milan-berri 506d1dff43 fix: handle deprovisioning operations without path field (#21571) ...

* fix(scim): handle deprovisioning operations without path field

When SCIM providers send deprovisioning requests without a path field
(e.g., {"op": "replace", "value": {"active": false}}), the code was
storing the value under an empty string key in metadata.

This fix:
- Detects operations with no path where value is a dict
- Extracts and handles known fields like 'active' correctly
- Sets metadata["scim_active"] = false instead of metadata[""] = {"active": false}

Fixes: SCIM deprovisioning creating empty string keys in user metadata

* fix(scim): handle all known fields in operations without path

Extended the fix to handle all SCIM fields (not just active) when
operations have no path field:
- active -> scim_active
- displayName -> user_alias
- externalId -> user_id
- name.givenName/familyName -> scim_metadata

Added comprehensive test for multiple fields without path.

Addresses Greptile review feedback on RFC 7644 compliance.

* trigger PR update

2026-02-19 11:09:04 -08:00

..

test_scim_patch_user.py

fix: handle deprovisioning operations without path field (#21571)

2026-02-19 11:09:04 -08:00

test_scim_transformations.py

Fix ruff linting errors: remove unused imports and variables

2025-12-03 21:06:32 +01:00

test_scim_v2_discovery.py

feat: add base /scim/v2 endpoint for SCIM resource discovery (#20301)

2026-02-02 14:27:00 -08:00

test_scim_v2_endpoints.py

patching with feature flag

2026-01-09 15:07:53 -08:00