Add membership state

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

pkg/iam/saml/errors.go

@@ -88,3 +88,13 @@ func NewSAMLAutoSignupDisabledError(configID gid.GID) error {
 func (e ErrSAMLAutoSignupDisabled) Error() string {
 	return fmt.Sprintf("SAML auto-signup is disabled for configuration %q", e.ConfigID)
 }
+
+type ErrMembershipInactive struct{ MembershipID gid.GID }
+
+func NewMembershipInactiveError(membershipID gid.GID) error {
+	return &ErrMembershipInactive{MembershipID: membershipID}
+}
+
+func (e ErrMembershipInactive) Error() string {
+	return fmt.Sprintf("membership %q is inactive", e.MembershipID)
+}

pkg/iam/saml/service.go

@@ -291,6 +291,10 @@ func (s *Service) HandleAssertion(
 				return fmt.Errorf("cannot load membership: %w", err)
 			}
 
+			if membership.ID != gid.Nil && membership.State == coredata.MembershipStateInactive {
+				return NewMembershipInactiveError(membership.ID)
+			}
+
 			isMember := membership.ID != gid.Nil
 			if !isMember {
 				membership = &coredata.Membership{
@@ -299,6 +303,7 @@ func (s *Service) HandleAssertion(
 					OrganizationID: config.OrganizationID,
 					Role:           coredata.MembershipRoleViewer,
 					Source:         coredata.MembershipSourceSAML,
+					State:          coredata.MembershipStateActive,
 					CreatedAt:      now,
 					UpdatedAt:      now,
 				}