[BREAK] Moved role-sync and advanced SAML settings to EE (#23107)
* migrated sync role to enterprise * migrated advanced SAML features to ee * Reorganized SAML settings Co-authored-by: Pierre Lehnen <pierre.lehnen@rocket.chat>pull/23263/head
Leonardo Ostjen Couto
4 years ago
committed by
GitHub
parent
68e6270111
commit
15b5b1ac98
@ -0,0 +1,2 @@ |
||||
import './ldap'; |
||||
import './saml'; |
||||
@ -0,0 +1,44 @@ |
||||
import { onLicense } from '../../app/license/server'; |
||||
import type { ISAMLUser } from '../../../app/meteor-accounts-saml/server/definition/ISAMLUser'; |
||||
import { SAMLUtils } from '../../../app/meteor-accounts-saml/server/lib/Utils'; |
||||
import { settings } from '../../../app/settings/server'; |
||||
import { addSettings } from '../settings/saml'; |
||||
|
||||
onLicense('saml-enterprise', () => { |
||||
SAMLUtils.events.on('mapUser', ({ profile, userObject }: { profile: Record<string, any>; userObject: ISAMLUser}) => { |
||||
const roleAttributeName = settings.get('SAML_Custom_Default_role_attribute_name') as string; |
||||
const roleAttributeSync = settings.get('SAML_Custom_Default_role_attribute_sync'); |
||||
|
||||
if (!roleAttributeSync) { |
||||
return; |
||||
} |
||||
|
||||
if (roleAttributeName && profile[roleAttributeName]) { |
||||
let value = profile[roleAttributeName] || ''; |
||||
if (typeof value === 'string') { |
||||
value = value.split(','); |
||||
} |
||||
|
||||
userObject.roles = SAMLUtils.ensureArray<string>(value); |
||||
} |
||||
}); |
||||
|
||||
SAMLUtils.events.on('loadConfigs', (service: string, configs: Record<string, any>): void => { |
||||
// Include ee settings on the configs object so that they can be copied to the login service too
|
||||
Object.assign(configs, { |
||||
customAuthnContext: settings.get(`${ service }_custom_authn_context`), |
||||
authnContextComparison: settings.get(`${ service }_authn_context_comparison`), |
||||
identifierFormat: settings.get(`${ service }_identifier_format`), |
||||
nameIDPolicyTemplate: settings.get(`${ service }_NameId_template`), |
||||
authnContextTemplate: settings.get(`${ service }_AuthnContext_template`), |
||||
authRequestTemplate: settings.get(`${ service }_AuthRequest_template`), |
||||
logoutResponseTemplate: settings.get(`${ service }_LogoutResponse_template`), |
||||
logoutRequestTemplate: settings.get(`${ service }_LogoutRequest_template`), |
||||
metadataCertificateTemplate: settings.get(`${ service }_MetadataCertificate_template`), |
||||
metadataTemplate: settings.get(`${ service }_Metadata_template`), |
||||
}); |
||||
}); |
||||
}); |
||||
|
||||
// For setting creation we add the listener first because the event is emmited during startup
|
||||
SAMLUtils.events.on('addSettings', (name: string): void => onLicense('saml-enterprise', () => addSettings(name))); |
||||
@ -0,0 +1 @@ |
||||
import './saml'; |
||||
@ -0,0 +1,113 @@ |
||||
import { settings } from '../../../app/settings/server'; |
||||
import { |
||||
defaultAuthnContextTemplate, |
||||
defaultAuthRequestTemplate, |
||||
defaultLogoutResponseTemplate, |
||||
defaultLogoutRequestTemplate, |
||||
defaultNameIDTemplate, |
||||
defaultIdentifierFormat, |
||||
defaultAuthnContext, |
||||
defaultMetadataTemplate, |
||||
defaultMetadataCertificateTemplate, |
||||
} from '../../../app/meteor-accounts-saml/server/lib/constants'; |
||||
|
||||
export const addSettings = function(name: string): void { |
||||
settings.addGroup('SAML', function() { |
||||
this.set({ |
||||
tab: 'SAML_Enterprise', |
||||
enterprise: true, |
||||
modules: ['saml-enterprise'], |
||||
}, function() { |
||||
this.section('SAML_Section_4_Roles', function() { |
||||
// Roles Settings
|
||||
this.add(`SAML_Custom_${ name }_role_attribute_sync`, false, { |
||||
type: 'boolean', |
||||
i18nLabel: 'SAML_Role_Attribute_Sync', |
||||
i18nDescription: 'SAML_Role_Attribute_Sync_Description', |
||||
invalidValue: false, |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_role_attribute_name`, '', { |
||||
type: 'string', |
||||
i18nLabel: 'SAML_Role_Attribute_Name', |
||||
i18nDescription: 'SAML_Role_Attribute_Name_Description', |
||||
invalidValue: '', |
||||
}); |
||||
}); |
||||
|
||||
this.section('SAML_Section_6_Advanced', function() { |
||||
this.add(`SAML_Custom_${ name }_identifier_format`, defaultIdentifierFormat, { |
||||
type: 'string', |
||||
invalidValue: defaultIdentifierFormat, |
||||
i18nLabel: 'SAML_Identifier_Format', |
||||
i18nDescription: 'SAML_Identifier_Format_Description', |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_NameId_template`, defaultNameIDTemplate, { |
||||
type: 'string', |
||||
invalidValue: defaultNameIDTemplate, |
||||
i18nLabel: 'SAML_NameIdPolicy_Template', |
||||
i18nDescription: 'SAML_NameIdPolicy_Template_Description', |
||||
multiline: true, |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_custom_authn_context`, defaultAuthnContext, { |
||||
type: 'string', |
||||
invalidValue: defaultAuthnContext, |
||||
i18nLabel: 'SAML_Custom_Authn_Context', |
||||
i18nDescription: 'SAML_Custom_Authn_Context_description', |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_authn_context_comparison`, 'exact', { |
||||
type: 'select', |
||||
values: [ |
||||
{ key: 'better', i18nLabel: 'Better' }, |
||||
{ key: 'exact', i18nLabel: 'Exact' }, |
||||
{ key: 'maximum', i18nLabel: 'Maximum' }, |
||||
{ key: 'minimum', i18nLabel: 'Minimum' }, |
||||
], |
||||
invalidValue: 'exact', |
||||
i18nLabel: 'SAML_Custom_Authn_Context_Comparison', |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_AuthnContext_template`, defaultAuthnContextTemplate, { |
||||
type: 'string', |
||||
invalidValue: defaultAuthnContextTemplate, |
||||
i18nLabel: 'SAML_AuthnContext_Template', |
||||
i18nDescription: 'SAML_AuthnContext_Template_Description', |
||||
multiline: true, |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_AuthRequest_template`, defaultAuthRequestTemplate, { |
||||
type: 'string', |
||||
invalidValue: defaultAuthRequestTemplate, |
||||
i18nLabel: 'SAML_AuthnRequest_Template', |
||||
i18nDescription: 'SAML_AuthnRequest_Template_Description', |
||||
multiline: true, |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_LogoutResponse_template`, defaultLogoutResponseTemplate, { |
||||
type: 'string', |
||||
invalidValue: defaultLogoutResponseTemplate, |
||||
i18nLabel: 'SAML_LogoutResponse_Template', |
||||
i18nDescription: 'SAML_LogoutResponse_Template_Description', |
||||
multiline: true, |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_LogoutRequest_template`, defaultLogoutRequestTemplate, { |
||||
type: 'string', |
||||
invalidValue: defaultLogoutRequestTemplate, |
||||
i18nLabel: 'SAML_LogoutRequest_Template', |
||||
i18nDescription: 'SAML_LogoutRequest_Template_Description', |
||||
multiline: true, |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_MetadataCertificate_template`, defaultMetadataCertificateTemplate, { |
||||
type: 'string', |
||||
invalidValue: defaultMetadataCertificateTemplate, |
||||
i18nLabel: 'SAML_MetadataCertificate_Template', |
||||
i18nDescription: 'SAML_Metadata_Certificate_Template_Description', |
||||
multiline: true, |
||||
}); |
||||
this.add(`SAML_Custom_${ name }_Metadata_template`, defaultMetadataTemplate, { |
||||
type: 'string', |
||||
invalidValue: defaultMetadataTemplate, |
||||
i18nLabel: 'SAML_Metadata_Template', |
||||
i18nDescription: 'SAML_Metadata_Template_Description', |
||||
multiline: true, |
||||
}); |
||||
}); |
||||
}); |
||||
}); |
||||
}; |
||||
Loading…
Reference in new issue