resource_app_user_attachment.go

package okta

import (
	"github.com/hashicorp/terraform/helper/schema"
	"log"
)

func resourceAppUserAttachment() *schema.Resource {
	return &schema.Resource{
		Create: resourceAppUserAttachmentCreate,
		Read:   resourceAppUserAttachmentRead,
		Update: resourceAppUserAttachmentUpdate,
		Delete: resourceAppUserAttachmentDelete,

		Schema: map[string]*schema.Schema{
			"role": &schema.Schema{
				Type:     schema.TypeString,
				ForceNew: true,
				Required: true,
			},
			"user": &schema.Schema{
				Type:     schema.TypeString,
				ForceNew: true,
				Required: true,
			},
			"domain": &schema.Schema{
				Type:     schema.TypeString,
				ForceNew: true,
				Optional: true,
				Default:  "",
			},
			"app_id": &schema.Schema{
				Type:     schema.TypeString,
				ForceNew: true,
				Required: true,
			},
			"saml_roles": &schema.Schema{
				Type: schema.TypeList,
				Elem: &schema.Schema{
					Type: schema.TypeString,
				},
				Required: true,
			},
		},
	}
}

func resourceAppUserAttachmentCreate(d *schema.ResourceData, m interface{}) error {
	config := m.(Config)
	client := config.Okta

	app_id := d.Get("app_id").(string)
	role := d.Get("role").(string)
	user := d.Get("user").(string)
	domain := d.Get("domain").(string)
	saml_roles := d.Get("saml_roles").([]interface{})
	roles := make([]string, len(saml_roles))
	for i, value := range saml_roles {
		roles[i] = value.(string)
	}

	user_id, err := client.GetUserIDByEmail(user, domain)
	if err != nil {
		return err
	}

	_, err = client.AddAppMember(app_id, user_id, role, roles)
	if err != nil {
		return err
	}

	d.SetId(user_id)

	return resourceAppUserAttachmentRead(d, m)
}

func resourceAppUserAttachmentUpdate(d *schema.ResourceData, m interface{}) error {
	config := m.(Config)
	client := config.Okta

	app_id := d.Get("app_id").(string)
	role := d.Get("role").(string)
	saml_roles := d.Get("saml_roles").([]interface{})
	roles := make([]string, len(saml_roles))
	for i, value := range saml_roles {
		roles[i] = value.(string)
	}

	_, err := client.AddAppMember(app_id, d.Id(), role, roles)
	if err != nil {
		return err
	}

	return resourceAppUserAttachmentRead(d, m)
}

func resourceAppUserAttachmentRead(d *schema.ResourceData, m interface{}) error {
	config := m.(Config)
	client := config.Okta

	member, err := client.GetAppMember(d.Get("app_id").(string), d.Id())
	if err != nil || member == nil {
		log.Printf("[WARN] User (%s) in app (%s) not found, removing from state", d.Id(), d.Get("app_id").(string))
		d.SetId("")
		return nil
	}

	log.Printf("[INFO] App %s user (%s) discovered", d.Get("app_id").(string), d.Id())

	d.Set("status", member.Status)
	d.Set("email", member.Profile.Email)
	d.Set("display_name", member.Profile.DisplayName)
	d.Set("role", member.Profile.Role)
	d.Set("saml_roles", member.Profile.SamlRoles)

	return nil
}

func resourceAppUserAttachmentDelete(d *schema.ResourceData, m interface{}) error {
	config := m.(Config)
	client := config.Okta

	err := client.RemoveAppMember(d.Get("app_id").(string), d.Id())
	if err != nil {
		return err
	}

	return nil
}