Method patchGroupIDPSyncMapping

enterprise/coderd/idpsync.go:217–279

@Summary Update group IdP Sync mapping @ID update-group-idp-sync-mapping @Security CoderSessionToken @Produce json @Accept json @Tags Enterprise @Success 200 {object} codersdk.GroupSyncSettings @Param organization path string true "Organization ID or name" format(uuid) @Param request body codersdk.P

(rw http.ResponseWriter, r *http.Request)

// @Param request body codersdk.PatchGroupIDPSyncMappingRequest true "Description of the mappings to add and remove"
// @Router /api/v2/organizations/{organization}/settings/idpsync/groups/mapping [patch]
func (api *API) patchGroupIDPSyncMapping(rw http.ResponseWriter, r *http.Request) {
	ctx := r.Context()
	org := httpmw.OrganizationParam(r)
	auditor := *api.AGPL.Auditor.Load()
	aReq, commitAudit := audit.InitRequest[idpsync.GroupSyncSettings](rw, &audit.RequestParams{
		Audit:          auditor,
		Log:            api.Logger,
		Request:        r,
		Action:         database.AuditActionWrite,
		OrganizationID: org.ID,
	})
	defer commitAudit()

	if !api.Authorize(r, policy.ActionUpdate, rbac.ResourceIdpsyncSettings.InOrg(org.ID)) {
		httpapi.Forbidden(rw)
		return
	}

	var req codersdk.PatchGroupIDPSyncMappingRequest
	if !httpapi.Read(ctx, rw, r, &req) {
		return
	}

	var settings idpsync.GroupSyncSettings
	//nolint:gocritic // Requires system context to update runtime config
	sysCtx := dbauthz.AsSystemRestricted(ctx)
	err := database.ReadModifyUpdate(api.Database, func(tx database.Store) error {
		existing, err := api.IDPSync.GroupSyncSettings(sysCtx, org.ID, tx)
		if err != nil {
			return err
		}
		aReq.Old = *existing

		newMapping := applyIDPSyncMappingDiff(existing.Mapping, req.Add, req.Remove)
		settings = idpsync.GroupSyncSettings{
			Field:             existing.Field,
			RegexFilter:       existing.RegexFilter,
			AutoCreateMissing: existing.AutoCreateMissing,
			LegacyNameMapping: existing.LegacyNameMapping,
			Mapping:           newMapping,
		}

		err = api.IDPSync.UpdateGroupSyncSettings(sysCtx, org.ID, tx, settings)
		if err != nil {
			return err
		}

		return nil
	})
	if err != nil {
		httpapi.InternalServerError(rw, err)
		return
	}

	aReq.New = settings
	httpapi.Write(ctx, rw, http.StatusOK, codersdk.GroupSyncSettings{
		Field:             settings.Field,
		RegexFilter:       settings.RegexFilter,