search

famedly / famedly-sync

GNU Affero General Public License v3.0
4 stars 0 forks source link

Allow non-SSO deployments #30

Open tlater-famedly opened 2 months ago

tlater-famedly commented 2 months ago

As of 9995b4c SSO is mandatory, which is obviously not what we want.

The problem is that Zitadel currently sends confirmation emails if no authentication method is enabled on user creation - and since we don't want to pre-set passwords for security reasons, but still don't want to email users for flow reasons, this means we cannot currently provide sync for users that should not use SSO.

Fixing this requires upstream changes to Zitadel, so this is blocked until we have some kind of resolution for https://github.com/zitadel/zitadel/issues/8422

nikzen commented 3 weeks ago

This is possible now:

POST https://auth.staging.famedly.de/v2/users/human

{
  "userId": "1234567abc",
  "username": "larodar1234567abc",
  "profile": {
    "givenName": "Minnie",
    "familyName": "Mouse",
    "displayName": "Minnie Mouse"
  },
  "email": {
    "email": "n.zender+larodar1234567abc@famedly.com",
    "isVerified": true
  }
}

Creates a user and no mail is sent. If the user tries to login, zitadel sends a code to set the password