f89cc98014
* set auth_via Signed-off-by: Jens Langhammer <jens@goauthentik.io> * allow requests with json content type Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix group schema Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start improving error handling Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add scim group patch for members Signed-off-by: Jens Langhammer <jens@goauthentik.io> * unrelated #1: fix debug check on startup Signed-off-by: Jens Langhammer <jens@goauthentik.io> * unrelated fix #2: fix path for user page Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add group view tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add more user tests too Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>
102 lines
2.9 KiB
Python
102 lines
2.9 KiB
Python
"""Custom SCIM schemas"""
|
|
|
|
from enum import Enum
|
|
|
|
from pydantic import Field
|
|
from pydanticscim.group import Group as BaseGroup
|
|
from pydanticscim.responses import PatchOperation as BasePatchOperation
|
|
from pydanticscim.responses import PatchRequest as BasePatchRequest
|
|
from pydanticscim.responses import SCIMError as BaseSCIMError
|
|
from pydanticscim.service_provider import Bulk as BaseBulk
|
|
from pydanticscim.service_provider import ChangePassword, Filter, Patch, Sort
|
|
from pydanticscim.service_provider import (
|
|
ServiceProviderConfiguration as BaseServiceProviderConfiguration,
|
|
)
|
|
from pydanticscim.user import User as BaseUser
|
|
|
|
SCIM_USER_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:User"
|
|
SCIM_GROUP_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:Group"
|
|
|
|
|
|
class User(BaseUser):
|
|
"""Modified User schema with added externalId field"""
|
|
|
|
id: str | int | None = None
|
|
schemas: list[str] = [SCIM_USER_SCHEMA]
|
|
externalId: str | None = None
|
|
meta: dict | None = None
|
|
|
|
|
|
class Group(BaseGroup):
|
|
"""Modified Group schema with added externalId field"""
|
|
|
|
id: str | int | None = None
|
|
schemas: list[str] = [SCIM_GROUP_SCHEMA]
|
|
externalId: str | None = None
|
|
meta: dict | None = None
|
|
|
|
|
|
class Bulk(BaseBulk):
|
|
|
|
maxOperations: int = Field()
|
|
|
|
|
|
class ServiceProviderConfiguration(BaseServiceProviderConfiguration):
|
|
"""ServiceProviderConfig with fallback"""
|
|
|
|
_is_fallback: bool | None = False
|
|
bulk: Bulk = Field(..., description="A complex type that specifies bulk configuration options.")
|
|
|
|
@property
|
|
def is_fallback(self) -> bool:
|
|
"""Check if this service provider config was retrieved from the API endpoint
|
|
or a fallback was used"""
|
|
return self._is_fallback
|
|
|
|
@staticmethod
|
|
def default() -> "ServiceProviderConfiguration":
|
|
"""Get default configuration, which doesn't support any optional features as fallback"""
|
|
return ServiceProviderConfiguration(
|
|
patch=Patch(supported=False),
|
|
bulk=Bulk(supported=False, maxOperations=0),
|
|
filter=Filter(supported=False),
|
|
changePassword=ChangePassword(supported=False),
|
|
sort=Sort(supported=False),
|
|
authenticationSchemes=[],
|
|
_is_fallback=True,
|
|
)
|
|
|
|
|
|
class PatchOp(str, Enum):
|
|
|
|
replace = "replace"
|
|
remove = "remove"
|
|
add = "add"
|
|
|
|
@classmethod
|
|
def _missing_(cls, value):
|
|
value = value.lower()
|
|
for member in cls:
|
|
if member.lower() == value:
|
|
return member
|
|
return None
|
|
|
|
|
|
class PatchRequest(BasePatchRequest):
|
|
"""PatchRequest which correctly sets schemas"""
|
|
|
|
schemas: tuple[str] = ("urn:ietf:params:scim:api:messages:2.0:PatchOp",)
|
|
|
|
|
|
class PatchOperation(BasePatchOperation):
|
|
"""PatchOperation with optional path"""
|
|
|
|
op: PatchOp
|
|
path: str | None
|
|
|
|
|
|
class SCIMError(BaseSCIMError):
|
|
"""SCIM error with optional status code"""
|
|
|
|
status: int | None
|