Matrix-Mirrors/synapse-product
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse-product.git synced 2024-12-17 17:34:21 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix error messages from OIDC config parsing (#9153)

Browse Source 
Make sure we report the correct config path for errors in the OIDC configs.
This commit is contained in:
Richard van der Hoff 2021-01-19 14:56:54 +00:00 committed by GitHub
parent de45bf5b5b
commit 73b03722f4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 16 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
changelog.d/9153.feature Normal file
View File

@ -0,0 +1 @@
Add support for multiple SSO Identity Providers.

25
synapse/config/oidc_config.py
View File

@ -15,7 +15,7 @@
# limitations under the License. # limitations under the License.
import string import string
from typing import Iterable, Optional, Type from typing import Iterable, Optional, Tuple, Type
import attr import attr
@ -280,8 +280,8 @@ def _parse_oidc_provider_configs(config: JsonDict) -> Iterable["OidcProviderConf
""" """
validate_config(MAIN_CONFIG_SCHEMA, config, ()) validate_config(MAIN_CONFIG_SCHEMA, config, ())
for p in config.get("oidc_providers") or []: for i, p in enumerate(config.get("oidc_providers") or []):
yield _parse_oidc_config_dict(p) yield _parse_oidc_config_dict(p, ("oidc_providers", "<item %i>" % (i,)))
# for backwards-compatibility, it is also possible to provide a single "oidc_config" # for backwards-compatibility, it is also possible to provide a single "oidc_config"
# object with an "enabled: True" property. # object with an "enabled: True" property.
@ -291,10 +291,12 @@ def _parse_oidc_provider_configs(config: JsonDict) -> Iterable["OidcProviderConf
# it matches OIDC_PROVIDER_CONFIG_SCHEMA (see the comments on OIDC_CONFIG_SCHEMA # it matches OIDC_PROVIDER_CONFIG_SCHEMA (see the comments on OIDC_CONFIG_SCHEMA
# above), so now we need to validate it. # above), so now we need to validate it.
validate_config(OIDC_PROVIDER_CONFIG_SCHEMA, oidc_config, ("oidc_config",)) validate_config(OIDC_PROVIDER_CONFIG_SCHEMA, oidc_config, ("oidc_config",))
yield _parse_oidc_config_dict(oidc_config) yield _parse_oidc_config_dict(oidc_config, ("oidc_config",))
def _parse_oidc_config_dict(oidc_config: JsonDict) -> "OidcProviderConfig": def _parse_oidc_config_dict(
oidc_config: JsonDict, config_path: Tuple[str, ...]
) -> "OidcProviderConfig":
"""Take the configuration dict and parse it into an OidcProviderConfig """Take the configuration dict and parse it into an OidcProviderConfig
Raises: Raises:
@ -305,7 +307,7 @@ def _parse_oidc_config_dict(oidc_config: JsonDict) -> "OidcProviderConfig":
ump_config.setdefault("config", {}) ump_config.setdefault("config", {})
(user_mapping_provider_class, user_mapping_provider_config,) = load_module( (user_mapping_provider_class, user_mapping_provider_config,) = load_module(
ump_config, ("oidc_config", "user_mapping_provider") ump_config, config_path + ("user_mapping_provider",)
) )
# Ensure loaded user mapping module has defined all necessary methods # Ensure loaded user mapping module has defined all necessary methods
@ -320,9 +322,9 @@ def _parse_oidc_config_dict(oidc_config: JsonDict) -> "OidcProviderConfig":
] ]
if missing_methods: if missing_methods:
raise ConfigError( raise ConfigError(
"Class specified by oidc_config." "Class %s is missing required "
"user_mapping_provider.module is missing required " "methods: %s" % (user_mapping_provider_class, ", ".join(missing_methods),),
"methods: %s" % (", ".join(missing_methods),) config_path + ("user_mapping_provider", "module"),
) )
# MSC2858 will appy certain limits in what can be used as an IdP id, so let's # MSC2858 will appy certain limits in what can be used as an IdP id, so let's
@ -331,7 +333,10 @@ def _parse_oidc_config_dict(oidc_config: JsonDict) -> "OidcProviderConfig":
valid_idp_chars = set(string.ascii_letters + string.digits + "-._~") valid_idp_chars = set(string.ascii_letters + string.digits + "-._~")
if any(c not in valid_idp_chars for c in idp_id): if any(c not in valid_idp_chars for c in idp_id):
raise ConfigError('idp_id may only contain A-Z, a-z, 0-9, "-", ".", "_", "~"') raise ConfigError(
'idp_id may only contain A-Z, a-z, 0-9, "-", ".", "_", "~"',
config_path + ("idp_id",),
)
return OidcProviderConfig( return OidcProviderConfig(
idp_id=idp_id, idp_id=idp_id,