Skip to content
Snippets Groups Projects
Commit 11542596 authored by Oded Ben-Ozer's avatar Oded Ben-Ozer
Browse files

Address issues raised in review:

Improve naming

Signed-off-by: default avatarOded Ben-Ozer <obenozer@wayfair.com>
parent 033717a0
Branches
Tags
No related merge requests found
...@@ -88,16 +88,16 @@ type Config struct { ...@@ -88,16 +88,16 @@ type Config struct {
GroupsKey string `json:"groups"` // defaults to "groups" GroupsKey string `json:"groups"` // defaults to "groups"
} `json:"claimMapping"` } `json:"claimMapping"`
// ClaimModifications holds all claim modifications options // ClaimMutations holds all claim mutations options
ClaimModifications struct { ClaimMutations struct {
NewGroupsFromClaims []NewGroupsFromClaims `json:"newGroupsFromClaims"` NewGroupFromClaims []NewGroupFromClaims `json:"newGroupFromClaims"`
} `json:"claimModifications"` } `json:"claimModifications"`
} }
// NewGroupFromClaims creates a new group from a list of claims and appends it to the list of existing groups. // NewGroupFromClaims creates a new group from a list of claims and appends it to the list of existing groups.
type NewGroupsFromClaims struct { type NewGroupFromClaims struct {
// List of claim to join together // List of claim to join together
ClaimList []string `json:"claimList"` Claims []string `json:"claims"`
// String to separate the claims // String to separate the claims
Delimiter string `json:"delimiter"` Delimiter string `json:"delimiter"`
...@@ -210,7 +210,7 @@ func (c *Config) Open(id string, logger log.Logger) (conn connector.Connector, e ...@@ -210,7 +210,7 @@ func (c *Config) Open(id string, logger log.Logger) (conn connector.Connector, e
preferredUsernameKey: c.ClaimMapping.PreferredUsernameKey, preferredUsernameKey: c.ClaimMapping.PreferredUsernameKey,
emailKey: c.ClaimMapping.EmailKey, emailKey: c.ClaimMapping.EmailKey,
groupsKey: c.ClaimMapping.GroupsKey, groupsKey: c.ClaimMapping.GroupsKey,
newGroupsFromClaims: c.ClaimModifications.NewGroupsFromClaims, newGroupFromClaims: c.ClaimMutations.NewGroupFromClaims,
}, nil }, nil
} }
...@@ -238,7 +238,7 @@ type oidcConnector struct { ...@@ -238,7 +238,7 @@ type oidcConnector struct {
preferredUsernameKey string preferredUsernameKey string
emailKey string emailKey string
groupsKey string groupsKey string
newGroupsFromClaims []NewGroupsFromClaims newGroupFromClaims []NewGroupFromClaims
} }
func (c *oidcConnector) Close() error { func (c *oidcConnector) Close() error {
...@@ -450,11 +450,11 @@ func (c *oidcConnector) createIdentity(ctx context.Context, identity connector.I ...@@ -450,11 +450,11 @@ func (c *oidcConnector) createIdentity(ctx context.Context, identity connector.I
} }
} }
for _, config := range c.newGroupsFromClaims { for _, config := range c.newGroupFromClaims {
newGroupSegments := []string{ newGroupSegments := []string{
config.Prefix, config.Prefix,
} }
for _, claimName := range config.ClaimList { for _, claimName := range config.Claims {
claimValue, ok := claims[claimName].(string) claimValue, ok := claims[claimName].(string)
if !ok { // Non string claim value are ignored, concatenating them doesn't really make any sense if !ok { // Non string claim value are ignored, concatenating them doesn't really make any sense
continue continue
......
...@@ -62,7 +62,7 @@ func TestHandleCallback(t *testing.T) { ...@@ -62,7 +62,7 @@ func TestHandleCallback(t *testing.T) {
expectPreferredUsername string expectPreferredUsername string
expectedEmailField string expectedEmailField string
token map[string]interface{} token map[string]interface{}
newGroupsFromClaims []NewGroupsFromClaims newGroupFromClaims []NewGroupFromClaims
}{ }{
{ {
name: "simpleCase", name: "simpleCase",
...@@ -297,9 +297,9 @@ func TestHandleCallback(t *testing.T) { ...@@ -297,9 +297,9 @@ func TestHandleCallback(t *testing.T) {
expectUserName: "namevalue", expectUserName: "namevalue",
expectGroups: []string{"group1", "gh::acme::pipeline-one", "clr_delim-acme-foobar", "keep_delim-acme-foo-bar", "bk-emailvalue"}, expectGroups: []string{"group1", "gh::acme::pipeline-one", "clr_delim-acme-foobar", "keep_delim-acme-foo-bar", "bk-emailvalue"},
expectedEmailField: "emailvalue", expectedEmailField: "emailvalue",
newGroupsFromClaims: []NewGroupsFromClaims{ newGroupFromClaims: []NewGroupFromClaims{
{ // The basic functionality, should create "gh::acme::pipeline-one". { // The basic functionality, should create "gh::acme::pipeline-one".
ClaimList: []string{ Claims: []string{
"organization", "organization",
"pipeline", "pipeline",
}, },
...@@ -307,7 +307,7 @@ func TestHandleCallback(t *testing.T) { ...@@ -307,7 +307,7 @@ func TestHandleCallback(t *testing.T) {
Prefix: "gh", Prefix: "gh",
}, },
{ // Non existing claims, should not generate any any new group claim. { // Non existing claims, should not generate any any new group claim.
ClaimList: []string{ Claims: []string{
"non-existing1", "non-existing1",
"non-existing2", "non-existing2",
}, },
...@@ -317,7 +317,7 @@ func TestHandleCallback(t *testing.T) { ...@@ -317,7 +317,7 @@ func TestHandleCallback(t *testing.T) {
{ // In this case the delimiter character("-") should be removed removed from "claim-with-delimiter" claim to ensure the resulting { // In this case the delimiter character("-") should be removed removed from "claim-with-delimiter" claim to ensure the resulting
// claim structure is in full control of the Dex operator and not the person creating a new pipeline. // claim structure is in full control of the Dex operator and not the person creating a new pipeline.
// Should create "clr_delim-acme-foobar" and not "tfe-acme-foo-bar". // Should create "clr_delim-acme-foobar" and not "tfe-acme-foo-bar".
ClaimList: []string{ Claims: []string{
"organization", "organization",
"claim-with-delimiter", "claim-with-delimiter",
}, },
...@@ -327,7 +327,7 @@ func TestHandleCallback(t *testing.T) { ...@@ -327,7 +327,7 @@ func TestHandleCallback(t *testing.T) {
}, },
{ // In this case the delimiter character("-") should be NOT removed from "claim-with-delimiter" claim. { // In this case the delimiter character("-") should be NOT removed from "claim-with-delimiter" claim.
// Should create "keep_delim-acme-foo-bar". // Should create "keep_delim-acme-foo-bar".
ClaimList: []string{ Claims: []string{
"organization", "organization",
"claim-with-delimiter", "claim-with-delimiter",
}, },
...@@ -336,7 +336,7 @@ func TestHandleCallback(t *testing.T) { ...@@ -336,7 +336,7 @@ func TestHandleCallback(t *testing.T) {
Prefix: "keep_delim", Prefix: "keep_delim",
}, },
{ // Ignore non string claims (like arrays), this should result in "bk-emailvalue". { // Ignore non string claims (like arrays), this should result in "bk-emailvalue".
ClaimList: []string{ Claims: []string{
"non-string-claim", "non-string-claim",
"non-string-claim2", "non-string-claim2",
"email", "email",
...@@ -397,7 +397,7 @@ func TestHandleCallback(t *testing.T) { ...@@ -397,7 +397,7 @@ func TestHandleCallback(t *testing.T) {
config.ClaimMapping.PreferredUsernameKey = tc.preferredUsernameKey config.ClaimMapping.PreferredUsernameKey = tc.preferredUsernameKey
config.ClaimMapping.EmailKey = tc.emailKey config.ClaimMapping.EmailKey = tc.emailKey
config.ClaimMapping.GroupsKey = tc.groupsKey config.ClaimMapping.GroupsKey = tc.groupsKey
config.ClaimModifications.NewGroupsFromClaims = tc.newGroupsFromClaims config.ClaimMutations.NewGroupFromClaims = tc.newGroupFromClaims
conn, err := newConnector(config) conn, err := newConnector(config)
if err != nil { if err != nil {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment