1 files changed, 20 insertions, 0 deletions
diff --git a/db/migrate/20210212153934_make_the_geo_oauth_application_trusted_by_default.rb b/db/migrate/20210212153934_make_the_geo_oauth_application_trusted_by_default.rb
new file mode 100644
index 00000000000..ab0343887e4
--- /dev/null
+++ b/db/migrate/20210212153934_make_the_geo_oauth_application_trusted_by_default.rb
@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+class MakeTheGeoOauthApplicationTrustedByDefault < ActiveRecord::Migration[6.0]
+  DOWNTIME = false
+
+  def up
+    execute(<<-SQL.squish)
+      UPDATE oauth_applications
+      SET confidential = true, trusted = true
+      WHERE id IN (SELECT oauth_application_id FROM geo_nodes);
+    SQL
+  end
+
+  def down
+    # We won't be able to tell which trusted applications weren't
+    # confidential before the migration and setting all trusted
+    # applications are not confidential would introduce security
+    # issues.
+  end
+end