mirror of
https://github.com/kanidm/kanidm.git
synced 2025-05-19 23:43:56 +02:00
471 lines
13 KiB
Rust
471 lines
13 KiB
Rust
use crate::prelude::*;
|
|
use crate::schema::SchemaAttribute;
|
|
use crate::valueset::{
|
|
uuid_to_proto_string, DbValueSetV2, ScimResolveStatus, ScimValueIntermediate, ValueSet,
|
|
ValueSetIntermediate, ValueSetResolveStatus, ValueSetScimPut,
|
|
};
|
|
use kanidm_proto::scim_v1::JsonValue;
|
|
use smolset::SmolSet;
|
|
use std::collections::BTreeSet;
|
|
|
|
#[derive(Debug, Clone)]
|
|
pub struct ValueSetUuid {
|
|
set: SmolSet<[Uuid; 1]>,
|
|
}
|
|
|
|
impl ValueSetUuid {
|
|
pub fn new(u: Uuid) -> Box<Self> {
|
|
let mut set = SmolSet::new();
|
|
set.insert(u);
|
|
Box::new(ValueSetUuid { set })
|
|
}
|
|
|
|
pub fn push(&mut self, u: Uuid) -> bool {
|
|
self.set.insert(u)
|
|
}
|
|
|
|
pub fn from_dbvs2(data: Vec<Uuid>) -> Result<ValueSet, OperationError> {
|
|
let set = data.into_iter().collect();
|
|
Ok(Box::new(ValueSetUuid { set }))
|
|
}
|
|
|
|
// We need to allow this, because rust doesn't allow us to impl FromIterator on foreign
|
|
// types, and uuid is foreign.
|
|
#[allow(clippy::should_implement_trait)]
|
|
pub fn from_iter<T>(iter: T) -> Option<Box<Self>>
|
|
where
|
|
T: IntoIterator<Item = Uuid>,
|
|
{
|
|
let set = iter.into_iter().collect();
|
|
Some(Box::new(ValueSetUuid { set }))
|
|
}
|
|
}
|
|
|
|
impl ValueSetScimPut for ValueSetUuid {
|
|
fn from_scim_json_put(value: JsonValue) -> Result<ValueSetResolveStatus, OperationError> {
|
|
let uuid: Uuid = serde_json::from_value(value).map_err(|err| {
|
|
warn!(?err, "Invalid SCIM Uuid syntax");
|
|
OperationError::SC0004UuidSyntaxInvalid
|
|
})?;
|
|
|
|
let mut set = SmolSet::new();
|
|
set.insert(uuid);
|
|
Ok(ValueSetResolveStatus::Resolved(Box::new(ValueSetUuid {
|
|
set,
|
|
})))
|
|
}
|
|
}
|
|
|
|
impl ValueSetT for ValueSetUuid {
|
|
fn insert_checked(&mut self, value: Value) -> Result<bool, OperationError> {
|
|
match value {
|
|
Value::Uuid(u) => Ok(self.set.insert(u)),
|
|
_ => {
|
|
debug_assert!(false);
|
|
Err(OperationError::InvalidValueState)
|
|
}
|
|
}
|
|
}
|
|
|
|
fn clear(&mut self) {
|
|
self.set.clear();
|
|
}
|
|
|
|
fn remove(&mut self, pv: &PartialValue, _cid: &Cid) -> bool {
|
|
match pv {
|
|
PartialValue::Uuid(u) => self.set.remove(u),
|
|
_ => {
|
|
debug_assert!(false);
|
|
true
|
|
}
|
|
}
|
|
}
|
|
|
|
fn contains(&self, pv: &PartialValue) -> bool {
|
|
match pv {
|
|
PartialValue::Uuid(u) => self.set.contains(u),
|
|
_ => false,
|
|
}
|
|
}
|
|
|
|
fn substring(&self, _pv: &PartialValue) -> bool {
|
|
false
|
|
}
|
|
|
|
fn startswith(&self, _pv: &PartialValue) -> bool {
|
|
false
|
|
}
|
|
|
|
fn endswith(&self, _pv: &PartialValue) -> bool {
|
|
false
|
|
}
|
|
|
|
fn lessthan(&self, pv: &PartialValue) -> bool {
|
|
match pv {
|
|
PartialValue::Uuid(u) => self.set.iter().any(|v| v < u),
|
|
_ => false,
|
|
}
|
|
}
|
|
|
|
fn len(&self) -> usize {
|
|
self.set.len()
|
|
}
|
|
|
|
fn generate_idx_eq_keys(&self) -> Vec<String> {
|
|
self.set
|
|
.iter()
|
|
.map(|u| u.as_hyphenated().to_string())
|
|
.collect()
|
|
}
|
|
|
|
fn syntax(&self) -> SyntaxType {
|
|
SyntaxType::Uuid
|
|
}
|
|
|
|
fn validate(&self, _schema_attr: &SchemaAttribute) -> bool {
|
|
true
|
|
}
|
|
|
|
fn to_proto_string_clone_iter(&self) -> Box<dyn Iterator<Item = String> + '_> {
|
|
Box::new(self.set.iter().copied().map(uuid_to_proto_string))
|
|
}
|
|
|
|
fn to_scim_value(&self) -> Option<ScimResolveStatus> {
|
|
self.set
|
|
.iter()
|
|
.next()
|
|
.copied()
|
|
.map(ScimValueKanidm::Uuid)
|
|
.map(ScimResolveStatus::Resolved)
|
|
}
|
|
|
|
fn to_db_valueset_v2(&self) -> DbValueSetV2 {
|
|
DbValueSetV2::Uuid(self.set.iter().cloned().collect())
|
|
}
|
|
|
|
fn to_partialvalue_iter(&self) -> Box<dyn Iterator<Item = PartialValue> + '_> {
|
|
Box::new(self.set.iter().copied().map(PartialValue::Uuid))
|
|
}
|
|
|
|
fn to_value_iter(&self) -> Box<dyn Iterator<Item = Value> + '_> {
|
|
Box::new(self.set.iter().copied().map(Value::Uuid))
|
|
}
|
|
|
|
fn equal(&self, other: &ValueSet) -> bool {
|
|
if let Some(other) = other.as_uuid_set() {
|
|
&self.set == other
|
|
} else {
|
|
debug_assert!(false);
|
|
false
|
|
}
|
|
}
|
|
|
|
fn merge(&mut self, other: &ValueSet) -> Result<(), OperationError> {
|
|
if let Some(b) = other.as_uuid_set() {
|
|
mergesets!(self.set, b)
|
|
} else {
|
|
debug_assert!(false);
|
|
Err(OperationError::InvalidValueState)
|
|
}
|
|
}
|
|
|
|
fn to_uuid_single(&self) -> Option<Uuid> {
|
|
if self.set.len() == 1 {
|
|
self.set.iter().copied().take(1).next()
|
|
} else {
|
|
None
|
|
}
|
|
}
|
|
|
|
fn as_uuid_set(&self) -> Option<&SmolSet<[Uuid; 1]>> {
|
|
Some(&self.set)
|
|
}
|
|
|
|
/*
|
|
fn as_uuid_iter(&self) -> Option<Box<dyn Iterator<Item = Uuid> + '_>> {
|
|
Some(Box::new(self.set.iter().copied()))
|
|
}
|
|
*/
|
|
}
|
|
|
|
#[derive(Debug, Clone)]
|
|
pub struct ValueSetRefer {
|
|
set: BTreeSet<Uuid>,
|
|
}
|
|
|
|
impl ValueSetRefer {
|
|
pub fn new(u: Uuid) -> Box<Self> {
|
|
let mut set = BTreeSet::new();
|
|
set.insert(u);
|
|
Box::new(ValueSetRefer { set })
|
|
}
|
|
|
|
pub fn push(&mut self, u: Uuid) -> bool {
|
|
self.set.insert(u)
|
|
}
|
|
|
|
pub fn from_dbvs2(data: Vec<Uuid>) -> Result<ValueSet, OperationError> {
|
|
let set = data.into_iter().collect();
|
|
Ok(Box::new(ValueSetRefer { set }))
|
|
}
|
|
|
|
pub fn from_repl_v1(data: &[Uuid]) -> Result<ValueSet, OperationError> {
|
|
let set = data.iter().copied().collect();
|
|
Ok(Box::new(ValueSetRefer { set }))
|
|
}
|
|
|
|
// We need to allow this, because rust doesn't allow us to impl FromIterator on foreign
|
|
// types, and uuid is foreign.
|
|
#[allow(clippy::should_implement_trait)]
|
|
pub fn from_iter<T>(iter: T) -> Option<Box<Self>>
|
|
where
|
|
T: IntoIterator<Item = Uuid>,
|
|
{
|
|
let set: BTreeSet<_> = iter.into_iter().collect();
|
|
if set.is_empty() {
|
|
None
|
|
} else {
|
|
Some(Box::new(ValueSetRefer { set }))
|
|
}
|
|
}
|
|
|
|
pub(crate) fn from_set(set: BTreeSet<Uuid>) -> ValueSet {
|
|
Box::new(ValueSetRefer { set })
|
|
}
|
|
}
|
|
|
|
impl ValueSetScimPut for ValueSetRefer {
|
|
fn from_scim_json_put(value: JsonValue) -> Result<ValueSetResolveStatus, OperationError> {
|
|
use kanidm_proto::scim_v1::client::{ScimReference, ScimReferences};
|
|
|
|
// May be a single reference, lets wrap it in an array to proceed.
|
|
let value = if !value.is_array() && value.is_object() {
|
|
JsonValue::Array(vec![value])
|
|
} else {
|
|
value
|
|
};
|
|
|
|
let scim_refs: ScimReferences = serde_json::from_value(value).map_err(|err| {
|
|
warn!(?err, "Invalid SCIM reference set syntax");
|
|
OperationError::SC0002ReferenceSyntaxInvalid
|
|
})?;
|
|
|
|
let mut resolved = BTreeSet::default();
|
|
let mut unresolved = Vec::with_capacity(scim_refs.len());
|
|
|
|
for scim_ref in scim_refs.into_iter() {
|
|
match scim_ref {
|
|
ScimReference {
|
|
uuid: None,
|
|
value: None,
|
|
} => {
|
|
warn!("Invalid SCIM reference set syntax, uuid and value are both unset.");
|
|
return Err(OperationError::SC0002ReferenceSyntaxInvalid);
|
|
}
|
|
ScimReference {
|
|
uuid: Some(uuid), ..
|
|
} => {
|
|
resolved.insert(uuid);
|
|
}
|
|
ScimReference {
|
|
value: Some(val), ..
|
|
} => {
|
|
unresolved.push(val);
|
|
}
|
|
}
|
|
}
|
|
|
|
// We may not actually need to resolve anything, but to make tests easier we
|
|
// always return that we need resolution.
|
|
Ok(ValueSetResolveStatus::NeedsResolution(
|
|
ValueSetIntermediate::References {
|
|
resolved,
|
|
unresolved,
|
|
},
|
|
))
|
|
}
|
|
}
|
|
|
|
impl ValueSetT for ValueSetRefer {
|
|
fn insert_checked(&mut self, value: Value) -> Result<bool, OperationError> {
|
|
match value {
|
|
Value::Refer(u) => Ok(self.set.insert(u)),
|
|
_ => {
|
|
debug_assert!(false);
|
|
Err(OperationError::InvalidValueState)
|
|
}
|
|
}
|
|
}
|
|
|
|
fn clear(&mut self) {
|
|
self.set.clear();
|
|
}
|
|
|
|
fn remove(&mut self, pv: &PartialValue, _cid: &Cid) -> bool {
|
|
match pv {
|
|
PartialValue::Refer(u) => self.set.remove(u),
|
|
_ => {
|
|
debug_assert!(false);
|
|
true
|
|
}
|
|
}
|
|
}
|
|
|
|
fn contains(&self, pv: &PartialValue) -> bool {
|
|
match pv {
|
|
PartialValue::Refer(u) => self.set.contains(u),
|
|
_ => false,
|
|
}
|
|
}
|
|
|
|
fn substring(&self, _pv: &PartialValue) -> bool {
|
|
false
|
|
}
|
|
|
|
fn startswith(&self, _pv: &PartialValue) -> bool {
|
|
false
|
|
}
|
|
|
|
fn endswith(&self, _pv: &PartialValue) -> bool {
|
|
false
|
|
}
|
|
|
|
fn lessthan(&self, pv: &PartialValue) -> bool {
|
|
match pv {
|
|
PartialValue::Refer(u) => self.set.iter().any(|v| v < u),
|
|
_ => false,
|
|
}
|
|
}
|
|
|
|
fn len(&self) -> usize {
|
|
self.set.len()
|
|
}
|
|
|
|
fn generate_idx_eq_keys(&self) -> Vec<String> {
|
|
self.set
|
|
.iter()
|
|
.map(|u| u.as_hyphenated().to_string())
|
|
.collect()
|
|
}
|
|
|
|
fn syntax(&self) -> SyntaxType {
|
|
SyntaxType::ReferenceUuid
|
|
}
|
|
|
|
fn validate(&self, _schema_attr: &SchemaAttribute) -> bool {
|
|
true
|
|
}
|
|
|
|
fn to_proto_string_clone_iter(&self) -> Box<dyn Iterator<Item = String> + '_> {
|
|
Box::new(self.set.iter().copied().map(uuid_to_proto_string))
|
|
}
|
|
|
|
fn to_scim_value(&self) -> Option<ScimResolveStatus> {
|
|
let uuids = self.set.iter().copied().collect::<Vec<_>>();
|
|
Some(ScimResolveStatus::NeedsResolution(
|
|
ScimValueIntermediate::References(uuids),
|
|
))
|
|
}
|
|
|
|
fn to_db_valueset_v2(&self) -> DbValueSetV2 {
|
|
DbValueSetV2::Reference(self.set.iter().cloned().collect())
|
|
}
|
|
|
|
fn to_partialvalue_iter(&self) -> Box<dyn Iterator<Item = PartialValue> + '_> {
|
|
Box::new(self.set.iter().copied().map(PartialValue::Refer))
|
|
}
|
|
|
|
fn to_value_iter(&self) -> Box<dyn Iterator<Item = Value> + '_> {
|
|
Box::new(self.set.iter().copied().map(Value::Refer))
|
|
}
|
|
|
|
fn equal(&self, other: &ValueSet) -> bool {
|
|
if let Some(other) = other.as_refer_set() {
|
|
&self.set == other
|
|
} else {
|
|
debug_assert!(false);
|
|
false
|
|
}
|
|
}
|
|
|
|
fn merge(&mut self, other: &ValueSet) -> Result<(), OperationError> {
|
|
if let Some(b) = other.as_refer_set() {
|
|
mergesets!(self.set, b)
|
|
} else {
|
|
debug_assert!(false);
|
|
Err(OperationError::InvalidValueState)
|
|
}
|
|
}
|
|
|
|
fn to_refer_single(&self) -> Option<Uuid> {
|
|
if self.set.len() == 1 {
|
|
self.set.iter().copied().take(1).next()
|
|
} else {
|
|
None
|
|
}
|
|
}
|
|
|
|
fn as_refer_set(&self) -> Option<&BTreeSet<Uuid>> {
|
|
Some(&self.set)
|
|
}
|
|
|
|
fn as_refer_set_mut(&mut self) -> Option<&mut BTreeSet<Uuid>> {
|
|
Some(&mut self.set)
|
|
}
|
|
|
|
fn as_ref_uuid_iter(&self) -> Option<Box<dyn Iterator<Item = Uuid> + '_>> {
|
|
Some(Box::new(self.set.iter().copied()))
|
|
}
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use super::{ValueSetRefer, ValueSetUuid};
|
|
use crate::prelude::*;
|
|
|
|
#[test]
|
|
fn test_scim_uuid() {
|
|
let vs: ValueSet = ValueSetUuid::new(uuid::uuid!("4d21d04a-dc0e-42eb-b850-34dd180b107f"));
|
|
|
|
let data = r#""4d21d04a-dc0e-42eb-b850-34dd180b107f""#;
|
|
|
|
crate::valueset::scim_json_reflexive(vs.clone(), data);
|
|
|
|
// Test that we can parse json values into a valueset.
|
|
crate::valueset::scim_json_put_reflexive::<ValueSetUuid>(vs, &[])
|
|
}
|
|
|
|
#[qs_test]
|
|
async fn test_scim_refer(server: &QueryServer) {
|
|
let mut write_txn = server.write(duration_from_epoch_now()).await.unwrap();
|
|
|
|
let t_uuid = uuid::uuid!("4d21d04a-dc0e-42eb-b850-34dd180b107f");
|
|
assert!(write_txn
|
|
.internal_create(vec![entry_init!(
|
|
(Attribute::Class, EntryClass::Object.to_value()),
|
|
(Attribute::Class, EntryClass::Account.to_value()),
|
|
(Attribute::Class, EntryClass::Person.to_value()),
|
|
(Attribute::Name, Value::new_iname("testperson1")),
|
|
(Attribute::Uuid, Value::Uuid(t_uuid)),
|
|
(Attribute::Description, Value::new_utf8s("testperson1")),
|
|
(Attribute::DisplayName, Value::new_utf8s("testperson1"))
|
|
),])
|
|
.is_ok());
|
|
|
|
let vs: ValueSet = ValueSetRefer::new(t_uuid);
|
|
|
|
let data = r#"[{"uuid": "4d21d04a-dc0e-42eb-b850-34dd180b107f", "value": "testperson1@example.com"}]"#;
|
|
|
|
crate::valueset::scim_json_reflexive_unresolved(&mut write_txn, vs.clone(), data);
|
|
|
|
// Test that we can parse json values into a valueset.
|
|
crate::valueset::scim_json_put_reflexive_unresolved::<ValueSetRefer>(
|
|
&mut write_txn,
|
|
vs,
|
|
&[],
|
|
);
|
|
|
|
assert!(write_txn.commit().is_ok());
|
|
}
|
|
}
|