Add enabled and status mappers (#3)

OSC · Nov 25, 2024 · db164e8 · db164e8
1 parent f60e332
commit db164e8
Show file tree

Hide file tree

Showing 4 changed files with 25 additions and 2 deletions.
diff --git a/META-INF/keycloak-scripts.json b/META-INF/keycloak-scripts.json
@@ -7,7 +7,18 @@
     }
   ],
   "policies": [],
-  "mappers": [],
+  "mappers": [
+    {
+      "name": "User Enabled Mapper",
+      "fileName": "enabled-mapper.js",
+      "description": "User Enabled Mapper"
+    },
+    {
+      "name": "User employeeStatus Enabled Mapper",
+      "fileName": "status-mapper.js",
+      "description": "User employeeStatus Enabled Mapper"
+    }
+  ],
   "saml-mappers": [
     {
       "name": "X500 displayName",

diff --git a/enabled-mapper.js b/enabled-mapper.js
@@ -0,0 +1,5 @@
+var enabled = true;
+if (user.getFirstAttribute("nsAccountLock") == "TRUE" || user.getFirstAttribute("loginDisabled") == "TRUE") {
+    enabled = false;
+}
+enabled;
diff --git a/pom.xml b/pom.xml
@@ -6,7 +6,7 @@
 
     <groupId>edu.osc</groupId>
     <artifactId>osc-keycloak-scripts</artifactId>
-    <version>1.2.0</version>
+    <version>1.3.0</version>
     <packaging>jar</packaging>
 
     <properties>

diff --git a/status-mapper.js b/status-mapper.js
@@ -0,0 +1,7 @@
+var statusEnabled = true;
+var allowed = /(REQAPPROVAL|ACTIVE|WEBONLY|RESTRICTED)/;
+var employeeStatus = user.getFirstAttribute("employeeStatus");
+if (employeeStatus && !allowed.test(employeeStatus)) {
+    statusEnabled = false;
+}
+statusEnabled;