warehouse: add initial pending OIDC provider models

[woodruffw]

See #11296.

This is going to be a relatively complex set of models (thanks to the mixins for shared functionality between "pending" and concrete OIDC providers), so I wanted to get them up and merged before beginning on actual routes/view logic.

Needs unit tests.

Signed-off-by: William Woodruff william@trailofbits.com

[woodruffw]

Flagging for review: I had to dupe this UniqueConstraint between GitHubProvider and PendingGitHubProvider, even though they're functionally equivalent, thanks to the unique name requirement. There might be a better way to do this, though.

[miketheman]

I think this is due to not having set any naming_conventions for this project in the global metadata setup

warehouse/warehouse/db.py

Line 77 in d58e6b2

metadata = sqlalchemy.MetaData()

Alembic docs go into it here: https://alembic.sqlalchemy.org/en/latest/naming.html

I think we always named them manually, like here:

warehouse/warehouse/accounts/models.py

Line 197 in d58e6b2

UniqueConstraint("label", "user_id", name="_user_security_keys_label_uc"),

So it might be a future refactoring to replace the manually-named constraints, but I’d approach that with some serious caution 😉

[di]

LGTM overall, just the one comment about what should be duplicated vs. shared via mixins.

[woodruffw]

Should be good to go now!