Module: BetterAuth::SSO::Linking::OrgAssignment

Defined in:
lib/better_auth/sso/linking/org_assignment.rb

Class Method Summary collapse

Class Method Details

.assign_organization_by_domain(ctx, user:, provisioning_options: nil, domain_verification: nil, config: {}) ⇒ Object 



28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 28

def assign_organization_by_domain(ctx, user:, provisioning_options: nil, domain_verification: nil, config: {})
  options = normalized_provisioning_options(provisioning_options, config)
  return if options[:disabled]
  return unless organization_plugin?(ctx)

  domain_config = BetterAuth::Plugins.normalize_hash(domain_verification || config[:domain_verification] || {})
  domain = fetch_value(user, :email).to_s.split("@", 2)[1]
  return if domain.to_s.empty?

  where = [{field: "domain", value: domain}]
  where << {field: "domainVerified", value: true} if domain_config[:enabled]
  provider = ctx.context.adapter.find_one(model: "ssoProvider", where: where)

  unless provider
    fallback_where = domain_config[:enabled] ? [{field: "domainVerified", value: true}] : []
    providers = ctx.context.adapter.find_many(model: "ssoProvider", where: fallback_where)
    provider = providers.find do |entry|
      (!domain_config[:enabled] || fetch_value(entry, :domain_verified)) &&
        BetterAuth::SSO::Utils.domain_matches?(domain, fetch_value(entry, :domain))
    end
  end

  organization_id = fetch_value(provider || {}, :organization_id)
  return if organization_id.to_s.empty?
  return if member_exists?(ctx, organization_id, fetch_value(user, :id))

  role = organization_role(
    options,
    user: user,
    user_info: {},
    provider: provider
  )
  create_member(ctx, organization_id, fetch_value(user, :id), role)
end

.assign_organization_from_provider(ctx, provider:, user:, profile: {}, token: nil, provisioning_options: nil, config: {}) ⇒ Object 



9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 9

def assign_organization_from_provider(ctx, provider:, user:, profile: {}, token: nil, provisioning_options: nil, config: {})
  organization_id = fetch_value(provider, :organization_id)
  return if organization_id.to_s.empty?

  options = normalized_provisioning_options(provisioning_options, config)
  return if options[:disabled]
  return unless organization_plugin?(ctx)
  return if member_exists?(ctx, organization_id, fetch_value(user, :id))

  role = organization_role(
    options,
    user: user,
    user_info: fetch_value(profile || {}, :raw_attributes) || {},
    token: token,
    provider: provider
  )
  create_member(ctx, organization_id, fetch_value(user, :id), role)
end

.create_member(ctx, organization_id, user_id, role) ⇒ Object 



100
101
102
103
104
105
106
107
108
109
110
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 100

def create_member(ctx, organization_id, user_id, role)
  ctx.context.adapter.create(
    model: "member",
    data: {
      organizationId: organization_id,
      userId: user_id,
      role: role,
      createdAt: Time.now
    }
  )
end

.fetch_value(data, key) ⇒ Object 



112
113
114
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 112

def fetch_value(data, key)
  BetterAuth::Plugins.sso_fetch(data, key)
end

.member_exists?(ctx, organization_id, user_id) ⇒ Boolean

Returns:

  • (Boolean) 


76
77
78
79
80
81
82
83
84
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 76

def member_exists?(ctx, organization_id, user_id)
  ctx.context.adapter.find_one(
    model: "member",
    where: [
      {field: "organizationId", value: organization_id},
      {field: "userId", value: user_id}
    ]
  )
end

.normalized_provisioning_options(provisioning_options, config) ⇒ Object 



63
64
65
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 63

def normalized_provisioning_options(provisioning_options, config)
  BetterAuth::Plugins.normalize_hash(provisioning_options || config[:organization_provisioning] || {})
end

.organization_plugin?(ctx) ⇒ Boolean

Returns:

  • (Boolean) 


67
68
69
70
71
72
73
74
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 67

def organization_plugin?(ctx)
  context = ctx.context
  return context.hasPlugin("organization") if context.respond_to?(:hasPlugin)
  return context.has_plugin?("organization") if context.respond_to?(:has_plugin?)

  plugins = context.options.respond_to?(:plugins) ? context.options.plugins : []
  plugins.any? { |plugin| plugin.respond_to?(:id) && plugin.id == "organization" }
end

.organization_role(options, user:, user_info:, provider:, token: nil) ⇒ Object 



86
87
88
89
90
91
92
93
94
95
96
97
98
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 86

def organization_role(options, user:, user_info:, provider:, token: nil)
  get_role = options[:get_role]
  if get_role.respond_to?(:call)
    return get_role.call(
      user: user,
      userInfo: ,
      token: token,
      provider: provider
    )
  end

  options[:default_role] || options[:role] || "member"
end