PATCH操作中的SCIM用户名

问题描述

我已经使用SCIM实施了用户预配置/取消预配置:

users_controller.rb

class Scim::UsersController < Scim::ScimController
  before_action :set_scim_provider

  def index

    startIndex = params[:startIndex].to_i
    startIndex = 1 if startIndex < 1# if the user send a startIndex < 1,it is bad data,we don't take it.

    itemsPerPage = params[:count].to_i
  
    if itemsPerPage < 1 || itemsPerPage > @scim_provider.max_results
      itemsPerPage = @scim_provider.default_number_of_results
    end

    scim_users = @scim_provider.identity_provider.communaute_accesses.from_scim

    if params["filter"]
      parser = Scim::QueryFilter::Parser.new
      rpn_array = parser.parse(params["filter"])
      tree = parser.tree
      if tree.length == 3 and tree[0]== 'eq' and tree[1] == 'userName'
        userName = tree[2]
        scim_users = scim_users.where(provider_identifier: userName.delete('"'))
      else
        fail 'e'
      end

    end

    

    paginated_users = scim_users.order(:created_at).offset(startIndex - 1).limit(itemsPerPage)

    r = {
      "schemas": ["urn:ietf:params:scim:api:messages:2.0:ListResponse"],"totalResults": scim_users.size,"Resources": paginated_users.map { |ca| @scim_provider.representation_for_user(ca) },"startIndex": startIndex,"itemsPerPage": itemsPerPage
    }

    render_json_result(r,200)

  end

  def create
    if @scim_provider.identity_provider.communaute_accesses.from_scim.find_by(provider_identifier: @body_params['userName'])
      render_409_conflict("uniqueness")
    else
      ca = @scim_provider.identity_provider.communaute_accesses.find_by(provider_identifier: @body_params['userName'],communaute_id: @scim_provider.identity_provider.communaute.id)
      if ca.nil?
        ca = @scim_provider.identity_provider.communaute_accesses.create(provider_identifier: @body_params['userName'],communaute_id: @scim_provider.identity_provider.communaute.id)
      end
      ca.update_last_raw_value("scim",@body_string)
      ca.extract_values_from_scim
      
      ca.queue_send
    end

    render_json_result(@scim_provider.representation_for_user(ca),201)
  end

  def show
    user = @scim_provider.identity_provider.communaute_accesses.from_scim.find_by(provider_identifier: @body_params['userName'])
    if user
      render_json_result(@scim_provider.representation_for_user(user),200)
    else  
      render_404_not_found(params[:id])
    end
  end

  def update
    ca = @scim_provider.identity_provider.communaute_accesses.from_scim.find_by(provider_identifier: @body_params['userName'])
    uc = UserCommunaute.find_by(provider_identifier: @body_params['userName'])

    ca.update_last_raw_value("scim",@body_string)
    ca.extract_values_from_scim

    unless ca.nil?
      if ca.pending?
        ca.update_last_raw_value("scim",@body_string)
        ca.update(active: false)

        if ca.active == false 
          fail "Unable to delete this user because of activeness" if ca.active == true
          ca.destroy!
        end

        render_json_result(@scim_provider.representation_for_communaute_access_patch(ca),200) 
      end
    end

    unless uc.nil?
      uc.update(active: @body_params['active'])
      if uc.active == false
        uc.user.communaute_accesses.from_scim.destroy_all
        uc.user.user_communautes.from_scim.destroy_all
        render_json_result(@scim_provider.representation_for_user_communaute_patch(uc),200)
      end
    end
  end

end

说明:

更新用户时,SCIM发送如下的PATCH请求: {"schemas"=>["urn:ietf:params:scim:api:messages:2.0:PatchOp"],"Operations"=>[{"op"=>"Replace","path"=>"active","value"=>"False"}]}(代码中的@body_params

这是我所期望的。但是有一段时间,我在PATCH操作期间的身体反应中也收到了userName

这是我在数据库中获取正确用户的方式。


实际结果: 当SCIM击中我的userName操作时,我不再收到update


预期结果: 在PATCH操作期间能够接收有关用户的信息,以获取userName并在我的数据库中找到合适的用户。


我几乎尝试了所有事情。当SCIM击中index动作时,每次执行此动作之前,它都会返回userName,一切以200 OK结束。 然后,通过update时,它什么也没发送给我。 我最后尝试的是将userName隔离为index动作中的实例变量,以便在update中获取它,如下所示:

# index
...
if params["filter"]
      parser = Scim::QueryFilter::Parser.new
      rpn_array = parser.parse(params["filter"])
      tree = parser.tree
      if tree.length == 3 and tree[0]== 'eq' and tree[1] == 'userName'
        @user_name = tree[2]
        scim_users = scim_users.where(provider_identifier: @user_name.delete('"'))
      else
        fail 'e'
      end
    end
...

# update

def update
    ca = @scim_provider.identity_provider.communaute_accesses.from_scim.find_by(provider_identifier: @user_name)
    uc = UserCommunaute.find_by(provider_identifier: @user_name)

    ca.update_last_raw_value("scim",@body_string)
    ca.extract_values_from_scim
...

但是,@user_name中的update似乎消失了,因为其值为nil


我正在生产环境中从Azure Active Directory和Okta取消配置。 在两个平台上都可以进行映射。 置备工作就像一种魅力。

解决方法

有关PATCH / Users / {userId},请参阅https://developer.okta.com/docs/reference/scim/scim-20/#update-a-specific-user-patch。您不能使用url中的userId来标识用户吗?

相关问答

错误1:Request method ‘DELETE‘ not supported 错误还原:...
错误1:启动docker镜像时报错:Error response from daemon:...
错误1:private field ‘xxx‘ is never assigned 按Alt...
报错如下,通过源不能下载,最后警告pip需升级版本 Requirem...