mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-14 03:54:21 +00:00
2957407b5b
* fix(oidcsettings): corrected projection, unittests and added the add endpoint * fix(oidcsettings): corrected default handling and instance setup * fix: set oidc settings correctly in console * cleanup * e2e test * improve e2e test * lint e2e Co-authored-by: Livio Spring <livio.a@gmail.com> Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com>
145 lines
4.3 KiB
Go
145 lines
4.3 KiB
Go
package instance
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"time"
|
|
|
|
"github.com/zitadel/zitadel/internal/errors"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
"github.com/zitadel/zitadel/internal/eventstore/repository"
|
|
)
|
|
|
|
const (
|
|
oidcSettingsPrefix = "oidc.settings."
|
|
OIDCSettingsAddedEventType = instanceEventTypePrefix + oidcSettingsPrefix + "added"
|
|
OIDCSettingsChangedEventType = instanceEventTypePrefix + oidcSettingsPrefix + "changed"
|
|
)
|
|
|
|
type OIDCSettingsAddedEvent struct {
|
|
eventstore.BaseEvent `json:"-"`
|
|
|
|
AccessTokenLifetime time.Duration `json:"accessTokenLifetime,omitempty"`
|
|
IdTokenLifetime time.Duration `json:"idTokenLifetime,omitempty"`
|
|
RefreshTokenIdleExpiration time.Duration `json:"refreshTokenIdleExpiration,omitempty"`
|
|
RefreshTokenExpiration time.Duration `json:"refreshTokenExpiration,omitempty"`
|
|
}
|
|
|
|
func NewOIDCSettingsAddedEvent(
|
|
ctx context.Context,
|
|
aggregate *eventstore.Aggregate,
|
|
accessTokenLifetime,
|
|
idTokenLifetime,
|
|
refreshTokenIdleExpiration,
|
|
refreshTokenExpiration time.Duration,
|
|
) *OIDCSettingsAddedEvent {
|
|
return &OIDCSettingsAddedEvent{
|
|
BaseEvent: *eventstore.NewBaseEventForPush(
|
|
ctx,
|
|
aggregate,
|
|
OIDCSettingsAddedEventType,
|
|
),
|
|
AccessTokenLifetime: accessTokenLifetime,
|
|
IdTokenLifetime: idTokenLifetime,
|
|
RefreshTokenIdleExpiration: refreshTokenIdleExpiration,
|
|
RefreshTokenExpiration: refreshTokenExpiration,
|
|
}
|
|
}
|
|
|
|
func (e *OIDCSettingsAddedEvent) Data() interface{} {
|
|
return e
|
|
}
|
|
|
|
func (e *OIDCSettingsAddedEvent) UniqueConstraints() []*eventstore.EventUniqueConstraint {
|
|
return nil
|
|
}
|
|
|
|
func OIDCSettingsAddedEventMapper(event *repository.Event) (eventstore.Event, error) {
|
|
oidcSettingsAdded := &OIDCSettingsAddedEvent{
|
|
BaseEvent: *eventstore.BaseEventFromRepo(event),
|
|
}
|
|
err := json.Unmarshal(event.Data, oidcSettingsAdded)
|
|
if err != nil {
|
|
return nil, errors.ThrowInternal(err, "IAM-soiwj", "unable to unmarshal oidc config added")
|
|
}
|
|
|
|
return oidcSettingsAdded, nil
|
|
}
|
|
|
|
type OIDCSettingsChangedEvent struct {
|
|
eventstore.BaseEvent `json:"-"`
|
|
|
|
AccessTokenLifetime *time.Duration `json:"accessTokenLifetime,omitempty"`
|
|
IdTokenLifetime *time.Duration `json:"idTokenLifetime,omitempty"`
|
|
RefreshTokenIdleExpiration *time.Duration `json:"refreshTokenIdleExpiration,omitempty"`
|
|
RefreshTokenExpiration *time.Duration `json:"refreshTokenExpiration,omitempty"`
|
|
}
|
|
|
|
func (e *OIDCSettingsChangedEvent) Data() interface{} {
|
|
return e
|
|
}
|
|
|
|
func (e *OIDCSettingsChangedEvent) UniqueConstraints() []*eventstore.EventUniqueConstraint {
|
|
return nil
|
|
}
|
|
|
|
func NewOIDCSettingsChangeEvent(
|
|
ctx context.Context,
|
|
aggregate *eventstore.Aggregate,
|
|
changes []OIDCSettingsChanges,
|
|
) (*OIDCSettingsChangedEvent, error) {
|
|
if len(changes) == 0 {
|
|
return nil, errors.ThrowPreconditionFailed(nil, "IAM-dnlwe", "Errors.NoChangesFound")
|
|
}
|
|
changeEvent := &OIDCSettingsChangedEvent{
|
|
BaseEvent: *eventstore.NewBaseEventForPush(
|
|
ctx,
|
|
aggregate,
|
|
OIDCSettingsChangedEventType,
|
|
),
|
|
}
|
|
for _, change := range changes {
|
|
change(changeEvent)
|
|
}
|
|
return changeEvent, nil
|
|
}
|
|
|
|
type OIDCSettingsChanges func(event *OIDCSettingsChangedEvent)
|
|
|
|
func ChangeOIDCSettingsAccessTokenLifetime(accessTokenLifetime time.Duration) func(event *OIDCSettingsChangedEvent) {
|
|
return func(e *OIDCSettingsChangedEvent) {
|
|
e.AccessTokenLifetime = &accessTokenLifetime
|
|
}
|
|
}
|
|
|
|
func ChangeOIDCSettingsIdTokenLifetime(idTokenLifetime time.Duration) func(event *OIDCSettingsChangedEvent) {
|
|
return func(e *OIDCSettingsChangedEvent) {
|
|
e.IdTokenLifetime = &idTokenLifetime
|
|
}
|
|
}
|
|
|
|
func ChangeOIDCSettingsRefreshTokenIdleExpiration(refreshTokenIdleExpiration time.Duration) func(event *OIDCSettingsChangedEvent) {
|
|
return func(e *OIDCSettingsChangedEvent) {
|
|
e.RefreshTokenIdleExpiration = &refreshTokenIdleExpiration
|
|
}
|
|
}
|
|
|
|
func ChangeOIDCSettingsRefreshTokenExpiration(refreshTokenExpiration time.Duration) func(event *OIDCSettingsChangedEvent) {
|
|
return func(e *OIDCSettingsChangedEvent) {
|
|
e.RefreshTokenExpiration = &refreshTokenExpiration
|
|
}
|
|
}
|
|
|
|
func OIDCSettingsChangedEventMapper(event *repository.Event) (eventstore.Event, error) {
|
|
e := &OIDCSettingsChangedEvent{
|
|
BaseEvent: *eventstore.BaseEventFromRepo(event),
|
|
}
|
|
|
|
err := json.Unmarshal(event.Data, e)
|
|
if err != nil {
|
|
return nil, errors.ThrowInternal(err, "IAM-f98uf", "unable to unmarshal oidc settings changed")
|
|
}
|
|
|
|
return e, nil
|
|
}
|