Method triggerBeforeUserCreatedExternal

internal/api/hooks.go:52–117

(
	r *http.Request,
	db *storage.Connection,
	userData *provider.UserProvidedData,
	providerType string,
)

}

func (a *API) triggerBeforeUserCreatedExternal(
	r *http.Request,
	db *storage.Connection,
	userData *provider.UserProvidedData,
	providerType string,
) error {
	if !a.hooksMgr.Enabled(v0hooks.BeforeUserCreated) {
		return nil
	}
	if err := checkTX(db); err != nil {
		return err
	}

	ctx := r.Context()
	aud := a.requestAud(ctx, r)
	config := a.config

	var identityData map[string]interface{}
	if userData.Metadata != nil {
		identityData = structs.Map(userData.Metadata)
	}

	var (
		err      error
		decision models.AccountLinkingResult
	)
	err = db.Transaction(func(tx *storage.Connection) error {
		decision, err = models.DetermineAccountLinking(
			tx, config, userData.Emails, aud,
			providerType, userData.Metadata.Subject)
		if err != nil {
			return err
		}
		return nil
	})
	if err != nil {
		return err
	}

	if decision.Decision != models.CreateAccount {
		return nil
	}
	if config.DisableSignup {
		return apierrors.NewUnprocessableEntityError(
			apierrors.ErrorCodeSignupDisabled,
			"Signups not allowed for this instance")
	}

	params := &SignupParams{
		Provider: providerType,
		Email:    decision.CandidateEmail.Email,
		Aud:      aud,
		Data:     identityData,
	}

	isSSOUser := false
	if strings.HasPrefix(decision.LinkingDomain, "sso:") {
		isSSOUser = true