External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-09 23:12:06 -03:30
Code Issues Packages Projects Releases Wiki Activity

Fix #40995 avoid ModelException: At least one condition should be provided to OR query

Browse Source 
Closes #40995
Signed-off-by: Sylvere Richard <sylvere.richard@gmail.com>
This commit is contained in:
Sylvere Richard 2025-07-08 12:51:58 +02:00 committed by Pedro Igor
parent efd1ffd244
commit 173471a1c9
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
federation/ldap/src/main/java/org/keycloak/storage/ldap/mappers/membership/UserRolesRetrieveStrategy.java
View File

@ -106,14 +106,14 @@ public interface UserRolesRetrieveStrategy {
// load only those groups/roles the user is memberOf
// we do this by query to apply defined custom filters
ldapQuery.addWhereCondition(conditionBuilder.orCondition(
memberOfValues.stream()
.map(LDAPDn::fromString)
.filter(roleDN -> roleDN.isDescendantOf(LDAPDn.fromString(roleOrGroupMapper.getConfig().getLDAPGroupsDn())))
.map(roleDN -> conditionBuilder.equal(rdnAttr, roleDN.getFirstRdn().getAttrValue(rdnAttr)))
.toArray(Condition[]::new)
)
);
final Condition[] conditions = memberOfValues.stream()
.map(LDAPDn::fromString)
.filter(roleDN -> roleDN.isDescendantOf(LDAPDn.fromString(roleOrGroupMapper.getConfig().getLDAPGroupsDn())))
.map(roleDN -> conditionBuilder.equal(rdnAttr, roleDN.getFirstRdn().getAttrValue(rdnAttr)))
.toArray(Condition[]::new);
if (conditions.length > 0) {
ldapQuery.addWhereCondition(conditionBuilder.orCondition(conditions));
}
return LDAPUtils.loadAllLDAPObjects(ldapQuery, ldapConfig);
}