CAS Server Attributes to manage groups: Add JSON decode option

[StephaneGuilet]

Dear All,

I am using NextCloud in a CAS environment and of course I am using the App "user_cas" which is well defined except for the use of the attributes to get the groups.
The goal is to limit the groups which can log in. But the CAS server is free to write its own attributes and the way to write it. In ma cas it is like this:
'departmentNumber' => string '[9260, 9253, 9145, 9022, 2211]' (length=30)

So I have modified the code of user_cas/lib/Service/UserService.php by :
# Test for standard 'groups' attribute
else if (array_key_exists('departmentNumber', $casAttributes)) {

                $casGroups = json_decode($casAttributes['departmentNumber']);
            }

Which is working well but it will be deleted for the next update or the next installation. So I was wondering why not writing the value of the attribute to read and the value of this attribute to check.
In my case we would say in the admin interface the attribute for the groups is "departmentNumber" and the value to check would be : "9022"

Thank you for your attention it should be possible to change that. If I manage to do so, I will propose a code. But I am not sure I am able to do so.

Have a nice day,

[StephaneGuilet]

Test for standard 'groups' attribute

  else if (array_key_exists('departmentNumber', $casAttributes)) {
             $casGroups = json_decode($casAttributes['departmentNumber']);
            }

[felixrupp]

Hi @StephaneGuilet,

Thanks for your question, unfortunately your custom CAS attribute format is nothing I can implement like you mentioned, because it would break every other users group attribute format.

I am planning to add an option to customize all CAS-attribute-formats in the next feature release.

Regards,
Felix

[StephaneGuilet]

Dear Felix, I thank you very much for your anwer. My goal was to change a little bit the code so that it would work in my case. So i will keep my code modification, until the next update of your code. Thank you for your help, Stéphane GUILET C2N Dry Etching Process Manager Digital Clean Room project Manager ***************** ATTENTION NOUVELLE ADRESSE C2N 10 Boulevard Thomas Gobert – 91120 Palaiseau Tél : 01 70 27 05 33

…

----- Mail original ----- De: "Felix Rupp" <[email protected]> À: "felixrupp/user_cas" <[email protected]> Cc: "StephaneGuilet" <[email protected]>, "Mention" <[email protected]> Envoyé: Vendredi 22 Février 2019 10:19:50 Objet: Re: [felixrupp/user_cas] CAS Server Attributes to manage groups (#51) Hi @StephaneGuilet , Thanks for your question, unfortunately your custom CAS attribute format is nothing I can implement like you mentioned, because it would break every other users group attribute format. I am planning to add an option to customize all CAS-attribute-formats in the next feature release. Regards, Felix — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .

[felixrupp]

/cib

[create-issue-branch]

Branch issue-51-CAS_Server_Attributes_to_manage_groups created!

[felixrupp]

Added with Version 1.9. Please review the function and close the ticket afterwards. Thanks!