feat(cli): setup (#3267)

* commander * commander * selber! * move to packages * fix(errors): implement Is interface * test: command * test: commands * add init steps * setup tenant * add default step yaml * possibility to set password * merge v2 into v2-commander * fix: rename iam command side to instance * fix: rename iam command side to instance * fix: rename iam command side to instance * fix: rename iam command side to instance * fix: search query builder can filter events in memory * fix: filters for add member * fix(setup): add `ExternalSecure` to config * chore: name iam to instance * fix: matching * remove unsued func * base url * base url * test(command): filter funcs * test: commands * fix: rename orgiampolicy to domain policy * start from init * commands * config * fix indexes and add constraints * fixes * fix: merge conflicts * fix: protos * fix: md files * setup * add deprecated org iam policy again * typo * fix search query * fix filter * Apply suggestions from code review * remove custom org from org setup * add todos for verification * change apps creation * simplify package structure * fix error * move preparation helper for tests * fix unique constraints * fix config mapping in setup * fix error handling in encryption_keys.go * fix projection config * fix query from old views to projection * fix setup of mgmt api * set iam project and fix instance projection * imports Co-authored-by: Livio Amstutz <[email protected]> Co-authored-by: fabi <[email protected]>
2026-11-12 00:55:12 +00:00 · 2022-03-28 10:05:09 +02:00
parent 9d4f296c62
commit c5b99274d7
175 changed files with 5213 additions and 2212 deletions
@@ -0,0 +1,155 @@
+package command
+
+import (
+	"context"
+	"strings"
+	"time"
+
+	"github.com/caos/zitadel/internal/command/v2/preparation"
+	"github.com/caos/zitadel/internal/crypto"
+	"github.com/caos/zitadel/internal/domain"
+	"github.com/caos/zitadel/internal/errors"
+	"github.com/caos/zitadel/internal/eventstore"
+	"github.com/caos/zitadel/internal/repository/project"
+)
+
+func AddOIDCApp(
+	a project.Aggregate,
+	version domain.OIDCVersion,
+	appID,
+	name,
+	clientID string,
+	clientSecret *crypto.CryptoValue,
+	redirectUris []string,
+	responseTypes []domain.OIDCResponseType,
+	grantTypes []domain.OIDCGrantType,
+	applicationType domain.OIDCApplicationType,
+	authMethodType domain.OIDCAuthMethodType,
+	postLogoutRedirectUris []string,
+	devMode bool,
+	accessTokenType domain.OIDCTokenType,
+	accessTokenRoleAssertion bool,
+	idTokenRoleAssertion bool,
+	idTokenUserinfoAssertion bool,
+	clockSkew time.Duration,
+	additionalOrigins []string,
+) preparation.Validation {
+	return func() (preparation.CreateCommands, error) {
+		if appID == "" {
+			return nil, errors.ThrowInvalidArgument(nil, "PROJE-NnavI", "Errors.Invalid.Argument")
+		}
+		if name = strings.TrimSpace(name); name == "" {
+			return nil, errors.ThrowInvalidArgument(nil, "PROJE-Fef31", "Errors.Invalid.Argument")
+		}
+		if clientID == "" {
+			return nil, errors.ThrowInvalidArgument(nil, "PROJE-ghTsJ", "Errors.Invalid.Argument")
+		}
+		return func(ctx context.Context, filter preparation.FilterToQueryReducer) ([]eventstore.Command, error) {
+			if exists, err := ExistsProject(ctx, filter, a.ID, a.ResourceOwner); !exists || err != nil {
+				return nil, errors.ThrowNotFound(err, "PROJE-5LQ0U", "Errors.Project.NotFound")
+			}
+			return []eventstore.Command{
+				project.NewApplicationAddedEvent(
+					ctx,
+					&a.Aggregate,
+					appID,
+					name,
+				),
+				project.NewOIDCConfigAddedEvent(
+					ctx,
+					&a.Aggregate,
+					version,
+					appID,
+					clientID,
+					clientSecret,
+					redirectUris,
+					responseTypes,
+					grantTypes,
+					applicationType,
+					authMethodType,
+					postLogoutRedirectUris,
+					devMode,
+					accessTokenType,
+					accessTokenRoleAssertion,
+					idTokenRoleAssertion,
+					idTokenUserinfoAssertion,
+					clockSkew,
+					additionalOrigins,
+				),
+			}, nil
+		}, nil
+	}
+}
+
+func AddAPIApp(
+	a project.Aggregate,
+	appID,
+	name,
+	clientID string,
+	clientSecret *crypto.CryptoValue,
+	authMethodType domain.APIAuthMethodType,
+) preparation.Validation {
+	return func() (preparation.CreateCommands, error) {
+		if appID == "" {
+			return nil, errors.ThrowInvalidArgument(nil, "PROJE-XHsKt", "Errors.Invalid.Argument")
+		}
+		if name = strings.TrimSpace(name); name == "" {
+			return nil, errors.ThrowInvalidArgument(nil, "PROJE-F7g21", "Errors.Invalid.Argument")
+		}
+		if clientID == "" {
+			return nil, errors.ThrowInvalidArgument(nil, "PROJE-XXED5", "Errors.Invalid.Argument")
+		}
+		return func(ctx context.Context, filter preparation.FilterToQueryReducer) ([]eventstore.Command, error) {
+			if exists, err := ExistsProject(ctx, filter, a.ID, a.ResourceOwner); !exists || err != nil {
+				return nil, errors.ThrowNotFound(err, "PROJE-Sf2gb", "Errors.Project.NotFound")
+			}
+			return []eventstore.Command{
+				project.NewApplicationAddedEvent(
+					ctx,
+					&a.Aggregate,
+					appID,
+					name,
+				),
+				project.NewAPIConfigAddedEvent(
+					ctx,
+					&a.Aggregate,
+					appID,
+					clientID,
+					clientSecret,
+					authMethodType,
+				),
+			}, nil
+		}, nil
+	}
+}
+
+func ExistsApp(ctx context.Context, filter preparation.FilterToQueryReducer, projectID, appID, resourceOwner string) (exists bool, err error) {
+	events, err := filter(ctx, eventstore.NewSearchQueryBuilder(eventstore.ColumnsEvent).
+		ResourceOwner(resourceOwner).
+		OrderAsc().
+		AddQuery().
+		AggregateTypes(project.AggregateType).
+		AggregateIDs(projectID).
+		EventTypes(
+			project.ApplicationAddedType,
+			project.ApplicationRemovedType,
+		).Builder())
+	if err != nil {
+		return false, err
+	}
+
+	for _, event := range events {
+		switch e := event.(type) {
+		case *project.ApplicationAddedEvent:
+			if e.AppID == appID {
+				exists = true
+			}
+		case *project.ApplicationRemovedEvent:
+			if e.AppID == appID {
+				exists = false
+			}
+		}
+	}
+
+	return exists, nil
+}