mirror of
https://github.com/zitadel/zitadel.git
synced 2025-01-07 10:29:19 +00:00
db1d8f4efe
* feat: oidc config * fix: oidc configurations * feat: oidc idp config * feat: add oidc config test * fix: tests * fix: tests * feat: translate new events * feat: idp eventstore * feat: idp eventstore * fix: tests * feat: command side idp * feat: query side idp * feat: idp config on org * fix: tests * feat: authz idp on org * feat: org idps * feat: login policy * feat: login policy * feat: login policy * feat: add idp func on login policy * feat: add validation to loginpolicy and idp provider * feat: add default login policy * feat: login policy on org * feat: login policy on org * fix: id config handlers * fix: id config handlers * fix: create idp on org * fix: create idp on org * fix: not existing idp config * fix: default login policy * fix: add login policy on org * fix: idp provider search on org * fix: test * fix: remove idp on org * fix: test * fix: test * fix: remove admin idp * fix: logo src as byte * fix: migration * fix: tests * Update internal/iam/repository/eventsourcing/iam.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/org/repository/eventsourcing/org_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * fix: pr comments * fix: tests * Update types.go * fix: merge request changes * fix: reduce optimization Co-authored-by: Silvan <silvan.reusser@gmail.com> Co-authored-by: Livio Amstutz <livio.a@gmail.com>
205 lines
6.8 KiB
Go
205 lines
6.8 KiB
Go
package handler
|
|
|
|
import (
|
|
"context"
|
|
iam_es_model "github.com/caos/zitadel/internal/iam/repository/eventsourcing/model"
|
|
org_model "github.com/caos/zitadel/internal/org/model"
|
|
org_event "github.com/caos/zitadel/internal/org/repository/eventsourcing"
|
|
proj_event "github.com/caos/zitadel/internal/project/repository/eventsourcing"
|
|
proj_es_model "github.com/caos/zitadel/internal/project/repository/eventsourcing/model"
|
|
|
|
"github.com/caos/logging"
|
|
|
|
"github.com/caos/zitadel/internal/eventstore/models"
|
|
es_models "github.com/caos/zitadel/internal/eventstore/models"
|
|
"github.com/caos/zitadel/internal/eventstore/spooler"
|
|
org_es_model "github.com/caos/zitadel/internal/org/repository/eventsourcing/model"
|
|
usr_model "github.com/caos/zitadel/internal/user/model"
|
|
usr_es_model "github.com/caos/zitadel/internal/user/repository/view/model"
|
|
)
|
|
|
|
type UserMembership struct {
|
|
handler
|
|
orgEvents *org_event.OrgEventstore
|
|
projectEvents *proj_event.ProjectEventstore
|
|
}
|
|
|
|
const (
|
|
userMembershipTable = "management.user_memberships"
|
|
)
|
|
|
|
func (m *UserMembership) ViewModel() string {
|
|
return userMembershipTable
|
|
}
|
|
|
|
func (m *UserMembership) EventQuery() (*models.SearchQuery, error) {
|
|
sequence, err := m.view.GetLatestUserMembershipSequence()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return es_models.NewSearchQuery().
|
|
AggregateTypeFilter(iam_es_model.IAMAggregate, org_es_model.OrgAggregate, proj_es_model.ProjectAggregate).
|
|
LatestSequenceFilter(sequence.CurrentSequence), nil
|
|
}
|
|
|
|
func (m *UserMembership) Reduce(event *models.Event) (err error) {
|
|
switch event.AggregateType {
|
|
case iam_es_model.IAMAggregate:
|
|
err = m.processIam(event)
|
|
case org_es_model.OrgAggregate:
|
|
err = m.processOrg(event)
|
|
case proj_es_model.ProjectAggregate:
|
|
err = m.processProject(event)
|
|
}
|
|
return err
|
|
}
|
|
|
|
func (m *UserMembership) processIam(event *models.Event) (err error) {
|
|
member := new(usr_es_model.UserMembershipView)
|
|
err = member.AppendEvent(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
switch event.Type {
|
|
case iam_es_model.IAMMemberAdded:
|
|
m.fillIamDisplayName(member)
|
|
case iam_es_model.IAMMemberChanged:
|
|
member, err = m.view.UserMembershipByIDs(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeIam)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = member.AppendEvent(event)
|
|
case iam_es_model.IAMMemberRemoved:
|
|
return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeIam, event.Sequence)
|
|
default:
|
|
return m.view.ProcessedUserMembershipSequence(event.Sequence)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.PutUserMembership(member, event.Sequence)
|
|
}
|
|
|
|
func (m *UserMembership) fillIamDisplayName(member *usr_es_model.UserMembershipView) {
|
|
member.DisplayName = member.AggregateID
|
|
}
|
|
|
|
func (m *UserMembership) processOrg(event *models.Event) (err error) {
|
|
member := new(usr_es_model.UserMembershipView)
|
|
err = member.AppendEvent(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
switch event.Type {
|
|
case org_es_model.OrgMemberAdded:
|
|
err = m.fillOrgDisplayName(member)
|
|
case org_es_model.OrgMemberChanged:
|
|
member, err = m.view.UserMembershipByIDs(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeOrganisation)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = member.AppendEvent(event)
|
|
case org_es_model.OrgMemberRemoved:
|
|
return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeOrganisation, event.Sequence)
|
|
case org_es_model.OrgChanged:
|
|
err = m.updateOrgDisplayName(event)
|
|
default:
|
|
return m.view.ProcessedUserMembershipSequence(event.Sequence)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.PutUserMembership(member, event.Sequence)
|
|
}
|
|
|
|
func (m *UserMembership) fillOrgDisplayName(member *usr_es_model.UserMembershipView) (err error) {
|
|
org, err := m.orgEvents.OrgByID(context.Background(), org_model.NewOrg(member.AggregateID))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
member.DisplayName = org.Name
|
|
return nil
|
|
}
|
|
|
|
func (m *UserMembership) updateOrgDisplayName(event *models.Event) error {
|
|
org, err := m.orgEvents.OrgByID(context.Background(), org_model.NewOrg(event.AggregateID))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
memberships, err := m.view.UserMembershipsByAggregateID(event.AggregateID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
for _, membership := range memberships {
|
|
membership.DisplayName = org.Name
|
|
}
|
|
return m.view.BulkPutUserMemberships(memberships, event.Sequence)
|
|
}
|
|
|
|
func (m *UserMembership) processProject(event *models.Event) (err error) {
|
|
member := new(usr_es_model.UserMembershipView)
|
|
err = member.AppendEvent(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
switch event.Type {
|
|
case proj_es_model.ProjectMemberAdded, proj_es_model.ProjectGrantMemberAdded:
|
|
err = m.fillProjectDisplayName(member)
|
|
case proj_es_model.ProjectMemberChanged:
|
|
member, err = m.view.UserMembershipByIDs(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeProject)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = member.AppendEvent(event)
|
|
case proj_es_model.ProjectMemberRemoved:
|
|
return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeProject, event.Sequence)
|
|
case proj_es_model.ProjectGrantMemberChanged:
|
|
member, err = m.view.UserMembershipByIDs(member.UserID, event.AggregateID, member.ObjectID, usr_model.MemberTypeProjectGrant)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = member.AppendEvent(event)
|
|
case proj_es_model.ProjectGrantMemberRemoved:
|
|
return m.view.DeleteUserMembership(member.UserID, event.AggregateID, member.ObjectID, usr_model.MemberTypeProjectGrant, event.Sequence)
|
|
case proj_es_model.ProjectChanged:
|
|
err = m.updateProjectDisplayName(event)
|
|
default:
|
|
return m.view.ProcessedUserMembershipSequence(event.Sequence)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.PutUserMembership(member, event.Sequence)
|
|
}
|
|
|
|
func (m *UserMembership) fillProjectDisplayName(member *usr_es_model.UserMembershipView) (err error) {
|
|
project, err := m.projectEvents.ProjectByID(context.Background(), member.AggregateID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
member.DisplayName = project.Name
|
|
return nil
|
|
}
|
|
|
|
func (m *UserMembership) updateProjectDisplayName(event *models.Event) error {
|
|
project, err := m.projectEvents.ProjectByID(context.Background(), event.AggregateID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
memberships, err := m.view.UserMembershipsByAggregateID(event.AggregateID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
for _, membership := range memberships {
|
|
membership.DisplayName = project.Name
|
|
}
|
|
return m.view.BulkPutUserMemberships(memberships, event.Sequence)
|
|
}
|
|
|
|
func (m *UserMembership) OnError(event *models.Event, err error) error {
|
|
logging.LogWithFields("SPOOL-Ms3fj", "id", event.AggregateID).WithError(err).Warn("something went wrong in orgmember handler")
|
|
return spooler.HandleError(event, err, m.view.GetLatestUserMembershipFailedEvent, m.view.ProcessedUserMembershipFailedEvent, m.view.ProcessedUserMembershipSequence, m.errorCountUntilSkip)
|
|
}
|