OIDC/Auth2 integration

Makefile

@@ -142,7 +142,13 @@ run-dev-otel run-bash-otel: | start-dev-otel run-dev-attach-otel
 # Build standalone development container (not usable inside the docker container)
 
 build-dev:
-	docker build --file=dev/Dockerfile.dev . --tag=openslides-backend-dev
+	docker build --file=dev/Dockerfile.dev . --target development --tag=openslides-backend-dev
+
+build-dev-fullstack:
+	DOCKER_BUILDKIT=1 docker build --file=dev/Dockerfile.dev . --target development-fullstack \
+		--build-context pipauth=../openslides-auth-service/libraries/pip-auth \
+		--build-context datastore=../openslides-datastore-service \
+		--tag=openslides-backend-dev-fullstack
 
 rebuild-dev:
-	docker build --file=dev/Dockerfile.dev . --tag=openslides-backend-dev --no-cache
+	docker build --file=dev/Dockerfile.dev . --target development --tag=openslides-backend-dev --no-cache

dev/Dockerfile.dev

@@ -1,13 +1,9 @@
-FROM python:3.10.13-slim-bookworm
+FROM python:3.10.13-slim-bookworm as base
 
 RUN apt-get update && apt-get install --yes make git curl ncat vim bash-completion mime-support gcc libpq-dev libmagic1
 
 WORKDIR /app
 
-COPY requirements/ requirements/
-ARG REQUIREMENTS_FILE=requirements_development.txt
-RUN . requirements/export_service_commits.sh && pip install --no-cache-dir --requirement requirements/$REQUIREMENTS_FILE
-
 COPY dev/.bashrc .
 COPY dev/cleanup.sh .
 
@@ -42,3 +38,17 @@ ENV DEFAULT_FROM_EMAIL [email protected]
 STOPSIGNAL SIGKILL
 ENTRYPOINT ["./entrypoint.sh"]
 CMD exec python -m debugpy --listen 0.0.0.0:5678 openslides_backend
+
+FROM base as development
+
+COPY requirements/ requirements/
+ARG REQUIREMENTS_FILE=requirements_development.txt
+RUN . requirements/export_service_commits.sh && pip install --no-cache-dir --requirement requirements/$REQUIREMENTS_FILE
+
+FROM base as development-fullstack
+
+COPY --from=pipauth / /pip-auth
+COPY --from=datastore / /openslides-datastore-service
+COPY requirements/ requirements/
+ARG REQUIREMENTS_FILE=requirements_development_fullstack.txt
+RUN pip install --no-cache-dir --requirement requirements/$REQUIREMENTS_FILE

docs/Actions-Overview.md

@@ -231,7 +231,6 @@ A more general format description see in [Action-Service](https://github.com/Ope
 - [user.toggle_presence_by_number](actions/user.toggle_presence_by_number.md)
 - [user.update](actions/user.update.md)
 - [user.update_self](actions/user.update_self.md)
-- [user.save_saml_account](actions/user.save_saml_account.md)
 - [meeting_user.create](actions/meeting_user.create.md)
 - [meeting_user.update](actions/meeting_user.update.md)
 - [meeting_user.delete](actions/meeting_user.delete.md)

openslides_backend/action/actions/organization/update.py

@@ -13,7 +13,6 @@
 from ...mixins.send_email_mixin import EmailCheckMixin, EmailSenderCheckMixin
 from ...util.default_schema import DefaultSchema
 from ...util.register import register_action
-from ..user.save_saml_account import allowed_user_fields
 from ..user.update import UserUpdate
 
 
@@ -48,36 +47,12 @@ class OrganizationUpdate(
         "limit_of_meetings",
         "limit_of_users",
         "url",
-        "saml_enabled",
-        "saml_login_button_text",
-        "saml_attr_mapping",
-        "saml_metadata_idp",
-        "saml_metadata_sp",
-        "saml_private_key",
     )
 
     model = Organization()
-    saml_props = {
-        field: {**optional_str_schema, "max_length": 256}
-        for field in allowed_user_fields
-    }
-    saml_props["meeting"] = {
-        "type": ["object", "null"],
-        "properties": {
-            field: {**optional_str_schema, "max_length": 256}
-            for field in ("external_id", "external_group_id")
-        },
-        "additionalProperties": False,
-    }
     schema = DefaultSchema(Organization()).get_update_schema(
         optional_properties=group_A_fields + group_B_fields,
         additional_optional_fields={
-            "saml_attr_mapping": {
-                "type": ["object", "null"],
-                "properties": saml_props,
-                "required": ["saml_id"],
-                "additionalProperties": False,
-            },
         },
     )
     check_email_field = "users_email_replyto"

openslides_backend/action/actions/user/__init__.py

@@ -4,17 +4,10 @@
     assign_meetings,
     create,
     delete,
-    forget_password,
-    forget_password_confirm,
-    generate_new_password,
     merge_together,
     participant_import,
     participant_json_upload,
-    reset_password_to_default,
-    save_saml_account,
     send_invitation_email,
-    set_password,
-    set_password_self,
     set_present,
     toggle_presence_by_number,
     update,

openslides_backend/action/actions/user/create.py

@@ -16,7 +16,6 @@
 from ...util.typing import ActionResultElement
 from ..meeting_user.mixin import CheckLockOutPermissionMixin
 from .create_update_permissions_mixin import CreateUpdatePermissionsMixin
-from .password_mixins import SetPasswordMixin
 from .user_mixins import LimitOfUserMixin, UserMixin, UsernameMixin, check_gender_helper
 
 
@@ -25,7 +24,6 @@ class UserCreate(
     EmailCheckMixin,
     CreateAction,
     CreateUpdatePermissionsMixin,
-    SetPasswordMixin,
     LimitOfUserMixin,
     UsernameMixin,
     CheckLockOutPermissionMixin,