Added key algorithm opts to CA generation

backend/src/db/migrations/20240530163136_certificate-mgmt.ts

@@ -25,6 +25,7 @@ export async function up(knex: Knex): Promise<void> {
       t.unique(["dn", "projectId"]);
       t.string("serialNumber").nullable().unique();
       t.integer("maxPathLength").nullable();
+      t.string("keyAlgorithm").notNullable();
       t.datetime("notBefore").nullable();
       t.datetime("notAfter").nullable();
     });

backend/src/db/schemas/certificate-authorities.ts

@@ -24,6 +24,7 @@ export const CertificateAuthoritiesSchema = z.object({
   dn: z.string(),
   serialNumber: z.string().nullable().optional(),
   maxPathLength: z.number().nullable().optional(),
+  keyAlgorithm: z.string(),
   notBefore: z.date().nullable().optional(),
   notAfter: z.date().nullable().optional()
 });

backend/src/db/schemas/users.ts

@@ -23,8 +23,8 @@ export const UsersSchema = z.object({
   isGhost: z.boolean().default(false),
   username: z.string(),
   isEmailVerified: z.boolean().default(false).nullable().optional(),
-  consecutiveFailedMfaAttempts: z.number().optional(),
-  isLocked: z.boolean().optional(),
+  consecutiveFailedMfaAttempts: z.number().default(0).nullable().optional(),
+  isLocked: z.boolean().default(false).nullable().optional(),
   temporaryLockDateEnd: z.date().nullable().optional()
 });