src/Model/Types/Auth.hs

@@ -75,7 +75,7 @@ type UserEduPersonPrincipalName = Text
 -- | Used for uniquely storing ExternalUser entries per user and source
 data AuthSourceIdent
   = AuthSourceIdAzure
-    { authSourceIdAzureClientId :: UUID
+    { authSourceIdAzureClientId :: UUID -- FIXME: use tenant id instead
     }
   | AuthSourceIdLdap
     { authSourceIdLdapHost :: Text -- normally either just the hostname, or hostname and port

src/Settings.hs

@@ -155,6 +155,11 @@ data UserAuthConf =
   -- | UserAuthConfNoSource -- ^ allow no external sources at all -- TODO: either this, or make user-auth in settings.yml optional
   deriving (Show)
 
+mkAuthSourceIdent :: AuthSourceConf -> AuthSourceIdent
+mkAuthSourceIdent = \case
+  AuthSourceConfAzureAdV2 AzureConf{..} -> AuthSourceIdAzure azureConfClientId
+  AuthSourceConfLdap      LdapConf{..}  -> AuthSourceIdLdap  ldapConfSourceId
+
 data LmsConf = LmsConf
   { lmsUploadHeader       :: Bool
   , lmsUploadDelimiter    :: Maybe Char