91905530c7
providers/scim: accept string and int for SCIM IDs (#12093) Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Jens L. <jens@goauthentik.io>
84 lines
2.6 KiB
Python
84 lines
2.6 KiB
Python
"""Custom SCIM schemas"""
|
|
|
|
from pydantic import Field
|
|
from pydanticscim.group import Group as BaseGroup
|
|
from pydanticscim.responses import PatchOperation as BasePatchOperation
|
|
from pydanticscim.responses import PatchRequest as BasePatchRequest
|
|
from pydanticscim.responses import SCIMError as BaseSCIMError
|
|
from pydanticscim.service_provider import Bulk as BaseBulk
|
|
from pydanticscim.service_provider import ChangePassword, Filter, Patch, Sort
|
|
from pydanticscim.service_provider import (
|
|
ServiceProviderConfiguration as BaseServiceProviderConfiguration,
|
|
)
|
|
from pydanticscim.user import User as BaseUser
|
|
|
|
SCIM_USER_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:User"
|
|
SCIM_GROUP_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:Group"
|
|
|
|
|
|
class User(BaseUser):
|
|
"""Modified User schema with added externalId field"""
|
|
|
|
id: str | int | None = None
|
|
schemas: list[str] = [SCIM_USER_SCHEMA]
|
|
externalId: str | None = None
|
|
meta: dict | None = None
|
|
|
|
|
|
class Group(BaseGroup):
|
|
"""Modified Group schema with added externalId field"""
|
|
|
|
id: str | int | None = None
|
|
schemas: list[str] = [SCIM_GROUP_SCHEMA]
|
|
externalId: str | None = None
|
|
meta: dict | None = None
|
|
|
|
|
|
class Bulk(BaseBulk):
|
|
|
|
maxOperations: int = Field()
|
|
|
|
|
|
class ServiceProviderConfiguration(BaseServiceProviderConfiguration):
|
|
"""ServiceProviderConfig with fallback"""
|
|
|
|
_is_fallback: bool | None = False
|
|
bulk: Bulk = Field(..., description="A complex type that specifies bulk configuration options.")
|
|
|
|
@property
|
|
def is_fallback(self) -> bool:
|
|
"""Check if this service provider config was retrieved from the API endpoint
|
|
or a fallback was used"""
|
|
return self._is_fallback
|
|
|
|
@staticmethod
|
|
def default() -> "ServiceProviderConfiguration":
|
|
"""Get default configuration, which doesn't support any optional features as fallback"""
|
|
return ServiceProviderConfiguration(
|
|
patch=Patch(supported=False),
|
|
bulk=Bulk(supported=False, maxOperations=0),
|
|
filter=Filter(supported=False),
|
|
changePassword=ChangePassword(supported=False),
|
|
sort=Sort(supported=False),
|
|
authenticationSchemes=[],
|
|
_is_fallback=True,
|
|
)
|
|
|
|
|
|
class PatchRequest(BasePatchRequest):
|
|
"""PatchRequest which correctly sets schemas"""
|
|
|
|
schemas: tuple[str] = ("urn:ietf:params:scim:api:messages:2.0:PatchOp",)
|
|
|
|
|
|
class PatchOperation(BasePatchOperation):
|
|
"""PatchOperation with optional path"""
|
|
|
|
path: str | None
|
|
|
|
|
|
class SCIMError(BaseSCIMError):
|
|
"""SCIM error with optional status code"""
|
|
|
|
status: int | None
|