Curl Ressource Identité

Créer une ressource Identité via curl

J'ai fait une démonstration d'un connecteur identité en moins de 10mn, pour construire cette démonstration il faut au préalable charger tout un tas d'élément de configuration. Il est possible de la faire via GUI mais l'API REST de CORE le fait beaucoup plus vite.

Je vous propose les requêtes Curl qui permettent de bâtir cette démonstration. J'ai tout de même ajouté une étape dans le cadre de ma recherche d'une intégration d'une source distinct d'identité qui pilote les comptes.

Tâche de propagation

J'ai commencé une tâche de propagation qui devrait au moment de provisioning intervenir dans le flux. C'est une classe java comme suit, elle ne fait pour l'instant que logué des informations:

package org.apache.syncope.core;
import java.util.Optional;import org.apache.syncope.common.lib.types.AnyTypeKind;import org.apache.syncope.core.persistence.api.dao.AnyDAO;import org.apache.syncope.core.persistence.api.dao.GroupDAO;import org.apache.syncope.core.persistence.api.dao.UserDAO;import org.apache.syncope.core.persistence.api.entity.Any;import org.apache.syncope.core.provisioning.api.propagation.PropagationActions;import org.apache.syncope.core.provisioning.api.propagation.PropagationTaskInfo;import org.apache.syncope.core.spring.implementation.InstanceScope;import org.apache.syncope.core.spring.implementation.SyncopeImplementation;import org.springframework.beans.factory.annotation.Autowired;import org.slf4j.Logger;import org.slf4j.LoggerFactory;
/** * * @author steph */@SyncopeImplementation(scope = InstanceScope.PER_CONTEXT)public class Person2UserPropagationActions implements PropagationActions{    protected static final Logger LOG = LoggerFactory.getLogger(Person2UserPropagationActions.class);    @Autowired    protected UserDAO userDAO;
    @Autowired    protected AnyDAO anyDAO;        @Autowired    protected GroupDAO groupDAO;
    @Override    public void before(PropagationTaskInfo taskInfo) {        if (AnyTypeKind.ANY_OBJECT != taskInfo.getAnyTypeKind()) {            LOG.warn("N'est pas un objet AnyType");            return;        }        if (!taskInfo.getObjectClass().is("__PERSON__")) {            LOG.warn("N'est pas un objet de la classe __PERSON__");            return;        }        String personId = null;        String key = null;        if(taskInfo.getPropagationData() != null &&                 taskInfo.getPropagationData().getAttributes() != null                && !taskInfo.getPropagationData().getAttributes().isEmpty()){            for(Attribute attr : taskInfo.getPropagationData().getAttributes()){                if(attr.getName().equals("personId")){                    personId = (String)attr.getValue().get(0);                    LOG.info("Cherche personId="+personId);                    break;                }            }        }        if(personId == null){            LOG.warn("Pas trouvé personId dans objet de la classe __PERSON__");            return;        }        //on récupère la clé de person et on la renvoie vers la ressource ?        LOG.info("taskInfo.getEntityKey="+taskInfo.getEntityKey());        Attribute personKey = AttributeBuilder.build("key", taskInfo.getEntityKey());        taskInfo.getPropagationData().getAttributes().add(personKey);        List<User> users;        try{            users = userDAO.findByDerAttrValue("personName==", personId, true);        }catch(Exception ex){            LOG.error("Erreur recherche USER par personName="+personId, ex);            return;        }        if(users != null && !users.isEmpty()){            LOG.info("Trouvé des comptes ! nb="+users.size());            return;        }else{            LOG.info("Rien trouvé pour personName="+personId);        }    }}

Cette classe devra être ajoutée au CORE dans le package de base absolument comme décrit dans la doc.

Les commandes curl

En fonction de votre situation il faudra adapter le host et port de votre instance CORE, pour moi <CoreServer> = http://192.168.91.1:28080.

Ajout de l'action de propagation:

curl --location 'http://<CoreServer>/syncope/rest/implementations/PROPAGATION_ACTIONS/Person2UserPropagationActions' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{ "key": "Person2UserPropagationActions", "engine": "JAVA", "type": "PROPAGATION_ACTIONS", "body": "org.apache.syncope.core.Person2UserPropagationActions"}'

Ajout des attributs de schéma, classe et objet:

curl --location 'http://<CoreServer>/syncope/rest/schemas/PLAIN' \--header 'Accept: application/json' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{        "_class": "org.apache.syncope.common.lib.to.PlainSchemaTO",        "key": "personId",        "anyTypeClass": "personne",        "type": "String",        "mandatoryCondition": "true",        "uniqueConstraint": "true"    }'
curl --location 'http://<CoreServer>/syncope/rest/schemas/PLAIN' \--header 'Accept: application/json' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{        "_class": "org.apache.syncope.common.lib.to.PlainSchemaTO",        "key": "nom",        "anyTypeClass": "personne",        "type": "String"    }'
curl --location 'http://<CoreServer>/syncope/rest/schemas/PLAIN' \--header 'Accept: application/json' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{        "_class": "org.apache.syncope.common.lib.to.PlainSchemaTO",        "key": "prenom",        "anyTypeClass": "personne",        "type": "String"    }'
curl --location 'http://<CoreServer>/syncope/rest/schemas/PLAIN' \--header 'Accept: application/json' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{    "_class": "org.apache.syncope.common.lib.to.PlainSchemaTO",    "key": "personName",    "type": "String"}'
curl --location --request PUT 'http://<CoreServer>/syncope/rest/anyTypeClasses/BaseUser' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{    "key": "BaseUser",    "plainSchemas": [        "email",        "personName"    ],    "inUseByTypes": [        "USER"    ]}'
curl --location 'http://<CoreServer>/syncope/rest/schemas/PLAIN' \--header 'Accept: application/json' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{        "_class": "org.apache.syncope.common.lib.to.PlainSchemaTO",        "key": "operationalUnit",        "anyTypeClass": "personne",        "type": "String"    }'
curl --location 'http://<CoreServer>/syncope/rest/anyTypeClasses' \--header 'Accept: application/json' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{        "key": "personne",        "plainSchemas": [            "personId",            "nom",            "prenom",            "operationalUnit"        ],        "derSchemas": [],        "inUseByTypes": [            "PERSON"        ]    }'
curl --location 'http://<CoreServer>/syncope/rest/anyTypes' \--header 'Accept: application/json' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{        "key": "PERSON",        "kind": "ANY_OBJECT",        "classes": [            "personne"        ]    }'

La création du connecteur:

curl --location 'http://<CoreServer>/syncope/rest/connectors' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{ "errored": false, "adminRealm": "/", "location": "file:/opt/syncope/bundles/", "connectorName": "net.tirasa.connid.bundles.rest.RESTConnector", "bundleName": "net.tirasa.connid.bundles.rest", "version": "1.1.1", "conf": [ { "schema": { "name": "baseAddress", "displayName": "Base Address", "helpMessage": "Base address of the target RESTful service", "type": "java.lang.String", "required": true, "order": -3, "confidential": false, "defaultValues": [] }, "values": [ "http://persons:48080" ], "overridable": false }, { "schema": { "name": "accept", "displayName": "Accept", "helpMessage": "Value for the HTTP Accept header; defaults to application/json", "type": "java.lang.String", "required": true, "order": -2, "confidential": false, "defaultValues": [ "application/json" ] }, "values": [ "application/json" ], "overridable": false }, { "schema": { "name": "contentType", "displayName": "Content-Type", "helpMessage": "Value for the HTTP Content-Type header; defaults to application/json", "type": "java.lang.String", "required": true, "order": -1, "confidential": false, "defaultValues": [ "application/json" ] }, "values": [ "application/json" ], "overridable": false }, { "schema": { "name": "scriptingLanguage", "displayName": "scriptingLanguage", "helpMessage": "scriptingLanguage", "type": "java.lang.String", "required": false, "order": 0, "confidential": false, "defaultValues": [ "GROOVY" ] }, "values": [ "GROOVY" ], "overridable": false }, { "schema": { "name": "searchScriptFileName", "displayName": "searchScriptFileName", "helpMessage": "searchScriptFileName", "type": "java.lang.String", "required": false, "order": 13, "confidential": false, "defaultValues": [] }, "values": [ "/opt/syncope/conf/SearchScript.groovy" ], "overridable": false }, { "schema": { "name": "schemaScriptFileName", "displayName": "schemaScriptFileName", "helpMessage": "schemaScriptFileName", "type": "java.lang.String", "required": false, "order": 17, "confidential": false, "defaultValues": [] }, "values": [ "/opt/syncope/conf/SchemaScript.groovy" ], "overridable": false }, { "schema": { "name": "testScriptFileName", "displayName": "testScriptFileName", "helpMessage": "testScriptFileName", "type": "java.lang.String", "required": false, "order": 18, "confidential": false, "defaultValues": [] }, "values": [ "/opt/syncope/conf/TestScript.groovy" ], "overridable": false }, { "schema": { "name": "updateScriptFileName", "displayName": "updateScriptFileName", "helpMessage": "updateScriptFileName", "type": "java.lang.String", "required": false, "order": 19, "confidential": false, "defaultValues": [] }, "values": [ "/opt/syncope/conf/UpdateScript.groovy" ], "overridable": false }, { "schema": { "name": "syncScriptFileName", "displayName": "syncScriptFileName", "helpMessage": "syncScriptFileName", "type": "java.lang.String", "required": false, "order": 20, "confidential": false, "defaultValues": [] }, "values": [ "/opt/syncope/conf/SyncScript.groovy" ], "overridable": false } ], "capabilities": [ "SEARCH","SYNC","UPDATE" ], "displayName": "RestPerson2", "connRequestTimeout": 10, "poolConf": null }'

La création de la ressource, il faudra récupérer au préalable l'identifiant unique du connecteur (faire un GET sur l'api connctors):

curl --location 'http://<CoreServer>/syncope/rest/resources' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{ "key": "person", "connector": "<IdentifiantConnecteur>", "connectorDisplayName": "RestPerson", "provisions": [ { "anyType": "PERSON", "objectClass": "__PERSON__", "ignoreCaseMatch": false, "mapping": { "items": [ { "intAttrName": "name", "extAttrName": "personId", "connObjectKey": true, "password": false, "mandatoryCondition": "true", "purpose": "PULL", "propagationJEXLTransformer": null, "pullJEXLTransformer": null, "transformers": [] }, { "intAttrName": "personId", "extAttrName": "personId", "connObjectKey": false, "password": false, "mandatoryCondition": "true", "purpose": "PULL", "propagationJEXLTransformer": null, "pullJEXLTransformer": null, "transformers": [] }, { "intAttrName": "prenom", "extAttrName": "prenom", "connObjectKey": false, "password": false, "mandatoryCondition": "false", "purpose": "PULL", "propagationJEXLTransformer": null, "pullJEXLTransformer": null, "transformers": [] }, { "intAttrName": "nom", "extAttrName": "nom", "connObjectKey": false, "password": false, "mandatoryCondition": "false", "purpose": "PULL", "propagationJEXLTransformer": null, "pullJEXLTransformer": null, "transformers": [] }, { "intAttrName": "operationalUnit", "extAttrName": "operationalUnit", "connObjectKey": false, "password": false, "mandatoryCondition": "false", "purpose": "PULL", "propagationJEXLTransformer": null, "pullJEXLTransformer": null, "transformers": [] }, { "intAttrName": "key", "extAttrName": "key", "connObjectKey": false, "password": false, "mandatoryCondition": "false", "purpose": "PROPAGATION", "propagationJEXLTransformer": null, "pullJEXLTransformer": null, "transformers": [] } ], "connObjectLink": null } } ], "orgUnit": null, "propagationPriority": 10, "enforceMandatoryCondition": true, "createTraceLevel": "ALL", "updateTraceLevel": "ALL", "deleteTraceLevel": "ALL", "provisioningTraceLevel": "ALL", "passwordPolicy": null, "accountPolicy": null, "propagationPolicy": null, "inboundPolicy": null, "pushPolicy": null, "provisionSorter": null, "authPolicy": null, "accessPolicy": null, "confOverrideFlag": true, "confOverrideValue": [], "capabilitiesOverrideFlag": false, "capabilitiesOverrideValue": null, "propagationActions": [ "Person2UserPropagationActions" ] }'

Création de la tâche de traction / pull:

curl --location 'http://<CoreServer>/syncope/rest/tasks/PULL' \--header 'Content-Type: application/json' \--header 'Authorization: ••••••' \--data '{ "_class": "org.apache.syncope.common.lib.to.PullTaskTO", "cronExpression": null, "jobDelegate": "PullJobDelegate", "name": "chargePersons", "active": true, "resource": "person", "performCreate": true, "performUpdate": true, "performDelete": true, "syncStatus": false, "unmatchingRule": "PROVISION", "matchingRule": "UPDATE", "actions": [], "concurrentSettings": null, "destinationRealm": "/", "remediation": false, "pullMode": "INCRMENTAL", "reconFilterBuilder": null, "templates": {}}'