search

FusionAuth / fusionauth-issues

FusionAuth issue submission project
https://fusionauth.io
90 stars 12 forks source link

SCIM Groups API limits group members in request/response #2784

Closed spwitt closed 2 weeks ago

spwitt commented 2 weeks ago

SCIM Groups API limits group members in request/response

Description

The SCIM API endpoints to create, patch, and retrieve a group do not properly handle group membership counts over 100 users. Responses only return the first 100 users. The patch request will remove group members if the group contains over 100 users.

Observed versions

1.51.0

Affects versions

>= 1.36.0

Steps to reproduce

  1. Create 100+ users
  2. Create a Group
  3. Add users to the group
  4. Send a SCIM patch request to add another user to the group
  5. Only 100 users are members of the group after patch completes

Expected behavior

All group members should be retrieved during a SCIM request. SCIM patch requests to add group members should not remove group members.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

Additional context

Add any other context about the problem here.