[SCIM] can create a user with a corrupted email property
See original GitHub issueHello 😃
When creating a user without an email, then doing the following PATCH operations, the attributes in the DB do not have a value for parent_attribute_id
.
To reproduce:
- POST a user
{"schemas":["urn:ietf:params:scim:schemas:core:2.0:User","urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"],"externalId":"78a07f0c-c4b9-47da-8cff-fd1fc5391dfc","userName":"test@test.com","active":true,"displayName":"Test Test","meta":{"resourceType":"User"},"name":{"formatted":"Test Test","familyName":"Test","givenName":"Test"}}
- PATCH the created user
{"schemas":["urn:ietf:params:scim:api:messages:2.0:PatchOp"],"Operations":[{"op":"Add","path":"emails[type eq "work"].primary","value":"true"},{"op":"Add","path":"emails[type eq "work"].type","value":"work"}]}
Now theparent_attribute_id
values will be null, and there won’t be an attribute with emails
full path.
- PATCH again
{"schemas":["urn:ietf:params:scim:api:messages:2.0:PatchOp"],"Operations":[{"op":"Add","path":"emails[type eq \"work\"].value","value":"test@test.com"},{"op":"Add","path":"emails[type eq "work"].primary","value":"true"},{"op":"Add","path":"emails[type eq "work"].type","value":"work"}]}
Now when you GET this user, you’ll see its email and other attributes as top level keys in the returned representation.
Do you know why is this happening?
Kind regards Dan
Issue Analytics
- State:
- Created 8 months ago
- Comments:9 (4 by maintainers)
Top Results From Across the Web
Email property under contact information not populated on ...
Hi, I create a new user on Azure and find that the email property of the user under contact information is not updated....
Read more >None of the SCIM Mapping matched to create user
For SCIM mapping containing incorrect attribute name or value · Login to the inSync Management Console and go to Manage > Deployments >...
Read more >SCIM API Error Handling | HID Authentication Service
The Error responses are defined in the RFC release version [SCIM-Core]. ... Authentication type code is used by system, user cannot create an...
Read more >FAQ
The BSR's SCIM integration uses the user's email address to match an IdP user. Users can fail to provision from the IdP to...
Read more >Azure SCIM custom attribute - email domain as a passed ...
I would like to somehow take the information from the email field from the user properties. I have gone through the custom expression...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Yes it is covered with UTs
Is this covered with UTs on your end?