cloudfoundry / cloudfoundry/uaa
Facing issue while fetching List Users, with groups.display and groups.value, as scim filter.
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 1.6k
- Forks
- 844
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 27
Description
Hello Team,
We are using UAA version: 77.10.0
We are on MYSQL DB: 8.0.mysql_aurora.3.05.2
Requirement:
We have a use case, where assume we have 20 users, 10 users belongs to Group_1 and remaining 10 users belongs to Group_2.
We are interested in fetching only those users, which belongs to Group_1.
We tried below 2 options:
Option 1: Using display name of group in filter.
GET - http://localhost:8080/uaa/Users?filter=origin eq "uaa" and groups.display eq "profile"
Its giving empty response:
{
"resources": [],
"startIndex": 1,
"itemsPerPage": 100,
"totalResults": 0,
"schemas": [
"urn:scim:schemas:core:1.0"
]
}
Question: Even if data is present for the display name of group, its giving EMPTY response.
Is this some know limitation / issue??
Please note: This is working for email attribute (http://localhost:8080/uaa/Users?filter=origin eq "uaa" and emails.value co "marissa@test.org")
Option 2: Using Group id in filter.
http://localhost:8080/uaa/Users?filter=origin eq "uaa" and groups.value eq "09e29460-e03a-4941-8c83-1795ba65ea3b"
{
"error_description": "Invalid filter expression: [origin eq "uaa" and groups.value eq "09e29460-e03a-4941-8c83-1795ba65ea3b"] [created]",
"error": "scim",
"message": "Invalid filter expression: [origin eq "uaa" and groups.value eq "09e29460-e03a-4941-8c83-1795ba65ea3b"] [created]"
}
Observation: Looks like this is not supported scim filter. So its not working here.
Can someone help here? We need to query on display name of group.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the two requests against the UAA /Users SCIM endpoint using the supplied UAA and MySQL versions, then trace how filters for groups.display and groups.value are parsed and evaluated. Check existing SCIM filter tests if present. Done means the supported behavior is fixed and covered by tests, or the limitation and accepted query form are documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, mysql
- Domain
- api, authentication, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100