53 lines
1.3 KiB
Ruby
53 lines
1.3 KiB
Ruby
|
# SAML extension for User model
|
||
|
|
#
|
||
|
|
# * Find GitLab user based on SAML uid and provider
|
||
|
|
# * Create new user from SAML data
|
||
|
|
#
|
||
|
|
module Gitlab
|
||
|
|
module Auth
|
||
|
|
module Saml
|
||
|
|
class User < Gitlab::Auth::OAuth::User
|
||
|
|
def save
|
||
|
|
super('SAML')
|
||
|
|
end
|
||
|
|
|
||
|
|
def find_user
|
||
|
|
user = find_by_uid_and_provider
|
||
|
|
|
||
|
|
user ||= find_by_email if auto_link_saml_user?
|
||
|
|
user ||= find_or_build_ldap_user if auto_link_ldap_user?
|
||
|
|
user ||= build_new_user if signup_enabled?
|
||
|
|
|
||
|
|
if external_users_enabled? && user
|
||
|
|
# Check if there is overlap between the user's groups and the external groups
|
||
|
|
# setting then set user as external or internal.
|
||
|
|
user.external = !(auth_hash.groups & Gitlab::Auth::Saml::Config.external_groups).empty?
|
||
|
|
end
|
||
|
|
|
||
|
|
user
|
||
|
|
end
|
||
|
|
|
||
|
|
def changed?
|
||
|
|
return true unless gl_user
|
||
|
|
|
||
|
|
gl_user.changed? || gl_user.identities.any?(&:changed?)
|
||
|
|
end
|
||
|
|
|
||
|
|
protected
|
||
|
|
|
||
|
|
def auto_link_saml_user?
|
||
|
|
Gitlab.config.omniauth.auto_link_saml_user
|
||
|
|
end
|
||
|
|
|
||
|
|
def external_users_enabled?
|
||
|
|
!Gitlab::Auth::Saml::Config.external_groups.nil?
|
||
|
|
end
|
||
|
|
|
||
|
|
def auth_hash=(auth_hash)
|
||
|
|
@auth_hash = Gitlab::Auth::Saml::AuthHash.new(auth_hash)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|