feat: idp and login policy configurations (#619)

* feat: oidc config * fix: oidc configurations * feat: oidc idp config * feat: add oidc config test * fix: tests * fix: tests * feat: translate new events * feat: idp eventstore * feat: idp eventstore * fix: tests * feat: command side idp * feat: query side idp * feat: idp config on org * fix: tests * feat: authz idp on org * feat: org idps * feat: login policy * feat: login policy * feat: login policy * feat: add idp func on login policy * feat: add validation to loginpolicy and idp provider * feat: add default login policy * feat: login policy on org * feat: login policy on org * fix: id config handlers * fix: id config handlers * fix: create idp on org * fix: create idp on org * fix: not existing idp config * fix: default login policy * fix: add login policy on org * fix: idp provider search on org * fix: test * fix: remove idp on org * fix: test * fix: test * fix: remove admin idp * fix: logo src as byte * fix: migration * fix: tests * Update internal/iam/repository/eventsourcing/iam.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/org/repository/eventsourcing/org_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * fix: pr comments * fix: tests * Update types.go * fix: merge request changes * fix: reduce optimization Co-authored-by: Silvan <silvan.reusser@gmail.com> Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2025-08-11 19:17:32 +00:00 · 2020-08-26 09:56:23 +02:00
parent f05c5bae24
commit db1d8f4efe
157 changed files with 37510 additions and 15698 deletions
--- a/internal/admin/repository/eventsourcing/view/iam_member.go
+++ b/internal/admin/repository/eventsourcing/view/iam_member.go
@@ -12,46 +12,46 @@ const (
 	iamMemberTable = "adminapi.iam_members"
 )

-func (v *View) IamMemberByIDs(orgID, userID string) (*model.IamMemberView, error) {
-	return view.IamMemberByIDs(v.Db, iamMemberTable, orgID, userID)
+func (v *View) IAMMemberByIDs(orgID, userID string) (*model.IAMMemberView, error) {
+	return view.IAMMemberByIDs(v.Db, iamMemberTable, orgID, userID)
 }

-func (v *View) SearchIamMembers(request *iam_model.IamMemberSearchRequest) ([]*model.IamMemberView, uint64, error) {
-	return view.SearchIamMembers(v.Db, iamMemberTable, request)
+func (v *View) SearchIAMMembers(request *iam_model.IAMMemberSearchRequest) ([]*model.IAMMemberView, uint64, error) {
+	return view.SearchIAMMembers(v.Db, iamMemberTable, request)
 }

-func (v *View) IamMembersByUserID(userID string) ([]*model.IamMemberView, error) {
-	return view.IamMembersByUserID(v.Db, iamMemberTable, userID)
+func (v *View) IAMMembersByUserID(userID string) ([]*model.IAMMemberView, error) {
+	return view.IAMMembersByUserID(v.Db, iamMemberTable, userID)
 }

-func (v *View) PutIamMember(org *model.IamMemberView, sequence uint64) error {
-	err := view.PutIamMember(v.Db, iamMemberTable, org)
+func (v *View) PutIAMMember(org *model.IAMMemberView, sequence uint64) error {
+	err := view.PutIAMMember(v.Db, iamMemberTable, org)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIamMemberSequence(sequence)
+	return v.ProcessedIAMMemberSequence(sequence)
 }

-func (v *View) DeleteIamMember(iamID, userID string, eventSequence uint64) error {
-	err := view.DeleteIamMember(v.Db, iamMemberTable, iamID, userID)
+func (v *View) DeleteIAMMember(iamID, userID string, eventSequence uint64) error {
+	err := view.DeleteIAMMember(v.Db, iamMemberTable, iamID, userID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedIamMemberSequence(eventSequence)
+	return v.ProcessedIAMMemberSequence(eventSequence)
 }

-func (v *View) GetLatestIamMemberSequence() (*global_view.CurrentSequence, error) {
+func (v *View) GetLatestIAMMemberSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(iamMemberTable)
 }

-func (v *View) ProcessedIamMemberSequence(eventSequence uint64) error {
+func (v *View) ProcessedIAMMemberSequence(eventSequence uint64) error {
 	return v.saveCurrentSequence(iamMemberTable, eventSequence)
 }

-func (v *View) GetLatestIamMemberFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {
+func (v *View) GetLatestIAMMemberFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {
 	return v.latestFailedEvent(iamMemberTable, sequence)
 }

-func (v *View) ProcessedIamMemberFailedEvent(failedEvent *global_view.FailedEvent) error {
+func (v *View) ProcessedIAMMemberFailedEvent(failedEvent *global_view.FailedEvent) error {
 	return v.saveFailedEvent(failedEvent)
 }
--- a/internal/admin/repository/eventsourcing/view/idp_configs.go
+++ b/internal/admin/repository/eventsourcing/view/idp_configs.go
@@ -0,0 +1,53 @@
+package view
+
+import (
+	"github.com/caos/zitadel/internal/errors"
+	iam_model "github.com/caos/zitadel/internal/iam/model"
+	"github.com/caos/zitadel/internal/iam/repository/view"
+	"github.com/caos/zitadel/internal/iam/repository/view/model"
+	global_view "github.com/caos/zitadel/internal/view/repository"
+)
+
+const (
+	idpConfigTable = "adminapi.idp_configs"
+)
+
+func (v *View) IDPConfigByID(idpID string) (*model.IDPConfigView, error) {
+	return view.IDPByID(v.Db, idpConfigTable, idpID)
+}
+
+func (v *View) SearchIDPConfigs(request *iam_model.IDPConfigSearchRequest) ([]*model.IDPConfigView, uint64, error) {
+	return view.SearchIDPs(v.Db, idpConfigTable, request)
+}
+
+func (v *View) PutIDPConfig(idp *model.IDPConfigView, sequence uint64) error {
+	err := view.PutIDP(v.Db, idpConfigTable, idp)
+	if err != nil {
+		return err
+	}
+	return v.ProcessedIDPConfigSequence(sequence)
+}
+
+func (v *View) DeleteIDPConfig(idpID string, eventSequence uint64) error {
+	err := view.DeleteIDP(v.Db, idpConfigTable, idpID)
+	if err != nil && !errors.IsNotFound(err) {
+		return err
+	}
+	return v.ProcessedIDPConfigSequence(eventSequence)
+}
+
+func (v *View) GetLatestIDPConfigSequence() (*global_view.CurrentSequence, error) {
+	return v.latestSequence(idpConfigTable)
+}
+
+func (v *View) ProcessedIDPConfigSequence(eventSequence uint64) error {
+	return v.saveCurrentSequence(idpConfigTable, eventSequence)
+}
+
+func (v *View) GetLatestIDPConfigFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {
+	return v.latestFailedEvent(idpConfigTable, sequence)
+}
+
+func (v *View) ProcessedIDPConfigFailedEvent(failedEvent *global_view.FailedEvent) error {
+	return v.saveFailedEvent(failedEvent)
+}
--- a/internal/admin/repository/eventsourcing/view/idp_providers.go
+++ b/internal/admin/repository/eventsourcing/view/idp_providers.go
@@ -0,0 +1,65 @@
+package view
+
+import (
+	"github.com/caos/zitadel/internal/errors"
+	iam_model "github.com/caos/zitadel/internal/iam/model"
+	"github.com/caos/zitadel/internal/iam/repository/view"
+	"github.com/caos/zitadel/internal/iam/repository/view/model"
+	global_view "github.com/caos/zitadel/internal/view/repository"
+)
+
+const (
+	idpProviderTable = "adminapi.idp_providers"
+)
+
+func (v *View) IDPProviderByAggregateAndIdpConfigID(aggregateID, idpConfigID string) (*model.IDPProviderView, error) {
+	return view.GetIDPProviderByAggregateIDAndConfigID(v.Db, idpProviderTable, aggregateID, idpConfigID)
+}
+
+func (v *View) IDPProvidersByIdpConfigID(idpConfigID string) ([]*model.IDPProviderView, error) {
+	return view.IDPProvidersByIdpConfigID(v.Db, idpProviderTable, idpConfigID)
+}
+
+func (v *View) SearchIDPProviders(request *iam_model.IDPProviderSearchRequest) ([]*model.IDPProviderView, uint64, error) {
+	return view.SearchIDPProviders(v.Db, idpProviderTable, request)
+}
+
+func (v *View) PutIDPProvider(provider *model.IDPProviderView, sequence uint64) error {
+	err := view.PutIDPProvider(v.Db, idpProviderTable, provider)
+	if err != nil {
+		return err
+	}
+	return v.ProcessedIDPProviderSequence(sequence)
+}
+
+func (v *View) PutIDPProviders(sequence uint64, providers ...*model.IDPProviderView) error {
+	err := view.PutIDPProviders(v.Db, idpProviderTable, providers...)
+	if err != nil {
+		return err
+	}
+	return v.ProcessedIDPProviderSequence(sequence)
+}
+
+func (v *View) DeleteIDPProvider(aggregateID, idpConfigID string, eventSequence uint64) error {
+	err := view.DeleteIDPProvider(v.Db, idpProviderTable, aggregateID, idpConfigID)
+	if err != nil && !errors.IsNotFound(err) {
+		return err
+	}
+	return v.ProcessedIDPProviderSequence(eventSequence)
+}
+
+func (v *View) GetLatestIDPProviderSequence() (*global_view.CurrentSequence, error) {
+	return v.latestSequence(idpProviderTable)
+}
+
+func (v *View) ProcessedIDPProviderSequence(eventSequence uint64) error {
+	return v.saveCurrentSequence(idpProviderTable, eventSequence)
+}
+
+func (v *View) GetLatestIDPProviderFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {
+	return v.latestFailedEvent(idpProviderTable, sequence)
+}
+
+func (v *View) ProcessedIDPProviderFailedEvent(failedEvent *global_view.FailedEvent) error {
+	return v.saveFailedEvent(failedEvent)
+}
--- a/internal/admin/repository/eventsourcing/view/login_policies.go
+++ b/internal/admin/repository/eventsourcing/view/login_policies.go
@@ -0,0 +1,48 @@
+package view
+
+import (
+	"github.com/caos/zitadel/internal/errors"
+	"github.com/caos/zitadel/internal/iam/repository/view"
+	"github.com/caos/zitadel/internal/iam/repository/view/model"
+	global_view "github.com/caos/zitadel/internal/view/repository"
+)
+
+const (
+	loginPolicyTable = "adminapi.login_policies"
+)
+
+func (v *View) LoginPolicyByAggregateID(aggregateID string) (*model.LoginPolicyView, error) {
+	return view.GetLoginPolicyByAggregateID(v.Db, loginPolicyTable, aggregateID)
+}
+
+func (v *View) PutLoginPolicy(policy *model.LoginPolicyView, sequence uint64) error {
+	err := view.PutLoginPolicy(v.Db, loginPolicyTable, policy)
+	if err != nil {
+		return err
+	}
+	return v.ProcessedLoginPolicySequence(sequence)
+}
+
+func (v *View) DeleteLoginPolicy(aggregateID string, eventSequence uint64) error {
+	err := view.DeleteLoginPolicy(v.Db, loginPolicyTable, aggregateID)
+	if err != nil && !errors.IsNotFound(err) {
+		return err
+	}
+	return v.ProcessedLoginPolicySequence(eventSequence)
+}
+
+func (v *View) GetLatestLoginPolicySequence() (*global_view.CurrentSequence, error) {
+	return v.latestSequence(loginPolicyTable)
+}
+
+func (v *View) ProcessedLoginPolicySequence(eventSequence uint64) error {
+	return v.saveCurrentSequence(loginPolicyTable, eventSequence)
+}
+
+func (v *View) GetLatestLoginPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {
+	return v.latestFailedEvent(loginPolicyTable, sequence)
+}
+
+func (v *View) ProcessedLoginPolicyFailedEvent(failedEvent *global_view.FailedEvent) error {
+	return v.saveFailedEvent(failedEvent)
+}