Budibase integration

[Gregivy]

Hello!

I have tried this integration https://goauthentik.io/integrations/services/budibase/ and found Budibase quite useful low code platform. I have checked other solutions like Appsmith, but all of them except for Budibase luck at least some basic OIDC support in their free self-hosted plans.

However Budibase does not support auto role assignment for registered users atm what practically means that your users will only be able to use internal apps built with Budibase as long as you assign every user to every internal app by hands!

Here is a temporary hack. You can use Budibase API to create/modify users and with use of expression policies in Authentik we can make auto role assignment possible.

First of all you should create Expression Policy and bind it to your Budibase application in Authentik (use high number for order field so this policy runs last), then inside the policy your code should be something like the one below:

import secrets
import string

headers = {
  "accept": "application/json",
  "content-type": "application/json",
  "x-budibase-api-key": "" # put your API key here, https://docs.budibase.com/docs/public-api
}

bb_domain = "https://bb.some.domain"

# find all apps
apps_list_rest = bb_domain + "/api/public/v1/applications/search"
apps_list_resp = requests.post(
  apps_list_rest,
  json={"name": ""},
  headers=headers
)
apps = apps_list_resp.json()["data"]
apps_json = {app['_id']:"BASIC" for app in apps}

# find user
user_rest = bb_domain + "/api/public/v1/users/search"
user_resp = requests.post(
  user_rest,
  json={"name": request.user.username},
  headers=headers
)
bb_user = user_resp.json()["data"]

if len(bb_user) > 0:
  # user exists, lets update his roles
  bb_user_id = bb_user[0]["_id"]

  # add apps to user
  add_app_rest = bb_domain + "/api/public/v1/users/" + bb_user_id
  add_app_resp = requests.put(
    add_app_rest,
    json={
      "roles": apps_json
    },
    headers=headers
  )
else:
  # user does not exist, lets create one with proper roles
  alphabet = string.ascii_letters + string.digits
  password = ''.join(secrets.choice(alphabet) for i in range(20))
  # create user
  create_user_rest = bb_domain + "/api/public/v1/users"
  create_user_resp = requests.post(
    create_user_rest,
    json={
      "email": request.user.email,
      "status": "active",
      "password": password,
      "roles": apps_json
    },
    headers=headers
  )
return True

I hope this example will be useful!