mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
66449eedb0
Previously, string "{0}" was replaced by the user dn in the groups_filter attributes of the LDAP configuration. However, if the groups children only have a memberUid attribute, one would like to use the username instead of the user dn. Since the user dn can be built from the username, "{0}" is now replaced by the username instead of the user dn so that an LDAP relying on attribute 'memberUid' can be used.
40 lines
1.2 KiB
TypeScript
40 lines
1.2 KiB
TypeScript
import BluebirdPromise = require("bluebird");
|
|
import exceptions = require("../Exceptions");
|
|
import ldapjs = require("ldapjs");
|
|
import { IClient } from "./IClient";
|
|
|
|
import { IClientFactory } from "./IClientFactory";
|
|
import { IGroupsRetriever } from "./IGroupsRetriever";
|
|
import { LdapConfiguration } from "../configuration/Configuration";
|
|
|
|
|
|
export class GroupsRetriever implements IGroupsRetriever {
|
|
private options: LdapConfiguration;
|
|
private clientFactory: IClientFactory;
|
|
|
|
constructor(options: LdapConfiguration, clientFactory: IClientFactory) {
|
|
this.options = options;
|
|
this.clientFactory = clientFactory;
|
|
}
|
|
|
|
retrieve(username: string, client?: IClient): BluebirdPromise<string[]> {
|
|
client = this.clientFactory.create(this.options.user, this.options.password);
|
|
let groups: string[];
|
|
|
|
return client.open()
|
|
.then(function () {
|
|
return client.searchGroups(username);
|
|
})
|
|
.then(function (groups_: string[]) {
|
|
groups = groups_;
|
|
return client.close();
|
|
})
|
|
.then(function () {
|
|
return BluebirdPromise.resolve(groups);
|
|
})
|
|
.catch(function (err: Error) {
|
|
return BluebirdPromise.reject(new exceptions.LdapError("Failed during groups retrieval: " + err.message));
|
|
});
|
|
}
|
|
}
|