[jira] [Closed] (OAK-11984) Support UserId Change for External Users

["Julian Reschke (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OAK-11984?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Julian Reschke closed OAK-11984.
--------------------------------

> Support UserId Change for External Users
> ----------------------------------------
>
>                 Key: OAK-11984
>                 URL: https://issues.apache.org/jira/browse/OAK-11984
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: auth-external
>            Reporter: Nicola Scendoni
>            Assignee: Nicola Scendoni
>            Priority: Major
>             Fix For: 1.88.0
>
>
> In a typical setup with external users, Oak stores the *UserId* as both the {{principalName}} and the {{authorizableId}} of the user. The internal identifier of the user in the external Identity Provider (IdP) is stored in the property {{rep:externalId}}, containing the IdP name as a suffix.
> When a user changes his UserId in the external IdP, Oak currently attempts to create a new user entry. However, this operation fails because another user already exists with the same {{rep:externalId}} value.
> The proposed patch addresses this issue by reusing the existing user entry in the repository if a user with the same rep:externalId is found. This ensures that changes to the UserId in the external IdP are properly reflected in Oak without causing duplication or conflicts.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)