mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-14 03:54:21 +00:00
bc9a85daf3
* feat(import): add functionality to import data into an instance * feat(import): move import to admin api and additional checks for nil pointer * fix(export): export implementation with filtered members and grants * fix: export and import implementation * fix: add possibility to export hashed passwords with the user * fix(import): import with structure of v1 and v2 * docs: add v1 proto * fix(import): check im imported user is already existing * fix(import): add otp import function * fix(import): add external idps, domains, custom text and messages * fix(import): correct usage of default values from login policy * fix(export): fix renaming of add project function * fix(import): move checks for unit tests * expect filter * fix(import): move checks for unit tests * fix(import): move checks for unit tests * fix(import): produce prerelease from branch * fix(import): correctly use provided user id for machine user imports * fix(import): corrected otp import and added guide for export and import * fix: import verified and primary domains * fix(import): add reading from gcs, s3 and localfile with tracing * fix(import): gcs and s3, file size correction and error logging * Delete docker-compose.yml * fix(import): progress logging and count of resources * fix(import): progress logging and count of resources * log subscription * fix(import): incorporate review * fix(import): incorporate review * docs: add suggestion for import Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com> * fix(import): add verification otp event and handling of deleted but existing users Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: Fabienne <fabienne.gerschwiler@gmail.com> Co-authored-by: Silvan <silvan.reusser@gmail.com> Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com>
112 lines
2.5 KiB
Go
112 lines
2.5 KiB
Go
package domain
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/zitadel/zitadel/internal/crypto"
|
|
caos_errors "github.com/zitadel/zitadel/internal/errors"
|
|
es_models "github.com/zitadel/zitadel/internal/eventstore/v1/models"
|
|
)
|
|
|
|
type HumanDetails struct {
|
|
ID string
|
|
ObjectDetails
|
|
}
|
|
|
|
type Human struct {
|
|
es_models.ObjectRoot
|
|
|
|
Username string
|
|
State UserState
|
|
*Password
|
|
*HashedPassword
|
|
*Profile
|
|
*Email
|
|
*Phone
|
|
*Address
|
|
}
|
|
|
|
func (h Human) GetUsername() string {
|
|
return h.Username
|
|
}
|
|
|
|
func (h Human) GetState() UserState {
|
|
return h.State
|
|
}
|
|
|
|
type InitUserCode struct {
|
|
es_models.ObjectRoot
|
|
|
|
Code *crypto.CryptoValue
|
|
Expiry time.Duration
|
|
}
|
|
|
|
type Gender int32
|
|
|
|
const (
|
|
GenderUnspecified Gender = iota
|
|
GenderFemale
|
|
GenderMale
|
|
GenderDiverse
|
|
|
|
genderCount
|
|
)
|
|
|
|
func (f Gender) Valid() bool {
|
|
return f >= 0 && f < genderCount
|
|
}
|
|
|
|
func (f Gender) Specified() bool {
|
|
return f > GenderUnspecified && f < genderCount
|
|
}
|
|
|
|
func (u *Human) IsValid() bool {
|
|
return u.Username != "" && u.Profile != nil && u.Profile.IsValid() && u.Email != nil && u.Email.IsValid() && u.Phone == nil || (u.Phone != nil && u.Phone.PhoneNumber != "" && u.Phone.IsValid())
|
|
}
|
|
|
|
func (u *Human) CheckDomainPolicy(policy *DomainPolicy) error {
|
|
if policy == nil {
|
|
return caos_errors.ThrowPreconditionFailed(nil, "DOMAIN-zSH7j", "Errors.Users.DomainPolicyNil")
|
|
}
|
|
if !policy.UserLoginMustBeDomain && u.Profile != nil && u.Username == "" && u.Email != nil {
|
|
u.Username = u.EmailAddress
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (u *Human) SetNamesAsDisplayname() {
|
|
if u.Profile != nil && u.DisplayName == "" && u.FirstName != "" && u.LastName != "" {
|
|
u.DisplayName = u.FirstName + " " + u.LastName
|
|
}
|
|
}
|
|
|
|
func (u *Human) HashPasswordIfExisting(policy *PasswordComplexityPolicy, passwordAlg crypto.HashAlgorithm, onetime bool) error {
|
|
if u.Password != nil {
|
|
u.Password.ChangeRequired = onetime
|
|
return u.Password.HashPasswordIfExisting(policy, passwordAlg)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (u *Human) IsInitialState(passwordless, externalIDPs bool) bool {
|
|
return u.Email == nil || !u.IsEmailVerified || !externalIDPs && !passwordless && (u.Password == nil || u.Password.SecretString == "") && (u.HashedPassword == nil || u.HashedPassword.SecretString == "")
|
|
}
|
|
|
|
func NewInitUserCode(generator crypto.Generator) (*InitUserCode, error) {
|
|
initCodeCrypto, _, err := crypto.NewCode(generator)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &InitUserCode{
|
|
Code: initCodeCrypto,
|
|
Expiry: generator.Expiry(),
|
|
}, nil
|
|
}
|
|
|
|
func GenerateLoginName(username, domain string, appendDomain bool) string {
|
|
if !appendDomain {
|
|
return username
|
|
}
|
|
return username + "@" + domain
|
|
}
|