OIDC/Auth2 integration

Makefile

@@ -142,7 +142,10 @@ run-dev-otel run-bash-otel: | start-dev-otel run-dev-attach-otel
 # Build standalone development container (not usable inside the docker container)
 
 build-dev:
+	rm -rf pip-auth
+	cp -r ../openslides-auth-service/libraries/pip-auth pip-auth
 	docker build --file=dev/Dockerfile.dev . --tag=openslides-backend-dev
+	rm -rf pip-auth
 
 rebuild-dev:
 	docker build --file=dev/Dockerfile.dev . --tag=openslides-backend-dev --no-cache

dev/Dockerfile.dev

@@ -5,6 +5,7 @@ RUN apt-get update && apt-get install --yes make git curl ncat vim bash-completi
 WORKDIR /app
 
 COPY requirements/ requirements/
+COPY pip-auth /pip-auth
 ARG REQUIREMENTS_FILE=requirements_development.txt
 RUN . requirements/export_service_commits.sh && pip install --no-cache-dir --requirement requirements/$REQUIREMENTS_FILE
 

docs/Actions-Overview.md

@@ -231,7 +231,6 @@ A more general format description see in [Action-Service](https://github.com/Ope
 - [user.toggle_presence_by_number](actions/user.toggle_presence_by_number.md)
 - [user.update](actions/user.update.md)
 - [user.update_self](actions/user.update_self.md)
-- [user.save_saml_account](actions/user.save_saml_account.md)
 - [meeting_user.create](actions/meeting_user.create.md)
 - [meeting_user.update](actions/meeting_user.update.md)
 - [meeting_user.delete](actions/meeting_user.delete.md)

openslides_backend/action/actions/organization/update.py

@@ -13,7 +13,6 @@
 from ...mixins.send_email_mixin import EmailCheckMixin, EmailSenderCheckMixin
 from ...util.default_schema import DefaultSchema
 from ...util.register import register_action
-from ..user.save_saml_account import allowed_user_fields
 from ..user.update import UserUpdate
 
 
@@ -48,36 +47,12 @@ class OrganizationUpdate(
         "limit_of_meetings",
         "limit_of_users",
         "url",
-        "saml_enabled",
-        "saml_login_button_text",
-        "saml_attr_mapping",
-        "saml_metadata_idp",
-        "saml_metadata_sp",
-        "saml_private_key",
     )
 
     model = Organization()
-    saml_props = {
-        field: {**optional_str_schema, "max_length": 256}
-        for field in allowed_user_fields
-    }
-    saml_props["meeting"] = {
-        "type": ["object", "null"],
-        "properties": {
-            field: {**optional_str_schema, "max_length": 256}
-            for field in ("external_id", "external_group_id")
-        },
-        "additionalProperties": False,
-    }
     schema = DefaultSchema(Organization()).get_update_schema(
         optional_properties=group_A_fields + group_B_fields,
         additional_optional_fields={
-            "saml_attr_mapping": {
-                "type": ["object", "null"],
-                "properties": saml_props,
-                "required": ["saml_id"],
-                "additionalProperties": False,
-            },
         },
     )
     check_email_field = "users_email_replyto"

openslides_backend/action/actions/user/__init__.py

@@ -4,17 +4,10 @@
     assign_meetings,
     create,
     delete,
-    forget_password,
-    forget_password_confirm,
-    generate_new_password,
     merge_together,
     participant_import,
     participant_json_upload,
-    reset_password_to_default,
-    save_saml_account,
     send_invitation_email,
-    set_password,
-    set_password_self,
     set_present,
     toggle_presence_by_number,
     update,

openslides_backend/action/actions/user/create.py

@@ -16,7 +16,6 @@
 from ...util.typing import ActionResultElement
 from ..meeting_user.mixin import CheckLockOutPermissionMixin
 from .create_update_permissions_mixin import CreateUpdatePermissionsMixin
-from .password_mixins import SetPasswordMixin
 from .user_mixins import LimitOfUserMixin, UserMixin, UsernameMixin, check_gender_helper
 
 
@@ -25,7 +24,6 @@ class UserCreate(
     EmailCheckMixin,
     CreateAction,
     CreateUpdatePermissionsMixin,
-    SetPasswordMixin,
     LimitOfUserMixin,
     UsernameMixin,
     CheckLockOutPermissionMixin,