mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-13 03:24:26 +00:00
9f417f3957
* feat(console): app infos, api apps, fix redirects on create, fix role update, redesign idps, policy, prettier history (#1310) * idp fixes * idp cleanup and rehaul, complexity policy preview * policy fixes, orthodox redirect * link component, add links to policies * redirect pipe, state labels * Cnsl map changes (#1315) * map changes to different format * fix changes layout, cursor * set asc values * fix user appearance in changes, index * changes * app create with api * api app create * auth method for api config * authmethods, app card for api, authmethod in dev create * move machine keys to own module * jwt method for oidc * fix app edit * save toast * fix changes, change det in app detail * regenerate secret * chore(deps-dev): bump @angular-devkit/build-angular in /console (#1324) Bumps [@angular-devkit/build-angular](https://github.com/angular/angular-cli) from 0.1102.0 to 0.1102.1. - [Release notes](https://github.com/angular/angular-cli/releases) - [Commits](https://github.com/angular/angular-cli/commits) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix policy backlink Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit40a7e958d7
) * fix: i18n refs, unnecessary logs (#1343) (cherry picked from commit2e04c977eb
) * fix: tos link (#1345) (cherry picked from commit5333ef10c1
) * fix: reactivate/deactivate idp, remove idp provider (#1348) * fix: reactivate/deactivate idp, remove idp provider * fix build * fix(console): add jwt to selection, idp deactivate reactivate (#1347) * fix: log error on idp change * add jwt to method selection Co-authored-by: Max Peintner <max@caos.ch> (cherry picked from commitc8b9888427
) * fix: reactivate/deactivate idp (#1351) (cherry picked from commit54f395e2e0
) Co-authored-by: Max Peintner <max@caos.ch>
132 lines
3.7 KiB
Go
132 lines
3.7 KiB
Go
package handler
|
|
|
|
import (
|
|
"github.com/caos/logging"
|
|
"github.com/caos/zitadel/internal/eventstore/v1"
|
|
|
|
es_models "github.com/caos/zitadel/internal/eventstore/v1/models"
|
|
"github.com/caos/zitadel/internal/eventstore/v1/query"
|
|
"github.com/caos/zitadel/internal/eventstore/v1/spooler"
|
|
iam_model "github.com/caos/zitadel/internal/iam/model"
|
|
iam_es_model "github.com/caos/zitadel/internal/iam/repository/eventsourcing/model"
|
|
iam_view_model "github.com/caos/zitadel/internal/iam/repository/view/model"
|
|
"github.com/caos/zitadel/internal/org/repository/eventsourcing/model"
|
|
)
|
|
|
|
const (
|
|
idpConfigTable = "management.idp_configs"
|
|
)
|
|
|
|
type IDPConfig struct {
|
|
handler
|
|
subscription *v1.Subscription
|
|
}
|
|
|
|
func newIDPConfig(handler handler) *IDPConfig {
|
|
h := &IDPConfig{
|
|
handler: handler,
|
|
}
|
|
|
|
h.subscribe()
|
|
|
|
return h
|
|
}
|
|
|
|
func (m *IDPConfig) subscribe() {
|
|
m.subscription = m.es.Subscribe(m.AggregateTypes()...)
|
|
go func() {
|
|
for event := range m.subscription.Events {
|
|
query.ReduceEvent(m, event)
|
|
}
|
|
}()
|
|
}
|
|
|
|
func (m *IDPConfig) ViewModel() string {
|
|
return idpConfigTable
|
|
}
|
|
|
|
func (_ *IDPConfig) AggregateTypes() []es_models.AggregateType {
|
|
return []es_models.AggregateType{model.OrgAggregate, iam_es_model.IAMAggregate}
|
|
}
|
|
|
|
func (m *IDPConfig) CurrentSequence() (uint64, error) {
|
|
sequence, err := m.view.GetLatestIDPConfigSequence()
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
return sequence.CurrentSequence, nil
|
|
}
|
|
|
|
func (m *IDPConfig) EventQuery() (*es_models.SearchQuery, error) {
|
|
sequence, err := m.view.GetLatestIDPConfigSequence()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return es_models.NewSearchQuery().
|
|
AggregateTypeFilter(m.AggregateTypes()...).
|
|
LatestSequenceFilter(sequence.CurrentSequence), nil
|
|
}
|
|
|
|
func (m *IDPConfig) Reduce(event *es_models.Event) (err error) {
|
|
switch event.AggregateType {
|
|
case model.OrgAggregate:
|
|
err = m.processIdpConfig(iam_model.IDPProviderTypeOrg, event)
|
|
case iam_es_model.IAMAggregate:
|
|
err = m.processIdpConfig(iam_model.IDPProviderTypeSystem, event)
|
|
}
|
|
return err
|
|
}
|
|
|
|
func (m *IDPConfig) processIdpConfig(providerType iam_model.IDPProviderType, event *es_models.Event) (err error) {
|
|
idp := new(iam_view_model.IDPConfigView)
|
|
switch event.Type {
|
|
case model.IDPConfigAdded,
|
|
iam_es_model.IDPConfigAdded:
|
|
err = idp.AppendEvent(providerType, event)
|
|
case model.IDPConfigChanged, iam_es_model.IDPConfigChanged,
|
|
model.OIDCIDPConfigAdded, iam_es_model.OIDCIDPConfigAdded,
|
|
model.OIDCIDPConfigChanged, iam_es_model.OIDCIDPConfigChanged:
|
|
err = idp.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
idp, err = m.view.IDPConfigByID(idp.IDPConfigID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = idp.AppendEvent(providerType, event)
|
|
case model.IDPConfigDeactivated, iam_es_model.IDPConfigDeactivated,
|
|
model.IDPConfigReactivated, iam_es_model.IDPConfigReactivated:
|
|
err = idp.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
idp, err = m.view.IDPConfigByID(idp.IDPConfigID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = idp.AppendEvent(providerType, event)
|
|
case model.IDPConfigRemoved, iam_es_model.IDPConfigRemoved:
|
|
err = idp.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.DeleteIDPConfig(idp.IDPConfigID, event)
|
|
default:
|
|
return m.view.ProcessedIDPConfigSequence(event)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return m.view.PutIDPConfig(idp, event)
|
|
}
|
|
|
|
func (i *IDPConfig) OnError(event *es_models.Event, err error) error {
|
|
logging.LogWithFields("SPOOL-Nxu8s", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp config handler")
|
|
return spooler.HandleError(event, err, i.view.GetLatestIDPConfigFailedEvent, i.view.ProcessedIDPConfigFailedEvent, i.view.ProcessedIDPConfigSequence, i.errorCountUntilSkip)
|
|
}
|
|
|
|
func (i *IDPConfig) OnSuccess() error {
|
|
return spooler.HandleSuccess(i.view.UpdateIDPConfigSpoolerRunTimestamp)
|
|
}
|