feat: update keycloak user without credentials

linode · Sep 27, 2024 · b720b98 · b720b98
1 parent 9dae385
commit b720b98
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/operator/keycloak.ts b/src/operator/keycloak.ts
@@ -23,7 +23,7 @@ import {
   UserRepresentation,
   UsersApi,
 } from '@linode/keycloak-client-node'
-import { forEach } from 'lodash'
+import { forEach, omit } from 'lodash'
 import { custom, Issuer, TokenSet } from 'openid-client'
 import { keycloakRealm } from '../tasks/keycloak/config'
 import {
@@ -721,8 +721,9 @@ async function createUpdateUser(api: any, user: any) {
   try {
     if (existingUser) {
       console.debug(`User with email ${email} already exists, updating user`)
+      const userConfWithoutCredentials = omit(userConf, ['credentials'])
       await doApiCall(errors, `Updating user ${username}`, async () =>
-        api.users.realmUsersIdPut(keycloakRealm, existingUser.id as string, userConf),
+        api.users.realmUsersIdPut(keycloakRealm, existingUser.id as string, userConfWithoutCredentials),
       )
     } else {
       await doApiCall(errors, `Creating user ${username}`, () => api.users.realmUsersPost(keycloakRealm, userConf))