mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-12 19:14:23 +00:00
db1d8f4efe
* feat: oidc config * fix: oidc configurations * feat: oidc idp config * feat: add oidc config test * fix: tests * fix: tests * feat: translate new events * feat: idp eventstore * feat: idp eventstore * fix: tests * feat: command side idp * feat: query side idp * feat: idp config on org * fix: tests * feat: authz idp on org * feat: org idps * feat: login policy * feat: login policy * feat: login policy * feat: add idp func on login policy * feat: add validation to loginpolicy and idp provider * feat: add default login policy * feat: login policy on org * feat: login policy on org * fix: id config handlers * fix: id config handlers * fix: create idp on org * fix: create idp on org * fix: not existing idp config * fix: default login policy * fix: add login policy on org * fix: idp provider search on org * fix: test * fix: remove idp on org * fix: test * fix: test * fix: remove admin idp * fix: logo src as byte * fix: migration * fix: tests * Update internal/iam/repository/eventsourcing/iam.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/org/repository/eventsourcing/org_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <silvan.reusser@gmail.com> * fix: pr comments * fix: tests * Update types.go * fix: merge request changes * fix: reduce optimization Co-authored-by: Silvan <silvan.reusser@gmail.com> Co-authored-by: Livio Amstutz <livio.a@gmail.com>
115 lines
3.9 KiB
Go
115 lines
3.9 KiB
Go
package handler
|
|
|
|
import (
|
|
"context"
|
|
"github.com/caos/logging"
|
|
"github.com/caos/zitadel/internal/config/systemdefaults"
|
|
"github.com/caos/zitadel/internal/iam/repository/eventsourcing"
|
|
org_events "github.com/caos/zitadel/internal/org/repository/eventsourcing"
|
|
org_es_model "github.com/caos/zitadel/internal/org/repository/eventsourcing/model"
|
|
|
|
"github.com/caos/zitadel/internal/eventstore/models"
|
|
es_models "github.com/caos/zitadel/internal/eventstore/models"
|
|
"github.com/caos/zitadel/internal/eventstore/spooler"
|
|
iam_model "github.com/caos/zitadel/internal/iam/model"
|
|
"github.com/caos/zitadel/internal/iam/repository/eventsourcing/model"
|
|
iam_view_model "github.com/caos/zitadel/internal/iam/repository/view/model"
|
|
)
|
|
|
|
type IDPProvider struct {
|
|
handler
|
|
systemDefaults systemdefaults.SystemDefaults
|
|
iamEvents *eventsourcing.IAMEventstore
|
|
orgEvents *org_events.OrgEventstore
|
|
}
|
|
|
|
const (
|
|
idpProviderTable = "adminapi.idp_providers"
|
|
)
|
|
|
|
func (m *IDPProvider) ViewModel() string {
|
|
return idpProviderTable
|
|
}
|
|
|
|
func (m *IDPProvider) EventQuery() (*models.SearchQuery, error) {
|
|
sequence, err := m.view.GetLatestIDPProviderSequence()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return es_models.NewSearchQuery().
|
|
AggregateTypeFilter(model.IAMAggregate, org_es_model.OrgAggregate).
|
|
LatestSequenceFilter(sequence.CurrentSequence), nil
|
|
}
|
|
|
|
func (m *IDPProvider) Reduce(event *models.Event) (err error) {
|
|
switch event.AggregateType {
|
|
case model.IAMAggregate, org_es_model.OrgAggregate:
|
|
err = m.processIdpProvider(event)
|
|
}
|
|
return err
|
|
}
|
|
|
|
func (m *IDPProvider) processIdpProvider(event *models.Event) (err error) {
|
|
provider := new(iam_view_model.IDPProviderView)
|
|
switch event.Type {
|
|
case model.LoginPolicyIDPProviderAdded, org_es_model.LoginPolicyIDPProviderAdded:
|
|
err = provider.AppendEvent(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = m.fillData(provider)
|
|
case model.LoginPolicyIDPProviderRemoved, model.LoginPolicyIDPProviderCascadeRemoved,
|
|
org_es_model.LoginPolicyIDPProviderRemoved, org_es_model.LoginPolicyIDPProviderCascadeRemoved:
|
|
err = provider.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.DeleteIDPProvider(event.AggregateID, provider.IDPConfigID, event.Sequence)
|
|
case model.IDPConfigChanged, org_es_model.IDPConfigChanged:
|
|
config := new(iam_model.IDPConfig)
|
|
config.AppendEvent(event)
|
|
providers, err := m.view.IDPProvidersByIdpConfigID(config.IDPConfigID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
config, err = m.iamEvents.GetIDPConfig(context.Background(), provider.AggregateID, config.IDPConfigID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
for _, provider := range providers {
|
|
m.fillConfigData(provider, config)
|
|
}
|
|
return m.view.PutIDPProviders(event.Sequence, providers...)
|
|
default:
|
|
return m.view.ProcessedIDPProviderSequence(event.Sequence)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.PutIDPProvider(provider, provider.Sequence)
|
|
}
|
|
|
|
func (m *IDPProvider) fillData(provider *iam_view_model.IDPProviderView) (err error) {
|
|
var config *iam_model.IDPConfig
|
|
if provider.IDPProviderType == int32(iam_model.IDPProviderTypeSystem) {
|
|
config, err = m.iamEvents.GetIDPConfig(context.Background(), m.systemDefaults.IamID, provider.IDPConfigID)
|
|
} else {
|
|
config, err = m.orgEvents.GetIDPConfig(context.Background(), provider.AggregateID, provider.IDPConfigID)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
m.fillConfigData(provider, config)
|
|
return nil
|
|
}
|
|
|
|
func (m *IDPProvider) fillConfigData(provider *iam_view_model.IDPProviderView, config *iam_model.IDPConfig) {
|
|
provider.Name = config.Name
|
|
provider.IDPConfigType = int32(config.Type)
|
|
}
|
|
|
|
func (m *IDPProvider) OnError(event *models.Event, err error) error {
|
|
logging.LogWithFields("SPOOL-Msj8c", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp provider handler")
|
|
return spooler.HandleError(event, err, m.view.GetLatestIDPProviderFailedEvent, m.view.ProcessedIDPProviderFailedEvent, m.view.ProcessedIDPProviderSequence, m.errorCountUntilSkip)
|
|
}
|