092fb2e083
Some checks failed
Lock Threads / action (push) Has been cancelled
Mark stale issues and pull requests / stale (push) Has been cancelled
Publish Chatwoot EE docker images / build (linux/amd64, ubuntu-latest) (push) Has been cancelled
Publish Chatwoot EE docker images / build (linux/arm64, ubuntu-22.04-arm) (push) Has been cancelled
Publish Chatwoot EE docker images / merge (push) Has been cancelled
Publish Chatwoot CE docker images / build (linux/amd64, ubuntu-latest) (push) Has been cancelled
Publish Chatwoot CE docker images / build (linux/arm64, ubuntu-22.04-arm) (push) Has been cancelled
Publish Chatwoot CE docker images / merge (push) Has been cancelled
Run Chatwoot CE spec / lint-backend (push) Has been cancelled
Run Chatwoot CE spec / lint-frontend (push) Has been cancelled
Run Chatwoot CE spec / frontend-tests (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (0, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (1, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (10, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (11, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (12, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (13, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (14, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (15, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (2, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (3, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (4, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (5, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (6, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (7, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (8, 16) (push) Has been cancelled
Run Chatwoot CE spec / backend-tests (9, 16) (push) Has been cancelled
Run Linux nightly installer / nightly (push) Has been cancelled
- Add Logistics component with progress tracking - Add OrderDetail component for order information - Support data-driven steps and actions - Add blue color scale to widget SCSS - Fix node overflow and progress bar rendering issues - Add English translations for dashboard components Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
48 lines
2.1 KiB
Ruby
48 lines
2.1 KiB
Ruby
# Enterprise Edition SAML SSO Provider
|
|
# This initializer adds SAML authentication support for Enterprise customers
|
|
|
|
# SAML setup proc for multi-tenant configuration
|
|
SAML_SETUP_PROC = proc do |env|
|
|
request = ActionDispatch::Request.new(env)
|
|
|
|
# Extract account_id from various sources
|
|
account_id = request.params['account_id'] ||
|
|
request.session[:saml_account_id] ||
|
|
env['omniauth.params']&.dig('account_id')
|
|
relay_state = request.params['RelayState'] || ''
|
|
|
|
if account_id
|
|
# Store in session and omniauth params for callback
|
|
request.session[:saml_account_id] = account_id
|
|
request.session[:saml_relay_state] = relay_state
|
|
env['omniauth.params'] ||= {}
|
|
env['omniauth.params']['account_id'] = account_id
|
|
env['omniauth.params']['RelayState'] = relay_state
|
|
|
|
# Find SAML settings for this account
|
|
settings = AccountSamlSettings.find_by(account_id: account_id)
|
|
|
|
if settings
|
|
# Configure the strategy options dynamically
|
|
env['omniauth.strategy'].options[:idp_sso_service_url_runtime_params] = { RelayState: :RelayState }
|
|
env['omniauth.strategy'].options[:assertion_consumer_service_url] = "#{ENV.fetch('FRONTEND_URL', 'http://localhost:3000')}/omniauth/saml/callback?account_id=#{account_id}"
|
|
env['omniauth.strategy'].options[:sp_entity_id] = settings.sp_entity_id
|
|
env['omniauth.strategy'].options[:idp_entity_id] = settings.idp_entity_id
|
|
env['omniauth.strategy'].options[:idp_sso_service_url] = settings.sso_url
|
|
env['omniauth.strategy'].options[:idp_cert] = settings.certificate
|
|
env['omniauth.strategy'].options[:name_identifier_format] = 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress'
|
|
else
|
|
# Set a dummy certificate to avoid the error
|
|
env['omniauth.strategy'].options[:idp_cert] = 'DUMMY'
|
|
end
|
|
else
|
|
# Set a dummy certificate to avoid the error
|
|
env['omniauth.strategy'].options[:idp_cert] = 'DUMMY'
|
|
end
|
|
end
|
|
|
|
Rails.application.config.middleware.use OmniAuth::Builder do
|
|
# SAML provider with setup phase for multi-tenant configuration
|
|
provider :saml, setup: SAML_SETUP_PROC
|
|
end
|