Ryan Malloy
9ca200b6bc
The Groups column is already persisted on users.User (migration 202505141323) and populated from claims.Groups in FromClaim. This makes the value visible through the gRPC/REST surface so external tools (notably Headplane, which is the motivation for storing the claim in the first place) can read group membership without poking at the database. - proto/headscale/v1/user.proto: add `repeated string groups = 9;` with a doc comment describing where the value comes from. - gen/go/headscale/v1/user.pb.go, gen/openapiv2/headscale/v1/headscale.swagger.json: regenerated via `buf generate --template ../buf.gen.yaml -o .. ../proto`. - hscontrol/types/users.go: populate v1.User.Groups in Proto() by decoding the JSON-encoded users.groups column via GetGroups(). - integration/oidc_groups_test.go: drop the sqlite3-via-Execute hack and verify groups through headscale.ListUsers() like every other user-state integration test.
48 lines
1.1 KiB
Protocol Buffer
48 lines
1.1 KiB
Protocol Buffer
syntax = "proto3";
|
|
package headscale.v1;
|
|
option go_package = "github.com/juanfont/headscale/gen/go/v1";
|
|
|
|
import "google/protobuf/timestamp.proto";
|
|
|
|
message User {
|
|
uint64 id = 1;
|
|
string name = 2;
|
|
google.protobuf.Timestamp created_at = 3;
|
|
string display_name = 4;
|
|
string email = 5;
|
|
string provider_id = 6;
|
|
string provider = 7;
|
|
string profile_pic_url = 8;
|
|
// OIDC group memberships extracted from the identity provider's
|
|
// `groups` claim at login. Populated by hscontrol/types.User.FromClaim.
|
|
// External tools (Headplane, automation) use this for role-based access.
|
|
repeated string groups = 9;
|
|
}
|
|
|
|
message CreateUserRequest {
|
|
string name = 1;
|
|
string display_name = 2;
|
|
string email = 3;
|
|
string picture_url = 4;
|
|
}
|
|
|
|
message CreateUserResponse { User user = 1; }
|
|
|
|
message RenameUserRequest {
|
|
uint64 old_id = 1;
|
|
string new_name = 2;
|
|
}
|
|
|
|
message RenameUserResponse { User user = 1; }
|
|
|
|
message DeleteUserRequest { uint64 id = 1; }
|
|
|
|
message DeleteUserResponse {}
|
|
|
|
message ListUsersRequest {
|
|
uint64 id = 1;
|
|
string name = 2;
|
|
string email = 3;
|
|
}
|
|
|
|
message ListUsersResponse { repeated User users = 1; }
|