package handler import ( "context" "github.com/zitadel/logging" "github.com/zitadel/zitadel/internal/config/systemdefaults" caos_errs "github.com/zitadel/zitadel/internal/errors" "github.com/zitadel/zitadel/internal/eventstore" v1 "github.com/zitadel/zitadel/internal/eventstore/v1" es_models "github.com/zitadel/zitadel/internal/eventstore/v1/models" "github.com/zitadel/zitadel/internal/eventstore/v1/query" "github.com/zitadel/zitadel/internal/eventstore/v1/spooler" iam_model "github.com/zitadel/zitadel/internal/iam/model" iam_view_model "github.com/zitadel/zitadel/internal/iam/repository/view/model" query2 "github.com/zitadel/zitadel/internal/query" "github.com/zitadel/zitadel/internal/repository/instance" "github.com/zitadel/zitadel/internal/repository/org" "github.com/zitadel/zitadel/internal/repository/user" usr_view_model "github.com/zitadel/zitadel/internal/user/repository/view/model" ) const ( externalIDPTable = "auth.user_external_idps" ) type ExternalIDP struct { handler systemDefaults systemdefaults.SystemDefaults subscription *v1.Subscription queries *query2.Queries } func newExternalIDP( ctx context.Context, handler handler, defaults systemdefaults.SystemDefaults, queries *query2.Queries, ) *ExternalIDP { h := &ExternalIDP{ handler: handler, systemDefaults: defaults, queries: queries, } h.subscribe(ctx) return h } func (i *ExternalIDP) subscribe(ctx context.Context) { i.subscription = i.es.Subscribe(i.AggregateTypes()...) go func() { for event := range i.subscription.Events { query.ReduceEvent(ctx, i, event) } }() } func (i *ExternalIDP) ViewModel() string { return externalIDPTable } func (i *ExternalIDP) Subscription() *v1.Subscription { return i.subscription } func (_ *ExternalIDP) AggregateTypes() []es_models.AggregateType { return []es_models.AggregateType{user.AggregateType, instance.AggregateType, org.AggregateType} } func (i *ExternalIDP) CurrentSequence(instanceID string) (uint64, error) { sequence, err := i.view.GetLatestExternalIDPSequence(instanceID) if err != nil { return 0, err } return sequence.CurrentSequence, nil } func (i *ExternalIDP) EventQuery(instanceIDs []string) (*es_models.SearchQuery, error) { sequences, err := i.view.GetLatestExternalIDPSequences(instanceIDs) if err != nil { return nil, err } return newSearchQuery(sequences, i.AggregateTypes(), instanceIDs), nil } func (i *ExternalIDP) Reduce(event *es_models.Event) (err error) { switch event.AggregateType { case user.AggregateType: err = i.processUser(event) case instance.AggregateType, org.AggregateType: err = i.processIdpConfig(event) } return err } func (i *ExternalIDP) processUser(event *es_models.Event) (err error) { externalIDP := new(usr_view_model.ExternalIDPView) switch eventstore.EventType(event.Type) { case user.UserIDPLinkAddedType: err = externalIDP.AppendEvent(event) if err != nil { return err } err = i.fillData(externalIDP) case user.UserIDPLinkRemovedType, user.UserIDPLinkCascadeRemovedType: err = externalIDP.SetData(event) if err != nil { return err } return i.view.DeleteExternalIDP(externalIDP.ExternalUserID, externalIDP.IDPConfigID, event.InstanceID, event) case user.UserRemovedType: return i.view.DeleteExternalIDPsByUserID(event.AggregateID, event.InstanceID, event) default: return i.view.ProcessedExternalIDPSequence(event) } if err != nil { return err } return i.view.PutExternalIDP(externalIDP, event) } func (i *ExternalIDP) processIdpConfig(event *es_models.Event) (err error) { switch eventstore.EventType(event.Type) { case instance.IDPConfigChangedEventType, org.IDPConfigChangedEventType: configView := new(iam_view_model.IDPConfigView) var config *query2.IDP if eventstore.EventType(event.Type) == instance.IDPConfigChangedEventType { err = configView.AppendEvent(iam_model.IDPProviderTypeSystem, event) } else { err = configView.AppendEvent(iam_model.IDPProviderTypeOrg, event) } if err != nil { return err } exterinalIDPs, err := i.view.ExternalIDPsByIDPConfigID(configView.IDPConfigID, event.InstanceID) if err != nil { return err } if event.AggregateType == instance.AggregateType { config, err = i.getDefaultIDPConfig(event.InstanceID, configView.IDPConfigID) } else { config, err = i.getOrgIDPConfig(event.InstanceID, event.AggregateID, configView.IDPConfigID) } if err != nil { return err } for _, provider := range exterinalIDPs { i.fillConfigData(provider, config) } return i.view.PutExternalIDPs(event, exterinalIDPs...) case instance.InstanceRemovedEventType: return i.view.DeleteInstanceExternalIDPs(event) default: return i.view.ProcessedExternalIDPSequence(event) } } func (i *ExternalIDP) fillData(externalIDP *usr_view_model.ExternalIDPView) error { config, err := i.getOrgIDPConfig(externalIDP.InstanceID, externalIDP.ResourceOwner, externalIDP.IDPConfigID) if caos_errs.IsNotFound(err) { config, err = i.getDefaultIDPConfig(externalIDP.InstanceID, externalIDP.IDPConfigID) } if err != nil { return err } i.fillConfigData(externalIDP, config) return nil } func (i *ExternalIDP) fillConfigData(externalIDP *usr_view_model.ExternalIDPView, config *query2.IDP) { externalIDP.IDPName = config.Name } func (i *ExternalIDP) OnError(event *es_models.Event, err error) error { logging.WithFields("id", event.AggregateID).WithError(err).Warn("something went wrong in idp provider handler") return spooler.HandleError(event, err, i.view.GetLatestExternalIDPFailedEvent, i.view.ProcessedExternalIDPFailedEvent, i.view.ProcessedExternalIDPSequence, i.errorCountUntilSkip) } func (i *ExternalIDP) OnSuccess(instanceIDs []string) error { return spooler.HandleSuccess(i.view.UpdateExternalIDPSpoolerRunTimestamp, instanceIDs) } func (i *ExternalIDP) getOrgIDPConfig(instanceID, aggregateID, idpConfigID string) (*query2.IDP, error) { return i.queries.IDPByIDAndResourceOwner(withInstanceID(context.Background(), instanceID), false, idpConfigID, aggregateID) } func (i *ExternalIDP) getDefaultIDPConfig(instanceID, idpConfigID string) (*query2.IDP, error) { return i.queries.IDPByIDAndResourceOwner(withInstanceID(context.Background(), instanceID), false, idpConfigID, instanceID) }