node-radius-server/src/auth/LDAPAuth.ts

import * as LdapAuth from 'ldapauth-fork';
import * as fs from 'fs';
import { IAuthentication } from '../types/Authentication';
import PackageInterface from '../interface';

const packageInterface = PackageInterface.get();
const log = (...args) => packageInterface.log(...args);

interface ILDAPAuthOptions {
	/** ldap url
	 * e.g. ldaps://ldap.google.com
	 */
	url: string;
	/** base DN
	 *  e.g. 'dc=hokify,dc=com', */
	base: string;

	tls: {
		keyFile: string;
		certFile: string;
	};
	/** tls options
	 * e.g. {
			servername: 'ldap.google.com'
		} */
	tlsOptions?: any;
	/**
	 * searchFilter
	 */
	searchFilter?: string;
}

export class LDAPAuth implements IAuthentication {
	private ldap: LdapAuth;

	constructor(config: ILDAPAuthOptions) {
		const tlsOptions = {
			key: fs.readFileSync(config.tls.keyFile),
			cert: fs.readFileSync(config.tls.certFile),
			...config.tlsOptions,
		};

		this.ldap = new LdapAuth({
			url: config.url,
			searchBase: config.base,
			tlsOptions,
			searchFilter: config.searchFilter || '(uid={{username}})',
			reconnect: true,
		});
		this.ldap.on('error', (err) => {
			log('LdapAuth: ', err);
		});
	}

	async authenticate(username: string, password: string): Promise<boolean> {
		const authResult: boolean = await new Promise((resolve, reject) => {
			this.ldap.authenticate(username, password, (err, user) => {
				if (err) {
					resolve(false);
					log('ldap error', err);
					// reject(err);
				}
				if (user) resolve(user);
				else reject();
			});
		});

		return authResult;
	}
}