cloudfoundry / cloudfoundry/uaa

Facing issue while fetching List Users, with groups.display and groups.value, as scim filter.

Open
#3,384 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Java
Stars
1.6k
Forks
844
Avg merge
2d 5h
Merged PRs (30d)
27

Description

Hello Team,

We are using UAA version: 77.10.0
We are on MYSQL DB: 8.0.mysql_aurora.3.05.2

Requirement:

We have a use case, where assume we have 20 users, 10 users belongs to Group_1 and remaining 10 users belongs to Group_2.

We are interested in fetching only those users, which belongs to Group_1.

We tried below 2 options:

Option 1: Using display name of group in filter.

GET - http://localhost:8080/uaa/Users?filter=origin eq "uaa" and groups.display eq "profile"

Its giving empty response:
{
"resources": [],
"startIndex": 1,
"itemsPerPage": 100,
"totalResults": 0,
"schemas": [
"urn:scim:schemas:core:1.0"
]
}

Question: Even if data is present for the display name of group, its giving EMPTY response.
Is this some know limitation / issue??

Please note: This is working for email attribute (http://localhost:8080/uaa/Users?filter=origin eq "uaa" and emails.value co "marissa@test.org")

Option 2: Using Group id in filter.
http://localhost:8080/uaa/Users?filter=origin eq "uaa" and groups.value eq "09e29460-e03a-4941-8c83-1795ba65ea3b"
{
"error_description": "Invalid filter expression: [origin eq "uaa" and groups.value eq "09e29460-e03a-4941-8c83-1795ba65ea3b"] [created]",
"error": "scim",
"message": "Invalid filter expression: [origin eq "uaa" and groups.value eq "09e29460-e03a-4941-8c83-1795ba65ea3b"] [created]"
}

Observation: Looks like this is not supported scim filter. So its not working here.

Can someone help here? We need to query on display name of group.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the two requests against the UAA /Users SCIM endpoint using the supplied UAA and MySQL versions, then trace how filters for groups.display and groups.value are parsed and evaluated. Check existing SCIM filter tests if present. Done means the supported behavior is fixed and covered by tests, or the limitation and accepted query form are documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, mysql
Domain
api, authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.