2020-11-27 10:30:56 +00:00
|
|
|
package iam
|
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
|
|
|
|
|
|
|
"github.com/caos/zitadel/internal/crypto"
|
|
|
|
"github.com/caos/zitadel/internal/errors"
|
|
|
|
iam_model "github.com/caos/zitadel/internal/iam/model"
|
|
|
|
"github.com/caos/zitadel/internal/v2/repository/iam"
|
|
|
|
"github.com/caos/zitadel/internal/v2/repository/idp"
|
|
|
|
"github.com/caos/zitadel/internal/v2/repository/idp/oidc"
|
|
|
|
)
|
|
|
|
|
|
|
|
func (r *Repository) IDPConfigByID(ctx context.Context, iamID, idpConfigID string) (*iam_model.IDPConfigView, error) {
|
|
|
|
idpConfig := iam.NewIDPConfigReadModel(iamID, idpConfigID)
|
|
|
|
err := r.eventstore.FilterToQueryReducer(ctx, idpConfig)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return readModelToIDPConfigView(idpConfig), nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Repository) AddIDPConfig(ctx context.Context, config *iam_model.IDPConfig) (*iam_model.IDPConfig, error) {
|
|
|
|
if config.OIDCConfig == nil {
|
|
|
|
return nil, errors.ThrowInvalidArgument(nil, "IAM-eUpQU", "Errors.idp.config.notset")
|
|
|
|
}
|
|
|
|
|
|
|
|
idpConfigID, err := r.idGenerator.Next()
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2020-11-30 05:40:56 +00:00
|
|
|
//TODO: check name unique on aggregate
|
|
|
|
|
2020-11-27 10:30:56 +00:00
|
|
|
clientSecret, err := crypto.Crypt([]byte(config.OIDCConfig.ClientSecretString), r.secretCrypto)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2020-11-27 12:29:35 +00:00
|
|
|
writeModel, err := r.pushIDPWriteModel(ctx, config.AggregateID, idpConfigID, func(a *iam.Aggregate, _ *iam.IDPConfigWriteModel) *iam.Aggregate {
|
|
|
|
return a.PushIDPOIDCConfigAdded(
|
2020-11-27 10:30:56 +00:00
|
|
|
ctx,
|
|
|
|
config.OIDCConfig.ClientID,
|
|
|
|
idpConfigID,
|
|
|
|
config.OIDCConfig.Issuer,
|
|
|
|
clientSecret,
|
|
|
|
oidc.MappingField(config.OIDCConfig.IDPDisplayNameMapping),
|
|
|
|
oidc.MappingField(config.OIDCConfig.UsernameMapping),
|
|
|
|
config.OIDCConfig.Scopes...)
|
2020-11-27 12:29:35 +00:00
|
|
|
})
|
2020-11-27 10:30:56 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2020-11-27 12:29:35 +00:00
|
|
|
return writeModelToIDPConfig(writeModel), nil
|
2020-11-27 10:30:56 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Repository) ChangeIDPConfig(ctx context.Context, config *iam_model.IDPConfig) (*iam_model.IDPConfig, error) {
|
2020-11-27 12:29:35 +00:00
|
|
|
writeModel, err := r.pushIDPWriteModel(ctx, config.AggregateID, config.IDPConfigID, func(a *iam.Aggregate, writeModel *iam.IDPConfigWriteModel) *iam.Aggregate {
|
|
|
|
return a.PushIDPConfigChanged(
|
2020-11-27 10:30:56 +00:00
|
|
|
ctx,
|
|
|
|
writeModel,
|
|
|
|
config.IDPConfigID,
|
|
|
|
config.Name,
|
|
|
|
idp.ConfigType(config.Type),
|
|
|
|
idp.StylingType(config.StylingType))
|
2020-11-27 12:29:35 +00:00
|
|
|
})
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return writeModelToIDPConfig(writeModel), nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Repository) DeactivateIDPConfig(ctx context.Context, iamID, idpID string) (*iam_model.IDPConfig, error) {
|
|
|
|
writeModel, err := r.pushIDPWriteModel(ctx, iamID, idpID, func(a *iam.Aggregate, _ *iam.IDPConfigWriteModel) *iam.Aggregate {
|
|
|
|
return a.PushIDPConfigDeactivated(ctx, idpID)
|
|
|
|
})
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return writeModelToIDPConfig(writeModel), nil
|
|
|
|
}
|
2020-11-27 10:30:56 +00:00
|
|
|
|
2020-11-27 12:29:35 +00:00
|
|
|
func (r *Repository) ReactivateIDPConfig(ctx context.Context, iamID, idpID string) (*iam_model.IDPConfig, error) {
|
|
|
|
writeModel, err := r.pushIDPWriteModel(ctx, iamID, idpID, func(a *iam.Aggregate, _ *iam.IDPConfigWriteModel) *iam.Aggregate {
|
|
|
|
return a.PushIDPConfigReactivated(ctx, idpID)
|
|
|
|
})
|
2020-11-27 10:30:56 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2020-11-27 12:29:35 +00:00
|
|
|
return writeModelToIDPConfig(writeModel), nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Repository) RemoveIDPConfig(ctx context.Context, iamID, idpID string) (*iam_model.IDPConfig, error) {
|
|
|
|
writeModel, err := r.pushIDPWriteModel(ctx, iamID, idpID, func(a *iam.Aggregate, _ *iam.IDPConfigWriteModel) *iam.Aggregate {
|
|
|
|
return a.PushIDPConfigRemoved(ctx, idpID)
|
|
|
|
})
|
|
|
|
if err != nil {
|
2020-11-27 10:30:56 +00:00
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return writeModelToIDPConfig(writeModel), nil
|
|
|
|
}
|
2020-11-27 12:29:35 +00:00
|
|
|
|
|
|
|
func (r *Repository) pushIDPWriteModel(ctx context.Context, iamID, idpID string, eventSetter func(*iam.Aggregate, *iam.IDPConfigWriteModel) *iam.Aggregate) (*iam.IDPConfigWriteModel, error) {
|
|
|
|
writeModel := iam.NewIDPConfigWriteModel(iamID, idpID)
|
|
|
|
err := r.eventstore.FilterToQueryReducer(ctx, writeModel)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
aggregate := eventSetter(iam.AggregateFromWriteModel(&writeModel.WriteModel), writeModel)
|
|
|
|
|
|
|
|
err = r.eventstore.PushAggregate(ctx, writeModel, aggregate)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return writeModel, nil
|
|
|
|
}
|