Add challenge token

backend/src/db/migrations/20251029234547_add-pki-acme.ts

@@ -104,6 +104,9 @@ export async function up(knex: Knex): Promise<void> {
       // Authorization status
       t.string("status").notNullable(); // pending, valid, invalid, deactivated, expired, revoked
 
+      // Token used to validate the authorization through ACME challenge
+      t.timestamp("token").nullable();
+
       // Identifier type and value
       t.string("identifierType").notNullable(); // dns
       t.string("identifierValue").notNullable(); // domain name

backend/src/db/schemas/index.ts

@@ -96,8 +96,8 @@ export * from "./pki-acme-accounts";
 export * from "./pki-acme-auths";
 export * from "./pki-acme-challenges";
 export * from "./pki-acme-enrollment-configs";
-export * from "./pki-acme-orders";
 export * from "./pki-acme-order-auths";
+export * from "./pki-acme-orders";
 export * from "./pki-alerts";
 export * from "./pki-api-enrollment-configs";
 export * from "./pki-certificate-profiles";

backend/src/db/schemas/pki-acme-auths.ts

@@ -16,7 +16,8 @@ export const PkiAcmeAuthsSchema = z.object({
   expiresAt: z.date(),
   certificateId: z.string().uuid().nullable().optional(),
   createdAt: z.date(),
-  updatedAt: z.date()
+  updatedAt: z.date(),
+  token: z.string().nullable().optional()
 });
 
 export type TPkiAcmeAuths = z.infer<typeof PkiAcmeAuthsSchema>;