saml2p Response 返回重复的GrantedAuthority值会导致zabbix SCIM
- Dominant language
- Java
- Stars
- 2k
- Forks
- 410
- PR merge metrics
- No merged PRs in 30d
Description
saml2p Response 报文其中 ROLE_USER 出现了 2 次，ROLE_ALL_USER 也出现了 2 次。
ROLE_USER
ROLE_USER
ROLE_ALL_USER
ROLE_ORDINARY_USER
622178881788444672
622179035744567296
622179241118662656
622179422249680896
622179552155664384
622179692295749632
ROLE_ALL_USER
1294029530771488768
ROLE_zabbix_USER
zabbix登录报错
发生系统错误。请联系 Zabbix 管理员。
SQL描述式执行已失败: "INSERT INTO scim_group (scim_groupid,name) VALUES ('521','ROLE_USER'),('522','ROLE_USER'),('523','ROLE_ALL_USER'),('524','ROLE_ORDINARY_USER'),('525','622178881788444672'),('526','622179035744567296'),('527','622179241118662656'),('528','622179422249680896'),('529','622179552155664384'),('530','622179692295749632'),('531','ROLE_ALL_USER'),('532','1294029530771488768'),('533','ROLE_zabbix_USER')".
Contributor guide
Research direction
Start by reproducing the Zabbix login with the shown SAML2 Response and trace how the repeated GrantedAuthority values become SCIM groups. Confirm the expected behavior from the payload: each authority, including ROLE_USER and ROLE_ALL_USER, should be inserted only once and the login should complete without the SQL error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, authorization
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100