kobotoolbox / kpi / 23544873927

82%

master: 76%

Build Type

push

github

Committed by web-flow

Commit Message

feat(sso): create additional metadata endpoints required by some keycloak scim extension DEV-1897 (#6846)

### 📣 Summary
Implemented SCIM 2.0 discovery metadata endpoints (/Schemas and
/ResourceTypes) to ensure full compliance and unblock integrations with
strict Enterprise Identity Providers (like Keycloak's outbound
provisioning).

### 📖 Description
Certain strict SCIM clients (like the scim-for-keycloak.de extension or
strict configurations of Azure AD) rigidly enforce RFC-7643 discovery
specifications. Before they attempt to provision any users or groups,
they automatically query the target server for its schemas and resource
types to understand exactly what attributes are supported. Previously,
our minimal SCIM implementation only exposed /Users, /Groups, and
/ServiceProviderConfig. The data from these metadata endpoints is static
and adapted to the current subset of data handled by the kobo scim app.

### 👀 Preview steps
1. Set up a IdP in the django admin 
2. Get the schemas and resource types:
```
curl -i -X GET "http://kf.kobo.local:8000/api/v2/scim/v2/nrc/Schemas" \
  -H "Authorization: Bearer <API_KEY>"

curl -i -X GET "http://kf.kobo.local:8000/api/v2/scim/v2/nrc/ResourceTypes" \
  -H "Authorization: Bearer <API_KEY>"
```
3. The responses should be JSON's showing the available schemas and
resources (users and groups)

Coverage Stats

7751 of 11938 branches covered (64.93%)

48 of 96 new or added lines in 5 files covered. (50.0%)

1 existing line in 1 file now uncovered.

29501 of 35922 relevant lines covered (82.13%)

5.8 hits per line