jan/openreplay
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(api): SAML2 configurable admin privileges

Browse source
This commit is contained in:
Taha Yassine Kraiem 2021-12-06 12:46:13 +01:00
parent 4550534abb
commit c984ff61fb
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
ee/api/chalicelib/blueprints/bp_saml.py
View file

@ -72,9 +72,15 @@ def process_sso_assertion():
role = roles.get_role_by_name(tenant_id=t['tenantId'], name=role_name)
if role is None:
return {"errors": [f"role {role_name} not found, please create it in openreplay first"]}
admin_privileges = user_data.get("adminPrivileges", [])
admin_privileges = len(admin_privileges) == 0 \
or admin_privileges[0] is None \
or admin_privileges[0].lower() == "false"
if existing is None:
print("== new user ==")
users.create_sso_user(tenant_id=t['tenantId'], email=email, admin=True,
users.create_sso_user(tenant_id=t['tenantId'], email=email, admin=admin_privileges,
origin=SAML2_helper.get_saml2_provider(),
name=" ".join(user_data.get("firstName", []) + user_data.get("lastName", [])),
internal_id=internal_id, role_id=role["roleId"])