mirror of
https://github.com/zitadel/zitadel.git
synced 2025-12-26 23:26:32 +00:00
1915d35605
# Which Problems Are Solved
- Adds support for the list users SCIM v2 endpoint
# How the Problems Are Solved
- Adds support for the list users SCIM v2 endpoints under `GET
/scim/v2/{orgID}/Users` and `POST /scim/v2/{orgID}/Users/.search`
# Additional Changes
- adds a new function `SearchUserMetadataForUsers` to the query layer to
query a metadata keyset for given user ids
- adds a new function `NewUserMetadataExistsQuery` to the query layer to
query a given metadata key value pair exists
- adds a new function `CountUsers` to the query layer to count users
without reading any rows
- handle `ErrorAlreadyExists` as scim errors `uniqueness`
- adds `NumberLessOrEqual` and `NumberGreaterOrEqual` query comparison
methods
- adds `BytesQuery` with `BytesEquals` and `BytesNotEquals` query
comparison methods
# Additional Context
Part of #8140
Supported fields for scim filters:
* `meta.created`
* `meta.lastModified`
* `id`
* `username`
* `name.familyName`
* `name.givenName`
* `emails` and `emails.value`
* `active` only eq and ne
* `externalId` only eq and ne
29 lines
860 B
Go
29 lines
860 B
Go
package scim
|
|
|
|
import (
|
|
"github.com/zitadel/zitadel/internal/api/authz"
|
|
"github.com/zitadel/zitadel/internal/api/http"
|
|
"github.com/zitadel/zitadel/internal/domain"
|
|
)
|
|
|
|
var AuthMapping = authz.MethodMapping{
|
|
"POST:/scim/v2/" + http.OrgIdInPathVariable + "/Users": {
|
|
Permission: domain.PermissionUserWrite,
|
|
},
|
|
"POST:/scim/v2/" + http.OrgIdInPathVariable + "/Users/.search": {
|
|
Permission: domain.PermissionUserRead,
|
|
},
|
|
"GET:/scim/v2/" + http.OrgIdInPathVariable + "/Users": {
|
|
Permission: domain.PermissionUserRead,
|
|
},
|
|
"GET:/scim/v2/" + http.OrgIdInPathVariable + "/Users/{id}": {
|
|
Permission: domain.PermissionUserRead,
|
|
},
|
|
"PUT:/scim/v2/" + http.OrgIdInPathVariable + "/Users/{id}": {
|
|
Permission: domain.PermissionUserWrite,
|
|
},
|
|
"DELETE:/scim/v2/" + http.OrgIdInPathVariable + "/Users/{id}": {
|
|
Permission: domain.PermissionUserDelete,
|
|
},
|
|
}
|