awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-08 06:27:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: switched saml to user alias verification method

Browse Source
This commit is contained in:
=
2025-11-25 14:48:48 +05:30
parent 0d62ef6fb5
commit 4ee30b1260
2 changed files with 11 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/saml-config/saml-config-service.ts
+2 -2
View File
@@ -622,7 +622,7 @@ export const samlConfigServiceFactory = ({
const uniqueUsername = await normalizeUsername(`${firstName ?? ""}-${lastName ?? ""}`, userDAL); const uniqueUsername = await normalizeUsername(`${firstName ?? ""}-${lastName ?? ""}`, userDAL);
newUser = await userDAL.create( newUser = await userDAL.create(
{ {
username: serverCfg.trustSamlEmails ? email : uniqueUsername, username: serverCfg.trustSamlEmails ? email.toLowerCase() : uniqueUsername,
email, email,
isEmailVerified: serverCfg.trustSamlEmails, isEmailVerified: serverCfg.trustSamlEmails,
firstName, firstName,
@@ -639,7 +639,7 @@ export const samlConfigServiceFactory = ({
userId: newUser.id, userId: newUser.id,
aliasType: UserAliasType.SAML, aliasType: UserAliasType.SAML,
externalId, externalId,
emails: email ? [email] : [], emails: email ? [email.toLowerCase()] : [],
orgId, orgId,
isEmailVerified: serverCfg.trustSamlEmails isEmailVerified: serverCfg.trustSamlEmails
}, },
backend/src/ee/services/scim/scim-service.ts
+9 -10
View File
@@ -389,15 +389,13 @@ export const scimServiceFactory = ({
); );
} }
} else { } else {
if (trustScimEmails) { user = await userDAL.findOne(
user = await userDAL.findOne( {
{ email: email.toLowerCase(),
email: email.toLowerCase(), isEmailVerified: true
isEmailVerified: true },
}, tx
tx );
);
}
if (!user) { if (!user) {
const uniqueUsername = await normalizeUsername( const uniqueUsername = await normalizeUsername(
@@ -425,7 +423,8 @@ export const scimServiceFactory = ({
aliasType, aliasType,
externalId, externalId,
emails: email ? [email.toLowerCase()] : [], emails: email ? [email.toLowerCase()] : [],
orgId orgId,
isEmailVerified: trustScimEmails
}, },
tx tx
); );