_REGISTRATION_INFO BOOLEAN not null,
         LAST_LOGON_ATTEMPT_HOST CHARACTER VARYING(1024),
         LAST_SUCCESSFUL_LOGON_TIMESTAMP TIMESTAMP WITHOUT TIME ZONE,
         LAST_SUCCESSFUL_LOGON_HOST CHARACTER VARYING(1024),

core/db/schema-up-190.sql

@@ -0,0 +1,8 @@
+
+alter table PASSWORD add column ENABLE2FA BOOLEAN;
+update PASSWORD set ENABLE2FA = 'f';
+alter table PASSWORD alter ENABLE2FA set not null;
+
+alter table PASSWORD add column SHOW_OTP_REGISTRATION_INFO BOOLEAN;
+update PASSWORD set SHOW_OTP_REGISTRATION_INFO = 'f';
+alter table PASSWORD alter SHOW_OTP_REGISTRATION_INFO set not null;