mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-15 04:18:01 +00:00
b6b5b1b782
* feat: jwt idp * feat: command side * feat: add tests * fill idp views with jwt idps and return apis * add jwtEndpoint to jwt idp * begin jwt request handling * merge * handle jwt idp * cleanup * fixes * autoregister * get token from specific header name * error handling * fix texts * handle renderExternalNotFoundOption Co-authored-by: fabi <fabienne.gerschwiler@gmail.com>
139 lines
4.1 KiB
Go
139 lines
4.1 KiB
Go
package handler
|
|
|
|
import (
|
|
"github.com/caos/logging"
|
|
"github.com/caos/zitadel/internal/eventstore/v1"
|
|
es_models "github.com/caos/zitadel/internal/eventstore/v1/models"
|
|
"github.com/caos/zitadel/internal/eventstore/v1/query"
|
|
"github.com/caos/zitadel/internal/eventstore/v1/spooler"
|
|
iam_model "github.com/caos/zitadel/internal/iam/model"
|
|
iam_es_model "github.com/caos/zitadel/internal/iam/repository/eventsourcing/model"
|
|
iam_view_model "github.com/caos/zitadel/internal/iam/repository/view/model"
|
|
"github.com/caos/zitadel/internal/org/repository/eventsourcing/model"
|
|
"github.com/caos/zitadel/internal/repository/iam"
|
|
"github.com/caos/zitadel/internal/repository/org"
|
|
)
|
|
|
|
const (
|
|
idpConfigTable = "auth.idp_configs"
|
|
)
|
|
|
|
type IDPConfig struct {
|
|
handler
|
|
subscription *v1.Subscription
|
|
}
|
|
|
|
func newIDPConfig(h handler) *IDPConfig {
|
|
idpConfig := &IDPConfig{
|
|
handler: h,
|
|
}
|
|
|
|
idpConfig.subscribe()
|
|
|
|
return idpConfig
|
|
}
|
|
|
|
func (i *IDPConfig) subscribe() {
|
|
i.subscription = i.es.Subscribe(i.AggregateTypes()...)
|
|
go func() {
|
|
for event := range i.subscription.Events {
|
|
query.ReduceEvent(i, event)
|
|
}
|
|
}()
|
|
}
|
|
|
|
func (i *IDPConfig) ViewModel() string {
|
|
return idpConfigTable
|
|
}
|
|
|
|
func (i *IDPConfig) Subscription() *v1.Subscription {
|
|
return i.subscription
|
|
}
|
|
|
|
func (_ *IDPConfig) AggregateTypes() []es_models.AggregateType {
|
|
return []es_models.AggregateType{model.OrgAggregate, iam_es_model.IAMAggregate}
|
|
}
|
|
|
|
func (i *IDPConfig) CurrentSequence() (uint64, error) {
|
|
sequence, err := i.view.GetLatestIDPConfigSequence()
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
return sequence.CurrentSequence, nil
|
|
}
|
|
|
|
func (i *IDPConfig) EventQuery() (*es_models.SearchQuery, error) {
|
|
sequence, err := i.view.GetLatestIDPConfigSequence()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return es_models.NewSearchQuery().
|
|
AggregateTypeFilter(i.AggregateTypes()...).
|
|
LatestSequenceFilter(sequence.CurrentSequence), nil
|
|
}
|
|
|
|
func (i *IDPConfig) Reduce(event *es_models.Event) (err error) {
|
|
switch event.AggregateType {
|
|
case model.OrgAggregate:
|
|
err = i.processIdpConfig(iam_model.IDPProviderTypeOrg, event)
|
|
case iam_es_model.IAMAggregate:
|
|
err = i.processIdpConfig(iam_model.IDPProviderTypeSystem, event)
|
|
}
|
|
return err
|
|
}
|
|
|
|
func (i *IDPConfig) processIdpConfig(providerType iam_model.IDPProviderType, event *es_models.Event) (err error) {
|
|
idp := new(iam_view_model.IDPConfigView)
|
|
switch event.Type {
|
|
case model.IDPConfigAdded,
|
|
iam_es_model.IDPConfigAdded:
|
|
err = idp.AppendEvent(providerType, event)
|
|
case model.IDPConfigChanged, iam_es_model.IDPConfigChanged,
|
|
model.OIDCIDPConfigAdded, iam_es_model.OIDCIDPConfigAdded,
|
|
model.OIDCIDPConfigChanged, iam_es_model.OIDCIDPConfigChanged,
|
|
es_models.EventType(org.IDPJWTConfigAddedEventType), es_models.EventType(iam.IDPJWTConfigAddedEventType),
|
|
es_models.EventType(org.IDPJWTConfigChangedEventType), es_models.EventType(iam.IDPJWTConfigChangedEventType):
|
|
err = idp.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
idp, err = i.view.IDPConfigByID(idp.IDPConfigID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = idp.AppendEvent(providerType, event)
|
|
case model.IDPConfigDeactivated, iam_es_model.IDPConfigDeactivated,
|
|
model.IDPConfigReactivated, iam_es_model.IDPConfigReactivated:
|
|
err = idp.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
idp, err = i.view.IDPConfigByID(idp.IDPConfigID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = idp.AppendEvent(providerType, event)
|
|
case model.IDPConfigRemoved, iam_es_model.IDPConfigRemoved:
|
|
err = idp.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return i.view.DeleteIDPConfig(idp.IDPConfigID, event)
|
|
default:
|
|
return i.view.ProcessedIDPConfigSequence(event)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return i.view.PutIDPConfig(idp, event)
|
|
}
|
|
|
|
func (i *IDPConfig) OnError(event *es_models.Event, err error) error {
|
|
logging.LogWithFields("SPOOL-Ejf8s", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp config handler")
|
|
return spooler.HandleError(event, err, i.view.GetLatestIDPConfigFailedEvent, i.view.ProcessedIDPConfigFailedEvent, i.view.ProcessedIDPConfigSequence, i.errorCountUntilSkip)
|
|
}
|
|
|
|
func (i *IDPConfig) OnSuccess() error {
|
|
return spooler.HandleSuccess(i.view.UpdateIDPConfigSpoolerRunTimestamp)
|
|
}
|