chore: zero trust config issues (#6179)

fix: fix zero trust access application state migration

Author: tamas-jozsa

cmd/migrate/state.go

@@ -227,7 +227,7 @@ func transformStateJSON(data []byte) ([]byte, error) {
 func transformSnippetStateJSON(json string, instancePath string) string {
 	attrPath := instancePath + ".attributes"
 	result := json
-	
+
 	// Set schema_version to 0 for v5
 	result, _ = sjson.Set(result, instancePath+".schema_version", 0)
 
@@ -1513,6 +1513,66 @@ func transformZeroTrustAccessApplicationStateJSON(json string, path string) stri
 		json, _ = sjson.Set(json, attrPath+".custom_pages", customPages.Value())
 	}
 
+	// Transform cors_headers from array format to object format
+	// In v4, cors_headers was stored as an array: [{"allowed_methods": [...], ...}]
+	// In v5, it should be a single object: {"allowed_methods": [...], ...}
+	corsHeaders := gjson.Get(json, attrPath+".cors_headers")
+	if corsHeaders.Exists() && corsHeaders.IsArray() {
+		corsArray := corsHeaders.Array()
+		if len(corsArray) > 0 && corsArray[0].Exists() {
+			// Take the first element and make it the object
+			json, _ = sjson.Set(json, attrPath+".cors_headers", corsArray[0].Value())
+		} else {
+			// Empty array becomes null
+			json, _ = sjson.Set(json, attrPath+".cors_headers", nil)
+		}
+	}
+
+	// Transform landing_page_design from array format to object format
+	// In v4, landing_page_design was stored as an array: [{"title": "...", "message": "...", ...}]
+	// In v5, it should be a single object: {"title": "...", "message": "...", ...}
+	landingPageDesign := gjson.Get(json, attrPath+".landing_page_design")
+	if landingPageDesign.Exists() && landingPageDesign.IsArray() {
+		landingArray := landingPageDesign.Array()
+		if len(landingArray) > 0 && landingArray[0].Exists() {
+			// Take the first element and make it the object
+			json, _ = sjson.Set(json, attrPath+".landing_page_design", landingArray[0].Value())
+		} else {
+			// Empty array becomes null
+			json, _ = sjson.Set(json, attrPath+".landing_page_design", nil)
+		}
+	}
+
+	// Transform saas_app from array format to object format
+	// In v4, saas_app was stored as an array: [{"consumer_service_url": "...", "sp_entity_id": "...", ...}]
+	// In v5, it should be a single object: {"consumer_service_url": "...", "sp_entity_id": "...", ...}
+	saasApp := gjson.Get(json, attrPath+".saas_app")
+	if saasApp.Exists() && saasApp.IsArray() {
+		saasArray := saasApp.Array()
+		if len(saasArray) > 0 && saasArray[0].Exists() {
+			// Take the first element and make it the object
+			json, _ = sjson.Set(json, attrPath+".saas_app", saasArray[0].Value())
+		} else {
+			// Empty array becomes null
+			json, _ = sjson.Set(json, attrPath+".saas_app", nil)
+		}
+	}
+
+	// Transform scim_config from array format to object format
+	// In v4, scim_config was stored as an array: [{"enabled": true, "remote_uri": "...", ...}]
+	// In v5, it should be a single object: {"enabled": true, "remote_uri": "...", ...}
+	scimConfig := gjson.Get(json, attrPath+".scim_config")
+	if scimConfig.Exists() && scimConfig.IsArray() {
+		scimArray := scimConfig.Array()
+		if len(scimArray) > 0 && scimArray[0].Exists() {
+			// Take the first element and make it the object
+			json, _ = sjson.Set(json, attrPath+".scim_config", scimArray[0].Value())
+		} else {
+			// Empty array becomes null
+			json, _ = sjson.Set(json, attrPath+".scim_config", nil)
+		}
+	}
+
 	// Transform policies from simple string list to complex object list
 	policies := gjson.Get(json, attrPath+".policies")
 	if policies.IsArray() {