scimgateway 6.1.3 → 6.1.5

package/README.md

@@ -18,7 +18,7 @@
 Latest news:  
 
 - Bun binary build is now supported, allowing SCIM Gateway to be compiled into a single executable binary for simplified deployment and execution. SCIM Gateway can now run as an ES module (TypeScript) in Node.js.
-- Major release **v6.0.0** introduces changes to API method response bodies (not SCIM-related) and a new method `publicApi()` for handling public path `/pub/api` requests with no authentication required. In addition, the configuration option `bearerJwtAzure.tenantIdGUID` has been replaced by `bearerJwt.azureTenantId`. See the version history for details.
+- Major release **v6.0.0** introduces changes to API method responses (not SCIM-related) and a new method `publicApi()` for handling public path `/pub/api` requests with no authentication required. In addition, the configuration option `bearerJwtAzure.tenantIdGUID` has been replaced by `bearerJwt.azureTenantId`. See the version history for details.
 - Support for Entra ID [Federated Identity Credentials](https://learn.microsoft.com/en-us/graph/api/resources/federatedidentitycredentials-overview?view=graph-rest-1.0) has been added through internal JWKS (JSON Web Key Set), allowing SCIM Gateway to access Microsoft Entra–protected resources without the need to manage secrets
 - External JWKS (JSON Web Key Set) is now supported by JWT authentication, allowing external applications to access SCIM Gateway without the need to manage secrets
 - [Azure Relay](https://learn.microsoft.com/en-us/azure/azure-relay/relay-what-is-it) is now supported for secure and hassle-free outbound-only communication — with just one minute of configuration
@@ -1303,6 +1303,25 @@ MIT © [Jarle Elshaug](https://www.elshaug.xyz)
 
 ## Change log
 
+
+### v6.1.5
+
+[Improved]
+
+- complex filtering (and/or) now handled by scimgateway using plugin's simple filtering logic
+- modify group response now returns http status 204 (No Content) instead of 200 OK (full group object)
+- url `/auth` can now be used for validating external authentication
+- plugin-entra-id, now supports filter `sw` (startsWith) 
+
+
+### v6.1.4
+
+[Fixed]
+
+- plugin-entra-id, OData paging was not working, so some users/groups/members might be missing
+- helper-rest, OData paging
+- user’s group membership did not iterate through paging and may be incomplete
+
 ### v6.1.3
 
 [Fixed]

package/config/plugin-entra-id.json

@@ -1,315 +1,323 @@
-{
-  "scimgateway": {
-    "port": 8881,
-    "localhostonly": false,
-    "chainingBaseUrl": null,
-    "scim": {
-      "version": "2.0",
-      "customSchema": null,
-      "skipTypeConvert": false,
-      "groupMemberOfUser": false,
-      "usePutSoftSync": false
-    },
-    "log": {
-      "loglevel": {
-        "file": "debug",
-        "console": "error"
-      },
-      "customMasking": null
-    },
-    "auth": {
-      "basic": [
-        {
-          "username": "gwadmin",
-          "password": "password",
-          "readOnly": false,
-          "baseEntities": []
-        }
-      ],
-      "bearerToken": [
-        {
-          "token": null,
-          "readOnly": false,
-          "baseEntities": []
-        }
-      ],
-      "bearerJwt": [
-        {
-          "secret": null,
-          "publicKey": null,
-          "wellKnownUri": null,
-          "azureTenantId": null,
-          "options": {
-            "issuer": null
-          },
-          "readOnly": false,
-          "baseEntities": []
-        }
-      ],
-      "bearerOAuth": [
-        {
-          "clientId": null,
-          "clientSecret": null,
-          "readOnly": false,
-          "baseEntities": []
-        }
-      ],
-      "passThrough": {
-        "enabled": false,
-        "readOnly": false,
-        "baseEntities": []
-      }
-    },
-    "certificate": {
-      "key": null,
-      "cert": null,
-      "ca": null,
-      "pfx": {
-        "bundle": null,
-        "password": null
-      }
-    },
-    "ipAllowList": [],
-    "email": {
-      "auth": {
-        "type": "oauth",
-        "options": {
-          "azureTenantId": null,
-          "clientId": null,
-          "clientSecret": null
-        }
-      },
-      "emailOnError": {
-        "enabled": false,
-        "from": null,
-        "to": null
-      }
-    },
-    "azureRelay": {
-      "enabled": false,
-      "connectionUrl": null,
-      "apiKey": null
-    },
-    "stream": {
-      "baseUrls": [],
-      "certificate": {
-        "ca": null
-      },
-      "subscriber": {
-        "enabled": false,
-        "entity": {
-          "undefined": {
-            "nats": {
-              "tenant": null,
-              "subject": null,
-              "jwt": null,
-              "secret": null
-            },
-            "deleteUserOnLastGroupRoleRemoval": false,
-            "skipConvertRolesToGroups": false,
-            "generateUserPassword": false,
-            "modifyOnly": false,
-            "replaceDomains": []
-          }
-        }
-      },
-      "publisher": {
-        "enabled": false,
-        "entity": {
-          "undefined": {
-            "nats": {
-              "tenant": null,
-              "subject": null,
-              "jwt": null,
-              "secret": null
-            }
-          }
-        }
-      }
-    }
-  },
-  "endpoint": {
-    "entity": {
-      "undefined": {
-        "connection": {
-          "baseUrls": [],
-          "auth": {
-            "type": "oauth",
-            "options": {
-              "azureTenantId": "Entra ID Tenant ID (GUID)",
-              "clientId": "Entra ID Application ID",
-              "clientSecret": "Entra ID Application secret value"
-            }
-          },
-          "proxy": {
-            "host": null,
-            "username": null,
-            "password": null
-          }
-        }
-      }
-    },
-    "map": {
-      "user": {
-        "id": {
-          "mapTo": "id",
-          "type": "string"
-        },
-        "userPrincipalName": {
-          "mapTo": "userName,externalId",
-          "type": "string"
-        },
-        "userType": {
-          "mapTo": "userType",
-          "type": "string"
-        },
-        "accountEnabled": {
-          "mapTo": "active",
-          "type": "boolean"
-        },
-        "givenName": {
-          "mapTo": "name.givenName",
-          "type": "string"
-        },
-        "surname": {
-          "mapTo": "name.familyName",
-          "type": "string"
-        },
-        "displayName": {
-          "mapTo": "displayName",
-          "type": "string"
-        },
-        "jobTitle": {
-          "mapTo": "jobTitle",
-          "type": "string"
-        },
-        "employeeId": {
-          "mapTo": "employeeId",
-          "type": "string"
-        },
-        "employeeType": {
-          "mapTo": "employeeType",
-          "type": "string"
-        },
-        "companyName": {
-          "mapTo": "companyName",
-          "type": "string"
-        },
-        "employeeOrgData.costCenter": {
-          "mapTo": "employeeOrgData.costCenter",
-          "type": "string"
-        },
-        "employeeOrgData.division": {
-          "mapTo": "employeeOrgData.division",
-          "type": "string"
-        },
-        "officeLocation": {
-          "mapTo": "officeLocation",
-          "type": "string"
-        },
-        "department": {
-          "mapTo": "department",
-          "type": "string"
-        },
-        "manager": {
-          "mapTo": "manager.managerId",
-          "type": "string"
-        },
-        "mail": {
-          "mapTo": "mail",
-          "type": "string"
-        },
-        "mailNickname": {
-          "mapTo": "mailNickname",
-          "type": "string"
-        },
-        "proxyAddresses": {
-          "mapTo": "proxyAddresses.value",
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "mobilePhone": {
-          "mapTo": "mobilePhone",
-          "type": "string"
-        },
-        "businessPhones": {
-          "mapTo": "businessPhones",
-          "type": "array",
-          "typeInbound": "string"
-        },
-        "country": {
-          "mapTo": "country",
-          "type": "string"
-        },
-        "city": {
-          "mapTo": "city",
-          "type": "string"
-        },
-        "streetAddress": {
-          "mapTo": "streetAddress",
-          "type": "string"
-        },
-        "postalCode": {
-          "mapTo": "postalCode",
-          "type": "string"
-        },
-        "state": {
-          "mapTo": "state",
-          "type": "string"
-        },
-        "passwordPolicies": {
-          "mapTo": "passwordPolicies",
-          "type": "string"
-        },
-        "passwordProfile.forceChangePasswordNextSignIn": {
-          "mapTo": "passwordProfile.forceChangePasswordNextSignIn",
-          "type": "string"
-        },
-        "passwordProfile.password": {
-          "mapTo": "passwordProfile.password",
-          "type": "string"
-        },
-        "servicePlan": {
-          "mapTo": "servicePlan.value",
-          "type": "array"
-        },
-        "usageLocation": {
-          "mapTo": "usageLocation",
-          "type": "string"
-        },
-        "preferredLanguage": {
-          "mapTo": "preferredLanguage",
-          "type": "string"
-        },
-        "onPremisesSyncEnabled": {
-          "mapTo": "onPremisesSyncEnabled",
-          "type": "boolean"
-        },
-        "onPremisesImmutableId": {
-          "mapTo": "onPremisesImmutableId",
-          "type": "string"
-        }
-      },
-      "group": {
-        "id": {
-          "mapTo": "id",
-          "type": "string"
-        },
-        "displayName": {
-          "mapTo": "displayName,externalId",
-          "type": "string"
-        },
-        "securityEnabled": {
-          "mapTo": "securityEnabled",
-          "type": "boolean"
-        },
-        "mailEnabled": {
-          "mapTo": "mailEnabled",
-          "type": "boolean"
-        }
-      }
-    }
-  }
+{
+  "scimgateway": {
+    "port": 8881,
+    "localhostonly": false,
+    "chainingBaseUrl": null,
+    "scim": {
+      "version": "2.0",
+      "customSchema": null,
+      "skipTypeConvert": false,
+      "groupMemberOfUser": false,
+      "usePutSoftSync": false
+    },
+    "log": {
+      "loglevel": {
+        "file": "debug",
+        "console": "error"
+      },
+      "customMasking": null
+    },
+    "auth": {
+      "basic": [
+        {
+          "username": "gwadmin",
+          "password": "password",
+          "readOnly": false,
+          "baseEntities": []
+        }
+      ],
+      "bearerToken": [
+        {
+          "token": null,
+          "readOnly": false,
+          "baseEntities": []
+        }
+      ],
+      "bearerJwt": [
+        {
+          "secret": null,
+          "publicKey": null,
+          "wellKnownUri": null,
+          "azureTenantId": null,
+          "options": {
+            "issuer": null
+          },
+          "readOnly": false,
+          "baseEntities": []
+        }
+      ],
+      "bearerOAuth": [
+        {
+          "clientId": null,
+          "clientSecret": null,
+          "readOnly": false,
+          "baseEntities": []
+        }
+      ],
+      "passThrough": {
+        "enabled": false,
+        "readOnly": false,
+        "baseEntities": []
+      }
+    },
+    "certificate": {
+      "key": null,
+      "cert": null,
+      "ca": null,
+      "pfx": {
+        "bundle": null,
+        "password": null
+      }
+    },
+    "ipAllowList": [],
+    "email": {
+      "auth": {
+        "type": "oauth",
+        "options": {
+          "azureTenantId": null,
+          "clientId": null,
+          "clientSecret": null
+        }
+      },
+      "emailOnError": {
+        "enabled": false,
+        "from": null,
+        "to": null
+      }
+    },
+    "azureRelay": {
+      "enabled": false,
+      "connectionUrl": null,
+      "apiKey": null
+    },
+    "stream": {
+      "baseUrls": [],
+      "certificate": {
+        "ca": null
+      },
+      "subscriber": {
+        "enabled": false,
+        "entity": {
+          "undefined": {
+            "nats": {
+              "tenant": null,
+              "subject": null,
+              "jwt": null,
+              "secret": null
+            },
+            "deleteUserOnLastGroupRoleRemoval": false,
+            "skipConvertRolesToGroups": false,
+            "generateUserPassword": false,
+            "modifyOnly": false,
+            "replaceDomains": []
+          }
+        }
+      },
+      "publisher": {
+        "enabled": false,
+        "entity": {
+          "undefined": {
+            "nats": {
+              "tenant": null,
+              "subject": null,
+              "jwt": null,
+              "secret": null
+            }
+          }
+        }
+      }
+    }
+  },
+  "endpoint": {
+    "entity": {
+      "undefined": {
+        "connection": {
+          "baseUrls": [],
+          "auth": {
+            "type": "oauth",
+            "options": {
+              "azureTenantId": "Entra ID Tenant ID (GUID)",
+              "clientId": "Entra ID Application ID",
+              "clientSecret": "Entra ID Application secret value"
+            }
+          },
+          "proxy": {
+            "host": null,
+            "username": null,
+            "password": null
+          }
+        }
+      }
+    },
+    "map": {
+      "user": {
+        "id": {
+          "mapTo": "id",
+          "type": "string"
+        },
+        "userPrincipalName": {
+          "mapTo": "userName,externalId",
+          "type": "string"
+        },
+        "userType": {
+          "mapTo": "userType",
+          "type": "string"
+        },
+        "accountEnabled": {
+          "mapTo": "active",
+          "type": "boolean"
+        },
+        "givenName": {
+          "mapTo": "name.givenName",
+          "type": "string"
+        },
+        "surname": {
+          "mapTo": "name.familyName",
+          "type": "string"
+        },
+        "displayName": {
+          "mapTo": "displayName",
+          "type": "string"
+        },
+        "jobTitle": {
+          "mapTo": "jobTitle",
+          "type": "string"
+        },
+        "employeeId": {
+          "mapTo": "employeeId",
+          "type": "string"
+        },
+        "employeeType": {
+          "mapTo": "employeeType",
+          "type": "string"
+        },
+        "companyName": {
+          "mapTo": "companyName",
+          "type": "string"
+        },
+        "employeeHireDate": {
+          "mapTo": "employeeHireDate",
+          "type": "string"
+        },
+        "employeeOrgData.costCenter": {
+          "mapTo": "employeeOrgData.costCenter",
+          "type": "string"
+        },
+        "employeeOrgData.division": {
+          "mapTo": "employeeOrgData.division",
+          "type": "string"
+        },
+        "officeLocation": {
+          "mapTo": "officeLocation",
+          "type": "string"
+        },
+        "department": {
+          "mapTo": "department",
+          "type": "string"
+        },
+        "manager": {
+          "mapTo": "manager.managerId",
+          "type": "string"
+        },
+        "mail": {
+          "mapTo": "mail",
+          "type": "string"
+        },
+        "mailNickname": {
+          "mapTo": "mailNickname",
+          "type": "string"
+        },
+        "proxyAddresses": {
+          "mapTo": "proxyAddresses.value",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "mobilePhone": {
+          "mapTo": "mobilePhone",
+          "type": "string"
+        },
+        "businessPhones": {
+          "mapTo": "businessPhones",
+          "type": "array",
+          "typeInbound": "string"
+        },
+        "faxNumber": {
+          "mapTo": "faxNumber",
+          "type": "string"
+        },
+        "country": {
+          "mapTo": "country",
+          "type": "string"
+        },
+        "city": {
+          "mapTo": "city",
+          "type": "string"
+        },
+        "streetAddress": {
+          "mapTo": "streetAddress",
+          "type": "string"
+        },
+        "postalCode": {
+          "mapTo": "postalCode",
+          "type": "string"
+        },
+        "state": {
+          "mapTo": "state",
+          "type": "string"
+        },
+        "passwordPolicies": {
+          "mapTo": "passwordPolicies",
+          "type": "string"
+        },
+        "passwordProfile.forceChangePasswordNextSignIn": {
+          "mapTo": "passwordProfile.forceChangePasswordNextSignIn",
+          "type": "string"
+        },
+        "passwordProfile.password": {
+          "mapTo": "passwordProfile.password",
+          "type": "string"
+        },
+        "servicePlan": {
+          "mapTo": "servicePlans.value",
+          "type": "array"
+        },
+        "usageLocation": {
+          "mapTo": "usageLocation",
+          "type": "string"
+        },
+        "preferredLanguage": {
+          "mapTo": "preferredLanguage",
+          "type": "string"
+        },
+        "onPremisesSyncEnabled": {
+          "mapTo": "onPremisesSyncEnabled",
+          "type": "boolean"
+        },
+        "onPremisesImmutableId": {
+          "mapTo": "onPremisesImmutableId",
+          "type": "string"
+        }
+      },
+      "group": {
+        "id": {
+          "mapTo": "id",
+          "type": "string"
+        },
+        "displayName": {
+          "mapTo": "displayName",
+          "type": "string"
+        },
+        "securityEnabled": {
+          "mapTo": "securityEnabled",
+          "type": "boolean"
+        },
+        "mailEnabled": {
+          "mapTo": "mailEnabled",
+          "type": "boolean"
+        }
+      }
+    }
+  }
 }