mirror of
https://github.com/paralus/paralus.git
synced 2026-02-14 17:49:51 +00:00
5e7fc110b2
The idp_groups is list of groups IdP user belongs to that is returning
in the OIdC providers token response. The flow of Idp Group mapping is
as follows:
OIdC Provider (OP) return custom claim with groups in a token when
authentication event
|
The value of custom claim is mapped to `idp_groups` of identity
traint using JsonNet mapper.
|
On inserting/updating/deleting `identities` table, Postgresql
sends a pg_notification with
`PG_OPERATION,IDENTITY_ID,IDENTITY_TRAIN` as a payload.
|
The `pkg/service/user.UserService.UpdateIdpUserGroupPolicy` update
the casbin policies for each notification based on payload received.
3 lines
123 B
SQL
3 lines
123 B
SQL
DROP FUNCTION IF EXISTS identities_after_change() CASCADE;
|
|
DROP TRIGGER IF EXISTS trigger_identities_update ON identities;
|