mirror of
https://github.com/zitadel/zitadel.git
synced 2025-04-17 03:51:30 +00:00
411d7c6c5c
* feat: add possibility to ignore username errors on first login screen * console changes * fix: handling of unknown usernames (#3445) * fix: handling of unknown usernames * fix: handle HideLoginNameSuffix on unknown users * feat: add default redirect uri on login policy (#3607) * feat: add default redirect uri on login policy * fix tests * feat: Console login policy default redirect (#3613) * console default redirect * placeholder * validate default redirect uri * allow empty default redirect uri Co-authored-by: Max Peintner <max@caos.ch> * remove wonrgly cherry picked migration Co-authored-by: Max Peintner <max@caos.ch>
94 lines
2.9 KiB
Go
94 lines
2.9 KiB
Go
package command
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/zitadel/zitadel/internal/domain"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
"github.com/zitadel/zitadel/internal/repository/policy"
|
|
)
|
|
|
|
type LoginPolicyWriteModel struct {
|
|
eventstore.WriteModel
|
|
|
|
AllowUserNamePassword bool
|
|
AllowRegister bool
|
|
AllowExternalIDP bool
|
|
ForceMFA bool
|
|
HidePasswordReset bool
|
|
IgnoreUnknownUsernames bool
|
|
PasswordlessType domain.PasswordlessType
|
|
DefaultRedirectURI string
|
|
PasswordCheckLifetime time.Duration
|
|
ExternalLoginCheckLifetime time.Duration
|
|
MFAInitSkipLifetime time.Duration
|
|
SecondFactorCheckLifetime time.Duration
|
|
MultiFactorCheckLifetime time.Duration
|
|
State domain.PolicyState
|
|
}
|
|
|
|
func (wm *LoginPolicyWriteModel) Reduce() error {
|
|
for _, event := range wm.Events {
|
|
switch e := event.(type) {
|
|
case *policy.LoginPolicyAddedEvent:
|
|
wm.AllowRegister = e.AllowRegister
|
|
wm.AllowUserNamePassword = e.AllowUserNamePassword
|
|
wm.AllowExternalIDP = e.AllowExternalIDP
|
|
wm.ForceMFA = e.ForceMFA
|
|
wm.PasswordlessType = e.PasswordlessType
|
|
wm.HidePasswordReset = e.HidePasswordReset
|
|
wm.IgnoreUnknownUsernames = e.IgnoreUnknownUsernames
|
|
wm.DefaultRedirectURI = e.DefaultRedirectURI
|
|
wm.PasswordCheckLifetime = e.PasswordCheckLifetime
|
|
wm.ExternalLoginCheckLifetime = e.ExternalLoginCheckLifetime
|
|
wm.MFAInitSkipLifetime = e.MFAInitSkipLifetime
|
|
wm.SecondFactorCheckLifetime = e.SecondFactorCheckLifetime
|
|
wm.MultiFactorCheckLifetime = e.MultiFactorCheckLifetime
|
|
wm.State = domain.PolicyStateActive
|
|
case *policy.LoginPolicyChangedEvent:
|
|
if e.AllowRegister != nil {
|
|
wm.AllowRegister = *e.AllowRegister
|
|
}
|
|
if e.AllowUserNamePassword != nil {
|
|
wm.AllowUserNamePassword = *e.AllowUserNamePassword
|
|
}
|
|
if e.AllowExternalIDP != nil {
|
|
wm.AllowExternalIDP = *e.AllowExternalIDP
|
|
}
|
|
if e.ForceMFA != nil {
|
|
wm.ForceMFA = *e.ForceMFA
|
|
}
|
|
if e.HidePasswordReset != nil {
|
|
wm.HidePasswordReset = *e.HidePasswordReset
|
|
}
|
|
if e.IgnoreUnknownUsernames != nil {
|
|
wm.IgnoreUnknownUsernames = *e.IgnoreUnknownUsernames
|
|
}
|
|
if e.PasswordlessType != nil {
|
|
wm.PasswordlessType = *e.PasswordlessType
|
|
}
|
|
if e.DefaultRedirectURI != nil {
|
|
wm.DefaultRedirectURI = *e.DefaultRedirectURI
|
|
}
|
|
if e.PasswordCheckLifetime != nil {
|
|
wm.PasswordCheckLifetime = *e.PasswordCheckLifetime
|
|
}
|
|
if e.ExternalLoginCheckLifetime != nil {
|
|
wm.ExternalLoginCheckLifetime = *e.ExternalLoginCheckLifetime
|
|
}
|
|
if e.MFAInitSkipLifetime != nil {
|
|
wm.MFAInitSkipLifetime = *e.MFAInitSkipLifetime
|
|
}
|
|
if e.SecondFactorCheckLifetime != nil {
|
|
wm.SecondFactorCheckLifetime = *e.SecondFactorCheckLifetime
|
|
}
|
|
if e.MultiFactorCheckLifetime != nil {
|
|
wm.MultiFactorCheckLifetime = *e.MultiFactorCheckLifetime
|
|
}
|
|
case *policy.LoginPolicyRemovedEvent:
|
|
wm.State = domain.PolicyStateRemoved
|
|
}
|
|
}
|
|
return wm.WriteModel.Reduce()
|
|
}
|