mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
66449eedb0
Previously, string "{0}" was replaced by the user dn in the groups_filter attributes of the LDAP configuration. However, if the groups children only have a memberUid attribute, one would like to use the username instead of the user dn. Since the user dn can be built from the username, "{0}" is now replaced by the username instead of the user dn so that an LDAP relying on attribute 'memberUid' can be used.
47 lines
1.4 KiB
TypeScript
47 lines
1.4 KiB
TypeScript
import BluebirdPromise = require("bluebird");
|
|
import exceptions = require("../Exceptions");
|
|
import ldapjs = require("ldapjs");
|
|
import { Client } from "./Client";
|
|
import { IClientFactory } from "./IClientFactory";
|
|
import { LdapConfiguration } from "../configuration/Configuration";
|
|
import { GroupsAndEmails } from "./IClient";
|
|
|
|
|
|
export class EmailsAndGroupsRetriever {
|
|
private options: LdapConfiguration;
|
|
private clientFactory: IClientFactory;
|
|
|
|
constructor(options: LdapConfiguration, clientFactory: IClientFactory) {
|
|
this.options = options;
|
|
this.clientFactory = clientFactory;
|
|
}
|
|
|
|
retrieve(username: string): BluebirdPromise<GroupsAndEmails> {
|
|
const adminClient = this.clientFactory.create(this.options.user, this.options.password);
|
|
let emails: string[];
|
|
let groups: string[];
|
|
|
|
return adminClient.open()
|
|
.then(function () {
|
|
return adminClient.searchEmails(username);
|
|
})
|
|
.then(function (emails_: string[]) {
|
|
emails = emails_;
|
|
return adminClient.searchGroups(username);
|
|
})
|
|
.then(function (groups_: string[]) {
|
|
groups = groups_;
|
|
return adminClient.close();
|
|
})
|
|
.then(function () {
|
|
return BluebirdPromise.resolve({
|
|
emails: emails,
|
|
groups: groups
|
|
});
|
|
})
|
|
.error(function (err: Error) {
|
|
return BluebirdPromise.reject(new exceptions.LdapError("Failed during emails and groups retrieval: " + err.message));
|
|
});
|
|
}
|
|
}
|