Documentation
¶
Overview ¶
Package scimhttp exposes Credbound's optional SCIM 2.0 provisioning adapter (RFC 7643/7644): Users, Groups, /.search, PATCH, discovery endpoints and SCIM-shaped errors, all delegated to a Manager whose store implements credbound.SCIMStore.
It does not start a server; hosts normally mount Handler below /scim/v2 with http.StripPrefix:
scim, err := scimhttp.New(manager)
mux.Handle("/scim/v2/", http.StripPrefix("/scim/v2", scim))
Every request must carry a SCIM bearer credential issued by Credbound; TLS and request throttling remain the host's responsibility.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Handler ¶
type Handler struct {
// contains filtered or unexported fields
}
Handler serves the SCIM 2.0 endpoints for identity-provider directory sync. Authentication, workspace scoping and audit are enforced by the Manager per request; the handler only speaks the protocol.
func New ¶
New returns a Handler backed by manager, which is required and must have been built over a store with SCIM capability for requests to succeed.
func (*Handler) ServeHTTP ¶
func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request)
ServeHTTP authenticates the SCIM bearer token, then routes the request to the discovery, Users or Groups endpoints relative to the mount point. Failures are answered as application/scim+json error documents.