Method idpSyncClaimFieldValues

enterprise/coderd/idpsync.go:811–844

(orgID uuid.UUID, rw http.ResponseWriter, r *http.Request)

}

func (api *API) idpSyncClaimFieldValues(orgID uuid.UUID, rw http.ResponseWriter, r *http.Request) {
	ctx := r.Context()

	claimField := r.URL.Query().Get("claimField")
	if claimField == "" {
		httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
			Message: "claimField query parameter is required",
		})
		return
	}
	fieldValues, err := api.Database.OIDCClaimFieldValues(ctx, database.OIDCClaimFieldValuesParams{
		OrganizationID: orgID,
		ClaimField:     claimField,
	})

	if httpapi.IsUnauthorizedError(err) {
		// Give a helpful error. The user could read the org, so this does not
		// leak anything.
		httpapi.Write(ctx, rw, http.StatusForbidden, codersdk.Response{
			Message: "You do not have permission to view the IDP claim field values",
			Detail:  fmt.Sprintf("%s.read permission is required", rbac.ResourceIdpsyncSettings.Type),
		})
		return
	}
	if err != nil {
		httpapi.InternalServerError(rw, err)
		return
	}
	if fieldValues == nil {
		fieldValues = []string{}
	}

	httpapi.Write(ctx, rw, http.StatusOK, fieldValues)
}

func applyIDPSyncMappingDiff[IDType uuid.UUID | string](
	previous map[string][]IDType,