mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
# Which Problems Are Solved As part of #11035 , this PR implements the IDP intent check logic for session validation # How the Problems Are Solved - Inject encryption algorithm for IDP intent tokens at DB initialization - Add the IDP intent repository as an invoke option - Rework crypto mocks using gomock - Implement IDP intent check logic - minor - DB: expand IDP Intent deletion testing table with a test case where IDP intent is not found # Noteworthy I did not implement `domain.Transactional` given the doubts that @adlerhurst expressed in https://github.com/zitadel/zitadel/pull/11804 . So, there is no transaction AT ALL in here because the `Execute()` method contains one single DB call (Delete) and `Validate()` just does Get calls. # Additional Context This is a cherry-picked PR + minor changes, coming from https://github.com/zitadel/zitadel/pull/11164 - Relates to #11035 - Depends on https://github.com/zitadel/zitadel/pull/11804
141 lines
3.6 KiB
Go
141 lines
3.6 KiB
Go
package domain
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
|
|
"github.com/zitadel/zitadel/backend/v3/storage/database"
|
|
"github.com/zitadel/zitadel/internal/zerrors"
|
|
)
|
|
|
|
type wrongIDPTypeError struct {
|
|
expected IDPType
|
|
got string
|
|
}
|
|
|
|
func NewIDPWrongTypeError(expected IDPType, got fmt.Stringer) error {
|
|
return &wrongIDPTypeError{
|
|
expected: expected,
|
|
got: got.String(),
|
|
}
|
|
}
|
|
|
|
func (e *wrongIDPTypeError) Error() string {
|
|
return fmt.Sprintf("wrong idp type returned, expected: %v, got: %v", e.expected, e.got)
|
|
}
|
|
|
|
func (e *wrongIDPTypeError) Is(target error) bool {
|
|
_, ok := target.(*wrongIDPTypeError)
|
|
return ok
|
|
}
|
|
|
|
type MultipleObjectsUpdatedError struct {
|
|
Msg string
|
|
Expected int64
|
|
Actual int64
|
|
}
|
|
|
|
func NewMultipleObjectsUpdatedError(expected, actual int64) error {
|
|
return &MultipleObjectsUpdatedError{
|
|
Expected: expected,
|
|
Actual: actual,
|
|
}
|
|
}
|
|
|
|
func (err *MultipleObjectsUpdatedError) Error() string {
|
|
return fmt.Sprintf("Message=expecting %d row(s) updated, got %d", err.Expected, err.Actual)
|
|
}
|
|
|
|
func (err *MultipleObjectsUpdatedError) Is(target error) bool {
|
|
_, ok := target.(*MultipleObjectsUpdatedError)
|
|
return ok
|
|
}
|
|
|
|
type UnexpectedQueryTypeError[T any] struct {
|
|
assertedType T
|
|
}
|
|
|
|
func NewUnexpectedQueryTypeError[T any](assertedType T) error {
|
|
return &UnexpectedQueryTypeError[T]{
|
|
assertedType: assertedType,
|
|
}
|
|
}
|
|
|
|
func (u *UnexpectedQueryTypeError[T]) Error() string {
|
|
return fmt.Sprintf("Message=unexpected query type '%T'", u.assertedType)
|
|
}
|
|
|
|
type UnexpectedTextQueryOperationError[T any] struct {
|
|
assertedType T
|
|
}
|
|
|
|
func NewUnexpectedTextQueryOperationError[T any](assertedType T) error {
|
|
return &UnexpectedTextQueryOperationError[T]{
|
|
assertedType: assertedType,
|
|
}
|
|
}
|
|
|
|
func (u *UnexpectedTextQueryOperationError[T]) Error() string {
|
|
return fmt.Sprintf("Message=unexpected text query operation type '%T'", u.assertedType)
|
|
}
|
|
|
|
type PasswordVerificationError struct {
|
|
failedAttempts uint8
|
|
}
|
|
|
|
func NewPasswordVerificationError(failedPassAttempts uint8) error {
|
|
return &PasswordVerificationError{
|
|
failedAttempts: failedPassAttempts,
|
|
}
|
|
}
|
|
|
|
func (e *PasswordVerificationError) Error() string {
|
|
return fmt.Sprintf("Message=failed password attempts (%d)", e.failedAttempts)
|
|
}
|
|
|
|
// handleGetError wraps DB errors coming from Get calls into [zerrors] errors.
|
|
//
|
|
// - errorID should be in the format <package short name>-<random id>
|
|
// - objectType should be the string representation of a DB object (e.g. 'user', 'session', 'idp'...)
|
|
//
|
|
// The function wraps [database.NoRowFoundError] to [zerrors.NotFound] error
|
|
// and any other error to [zerrors.InternalError]
|
|
func handleGetError(inputErr error, errorID, objectType string) error {
|
|
if inputErr == nil {
|
|
return nil
|
|
}
|
|
|
|
if errors.Is(inputErr, &database.NoRowFoundError{}) {
|
|
return zerrors.CreateZitadelError(zerrors.KindNotFound, inputErr, errorID, fmt.Sprintf("%s not found", objectType), 1)
|
|
}
|
|
|
|
return zerrors.CreateZitadelError(zerrors.KindInternal, inputErr, errorID, fmt.Sprintf("failed fetching %s", objectType), 1)
|
|
}
|
|
|
|
func (err *PasswordVerificationError) Is(target error) bool {
|
|
_, ok := target.(*PasswordVerificationError)
|
|
return ok
|
|
}
|
|
|
|
type RowsReturnedMismatchError struct {
|
|
Msg string
|
|
Expected int64
|
|
Actual int64
|
|
}
|
|
|
|
func NewRowsReturnedMismatchError(expected, actual int64) error {
|
|
return &RowsReturnedMismatchError{
|
|
Expected: expected,
|
|
Actual: actual,
|
|
}
|
|
}
|
|
|
|
func (err *RowsReturnedMismatchError) Error() string {
|
|
return fmt.Sprintf("Message=expecting %d row(s) returned, got %d", err.Expected, err.Actual)
|
|
}
|
|
|
|
func (err *RowsReturnedMismatchError) Is(target error) bool {
|
|
_, ok := target.(*RowsReturnedMismatchError)
|
|
return ok
|
|
}
|