mudhorn/n8n
1
0
Fork 0
mirror of https://github.com/n8n-io/n8n.git synced 2025-03-05 20:50:17 -08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(core): Use lower cased email for SAML email attribute (#6663)

Browse source 
lower case saml email attribute
This commit is contained in:
Michael Auerswald 2023-07-13 23:41:52 +02:00 committed by GitHub
parent 0c47be254b
commit eedde24cc0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
packages/cli/src/sso/saml/saml.service.ee.ts
View file

@ -145,8 +145,9 @@ export class SamlService {
}> { }> {
const attributes = await this.getAttributesFromLoginResponse(req, binding); const attributes = await this.getAttributesFromLoginResponse(req, binding);
if (attributes.email) { if (attributes.email) {
const lowerCasedEmail = attributes.email.toLowerCase();
const user = await Db.collections.User.findOne({ const user = await Db.collections.User.findOne({
where: { email: attributes.email }, where: { email: lowerCasedEmail },
relations: ['globalRole', 'authIdentities'], relations: ['globalRole', 'authIdentities'],
}); });
if (user) { if (user) {

3
packages/cli/src/sso/saml/samlHelpers.ts
View file

@ -97,7 +97,8 @@ export function generatePassword(): string {
export async function createUserFromSamlAttributes(attributes: SamlUserAttributes): Promise<User> { export async function createUserFromSamlAttributes(attributes: SamlUserAttributes): Promise<User> {
const user = new User(); const user = new User();
const authIdentity = new AuthIdentity(); const authIdentity = new AuthIdentity();
user.email = attributes.email; const lowerCasedEmail = attributes.email?.toLowerCase() ?? '';
user.email = lowerCasedEmail;
user.firstName = attributes.firstName; user.firstName = attributes.firstName;
user.lastName = attributes.lastName; user.lastName = attributes.lastName;
user.globalRole = await Container.get(RoleRepository).findGlobalMemberRoleOrFail(); user.globalRole = await Container.get(RoleRepository).findGlobalMemberRoleOrFail();