mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
- Transitioned from using `handler.Statements` to a repository pattern for managing organization data in migrations. - Introduced a new method to set the updated timestamp for organizations. - Updated the projection logic to utilize the repository for creating, updating, and deleting organization records.
396 lines
14 KiB
Go
396 lines
14 KiB
Go
package repository
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/zitadel/zitadel/backend/v3/domain"
|
|
"github.com/zitadel/zitadel/backend/v3/storage/database"
|
|
)
|
|
|
|
// -------------------------------------------------------------
|
|
// repository
|
|
// -------------------------------------------------------------
|
|
|
|
var _ domain.OrganizationRepository = (*org)(nil)
|
|
|
|
type org struct {
|
|
shouldLoadDomains bool
|
|
domainRepo orgDomain
|
|
shouldLoadMetadata bool
|
|
metadataRepo orgMetadata
|
|
}
|
|
|
|
func (o org) unqualifiedTableName() string {
|
|
return "organizations"
|
|
}
|
|
|
|
func (o org) qualifiedTableName() string {
|
|
return "zitadel.organizations"
|
|
}
|
|
|
|
func OrganizationRepository() domain.OrganizationRepository {
|
|
return new(org)
|
|
}
|
|
|
|
const queryOrganizationStmt = `SELECT organizations.id, organizations.name, organizations.instance_id, organizations.state, organizations.created_at, organizations.updated_at` +
|
|
` , jsonb_agg(DISTINCT jsonb_build_object('instanceId', org_domains.instance_id, 'orgId', org_domains.org_id, 'domain', org_domains.domain, 'isVerified', org_domains.is_verified, 'isPrimary', org_domains.is_primary, 'validationType', org_domains.validation_type, 'createdAt', org_domains.created_at, 'updatedAt', org_domains.updated_at)) FILTER (WHERE org_domains.org_id IS NOT NULL) AS domains` +
|
|
` , jsonb_agg(DISTINCT jsonb_build_object('instanceId', organization_metadata.instance_id, 'orgId', organization_metadata.organization_id, 'key', organization_metadata.key, 'value', encode(organization_metadata.value, 'base64'), 'createdAt', organization_metadata.created_at, 'updatedAt', organization_metadata.updated_at)) FILTER (WHERE organization_metadata.organization_id IS NOT NULL) AS metadata` +
|
|
` FROM zitadel.organizations`
|
|
|
|
// Get implements [domain.OrganizationRepository].
|
|
func (o org) Get(ctx context.Context, client database.QueryExecutor, opts ...database.QueryOption) (*domain.Organization, error) {
|
|
opts = append(opts,
|
|
o.joinDomains(),
|
|
o.joinMetadata(),
|
|
database.WithGroupBy(o.InstanceIDColumn(), o.IDColumn()),
|
|
)
|
|
|
|
options := new(database.QueryOpts)
|
|
for _, opt := range opts {
|
|
opt(options)
|
|
}
|
|
|
|
if !options.Condition.IsRestrictingColumn(o.InstanceIDColumn()) {
|
|
return nil, database.NewMissingConditionError(o.InstanceIDColumn())
|
|
}
|
|
|
|
var builder database.StatementBuilder
|
|
builder.WriteString(queryOrganizationStmt)
|
|
options.Write(&builder)
|
|
|
|
return scanOrganization(ctx, client, &builder)
|
|
}
|
|
|
|
// List implements [domain.OrganizationRepository].
|
|
func (o org) List(ctx context.Context, client database.QueryExecutor, opts ...database.QueryOption) ([]*domain.Organization, error) {
|
|
opts = append(opts,
|
|
o.joinDomains(),
|
|
o.joinMetadata(),
|
|
database.WithGroupBy(o.InstanceIDColumn(), o.IDColumn()),
|
|
)
|
|
|
|
options := new(database.QueryOpts)
|
|
for _, opt := range opts {
|
|
opt(options)
|
|
}
|
|
|
|
if !options.Condition.IsRestrictingColumn(o.InstanceIDColumn()) {
|
|
return nil, database.NewMissingConditionError(o.InstanceIDColumn())
|
|
}
|
|
|
|
var builder database.StatementBuilder
|
|
builder.WriteString(queryOrganizationStmt)
|
|
options.Write(&builder)
|
|
|
|
return scanOrganizations(ctx, client, &builder)
|
|
}
|
|
|
|
// Create implements [domain.OrganizationRepository].
|
|
func (o org) Create(ctx context.Context, client database.QueryExecutor, organization *domain.Organization) error {
|
|
var (
|
|
builder database.StatementBuilder
|
|
createdAt, updatedAt any = database.DefaultInstruction, database.DefaultInstruction
|
|
)
|
|
|
|
if !organization.CreatedAt.IsZero() {
|
|
createdAt = organization.CreatedAt
|
|
}
|
|
if !organization.UpdatedAt.IsZero() {
|
|
updatedAt = organization.UpdatedAt
|
|
}
|
|
|
|
builder.WriteString("INSERT INTO ")
|
|
builder.WriteString(o.qualifiedTableName())
|
|
builder.WriteString(" (id, name, instance_id, state, created_at, updated_at) VALUES (")
|
|
builder.WriteArgs(organization.ID, organization.Name, organization.InstanceID, organization.State, createdAt, updatedAt)
|
|
builder.WriteString(") RETURNING created_at, updated_at")
|
|
return client.QueryRow(ctx, builder.String(), builder.Args()...).Scan(&organization.CreatedAt, &organization.UpdatedAt)
|
|
}
|
|
|
|
// Update implements [domain.OrganizationRepository].
|
|
func (o org) Update(ctx context.Context, client database.QueryExecutor, condition database.Condition, changes ...database.Change) (int64, error) {
|
|
if len(changes) == 0 {
|
|
return 0, database.ErrNoChanges
|
|
}
|
|
if !condition.IsRestrictingColumn(o.InstanceIDColumn()) {
|
|
return 0, database.NewMissingConditionError(o.InstanceIDColumn())
|
|
}
|
|
if !database.Changes(changes).IsOnColumn(o.UpdatedAtColumn()) {
|
|
changes = append(changes, database.NewChange(o.UpdatedAtColumn(), database.NullInstruction))
|
|
}
|
|
|
|
var builder database.StatementBuilder
|
|
builder.WriteString(`UPDATE `)
|
|
builder.WriteString(o.qualifiedTableName())
|
|
builder.WriteString(` SET `)
|
|
err := database.Changes(changes).Write(&builder)
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
writeCondition(&builder, condition)
|
|
|
|
stmt := builder.String()
|
|
|
|
rowsAffected, err := client.Exec(ctx, stmt, builder.Args()...)
|
|
return rowsAffected, err
|
|
}
|
|
|
|
// Delete implements [domain.OrganizationRepository].
|
|
func (o org) Delete(ctx context.Context, client database.QueryExecutor, condition database.Condition) (int64, error) {
|
|
if !condition.IsRestrictingColumn(o.InstanceIDColumn()) {
|
|
return 0, database.NewMissingConditionError(o.InstanceIDColumn())
|
|
}
|
|
|
|
var builder database.StatementBuilder
|
|
builder.WriteString(`DELETE FROM `)
|
|
builder.WriteString(o.qualifiedTableName())
|
|
writeCondition(&builder, condition)
|
|
|
|
return client.Exec(ctx, builder.String(), builder.Args()...)
|
|
}
|
|
|
|
// -------------------------------------------------------------
|
|
// changes
|
|
// -------------------------------------------------------------
|
|
|
|
// SetName implements [domain.organizationChanges].
|
|
func (o org) SetName(name string) database.Change {
|
|
return database.NewChange(o.NameColumn(), name)
|
|
}
|
|
|
|
// SetState implements [domain.organizationChanges].
|
|
func (o org) SetState(state domain.OrgState) database.Change {
|
|
return database.NewChange(o.StateColumn(), state)
|
|
}
|
|
|
|
// SetUpdatedAt implements [domain.organizationChanges].
|
|
func (o org) SetUpdatedAt(updatedAt time.Time) database.Change {
|
|
return database.NewChange(o.UpdatedAtColumn(), updatedAt)
|
|
}
|
|
|
|
// -------------------------------------------------------------
|
|
// conditions
|
|
// -------------------------------------------------------------
|
|
|
|
func (o org) PrimaryKeyCondition(instanceID, orgID string) database.Condition {
|
|
return database.And(
|
|
o.InstanceIDCondition(instanceID),
|
|
o.IDCondition(orgID),
|
|
)
|
|
}
|
|
|
|
// IDCondition implements [domain.organizationConditions].
|
|
func (o org) IDCondition(id string) database.Condition {
|
|
return database.NewTextCondition(o.IDColumn(), database.TextOperationEqual, id)
|
|
}
|
|
|
|
// NameCondition implements [domain.organizationConditions].
|
|
func (o org) NameCondition(op database.TextOperation, name string) database.Condition {
|
|
return database.NewTextCondition(o.NameColumn(), op, name)
|
|
}
|
|
|
|
// InstanceIDCondition implements [domain.organizationConditions].
|
|
func (o org) InstanceIDCondition(instanceID string) database.Condition {
|
|
return database.NewTextCondition(o.InstanceIDColumn(), database.TextOperationEqual, instanceID)
|
|
}
|
|
|
|
// StateCondition implements [domain.organizationConditions].
|
|
func (o org) StateCondition(state domain.OrgState) database.Condition {
|
|
return database.NewTextCondition(o.StateColumn(), database.TextOperationEqual, state.String())
|
|
}
|
|
|
|
// ExistsDomain creates a correlated [database.Exists] condition on org_domains.
|
|
// Use this filter to make sure the organization returned contains a specific domain.
|
|
// Example usage:
|
|
//
|
|
// domainRepo := orgRepo.Domains(true) // ensure domains are loaded/aggregated
|
|
// org, _ := orgRepo.Get(ctx,
|
|
// database.WithCondition(
|
|
// database.And(
|
|
// orgRepo.InstanceIDCondition(instanceID),
|
|
// orgRepo.ExistsDomain(domainRepo.DomainCondition(database.TextOperationEqual, "example.com")),
|
|
// ),
|
|
// ),
|
|
// )
|
|
func (o org) ExistsDomain(cond database.Condition) database.Condition {
|
|
return database.Exists(
|
|
o.domainRepo.qualifiedTableName(),
|
|
database.And(
|
|
database.NewColumnCondition(o.InstanceIDColumn(), o.domainRepo.InstanceIDColumn()),
|
|
database.NewColumnCondition(o.IDColumn(), o.domainRepo.OrgIDColumn()),
|
|
cond,
|
|
),
|
|
)
|
|
}
|
|
|
|
// ExistsMetadata creates a correlated [database.Exists] condition on organization_metadata.
|
|
// Use this when you want to filter organizations by a metadata condition but still return all metadata
|
|
// of the organization in the aggregated result.
|
|
// Example usage:
|
|
//
|
|
// metadataRepo := orgRepo.Metadata(true) // ensure metadata are loaded/aggregated
|
|
// org, _ := orgRepo.Get(ctx,
|
|
// database.WithCondition(
|
|
// database.And(
|
|
// orgRepo.InstanceIDCondition(instanceID),
|
|
// orgRepo.MetadataExists(metadataRepo.KeyCondition(database.TextOperationEqual, "urn:zitadel:org:custom:my-key")),
|
|
// ),
|
|
// ),
|
|
// )
|
|
func (o org) ExistsMetadata(cond database.Condition) database.Condition {
|
|
return database.Exists(
|
|
o.metadataRepo.qualifiedTableName(),
|
|
database.And(
|
|
database.NewColumnCondition(o.InstanceIDColumn(), o.metadataRepo.InstanceIDColumn()),
|
|
database.NewColumnCondition(o.IDColumn(), o.metadataRepo.OrganizationIDColumn()),
|
|
cond,
|
|
),
|
|
)
|
|
}
|
|
|
|
// -------------------------------------------------------------
|
|
// columns
|
|
// -------------------------------------------------------------
|
|
|
|
// PrimaryKeyColumns implements [domain.Repository].
|
|
func (o org) PrimaryKeyColumns() []database.Column {
|
|
return []database.Column{
|
|
o.InstanceIDColumn(),
|
|
o.IDColumn(),
|
|
}
|
|
}
|
|
|
|
// IDColumn implements [domain.organizationColumns].
|
|
func (o org) IDColumn() database.Column {
|
|
return database.NewColumn(o.unqualifiedTableName(), "id")
|
|
}
|
|
|
|
// NameColumn implements [domain.organizationColumns].
|
|
func (o org) NameColumn() database.Column {
|
|
return database.NewColumn(o.unqualifiedTableName(), "name")
|
|
}
|
|
|
|
// InstanceIDColumn implements [domain.organizationColumns].
|
|
func (o org) InstanceIDColumn() database.Column {
|
|
return database.NewColumn(o.unqualifiedTableName(), "instance_id")
|
|
}
|
|
|
|
// StateColumn implements [domain.organizationColumns].
|
|
func (o org) StateColumn() database.Column {
|
|
return database.NewColumn(o.unqualifiedTableName(), "state")
|
|
}
|
|
|
|
// CreatedAtColumn implements [domain.organizationColumns].
|
|
func (o org) CreatedAtColumn() database.Column {
|
|
return database.NewColumn(o.unqualifiedTableName(), "created_at")
|
|
}
|
|
|
|
// UpdatedAtColumn implements [domain.organizationColumns].
|
|
func (o org) UpdatedAtColumn() database.Column {
|
|
return database.NewColumn(o.unqualifiedTableName(), "updated_at")
|
|
}
|
|
|
|
// -------------------------------------------------------------
|
|
// scanners
|
|
// -------------------------------------------------------------
|
|
|
|
type rawOrg struct {
|
|
*domain.Organization
|
|
Domains JSONArray[domain.OrganizationDomain] `json:"domains,omitempty" db:"domains"`
|
|
Metadata JSONArray[domain.OrganizationMetadata] `json:"metadata,omitempty" db:"metadata"`
|
|
}
|
|
|
|
func scanOrganization(ctx context.Context, querier database.Querier, builder *database.StatementBuilder) (*domain.Organization, error) {
|
|
rows, err := querier.Query(ctx, builder.String(), builder.Args()...)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
var org rawOrg
|
|
if err := rows.(database.CollectableRows).CollectExactlyOneRow(&org); err != nil {
|
|
return nil, err
|
|
}
|
|
org.Organization.Domains = org.Domains
|
|
org.Organization.Metadata = org.Metadata
|
|
|
|
return org.Organization, nil
|
|
}
|
|
|
|
func scanOrganizations(ctx context.Context, querier database.Querier, builder *database.StatementBuilder) ([]*domain.Organization, error) {
|
|
rows, err := querier.Query(ctx, builder.String(), builder.Args()...)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
var orgs []*rawOrg
|
|
if err := rows.(database.CollectableRows).Collect(&orgs); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
result := make([]*domain.Organization, len(orgs))
|
|
for i, org := range orgs {
|
|
result[i] = org.Organization
|
|
result[i].Domains = org.Domains
|
|
result[i].Metadata = org.Metadata
|
|
}
|
|
|
|
return result, nil
|
|
}
|
|
|
|
// -------------------------------------------------------------
|
|
// sub repositories
|
|
// -------------------------------------------------------------
|
|
|
|
func (o org) LoadDomains() domain.OrganizationRepository {
|
|
return &org{
|
|
shouldLoadDomains: true,
|
|
shouldLoadMetadata: o.shouldLoadMetadata,
|
|
}
|
|
}
|
|
|
|
func (o org) joinDomains() database.QueryOption {
|
|
columns := make([]database.Condition, 0, 3)
|
|
columns = append(columns,
|
|
database.NewColumnCondition(o.InstanceIDColumn(), o.domainRepo.InstanceIDColumn()),
|
|
database.NewColumnCondition(o.IDColumn(), o.domainRepo.OrgIDColumn()),
|
|
)
|
|
|
|
// If domains should not be joined, we make sure to return null for the domain columns
|
|
// the query optimizer of the dialect should optimize this away if no domains are requested
|
|
if !o.shouldLoadDomains {
|
|
columns = append(columns, database.IsNull(o.domainRepo.OrgIDColumn()))
|
|
}
|
|
|
|
return database.WithLeftJoin(
|
|
o.domainRepo.qualifiedTableName(),
|
|
database.And(columns...),
|
|
)
|
|
}
|
|
|
|
func (o org) LoadMetadata() domain.OrganizationRepository {
|
|
return &org{
|
|
shouldLoadDomains: o.shouldLoadDomains,
|
|
shouldLoadMetadata: true,
|
|
}
|
|
}
|
|
|
|
func (o org) joinMetadata() database.QueryOption {
|
|
columns := make([]database.Condition, 0, 3)
|
|
columns = append(columns,
|
|
database.NewColumnCondition(o.InstanceIDColumn(), o.metadataRepo.InstanceIDColumn()),
|
|
database.NewColumnCondition(o.IDColumn(), o.metadataRepo.OrganizationIDColumn()),
|
|
)
|
|
|
|
// If metadata should not be joined, we make sure to return null for the metadata columns
|
|
// the query optimizer of the dialect should optimize this away if no metadata are requested
|
|
if !o.shouldLoadMetadata {
|
|
columns = append(columns, database.IsNull(o.metadataRepo.OrganizationIDColumn()))
|
|
}
|
|
|
|
return database.WithLeftJoin(
|
|
o.metadataRepo.qualifiedTableName(),
|
|
database.And(columns...),
|
|
)
|
|
}
|