Skip to content

feat(scim): Add /ResourceTypes and /Schemas - #2664

Open
xlgmokha wants to merge 1 commit into
xlgmokha/auth-1362dfrom
xlgmokha/auth-1362e
Open

feat(scim): Add /ResourceTypes and /Schemas#2664
xlgmokha wants to merge 1 commit into
xlgmokha/auth-1362dfrom
xlgmokha/auth-1362e

Conversation

@xlgmokha

@xlgmokha xlgmokha commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

What kind of change does this PR introduce?

Feature. GET /scim/v2/ResourceTypes and GET /scim/v2/Schemas return an empty ListResponse.

Extracted from #2643

https://linear.app/supabase/issue/AUTH-1362/scim-discovery-endpoints

What is the current behavior?

ServiceProviderConfig returns a real document, but ResourceTypes and Schemas still return 501 in the RFC 7644 error form.

What is the new behavior?

Adds the query response form from RFC 7644, and both endpoints answer with an empty one. No resource types exist yet.

$ curl -s http://localhost:9999/scim/v2/Schemas | jq
{
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:ListResponse"
  ],
  "totalResults": 0,
  "startIndex": 1,
  "itemsPerPage": 0,
  "Resources": []
}

Neither endpoint supports filtering. RFC 7644, Section 4:

Query parameters described in Section 3.4.2, such as filtering, sorting, and
pagination, SHALL be ignored. If a "filter" is provided, the service provider
SHOULD respond with HTTP status code 403 (Forbidden) to ensure that clients
cannot incorrectly assume that any matching conditions specified in a filter
are true.

$ curl -s 'http://localhost:9999/scim/v2/Schemas?filter=name%20eq%20%22User%22' | jq
{
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:Error"
  ],
  "detail": "Filtering is not supported on this endpoint",
  "status": "403"
}

Additional context

@xlgmokha
xlgmokha changed the base branch from master to xlgmokha/auth-1362d July 31, 2026 17:53
@xlgmokha xlgmokha self-assigned this Jul 31, 2026
@xlgmokha
xlgmokha marked this pull request as ready for review July 31, 2026 17:55
@xlgmokha
xlgmokha requested a review from a team as a code owner July 31, 2026 17:55
@xlgmokha
xlgmokha force-pushed the xlgmokha/auth-1362e branch 3 times, most recently from 94251fc to bf2e0d0 Compare July 31, 2026 20:53
Add `GET /scim/v2/ResourceTypes` and `GET /scim/v2/Schemas` with
an empty list. Neither endpoint supports filtering.
@xlgmokha
xlgmokha force-pushed the xlgmokha/auth-1362e branch from bf2e0d0 to fe67628 Compare July 31, 2026 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant