mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-16 04:48:04 +00:00
b5564572bc
This implementation increases parallel write capabilities of the eventstore. Please have a look at the technical advisories: [05](https://zitadel.com/docs/support/advisory/a10005) and [06](https://zitadel.com/docs/support/advisory/a10006). The implementation of eventstore.push is rewritten and stored events are migrated to a new table `eventstore.events2`. If you are using cockroach: make sure that the database user of ZITADEL has `VIEWACTIVITY` grant. This is used to query events.
124 lines
5.5 KiB
Go
124 lines
5.5 KiB
Go
package model
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/zitadel/logging"
|
|
|
|
"github.com/zitadel/zitadel/internal/crypto"
|
|
"github.com/zitadel/zitadel/internal/database"
|
|
caos_errs "github.com/zitadel/zitadel/internal/errors"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
"github.com/zitadel/zitadel/internal/iam/model"
|
|
"github.com/zitadel/zitadel/internal/repository/instance"
|
|
"github.com/zitadel/zitadel/internal/repository/org"
|
|
)
|
|
|
|
const (
|
|
IDPConfigKeyIdpConfigID = "idp_config_id"
|
|
IDPConfigKeyAggregateID = "aggregate_id"
|
|
IDPConfigKeyName = "name"
|
|
IDPConfigKeyProviderType = "idp_provider_type"
|
|
IDPConfigKeyInstanceID = "instance_id"
|
|
IDPConfigKeyOwnerRemoved = "owner_removed"
|
|
)
|
|
|
|
type IDPConfigView struct {
|
|
IDPConfigID string `json:"idpConfigId" gorm:"column:idp_config_id;primary_key"`
|
|
AggregateID string `json:"-" gorm:"column:aggregate_id"`
|
|
Name string `json:"name" gorm:"column:name"`
|
|
StylingType int32 `json:"stylingType" gorm:"column:styling_type"`
|
|
CreationDate time.Time `json:"-" gorm:"column:creation_date"`
|
|
ChangeDate time.Time `json:"-" gorm:"column:change_date"`
|
|
IDPState int32 `json:"-" gorm:"column:idp_state"`
|
|
IDPProviderType int32 `json:"-" gorm:"column:idp_provider_type"`
|
|
AutoRegister bool `json:"autoRegister" gorm:"column:auto_register"`
|
|
|
|
IsOIDC bool `json:"-" gorm:"column:is_oidc"`
|
|
OIDCClientID string `json:"clientId" gorm:"column:oidc_client_id"`
|
|
OIDCClientSecret *crypto.CryptoValue `json:"clientSecret" gorm:"column:oidc_client_secret"`
|
|
OIDCIssuer string `json:"issuer" gorm:"column:oidc_issuer"`
|
|
OIDCScopes database.TextArray[string] `json:"scopes" gorm:"column:oidc_scopes"`
|
|
OIDCIDPDisplayNameMapping int32 `json:"idpDisplayNameMapping" gorm:"column:oidc_idp_display_name_mapping"`
|
|
OIDCUsernameMapping int32 `json:"usernameMapping" gorm:"column:oidc_idp_username_mapping"`
|
|
OAuthAuthorizationEndpoint string `json:"authorizationEndpoint" gorm:"column:oauth_authorization_endpoint"`
|
|
OAuthTokenEndpoint string `json:"tokenEndpoint" gorm:"column:oauth_token_endpoint"`
|
|
JWTEndpoint string `json:"jwtEndpoint" gorm:"jwt_endpoint"`
|
|
JWTKeysEndpoint string `json:"keysEndpoint" gorm:"jwt_keys_endpoint"`
|
|
JWTHeaderName string `json:"headerName" gorm:"jwt_header_name"`
|
|
|
|
Sequence uint64 `json:"-" gorm:"column:sequence"`
|
|
InstanceID string `json:"instanceID" gorm:"column:instance_id;primary_key"`
|
|
}
|
|
|
|
func IDPConfigViewToModel(idp *IDPConfigView) *model.IDPConfigView {
|
|
view := &model.IDPConfigView{
|
|
IDPConfigID: idp.IDPConfigID,
|
|
AggregateID: idp.AggregateID,
|
|
State: model.IDPConfigState(idp.IDPState),
|
|
Name: idp.Name,
|
|
StylingType: model.IDPStylingType(idp.StylingType),
|
|
AutoRegister: idp.AutoRegister,
|
|
Sequence: idp.Sequence,
|
|
CreationDate: idp.CreationDate,
|
|
ChangeDate: idp.ChangeDate,
|
|
IDPProviderType: model.IDPProviderType(idp.IDPProviderType),
|
|
IsOIDC: idp.IsOIDC,
|
|
OIDCClientID: idp.OIDCClientID,
|
|
OIDCClientSecret: idp.OIDCClientSecret,
|
|
OIDCScopes: idp.OIDCScopes,
|
|
OIDCIDPDisplayNameMapping: model.OIDCMappingField(idp.OIDCIDPDisplayNameMapping),
|
|
OIDCUsernameMapping: model.OIDCMappingField(idp.OIDCUsernameMapping),
|
|
OAuthAuthorizationEndpoint: idp.OAuthAuthorizationEndpoint,
|
|
OAuthTokenEndpoint: idp.OAuthTokenEndpoint,
|
|
}
|
|
if idp.IsOIDC {
|
|
view.OIDCIssuer = idp.OIDCIssuer
|
|
return view
|
|
}
|
|
view.JWTEndpoint = idp.JWTEndpoint
|
|
view.JWTIssuer = idp.OIDCIssuer
|
|
view.JWTKeysEndpoint = idp.JWTKeysEndpoint
|
|
view.JWTHeaderName = idp.JWTHeaderName
|
|
return view
|
|
}
|
|
|
|
func (i *IDPConfigView) AppendEvent(providerType model.IDPProviderType, event eventstore.Event) (err error) {
|
|
i.Sequence = event.Sequence()
|
|
i.ChangeDate = event.CreatedAt()
|
|
switch event.Type() {
|
|
case instance.IDPConfigAddedEventType, org.IDPConfigAddedEventType:
|
|
i.setRootData(event)
|
|
i.CreationDate = event.CreatedAt()
|
|
i.IDPProviderType = int32(providerType)
|
|
err = i.SetData(event)
|
|
case instance.IDPOIDCConfigAddedEventType, org.IDPOIDCConfigAddedEventType:
|
|
i.IsOIDC = true
|
|
err = i.SetData(event)
|
|
case instance.IDPOIDCConfigChangedEventType, org.IDPOIDCConfigChangedEventType,
|
|
instance.IDPConfigChangedEventType, org.IDPConfigChangedEventType,
|
|
org.IDPJWTConfigAddedEventType, instance.IDPJWTConfigAddedEventType,
|
|
org.IDPJWTConfigChangedEventType, instance.IDPJWTConfigChangedEventType:
|
|
err = i.SetData(event)
|
|
case instance.IDPConfigDeactivatedEventType, org.IDPConfigDeactivatedEventType:
|
|
i.IDPState = int32(model.IDPConfigStateInactive)
|
|
case instance.IDPConfigReactivatedEventType, org.IDPConfigReactivatedEventType:
|
|
i.IDPState = int32(model.IDPConfigStateActive)
|
|
}
|
|
return err
|
|
}
|
|
|
|
func (r *IDPConfigView) setRootData(event eventstore.Event) {
|
|
r.AggregateID = event.Aggregate().ID
|
|
r.InstanceID = event.Aggregate().InstanceID
|
|
}
|
|
|
|
func (r *IDPConfigView) SetData(event eventstore.Event) error {
|
|
err := event.Unmarshal(r)
|
|
if err != nil {
|
|
logging.New().WithError(err).Error("could not unmarshal event data")
|
|
return caos_errs.ThrowInternal(err, "MODEL-lub6s", "Could not unmarshal data")
|
|
}
|
|
return nil
|
|
}
|