Module: BetterAuth::SSO::Linking::OrgAssignment

Defined in:
lib/better_auth/sso/linking/org_assignment.rb

Class Method Summary collapse

Class Method Details

.assign_organization_by_domain(ctx, user:, provisioning_options: nil, domain_verification: nil, config: {}) ⇒ Object 



28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 28

def assign_organization_by_domain(ctx, user:, provisioning_options: nil, domain_verification: nil, config: {})
  options = normalized_provisioning_options(provisioning_options, config)
  return if options[:disabled]
  return unless organization_plugin?(ctx)

  domain_config = BetterAuth::Plugins.normalize_hash(domain_verification || config[:domain_verification] || {})
  domain = fetch_value(user, :email).to_s.split("@", 2)[1]
  return if domain.to_s.empty?

  where = [{field: "domain", value: domain}]
  where << {field: "domainVerified", value: true} if domain_config[:enabled]
  provider = ctx.context.adapter.find_one(model: "ssoProvider", where: where)

  unless provider
    fallback_where = domain_config[:enabled] ? [{field: "domainVerified", value: true}] : []
    providers = ctx.context.adapter.find_many(model: "ssoProvider", where: fallback_where)
    provider = providers.find do |entry|
      (!domain_config[:enabled] || fetch_value(entry, :domain_verified)) &&
        BetterAuth::SSO::Utils.domain_matches?(domain, fetch_value(entry, :domain))
    end
  end

  organization_id = fetch_value(provider || {}, :organization_id)
  return if organization_id.to_s.empty?
  return if member_exists?(ctx, organization_id, fetch_value(user, :id))

  role = organization_role(
    options,
    user: user,
    user_info: {},
    provider: provider
  )
  create_member(ctx, organization_id, fetch_value(user, :id), role)
end

.assign_organization_from_provider(ctx, provider:, user:, profile: {}, token: nil, provisioning_options: nil, config: {}) ⇒ Object 



9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 9

def assign_organization_from_provider(ctx, provider:, user:, profile: {}, token: nil, provisioning_options: nil, config: {})
  organization_id = fetch_value(provider, :organization_id)
  return if organization_id.to_s.empty?

  options = normalized_provisioning_options(provisioning_options, config)
  return if options[:disabled]
  return unless organization_plugin?(ctx)
  return if member_exists?(ctx, organization_id, fetch_value(user, :id))

  role = organization_role(
    options,
    user: user,
    user_info: fetch_value(profile || {}, :raw_attributes) || {},
    token: token,
    provider: provider
  )
  create_member(ctx, organization_id, fetch_value(user, :id), role)
end

.create_member(ctx, organization_id, user_id, role) ⇒ Object 



97
98
99
100
101
102
103
104
105
106
107
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 97

def create_member(ctx, organization_id, user_id, role)
  ctx.context.adapter.create(
    model: "member",
    data: {
      organizationId: organization_id,
      userId: user_id,
      role: role,
      createdAt: Time.now
    }
  )
end

.fetch_value(data, key) ⇒ Object 



109
110
111
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 109

def fetch_value(data, key)
  BetterAuth::Plugins.sso_fetch(data, key)
end

.member_exists?(ctx, organization_id, user_id) ⇒ Boolean

Returns:

  • (Boolean) 


73
74
75
76
77
78
79
80
81
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 73

def member_exists?(ctx, organization_id, user_id)
  ctx.context.adapter.find_one(
    model: "member",
    where: [
      {field: "organizationId", value: organization_id},
      {field: "userId", value: user_id}
    ]
  )
end

.normalized_provisioning_options(provisioning_options, config) ⇒ Object 



63
64
65
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 63

def normalized_provisioning_options(provisioning_options, config)
  BetterAuth::Plugins.normalize_hash(provisioning_options || config[:organization_provisioning] || {})
end

.organization_plugin?(ctx) ⇒ Boolean

Returns:

  • (Boolean) 


67
68
69
70
71
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 67

def organization_plugin?(ctx)
  context = ctx.context
  plugins = context.options.respond_to?(:plugins) ? context.options.plugins : []
  plugins.any? { |plugin| plugin.respond_to?(:id) && plugin.id == "organization" }
end

.organization_role(options, user:, user_info:, provider:, token: nil) ⇒ Object 



83
84
85
86
87
88
89
90
91
92
93
94
95
 
# File 'lib/better_auth/sso/linking/org_assignment.rb', line 83

def organization_role(options, user:, user_info:, provider:, token: nil)
  get_role = options[:get_role]
  if get_role.respond_to?(:call)
    return get_role.call(
      user: user,
      userInfo: ,
      token: token,
      provider: provider
    )
  end

  options[:default_role] || options[:role] || "member"
end