Merge pull request #150 from GetGatekeeper/scim

Add SCIM sync handler

Author: LukasReschke

Client/Pages/Admin/Apps/AdminAppsDetails.razor

@@ -38,7 +38,8 @@
                 <p>Bind password: @appDetailReply.LdapDirectorySetting.Password</p>
                 break;
             case AppDetailReply.DirectorySettingOneofCase.ScimDirectorySetting:
-                <span>SCIM</span>
+                <p>Endpoint: @appDetailReply.ScimDirectorySetting.Endpoint</p>
+                <p><button @onclick="TriggerScimSync">Trigger sync</button></p>
                 break;
             case AppDetailReply.DirectorySettingOneofCase.None:
                 <span>None configured</span>
@@ -78,6 +79,15 @@
         appDetailReply = await AppsClient.GetAppDetailsAsync(request);
     }
 
+    private async Task TriggerScimSync() {
+        ScimSyncRequest request = new ScimSyncRequest
+        {
+            AppId = Id.ToString(),
+        };
+
+        await AppsClient.TriggerScimSyncAsync(request);
+    }
+
     private async Task AddGroupToApp()
     {
         AddGroupToAppRequest request = new AddGroupToAppRequest

Server/AuthServer.Server.csproj

@@ -8,6 +8,7 @@
   <ItemGroup>
     <PackageReference Include="Certes" Version="2.3.4" />
     <PackageReference Include="Gatekeeper.LdapServerLibrary" Version="0.0.4-alpha" />
+    <PackageReference Include="Gatekeeper.SCIM.Client" Version="0.0.4-alpha" />
     <PackageReference Include="Grpc.AspNetCore" Version="2.34.0" />
     <PackageReference Include="Grpc.AspNetCore.Web" Version="2.34.0" />
     <PackageReference Include="Hangfire.AspNetCore" Version="1.7.18" />

Server/GRPC/Admin/AppsService.cs

@@ -6,6 +6,7 @@
 using AuthServer.Server.Services;
 using AuthServer.Server.Services.Crypto;
 using AuthServer.Server.Services.ReverseProxy.Configuration;
+using AuthServer.Server.Services.SCIM;
 using AuthServer.Server.Services.TLS;
 using AuthServer.Shared.Admin;
 using Google.Protobuf.WellKnownTypes;
@@ -25,20 +26,23 @@ public class AppsService : AuthServer.Shared.Admin.AdminApps.AdminAppsBase
         private readonly SecureRandom _secureRandom;
         private readonly ConfigurationProvider _configurationProvider;
         private readonly MemoryPopulator _memoryPopulator;
+        private readonly ISyncHandler _syncHandler;
 
         public AppsService(
             AuthDbContext authDbContext,
             IDataProtectionProvider dataProtectionProvider,
             SecureRandom secureRandom,
             ConfigurationProvider configurationProvider,
-            MemoryPopulator memoryPopulator
+            MemoryPopulator memoryPopulator,
+            ISyncHandler syncHandler
             )
         {
             _authDbContext = authDbContext;
             _ldapSettingsDataProtector = dataProtectionProvider.CreateProtector("LdapSettingsDataProtector");
             _secureRandom = secureRandom;
             _configurationProvider = configurationProvider;
             _memoryPopulator = memoryPopulator;
+            _syncHandler = syncHandler;
         }
 
         public override async Task<AddGroupToAppReply> AddGroupToApp(AddGroupToAppRequest request, ServerCallContext context)
@@ -330,5 +334,15 @@ public override async Task<RemoveGroupFromAppReply> RemoveGroupFromApp(RemoveGro
 
             return new RemoveGroupFromAppReply { Success = true };
         }
+
+        public override async Task<Empty> TriggerScimSync(ScimSyncRequest request, ServerCallContext context)
+        {
+            SCIMAppSettings setting = await _authDbContext
+                .SCIMAppSettings
+                .SingleAsync(s => s.AuthAppId == new Guid(request.AppId));
+
+            await _syncHandler.FullSyncAsync(setting.Id);
+            return new Empty();
+        }
     }
 }