Merge pull request #20020 from mozilla/fxa-13013-add-otp-sec-event-names

feat(db): add migration for security event names

Author: StaberindeZA

packages/db-migrations/databases/fxa/patches/patch-183-184.sql

@@ -0,0 +1,16 @@
+-- Add security event names for passwordless authentication
+-- These events track the passwordless login flow including OTP sending,
+-- verification, failures, and new account registration
+
+SET NAMES utf8mb4 COLLATE utf8mb4_bin;
+
+CALL assertPatchLevel('183');
+
+INSERT INTO securityEventNames (name) VALUES
+  ('account.passwordless_login_otp_sent'),
+  ('account.passwordless_login_otp_failed'),
+  ('account.passwordless_login_otp_verified'),
+  ('account.passwordless_registration_complete');
+
+UPDATE dbMetadata SET value = '184' WHERE name = 'schema-patch-level';
+

packages/db-migrations/databases/fxa/patches/patch-184-183.sql

@@ -0,0 +1,15 @@
+-- Remove security event names for passwordless authentication
+
+-- SET NAMES utf8mb4 COLLATE utf8mb4_bin;
+
+-- CALL assertPatchLevel('184');
+
+-- DELETE FROM securityEventNames WHERE name IN (
+--   'account.passwordless_login_otp_sent',
+--   'account.passwordless_login_otp_failed',
+--   'account.passwordless_login_otp_verified',
+--   'account.passwordless_registration_complete'
+-- );
+
+-- UPDATE dbMetadata SET value = '183' WHERE name = 'schema-patch-level';
+

packages/db-migrations/databases/fxa/target-patch.json

@@ -1,3 +1,3 @@
 {
-  "level": 183
+  "level": 184
 }

packages/fxa-shared/db/models/auth/security-event.ts

@@ -72,6 +72,10 @@ export const EVENT_NAMES: Record<string, number> = {
   'account.passkey.removed': 53,
   'account.passkey.authentication_success': 54,
   'account.passkey.authentication_failure': 55,
+  'account.passwordless_login_otp_sent': 56,
+  'account.passwordless_login_otp_failed': 57,
+  'account.passwordless_login_otp_verified': 58,
+  'account.passwordless_registration_complete': 59,
 } as const;
 
 export type SecurityEventNames = keyof typeof EVENT_NAMES;