mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-15 04:18:01 +00:00
83b0ac1fdb
* fix: update client secret, skip passwordsteps only if login not if linking * fix: global policy for register * fix: scope handling * fix: back after error * fix: change org id scope to primary domain * fix: check if primarydomain empty * fix: local sh * fix: disable buttons on org login policy
109 lines
3.5 KiB
Go
109 lines
3.5 KiB
Go
package model
|
|
|
|
import (
|
|
"encoding/json"
|
|
"github.com/caos/logging"
|
|
"github.com/caos/zitadel/internal/crypto"
|
|
es_models "github.com/caos/zitadel/internal/eventstore/models"
|
|
"github.com/caos/zitadel/internal/iam/model"
|
|
"github.com/lib/pq"
|
|
"reflect"
|
|
)
|
|
|
|
type OIDCIDPConfig struct {
|
|
es_models.ObjectRoot
|
|
IDPConfigID string `json:"idpConfigId"`
|
|
ClientID string `json:"clientId"`
|
|
ClientSecret *crypto.CryptoValue `json:"clientSecret,omitempty"`
|
|
Issuer string `json:"issuer,omitempty"`
|
|
Scopes pq.StringArray `json:"scopes,omitempty"`
|
|
IDPDisplayNameMapping int32 `json:"idpDisplayNameMapping,omitempty"`
|
|
UsernameMapping int32 `json:"usernameMapping,omitempty"`
|
|
}
|
|
|
|
func (c *OIDCIDPConfig) Changes(changed *OIDCIDPConfig) map[string]interface{} {
|
|
changes := make(map[string]interface{}, 1)
|
|
changes["idpConfigId"] = c.IDPConfigID
|
|
if c.ClientID != changed.ClientID {
|
|
changes["clientId"] = changed.ClientID
|
|
}
|
|
if changed.ClientSecret != nil && c.ClientSecret != changed.ClientSecret {
|
|
changes["clientSecret"] = changed.ClientSecret
|
|
}
|
|
if c.Issuer != changed.Issuer {
|
|
changes["issuer"] = changed.Issuer
|
|
}
|
|
if !reflect.DeepEqual(c.Scopes, changed.Scopes) {
|
|
changes["scopes"] = changed.Scopes
|
|
}
|
|
if c.IDPDisplayNameMapping != changed.IDPDisplayNameMapping {
|
|
changes["idpDisplayNameMapping"] = changed.IDPDisplayNameMapping
|
|
}
|
|
if c.UsernameMapping != changed.UsernameMapping {
|
|
changes["usernameMapping"] = changed.UsernameMapping
|
|
}
|
|
return changes
|
|
}
|
|
|
|
func OIDCIDPConfigFromModel(config *model.OIDCIDPConfig) *OIDCIDPConfig {
|
|
return &OIDCIDPConfig{
|
|
ObjectRoot: config.ObjectRoot,
|
|
IDPConfigID: config.IDPConfigID,
|
|
ClientID: config.ClientID,
|
|
ClientSecret: config.ClientSecret,
|
|
Issuer: config.Issuer,
|
|
Scopes: config.Scopes,
|
|
IDPDisplayNameMapping: int32(config.IDPDisplayNameMapping),
|
|
UsernameMapping: int32(config.UsernameMapping),
|
|
}
|
|
}
|
|
|
|
func OIDCIDPConfigToModel(config *OIDCIDPConfig) *model.OIDCIDPConfig {
|
|
return &model.OIDCIDPConfig{
|
|
ObjectRoot: config.ObjectRoot,
|
|
IDPConfigID: config.IDPConfigID,
|
|
ClientID: config.ClientID,
|
|
ClientSecret: config.ClientSecret,
|
|
Issuer: config.Issuer,
|
|
Scopes: config.Scopes,
|
|
IDPDisplayNameMapping: model.OIDCMappingField(config.IDPDisplayNameMapping),
|
|
UsernameMapping: model.OIDCMappingField(config.UsernameMapping),
|
|
}
|
|
}
|
|
|
|
func (iam *IAM) appendAddOIDCIDPConfigEvent(event *es_models.Event) error {
|
|
config := new(OIDCIDPConfig)
|
|
err := config.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
config.ObjectRoot.CreationDate = event.CreationDate
|
|
if i, idpConfig := GetIDPConfig(iam.IDPs, config.IDPConfigID); idpConfig != nil {
|
|
iam.IDPs[i].Type = int32(model.IDPConfigTypeOIDC)
|
|
iam.IDPs[i].OIDCIDPConfig = config
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (iam *IAM) appendChangeOIDCIDPConfigEvent(event *es_models.Event) error {
|
|
config := new(OIDCIDPConfig)
|
|
err := config.SetData(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if i, idpConfig := GetIDPConfig(iam.IDPs, config.IDPConfigID); idpConfig != nil {
|
|
iam.IDPs[i].OIDCIDPConfig.SetData(event)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (o *OIDCIDPConfig) SetData(event *es_models.Event) error {
|
|
o.ObjectRoot.AppendEvent(event)
|
|
if err := json.Unmarshal(event.Data, o); err != nil {
|
|
logging.Log("EVEN-Msh8s").WithError(err).Error("could not unmarshal event data")
|
|
return err
|
|
}
|
|
return nil
|
|
}
|