mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-24 08:41:33 +00:00
4f54cfb0a9
* feat: return 404 or 409 if org reg disallowed * fix: system limit permissions * feat: add iam limits api * feat: disallow public org registrations on default instance * add integration test * test: integration * fix test * docs: describe public org registrations * avoid updating docs deps * fix system limits integration test * silence integration tests * fix linting * ignore strange linter complaints * review * improve reset properties naming * redefine the api * use restrictions aggregate * test query * simplify and test projection * test commands * fix unit tests * move integration test * support restrictions on default instance * also test GetRestrictions * self review * lint * fix(projections): stop updating creation dates * abstract away resource owner * fix tests * update main * fix tests
168 lines
5.8 KiB
Go
168 lines
5.8 KiB
Go
package projection
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
old_handler "github.com/zitadel/zitadel/internal/eventstore/handler"
|
|
"github.com/zitadel/zitadel/internal/eventstore/handler/v2"
|
|
"github.com/zitadel/zitadel/internal/repository/instance"
|
|
"github.com/zitadel/zitadel/internal/repository/org"
|
|
"github.com/zitadel/zitadel/internal/zerrors"
|
|
)
|
|
|
|
const (
|
|
OrgMetadataProjectionTable = "projections.org_metadata2"
|
|
|
|
OrgMetadataColumnOrgID = "org_id"
|
|
OrgMetadataColumnCreationDate = "creation_date"
|
|
OrgMetadataColumnChangeDate = "change_date"
|
|
OrgMetadataColumnSequence = "sequence"
|
|
OrgMetadataColumnResourceOwner = "resource_owner"
|
|
OrgMetadataColumnInstanceID = "instance_id"
|
|
OrgMetadataColumnKey = "key"
|
|
OrgMetadataColumnValue = "value"
|
|
OrgMetadataColumnOwnerRemoved = "owner_removed"
|
|
)
|
|
|
|
type orgMetadataProjection struct{}
|
|
|
|
func (*orgMetadataProjection) Name() string {
|
|
return OrgMetadataProjectionTable
|
|
}
|
|
|
|
func (*orgMetadataProjection) Init() *old_handler.Check {
|
|
return handler.NewTableCheck(
|
|
handler.NewTable([]*handler.InitColumn{
|
|
handler.NewColumn(OrgMetadataColumnOrgID, handler.ColumnTypeText),
|
|
handler.NewColumn(OrgMetadataColumnCreationDate, handler.ColumnTypeTimestamp),
|
|
handler.NewColumn(OrgMetadataColumnChangeDate, handler.ColumnTypeTimestamp),
|
|
handler.NewColumn(OrgMetadataColumnSequence, handler.ColumnTypeInt64),
|
|
handler.NewColumn(OrgMetadataColumnResourceOwner, handler.ColumnTypeText),
|
|
handler.NewColumn(OrgMetadataColumnInstanceID, handler.ColumnTypeText),
|
|
handler.NewColumn(OrgMetadataColumnKey, handler.ColumnTypeText),
|
|
handler.NewColumn(OrgMetadataColumnValue, handler.ColumnTypeBytes, handler.Nullable()),
|
|
handler.NewColumn(OrgMetadataColumnOwnerRemoved, handler.ColumnTypeBool, handler.Default(false)),
|
|
},
|
|
handler.NewPrimaryKey(OrgMetadataColumnInstanceID, OrgMetadataColumnOrgID, OrgMetadataColumnKey),
|
|
handler.WithIndex(handler.NewIndex("owner_removed", []string{OrgMetadataColumnOwnerRemoved})),
|
|
),
|
|
)
|
|
}
|
|
|
|
func newOrgMetadataProjection(ctx context.Context, config handler.Config) *handler.Handler {
|
|
return handler.NewHandler(ctx, &config, new(orgMetadataProjection))
|
|
}
|
|
|
|
func (p *orgMetadataProjection) Reducers() []handler.AggregateReducer {
|
|
return []handler.AggregateReducer{
|
|
{
|
|
Aggregate: org.AggregateType,
|
|
EventReducers: []handler.EventReducer{
|
|
{
|
|
Event: org.MetadataSetType,
|
|
Reduce: p.reduceMetadataSet,
|
|
},
|
|
{
|
|
Event: org.MetadataRemovedType,
|
|
Reduce: p.reduceMetadataRemoved,
|
|
},
|
|
{
|
|
Event: org.MetadataRemovedAllType,
|
|
Reduce: p.reduceMetadataRemovedAll,
|
|
},
|
|
{
|
|
Event: org.OrgRemovedEventType,
|
|
Reduce: p.reduceOwnerRemoved,
|
|
},
|
|
},
|
|
},
|
|
{
|
|
Aggregate: instance.AggregateType,
|
|
EventReducers: []handler.EventReducer{
|
|
{
|
|
Event: instance.InstanceRemovedEventType,
|
|
Reduce: reduceInstanceRemovedHelper(OrgMetadataColumnInstanceID),
|
|
},
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func (p *orgMetadataProjection) reduceMetadataSet(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*org.MetadataSetEvent)
|
|
if !ok {
|
|
return nil, zerrors.ThrowInvalidArgumentf(nil, "HANDL-Ghn53", "reduce.wrong.event.type %s", org.MetadataSetType)
|
|
}
|
|
return handler.NewUpsertStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(OrgMetadataColumnInstanceID, nil),
|
|
handler.NewCol(OrgMetadataColumnOrgID, nil),
|
|
handler.NewCol(OrgMetadataColumnKey, e.Key),
|
|
},
|
|
[]handler.Column{
|
|
handler.NewCol(OrgMetadataColumnInstanceID, e.Aggregate().InstanceID),
|
|
handler.NewCol(OrgMetadataColumnOrgID, e.Aggregate().ID),
|
|
handler.NewCol(OrgMetadataColumnKey, e.Key),
|
|
handler.NewCol(OrgMetadataColumnResourceOwner, e.Aggregate().ResourceOwner),
|
|
handler.NewCol(OrgMetadataColumnCreationDate, handler.OnlySetValueOnInsert(OrgMetadataProjectionTable, e.CreationDate())),
|
|
handler.NewCol(OrgMetadataColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(OrgMetadataColumnSequence, e.Sequence()),
|
|
handler.NewCol(OrgMetadataColumnValue, e.Value),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *orgMetadataProjection) reduceMetadataRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*org.MetadataRemovedEvent)
|
|
if !ok {
|
|
return nil, zerrors.ThrowInvalidArgumentf(nil, "HANDL-Bm542", "reduce.wrong.event.type %s", org.MetadataRemovedType)
|
|
}
|
|
return handler.NewDeleteStatement(
|
|
e,
|
|
[]handler.Condition{
|
|
handler.NewCond(OrgMetadataColumnOrgID, e.Aggregate().ID),
|
|
handler.NewCond(OrgMetadataColumnKey, e.Key),
|
|
handler.NewCond(OrgMetadataColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *orgMetadataProjection) reduceMetadataRemovedAll(event eventstore.Event) (*handler.Statement, error) {
|
|
switch event.(type) {
|
|
case *org.MetadataRemovedAllEvent,
|
|
*org.OrgRemovedEvent:
|
|
//ok
|
|
default:
|
|
return nil, zerrors.ThrowInvalidArgumentf(nil, "HANDL-Bmnf3", "reduce.wrong.event.type %v", []eventstore.EventType{org.MetadataRemovedAllType, org.OrgRemovedEventType})
|
|
}
|
|
return handler.NewDeleteStatement(
|
|
event,
|
|
[]handler.Condition{
|
|
handler.NewCond(OrgMetadataColumnOrgID, event.Aggregate().ID),
|
|
handler.NewCond(OrgMetadataColumnInstanceID, event.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *orgMetadataProjection) reduceOwnerRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*org.OrgRemovedEvent)
|
|
if !ok {
|
|
return nil, zerrors.ThrowInvalidArgumentf(nil, "PROJE-Hkd1f", "reduce.wrong.event.type %s", org.OrgRemovedEventType)
|
|
}
|
|
|
|
return handler.NewUpdateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(OrgMetadataColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(OrgMetadataColumnSequence, e.Sequence()),
|
|
handler.NewCol(OrgMetadataColumnOwnerRemoved, true),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(OrgMetadataColumnInstanceID, e.Aggregate().InstanceID),
|
|
handler.NewCond(OrgMetadataColumnResourceOwner, e.Aggregate().ID),
|
|
},
|
|
), nil
|
|
}
|