mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-12 11:04:25 +00:00
3270a94291
* fix: send email verification instead of init code for idp users * fix: select single idp of external only users * fix: use single idp on login
115 lines
2.6 KiB
Go
115 lines
2.6 KiB
Go
package domain
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/zitadel/zitadel/internal/crypto"
|
|
caos_errors "github.com/zitadel/zitadel/internal/errors"
|
|
es_models "github.com/zitadel/zitadel/internal/eventstore/v1/models"
|
|
)
|
|
|
|
type HumanDetails struct {
|
|
ID string
|
|
ObjectDetails
|
|
}
|
|
|
|
type Human struct {
|
|
es_models.ObjectRoot
|
|
|
|
Username string
|
|
State UserState
|
|
*Password
|
|
*HashedPassword
|
|
*Profile
|
|
*Email
|
|
*Phone
|
|
*Address
|
|
}
|
|
|
|
func (h Human) GetUsername() string {
|
|
return h.Username
|
|
}
|
|
|
|
func (h Human) GetState() UserState {
|
|
return h.State
|
|
}
|
|
|
|
type InitUserCode struct {
|
|
es_models.ObjectRoot
|
|
|
|
Code *crypto.CryptoValue
|
|
Expiry time.Duration
|
|
}
|
|
|
|
type Gender int32
|
|
|
|
const (
|
|
GenderUnspecified Gender = iota
|
|
GenderFemale
|
|
GenderMale
|
|
GenderDiverse
|
|
|
|
genderCount
|
|
)
|
|
|
|
func (f Gender) Valid() bool {
|
|
return f >= 0 && f < genderCount
|
|
}
|
|
|
|
func (f Gender) Specified() bool {
|
|
return f > GenderUnspecified && f < genderCount
|
|
}
|
|
|
|
func (u *Human) IsValid() bool {
|
|
return u.Username != "" && u.Profile != nil && u.Profile.IsValid() && u.Email != nil && u.Email.IsValid() && u.Phone == nil || (u.Phone != nil && u.Phone.PhoneNumber != "" && u.Phone.IsValid())
|
|
}
|
|
|
|
func (u *Human) CheckDomainPolicy(policy *DomainPolicy) error {
|
|
if policy == nil {
|
|
return caos_errors.ThrowPreconditionFailed(nil, "DOMAIN-zSH7j", "Errors.Users.DomainPolicyNil")
|
|
}
|
|
if !policy.UserLoginMustBeDomain && u.Profile != nil && u.Username == "" && u.Email != nil {
|
|
u.Username = u.EmailAddress
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (u *Human) SetNamesAsDisplayname() {
|
|
if u.Profile != nil && u.DisplayName == "" && u.FirstName != "" && u.LastName != "" {
|
|
u.DisplayName = u.FirstName + " " + u.LastName
|
|
}
|
|
}
|
|
|
|
func (u *Human) HashPasswordIfExisting(policy *PasswordComplexityPolicy, passwordAlg crypto.HashAlgorithm, onetime bool) error {
|
|
if u.Password != nil {
|
|
u.Password.ChangeRequired = onetime
|
|
return u.Password.HashPasswordIfExisting(policy, passwordAlg)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (u *Human) IsInitialState(passwordless, externalIDPs bool) bool {
|
|
if externalIDPs {
|
|
return false
|
|
}
|
|
return u.Email == nil || !u.IsEmailVerified || !passwordless && (u.Password == nil || u.Password.SecretString == "") && (u.HashedPassword == nil || u.HashedPassword.SecretString == "")
|
|
}
|
|
|
|
func NewInitUserCode(generator crypto.Generator) (*InitUserCode, error) {
|
|
initCodeCrypto, _, err := crypto.NewCode(generator)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &InitUserCode{
|
|
Code: initCodeCrypto,
|
|
Expiry: generator.Expiry(),
|
|
}, nil
|
|
}
|
|
|
|
func GenerateLoginName(username, domain string, appendDomain bool) string {
|
|
if !appendDomain {
|
|
return username
|
|
}
|
|
return username + "@" + domain
|
|
}
|