bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nextcloud-mail-sync: harden keycloak fetch

Browse Source
This commit is contained in:
Brad Stein 2026-01-18 02:37:26 -03:00
parent 0d27107411
commit a6ac0c363e
2 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/nextcloud-mail-sync/cronjob.yaml
View File

@ -57,7 +57,7 @@ spec:
- -c - -c
env: env:
- name: KC_BASE - name: KC_BASE
value: https://sso.bstein.dev value: http://keycloak.sso.svc.cluster.local
- name: KC_REALM - name: KC_REALM
value: atlas value: atlas
- name: MAILU_DOMAIN - name: MAILU_DOMAIN

12
services/nextcloud-mail-sync/scripts/nextcloud-mail-sync.sh
View File

@ -81,7 +81,7 @@ list_mail_accounts() {
} }
token=$( token=$(
curl -s -d "grant_type=password" \ curl -fsS -d "grant_type=password" \
-d "client_id=admin-cli" \ -d "client_id=admin-cli" \
-d "username=${KC_ADMIN_USER}" \ -d "username=${KC_ADMIN_USER}" \
-d "password=${KC_ADMIN_PASS}" \ -d "password=${KC_ADMIN_PASS}" \
@ -95,13 +95,17 @@ fi
cd /var/www/html cd /var/www/html
kc_users_url="${KC_BASE}/admin/realms/${KC_REALM}/users?max=2000" kc_users_url="${KC_BASE}/admin/realms/${KC_REALM}/users?max=2000&briefRepresentation=false"
if [[ -n "${ONLY_USERNAME}" ]]; then if [[ -n "${ONLY_USERNAME}" ]]; then
username_q=$(jq -nr --arg v "${ONLY_USERNAME}" '$v|@uri') username_q=$(jq -nr --arg v "${ONLY_USERNAME}" '$v|@uri')
kc_users_url="${KC_BASE}/admin/realms/${KC_REALM}/users?username=${username_q}&exact=true&max=1" kc_users_url="${KC_BASE}/admin/realms/${KC_REALM}/users?username=${username_q}&exact=true&max=1&briefRepresentation=false"
fi fi
users=$(curl -s -H "Authorization: Bearer ${token}" "${kc_users_url}") users=$(curl -fsS -H "Authorization: Bearer ${token}" "${kc_users_url}")
if ! jq -e 'type == "array"' >/dev/null 2>&1 <<<"${users}"; then
echo "ERROR: Keycloak user list is not an array; aborting sync" >&2
exit 1
fi
kc_set_user_mail_meta() { kc_set_user_mail_meta() {
local user_id="${1}" local user_id="${1}"