Comments (7)
yaleman
commented on June 14, 2024
2
ok, that's what I was going for, confirmation of how it was done so we can try and replicate/trace it 😄
from kanidm.
yaleman
commented on June 14, 2024
Can you please show us how it was configured on the command line?
I'm guessing you specified "some_value,another_value" which likely got caught as a single entry.
from kanidm.
playhardgopro
commented on June 14, 2024
I have ran these:
kanidm system oauth2 update-claim-map-join frontend-test-public claim_42 array >/dev/null
kanidm system oauth2 get frontend-test-public | grep claim_42
kanidm system oauth2 update-claim-map-join frontend-test-public claim_42 ssv >/dev/null
kanidm system oauth2 get frontend-test-public | grep claim_42
kanidm system oauth2 update-claim-map-join frontend-test-public claim_42 csv >/dev/null
kanidm system oauth2 get frontend-test-public | grep claim_42
And have received:
oauth2_rs_claim_map: claim_42:[email protected]:;:"another_value,some_value,value_3,value_4,value_5"
oauth2_rs_claim_map: claim_42:[email protected]: :"another_value,some_value,value_3,value_4,value_5"
oauth2_rs_claim_map: claim_42:[email protected]:,:"another_value,some_value,value_3,value_4,value_5"
I expected to receive something like these
oauth2_rs_claim_map: claim_42:[email protected]:;:"another_value;some_value;value_3;value_4;value_5"
oauth2_rs_claim_map: claim_42:[email protected]: :"another_value some_value value_3 value_4 value_5"
oauth2_rs_claim_map: claim_42:[email protected]:,:"another_value,some_value,value_3,value_4,value_5"
I am not sure about the case with array (;) :)
from kanidm.
playhardgopro
commented on June 14, 2024
Perhaps, the problem is somewhere here
but I don't know Rust at all and can't help you with this code :(
from kanidm.
yaleman
commented on June 14, 2024
Ok you haven't specified how you set the values you expect to be joined. That's the thing I was trying to highlight.
from kanidm.
playhardgopro
commented on June 14, 2024
Sorry, I don't have an access to our Kanidm instance :(
I can only provide you the curl request which I send to add values
curl 'https://idm.example.com/v1/oauth2/frontend-test-public/_claimmap/claim_42/test' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer add_your_token' \
-H 'Connection: keep-alive' \
-H 'Content-Type: application/json' \
-H 'Origin: https://idm.example.com' \
-H 'Sec-Fetch-Dest: empty' \
-H 'Sec-Fetch-Mode: cors' \
-H 'Sec-Fetch-Site: same-origin' \
--data-raw '["some_value","value_1","value_2"]'
I will try to provide you more details after getting the access to our Kanidm CLI
UPD:
kanidm system oauth2 update-claim-map frontend-test-public claim_43 idm_admins a b c # created
# oauth2_rs_claim_map: claim_43:[email protected]:;:"a,b,c"
kanidm system oauth2 update-claim-map-join frontend-test-public claim_43 csv # changed
# oauth2_rs_claim_map: claim_43:[email protected]:,:"a,b,c"
from kanidm.
Firstyear
commented on June 14, 2024
I think the confusion is how we display the joiner on the cli. When we "get" the entry, we always display them as a csv. This is because of something you noted yourself.
I am not sure about the case with
array(;) :)
Simply, displaying the array became tricky to work out how to do nicely.
So we display it as :<joiner>:<csv of values>.
But I will assure you, that the content in what we sent to the oauth2 client is formatted as you would expect. :)
from kanidm.
Related Issues (20)
- Can't sign out properly HOT 9
- Allow bindaddress to be a unix socket HOT 1
- Option to disable self managing displayname, name, and legal name
- forward_auth support in kanidm HOT 15
- oauth2 authorization code can be exchanged for access token multiple times HOT 2
- OAuth2 Debugging Tools
- migrate_domain_6_to_7: MG0005GidConstraintsNotMet HOT 2
- Issue upgrading from v1.1.0-beta.13 (1.1.0~beta13~git7.1fb34a9) -> 1.2.1 HOT 3
- The "Install" link on the homepage (top) is broken HOT 1
- Support OIDC client_ids of OwnCloud Desktop, Android, iOS HOT 14
- Support the change-password URI spec with a redirect HOT 1
- Restrict client login by IP HOT 6
- Release 1.2.2 didn't update Cargo.lock HOT 2
- Change to Kanidm installation guide for people using replication HOT 1
- Unable to authenticate using replicated kanidm server HOT 4
- Allow alternate OIDC URL schema
- CLI command to change client displaynames
- Support multiple signed-in accounts HOT 1
- Posix UUIDs are larger than `utmp`/`wtmp` allows
- Using tracing instrumentation to measure call timings HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kanidm.