question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[SCIM] can create a user with a corrupted email property

See original GitHub issue

Hello 😃

When creating a user without an email, then doing the following PATCH operations, the attributes in the DB do not have a value for parent_attribute_id.

To reproduce:

  1. POST a user
{"schemas":["urn:ietf:params:scim:schemas:core:2.0:User","urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"],"externalId":"78a07f0c-c4b9-47da-8cff-fd1fc5391dfc","userName":"test@test.com","active":true,"displayName":"Test Test","meta":{"resourceType":"User"},"name":{"formatted":"Test Test","familyName":"Test","givenName":"Test"}}
  1. PATCH the created user
{"schemas":["urn:ietf:params:scim:api:messages:2.0:PatchOp"],"Operations":[{"op":"Add","path":"emails[type eq "work"].primary","value":"true"},{"op":"Add","path":"emails[type eq "work"].type","value":"work"}]}

Now theparent_attribute_id values will be null, and there won’t be an attribute with emails full path.

  1. PATCH again
{"schemas":["urn:ietf:params:scim:api:messages:2.0:PatchOp"],"Operations":[{"op":"Add","path":"emails[type eq \"work\"].value","value":"test@test.com"},{"op":"Add","path":"emails[type eq "work"].primary","value":"true"},{"op":"Add","path":"emails[type eq "work"].type","value":"work"}]}

Now when you GET this user, you’ll see its email and other attributes as top level keys in the returned representation.

Do you know why is this happening?

Kind regards Dan

Issue Analytics

  • State:closed
  • Created 8 months ago
  • Comments:9 (4 by maintainers)

github_iconTop GitHub Comments

1reaction
simpleidservercommented, Jan 24, 2023

Yes it is covered with UTs

0reactions
danflomincommented, Jan 24, 2023

Is this covered with UTs on your end?

Read more comments on GitHub >

github_iconTop Results From Across the Web

Email property under contact information not populated on ...
Hi, I create a new user on Azure and find that the email property of the user under contact information is not updated....
Read more >
None of the SCIM Mapping matched to create user
For SCIM mapping containing incorrect attribute name or value · Login to the inSync Management Console and go to Manage > Deployments >...
Read more >
SCIM API Error Handling | HID Authentication Service
The Error responses are defined in the RFC release version [SCIM-Core]. ... Authentication type code is used by system, user cannot create an...
Read more >
FAQ
The BSR's SCIM integration uses the user's email address to match an IdP user. Users can fail to provision from the IdP to...
Read more >
Azure SCIM custom attribute - email domain as a passed ...
I would like to somehow take the information from the email field from the user properties. I have gone through the custom expression...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found