Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
127 commits
Select commit Hold shift + click to select a range
31b2e3f
wip groups support
n1ru4l May 18, 2026
48dec9c
indices
n1ru4l Jun 1, 2026
78daa9b
issa unique
n1ru4l Jun 1, 2026
06c1572
typo
n1ru4l Jun 1, 2026
94e1143
implement managing mappings
n1ru4l Jun 1, 2026
35bb050
implement delete
n1ru4l Jun 1, 2026
4319678
these are missing lol
n1ru4l Jun 2, 2026
bf819eb
feat: some more wip; display groups for user and use groups for authz
n1ru4l Jun 5, 2026
33cc90a
scimming?
n1ru4l Jun 5, 2026
62d0f23
cpu time revolution
n1ru4l Jun 5, 2026
cbda5f9
damnnnn
n1ru4l Jun 5, 2026
1620a3a
typo
n1ru4l Jun 5, 2026
dab8c79
groups innit
n1ru4l Jun 6, 2026
d908a7e
fix dem types
n1ru4l Jun 6, 2026
6a83a8a
some types
n1ru4l Jun 6, 2026
1975b3f
some lint
n1ru4l Jun 6, 2026
65a01ca
a bit more safety wont hurt
n1ru4l Jun 6, 2026
0e30318
oidc integration resolution and todo comments
n1ru4l Jun 6, 2026
7875993
more todos
n1ru4l Jun 6, 2026
e56502c
wire up plugin
n1ru4l Jun 6, 2026
e734815
not proud of it but
n1ru4l Jun 8, 2026
348dbc6
more
n1ru4l Jun 8, 2026
3aec497
finally some tests
n1ru4l Jun 8, 2026
42f4ab3
more context
n1ru4l Jun 8, 2026
909f1e4
wip
n1ru4l Jun 10, 2026
2dd6ab7
update external id
n1ru4l Jun 10, 2026
f1e10fc
patch
n1ru4l Jun 10, 2026
eedfe7d
:)
n1ru4l Jun 10, 2026
7429a7a
move things around
n1ru4l Jun 10, 2026
cb04518
no escape needed
n1ru4l Jun 10, 2026
fa13280
sum cleanup
n1ru4l Jun 10, 2026
5c83520
more tests
n1ru4l Jun 10, 2026
938e57d
run some more things in a transaction
n1ru4l Jun 10, 2026
6fd121d
the most basic rate limiting
n1ru4l Jun 10, 2026
46b40a3
offset-based pagination 久しぶり!
n1ru4l Jun 10, 2026
e75de51
tests and fixes for get pagination!
n1ru4l Jun 10, 2026
b065248
path validation
n1ru4l Jun 10, 2026
fa85dbd
run these in a transaction just in case
n1ru4l Jun 10, 2026
1983fd2
take over existing oidc account if the sub/externalId is shared
n1ru4l Jun 11, 2026
4759d51
support setting custom id claim mapping
n1ru4l Jun 11, 2026
5e1680e
no soft delete groups for now
n1ru4l Jun 11, 2026
74a4002
facepalm
n1ru4l Jun 11, 2026
8cc67df
feat: restrict SCIM provisioning to only domains verified with the or…
n1ru4l Jun 13, 2026
88115b0
feat: control "userProvisioningRequired" and "oidcForVerifiedDomainsR…
n1ru4l Jun 14, 2026
39712c0
feat: only update supertokens user attributes if not provisioned
n1ru4l Jun 14, 2026
9c492ab
add future note
n1ru4l Jun 14, 2026
fa0e80d
feat: ensure that a organization admin can still sign in when oidc lo…
n1ru4l Jun 14, 2026
865a409
fix typescript interference
n1ru4l Jun 14, 2026
7c1e5e3
enable feature for integration tests
n1ru4l Jun 14, 2026
15f529a
satisfy the linter
n1ru4l Jun 14, 2026
3fc25a6
add basic crud tests for GraphQL fields "Organization.group", "Organi…
n1ru4l Jun 14, 2026
be15143
cover "Mutation.Mutation.removeGroupMapping" and "Mutation.updateGrou…
n1ru4l Jun 14, 2026
94015e6
use correct sign-in url
n1ru4l Jun 14, 2026
e81f5e7
the situation is a bit messy due to all the things that happen within…
n1ru4l Jun 14, 2026
9467ba7
remove old input parameter
n1ru4l Jun 14, 2026
5ebd5b1
store record creation date on new tables and introduce stable sort fo…
n1ru4l Jun 15, 2026
ab8fffc
use relative imports to address lint issue
n1ru4l Jun 15, 2026
fd1ed8d
add assertion just to be sure
n1ru4l Jun 15, 2026
f13479c
add tests to ensure provisioned user use groups for resolving permiss…
n1ru4l Jun 15, 2026
d2b3831
use the scim endpoints for the disable and infer group assignment tests
n1ru4l Jun 15, 2026
4efedec
one import
n1ru4l Jun 15, 2026
e276162
run patch operation updates as single batch according to RFC 7644 par…
n1ru4l Jul 16, 2026
1f500c7
store updated_at value for groups and users and expose it via the req…
n1ru4l Jul 16, 2026
d0311f8
fix "totalResults" returning the total amount of rows (RFC 7644 3.4.2)
n1ru4l Jul 16, 2026
e581303
format the code
n1ru4l Jul 16, 2026
3570893
include groups property in Users resource to conform with strict SCIM…
n1ru4l Jul 16, 2026
9075ad4
add scim testkit
n1ru4l Jul 16, 2026
4b3c94b
use provisioned user deactivation state and group memberships for res…
n1ru4l Jul 17, 2026
b473167
add support for previding user list during group creation via SCIM API
n1ru4l Jul 20, 2026
98f765d
use shared helper for performing "createPersonalAccessToken" mutation
n1ru4l Jul 20, 2026
86256f7
adjust whoami command implementation being able to show group role as…
n1ru4l Jul 20, 2026
7f3f1b9
add skeleton loader and empty state for group list overview
n1ru4l Jul 21, 2026
0857f83
remove non-existing classes and fix typo message
n1ru4l Jul 21, 2026
82aa6c2
add script for seeding scim users and groups
n1ru4l Jul 21, 2026
a48296f
add new badge component
n1ru4l Jul 21, 2026
ce24043
improve string perf
n1ru4l Jul 21, 2026
6cfa915
refine styles of organization member list. Display groups and disable…
n1ru4l Jul 21, 2026
cf44685
add missing seed script
n1ru4l Jul 21, 2026
d543dcb
implement group filtering
n1ru4l Jul 21, 2026
e2f8b7c
use groups table look for members
n1ru4l Jul 21, 2026
65ad179
fix pluralization
n1ru4l Jul 21, 2026
892bb4d
improve group page styles by using new badge component
n1ru4l Jul 21, 2026
549e3e6
fix eslint issues
n1ru4l Jul 21, 2026
d96a879
rename page
n1ru4l Jul 21, 2026
955e7cb
disallow updating user properties via `User.updateMe` mutation of the…
n1ru4l Jul 23, 2026
e255d4e
disallow provisioned users creating organizations
n1ru4l Jul 23, 2026
60975b6
prevent user from leaving the organization
n1ru4l Jul 23, 2026
0f70a9a
prevent provisioned user being removed from organization
n1ru4l Jul 23, 2026
a94f13a
run all tests
n1ru4l Jul 27, 2026
070403a
restrict direct assignment of a role/group to a provisioned user
n1ru4l Jul 27, 2026
74262c7
prevent provisioned users from joining another organization
n1ru4l Jul 27, 2026
5e657a6
prevent organization ownership transfer to a provisioned user
n1ru4l Jul 27, 2026
af46fa9
prevent account linking to provisioned account
n1ru4l Jul 27, 2026
6e01d28
sync db types
n1ru4l Jul 27, 2026
de5a8e0
support button variants for alert dialog action
n1ru4l Jul 27, 2026
0fe6f00
fix destructive state of delete role assignment confirm button
n1ru4l Jul 27, 2026
175b8df
allow managing the user id claim from the organization oidc settings
n1ru4l Jul 27, 2026
bb9b395
small ui tweaks
n1ru4l Jul 27, 2026
579f6e8
entra id adjustments
n1ru4l Jul 28, 2026
df5f745
refactor test cases to use testkit
n1ru4l Jul 28, 2026
98211c0
move `UpdateOIDCIntegrationInput.userProvisioningRequired` and `Updat…
n1ru4l Jul 28, 2026
5186895
implement ui for enforcing login through the oidc provider and enforc…
n1ru4l Jul 28, 2026
b4c3d7a
remove unused vars
n1ru4l Jul 28, 2026
0cdc5b6
prevent assigning a member role form a different organization to a role
n1ru4l Jul 28, 2026
e63f067
ensure the correct content type is used
n1ru4l Jul 28, 2026
6752979
support `excludeAttributes=members` for the `GET /Groups/:id` endpoint.
n1ru4l Jul 28, 2026
75bcf4c
correctly handle patch user operation with mixed filtered email update
n1ru4l Jul 28, 2026
20fb345
ensure that batched user additions and removals are applied in sequen…
n1ru4l Jul 28, 2026
80dca31
i dont want to cd into integreation-tests anymore
n1ru4l Jul 29, 2026
0766c6e
ensure operations are atomic
n1ru4l Jul 29, 2026
0c01d13
remove unused method
n1ru4l Jul 29, 2026
94a68b9
fix tests
n1ru4l Jul 29, 2026
7464cc7
add audit log
n1ru4l Jul 29, 2026
d6549a5
introduce dedicated permission `scim:provision` for all scim operations
n1ru4l Jul 29, 2026
d536587
fix clickhouse import
n1ru4l Jul 29, 2026
0f33300
pass null in case no user id claim is set
n1ru4l Jul 29, 2026
06695b2
expose scim endpoint via deployment config
n1ru4l Jul 29, 2026
f37a2db
do not include the user id claim as a requested scope
n1ru4l Jul 29, 2026
74c15c0
:facepalm: of shame
n1ru4l Jul 30, 2026
864b6ff
add index for invalidating supertoken sessions
n1ru4l Jul 30, 2026
1e61535
cleanup code
n1ru4l Jul 30, 2026
79f415f
improve class name
n1ru4l Jul 30, 2026
e6cdfa6
remove codegen comments
n1ru4l Jul 30, 2026
648b610
no trpc
n1ru4l Jul 30, 2026
ff88321
oops
n1ru4l Jul 30, 2026
ff233fb
fix imports
n1ru4l Jul 30, 2026
61a968f
scim opt-in via feature flag
n1ru4l Aug 3, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions deployment/services/proxy.ts
Original file line number Diff line number Diff line change
Expand Up @@ -122,5 +122,13 @@ export function deployProxy({
requestTimeout: '60s',
retriable: true,
},
{
name: 'scim-provisioning',
path: '/scim/v2',
customRewrite: '/scim/v2',
service: publicGraphQLAPIGateway.service,
requestTimeout: '60s',
retriable: true,
},
]);
}
1 change: 1 addition & 0 deletions e2e/fixtures.ts
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@ async function createSeedHelper(): Promise<SeedHelper> {
async seedOrg() {
const owner = await seed.createOwner();
const org = await owner.createOrg();
await org.setFeatureFlag('scim', true);

return {
slug: org.organization.slug,
Expand Down
1 change: 1 addition & 0 deletions integration-tests/docker-compose.integration.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -187,6 +187,7 @@ services:
# Auth
WEB_APP_URL: '${HIVE_APP_BASE_URL}'
AUTH_ORGANIZATION_OIDC: '1'
AUTH_ORGANIZATION_SCIM: '1'
AUTH_REQUIRE_EMAIL_VERIFICATION: '1'
GRAPHQL_PUBLIC_ORIGIN: http://localhost:8082
SUPERTOKENS_RATE_LIMIT: '0'
Expand Down
Loading
Loading