make the email match optional when searching for a user or a display …

…name Signed-off-by: Julien Veyssier <[email protected]>
nextcloud · Dec 19, 2024 · b17ae12 · b17ae12
1 parent f58c5c3
commit b17ae12
Show file tree

Hide file tree

Showing 2 changed files with 62 additions and 28 deletions.
diff --git a/README.md b/README.md
@@ -287,6 +287,15 @@ You can disable these check with these config value (in config.php):
 ],
 ```
 
+### Disable the user search by email
+
+This app can stop matching users (when a user search is performed in Nextcloud) by setting this config.php value:
+``` php
+'user_oidc' => [
+    'user_search_match_emails' => false,
+],
+```
+
 ## Building the app
 
 Requirements for building:

diff --git a/lib/Db/UserMapper.php b/lib/Db/UserMapper.php
@@ -12,6 +12,7 @@
 use OCP\AppFramework\Db\IMapperException;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\Cache\CappedMemoryCache;
+use OCP\IConfig;
 use OCP\IDBConnection;
 
 /**
@@ -24,6 +25,7 @@ class UserMapper extends QBMapper {
 	public function __construct(
 		IDBConnection $db,
 		private LocalIdService $idService,
+		private IConfig $config,
 	) {
 		parent::__construct($db, 'user_oidc', User::class);
 		$this->userCache = new CappedMemoryCache();
@@ -57,41 +59,64 @@ public function getUser(string $uid): User {
 	public function find(string $search, $limit = null, $offset = null): array {
 		$qb = $this->db->getQueryBuilder();
 
-		$qb->select('user_id', 'display_name')
-			->from($this->getTableName(), 'u')
-			->leftJoin('u', 'preferences', 'p', $qb->expr()->andX(
-				$qb->expr()->eq('userid', 'user_id'),
-				$qb->expr()->eq('appid', $qb->expr()->literal('settings')),
-				$qb->expr()->eq('configkey', $qb->expr()->literal('email')))
-			)
-			->where($qb->expr()->iLike('user_id', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
-			->orWhere($qb->expr()->iLike('display_name', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
-			->orWhere($qb->expr()->iLike('configvalue', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
-			->orderBy($qb->func()->lower('user_id'), 'ASC')
-			->setMaxResults($limit)
-			->setFirstResult($offset);
+		$oidcSystemConfig = $this->config->getSystemValue('user_oidc', []);
+		$matchEmails = !isset($oidcSystemConfig['user_search_match_emails']) || $oidcSystemConfig['user_search_match_emails'] === true;
+		if ($matchEmails) {
+			$qb->select('user_id', 'display_name')
+				->from($this->getTableName(), 'u')
+				->leftJoin('u', 'preferences', 'p', $qb->expr()->andX(
+					$qb->expr()->eq('userid', 'user_id'),
+					$qb->expr()->eq('appid', $qb->expr()->literal('settings')),
+					$qb->expr()->eq('configkey', $qb->expr()->literal('email')))
+				)
+				->where($qb->expr()->iLike('user_id', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orWhere($qb->expr()->iLike('display_name', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orWhere($qb->expr()->iLike('configvalue', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orderBy($qb->func()->lower('user_id'), 'ASC')
+				->setMaxResults($limit)
+				->setFirstResult($offset);
+		} else {
+			$qb->select('user_id', 'display_name')
+				->from($this->getTableName())
+				->where($qb->expr()->iLike('user_id', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orWhere($qb->expr()->iLike('display_name', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orderBy($qb->func()->lower('user_id'), 'ASC')
+				->setMaxResults($limit)
+				->setFirstResult($offset);
+		}
 
 		return $this->findEntities($qb);
 	}
 
 	public function findDisplayNames(string $search, $limit = null, $offset = null): array {
 		$qb = $this->db->getQueryBuilder();
 
-		$qb->select('user_id', 'display_name')
-			->from($this->getTableName(), 'u')
-			->leftJoin('u', 'preferences', 'p', $qb->expr()->andX(
-				$qb->expr()->eq('userid', 'user_id'),
-				$qb->expr()->eq('appid', $qb->expr()->literal('settings')),
-				$qb->expr()->eq('configkey', $qb->expr()->literal('email')))
-			)
-			->where($qb->expr()->iLike('user_id', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
-			->orWhere($qb->expr()->iLike('display_name', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
-			->orWhere($qb->expr()->iLike('configvalue', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
-			->orderBy($qb->func()->lower('user_id'), 'ASC')
-			->setMaxResults($limit)
-			->setFirstResult($offset);
-
-		$result = $qb->execute();
+		$matchEmails = !isset($oidcSystemConfig['user_search_match_emails']) || $oidcSystemConfig['user_search_match_emails'] === true;
+		if ($matchEmails) {
+			$qb->select('user_id', 'display_name')
+				->from($this->getTableName(), 'u')
+				->leftJoin('u', 'preferences', 'p', $qb->expr()->andX(
+					$qb->expr()->eq('userid', 'user_id'),
+					$qb->expr()->eq('appid', $qb->expr()->literal('settings')),
+					$qb->expr()->eq('configkey', $qb->expr()->literal('email')))
+				)
+				->where($qb->expr()->iLike('user_id', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orWhere($qb->expr()->iLike('display_name', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orWhere($qb->expr()->iLike('configvalue', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orderBy($qb->func()->lower('user_id'), 'ASC')
+				->setMaxResults($limit)
+				->setFirstResult($offset);
+		} else {
+			$qb->select('user_id', 'display_name')
+				->from($this->getTableName())
+				->where($qb->expr()->iLike('user_id', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orWhere($qb->expr()->iLike('display_name', $qb->createPositionalParameter('%' . $this->db->escapeLikeParameter($search) . '%')))
+				->orderBy($qb->func()->lower('user_id'), 'ASC')
+				->setMaxResults($limit)
+				->setFirstResult($offset);
+		}
+
+		$result = $qb->executeQuery();
 		$displayNames = [];
 		while ($row = $result->fetch()) {
 			$displayNames[(string)$row['user_id']] = (string)$row['display_name'];