mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-22 07:47:29 +00:00
235 lines
7.3 KiB
Go
235 lines
7.3 KiB
Go
package handler
|
|
|
|
import (
|
|
"context"
|
|
"github.com/caos/logging"
|
|
"github.com/caos/zitadel/internal/config/systemdefaults"
|
|
"github.com/caos/zitadel/internal/domain"
|
|
caos_errs "github.com/caos/zitadel/internal/errors"
|
|
"github.com/caos/zitadel/internal/eventstore/v1"
|
|
es_models "github.com/caos/zitadel/internal/eventstore/v1/models"
|
|
"github.com/caos/zitadel/internal/eventstore/v1/query"
|
|
es_sdk "github.com/caos/zitadel/internal/eventstore/v1/sdk"
|
|
"github.com/caos/zitadel/internal/eventstore/v1/spooler"
|
|
iam_model "github.com/caos/zitadel/internal/iam/model"
|
|
"github.com/caos/zitadel/internal/iam/repository/eventsourcing/model"
|
|
iam_view "github.com/caos/zitadel/internal/iam/repository/view"
|
|
iam_view_model "github.com/caos/zitadel/internal/iam/repository/view/model"
|
|
org_model "github.com/caos/zitadel/internal/org/model"
|
|
org_es_model "github.com/caos/zitadel/internal/org/repository/eventsourcing/model"
|
|
"github.com/caos/zitadel/internal/org/repository/view"
|
|
)
|
|
|
|
const (
|
|
idpProviderTable = "management.idp_providers"
|
|
)
|
|
|
|
type IDPProvider struct {
|
|
handler
|
|
systemDefaults systemdefaults.SystemDefaults
|
|
subscription *v1.Subscription
|
|
}
|
|
|
|
func newIDPProvider(
|
|
handler handler,
|
|
systemDefaults systemdefaults.SystemDefaults,
|
|
) *IDPProvider {
|
|
h := &IDPProvider{
|
|
handler: handler,
|
|
systemDefaults: systemDefaults,
|
|
}
|
|
|
|
h.subscribe()
|
|
|
|
return h
|
|
}
|
|
|
|
func (m *IDPProvider) subscribe() {
|
|
m.subscription = m.es.Subscribe(m.AggregateTypes()...)
|
|
go func() {
|
|
for event := range m.subscription.Events {
|
|
query.ReduceEvent(m, event)
|
|
}
|
|
}()
|
|
}
|
|
|
|
func (m *IDPProvider) ViewModel() string {
|
|
return idpProviderTable
|
|
}
|
|
|
|
func (p *IDPProvider) Subscription() *v1.Subscription {
|
|
return p.subscription
|
|
}
|
|
|
|
func (_ *IDPProvider) AggregateTypes() []es_models.AggregateType {
|
|
return []es_models.AggregateType{model.IAMAggregate, org_es_model.OrgAggregate}
|
|
}
|
|
|
|
func (m *IDPProvider) CurrentSequence() (uint64, error) {
|
|
sequence, err := m.view.GetLatestIDPProviderSequence()
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
return sequence.CurrentSequence, nil
|
|
}
|
|
|
|
func (m *IDPProvider) EventQuery() (*es_models.SearchQuery, error) {
|
|
sequence, err := m.view.GetLatestIDPProviderSequence()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return es_models.NewSearchQuery().
|
|
AggregateTypeFilter(m.AggregateTypes()...).
|
|
LatestSequenceFilter(sequence.CurrentSequence), nil
|
|
}
|
|
|
|
func (m *IDPProvider) Reduce(event *es_models.Event) (err error) {
|
|
switch event.AggregateType {
|
|
case model.IAMAggregate, org_es_model.OrgAggregate:
|
|
err = m.processIdpProvider(event)
|
|
}
|
|
return err
|
|
}
|
|
|
|
func (m *IDPProvider) processIdpProvider(event *es_models.Event) (err error) {
|
|
provider := new(iam_view_model.IDPProviderView)
|
|
switch event.Type {
|
|
case model.LoginPolicyIDPProviderAdded, org_es_model.LoginPolicyIDPProviderAdded:
|
|
err = provider.AppendEvent(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = m.fillData(provider)
|
|
case model.LoginPolicyIDPProviderRemoved, model.LoginPolicyIDPProviderCascadeRemoved,
|
|
org_es_model.LoginPolicyIDPProviderRemoved, org_es_model.LoginPolicyIDPProviderCascadeRemoved:
|
|
err = provider.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.DeleteIDPProvider(event.AggregateID, provider.IDPConfigID, event)
|
|
case model.IDPConfigChanged, org_es_model.IDPConfigChanged:
|
|
esConfig := new(iam_view_model.IDPConfigView)
|
|
providerType := iam_model.IDPProviderTypeSystem
|
|
if event.AggregateID != m.systemDefaults.IamID {
|
|
providerType = iam_model.IDPProviderTypeOrg
|
|
}
|
|
esConfig.AppendEvent(providerType, event)
|
|
providers, err := m.view.IDPProvidersByIdpConfigID(event.AggregateID, esConfig.IDPConfigID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
config := new(iam_model.IDPConfig)
|
|
if event.AggregateID == m.systemDefaults.IamID {
|
|
config, err = m.getDefaultIDPConfig(context.Background(), esConfig.IDPConfigID)
|
|
} else {
|
|
config, err = m.getOrgIDPConfig(context.Background(), event.AggregateID, esConfig.IDPConfigID)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
for _, provider := range providers {
|
|
m.fillConfigData(provider, config)
|
|
}
|
|
return m.view.PutIDPProviders(event, providers...)
|
|
case org_es_model.LoginPolicyRemoved:
|
|
return m.view.DeleteIDPProvidersByAggregateID(event.AggregateID, event)
|
|
default:
|
|
return m.view.ProcessedIDPProviderSequence(event)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.PutIDPProvider(provider, event)
|
|
}
|
|
|
|
func (m *IDPProvider) fillData(provider *iam_view_model.IDPProviderView) (err error) {
|
|
var config *iam_model.IDPConfig
|
|
if provider.IDPProviderType == int32(iam_model.IDPProviderTypeSystem) {
|
|
config, err = m.getDefaultIDPConfig(context.Background(), provider.IDPConfigID)
|
|
} else {
|
|
config, err = m.getOrgIDPConfig(context.Background(), provider.AggregateID, provider.IDPConfigID)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
m.fillConfigData(provider, config)
|
|
return nil
|
|
}
|
|
|
|
func (m *IDPProvider) fillConfigData(provider *iam_view_model.IDPProviderView, config *iam_model.IDPConfig) {
|
|
provider.Name = config.Name
|
|
provider.StylingType = int32(config.StylingType)
|
|
provider.IDPConfigType = int32(config.Type)
|
|
provider.IDPState = int32(config.State)
|
|
}
|
|
|
|
func (m *IDPProvider) OnError(event *es_models.Event, err error) error {
|
|
logging.LogWithFields("SPOOL-Msj8c", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp provider handler")
|
|
return spooler.HandleError(event, err, m.view.GetLatestIDPProviderFailedEvent, m.view.ProcessedIDPProviderFailedEvent, m.view.ProcessedIDPProviderSequence, m.errorCountUntilSkip)
|
|
}
|
|
|
|
func (m *IDPProvider) OnSuccess() error {
|
|
return spooler.HandleSuccess(m.view.UpdateIDPProviderSpoolerRunTimestamp)
|
|
}
|
|
|
|
func (i *IDPProvider) getOrgIDPConfig(ctx context.Context, aggregateID, idpConfigID string) (*iam_model.IDPConfig, error) {
|
|
existing, err := i.getOrgByID(ctx, aggregateID)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if _, i := existing.GetIDP(idpConfigID); i != nil {
|
|
return i, nil
|
|
}
|
|
return nil, caos_errs.ThrowNotFound(nil, "EVENT-2m9dS", "Errors.Org.IdpNotExisting")
|
|
}
|
|
|
|
func (i *IDPProvider) getOrgByID(ctx context.Context, orgID string) (*org_model.Org, error) {
|
|
query, err := view.OrgByIDQuery(orgID, 0)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
esOrg := &org_es_model.Org{
|
|
ObjectRoot: es_models.ObjectRoot{
|
|
AggregateID: orgID,
|
|
},
|
|
}
|
|
err = es_sdk.Filter(ctx, i.Eventstore().FilterEvents, esOrg.AppendEvents, query)
|
|
if err != nil && !caos_errs.IsNotFound(err) {
|
|
return nil, err
|
|
}
|
|
if esOrg.Sequence == 0 {
|
|
return nil, caos_errs.ThrowNotFound(nil, "EVENT-4n9fs", "Errors.Org.NotFound")
|
|
}
|
|
|
|
return org_es_model.OrgToModel(esOrg), nil
|
|
}
|
|
|
|
func (u *IDPProvider) getIAMByID(ctx context.Context) (*iam_model.IAM, error) {
|
|
query, err := iam_view.IAMByIDQuery(domain.IAMID, 0)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
iam := &model.IAM{
|
|
ObjectRoot: es_models.ObjectRoot{
|
|
AggregateID: domain.IAMID,
|
|
},
|
|
}
|
|
err = es_sdk.Filter(ctx, u.Eventstore().FilterEvents, iam.AppendEvents, query)
|
|
if err != nil && caos_errs.IsNotFound(err) && iam.Sequence == 0 {
|
|
return nil, err
|
|
}
|
|
return model.IAMToModel(iam), nil
|
|
}
|
|
|
|
func (u *IDPProvider) getDefaultIDPConfig(ctx context.Context, idpConfigID string) (*iam_model.IDPConfig, error) {
|
|
existing, err := u.getIAMByID(ctx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if _, existingIDP := existing.GetIDP(idpConfigID); existingIDP != nil {
|
|
return existingIDP, nil
|
|
}
|
|
return nil, caos_errs.ThrowNotFound(nil, "EVENT-4M0fs", "Errors.IAM.IdpNotExisting")
|
|
}
|