You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
67 lines
1.4 KiB
67 lines
1.4 KiB
import * as LdapAuth from 'ldapauth-fork';
|
|
import * as fs from 'fs';
|
|
import { IAuthentication } from '../types/Authentication';
|
|
|
|
interface ILDAPAuthOptions {
|
|
/** ldap url
|
|
* e.g. ldaps://ldap.google.com
|
|
*/
|
|
url: string;
|
|
/** base DN
|
|
* e.g. 'dc=hokify,dc=com', */
|
|
base: string;
|
|
|
|
tls: {
|
|
keyFile: string;
|
|
certFile: string;
|
|
};
|
|
/** tls options
|
|
* e.g. {
|
|
servername: 'ldap.google.com'
|
|
} */
|
|
tlsOptions?: any;
|
|
/**
|
|
* searchFilter
|
|
*/
|
|
searchFilter?: string;
|
|
}
|
|
|
|
export class LDAPAuth implements IAuthentication {
|
|
private ldap: LdapAuth;
|
|
|
|
constructor(config: ILDAPAuthOptions) {
|
|
const tlsOptions = {
|
|
key: fs.readFileSync(config.tls.keyFile),
|
|
cert: fs.readFileSync(config.tls.certFile),
|
|
...config.tlsOptions,
|
|
};
|
|
|
|
this.ldap = new LdapAuth({
|
|
url: config.url,
|
|
searchBase: config.base,
|
|
tlsOptions,
|
|
searchFilter: config.searchFilter || '(uid={{username}})',
|
|
reconnect: true,
|
|
});
|
|
this.ldap.on('error', function (err) {
|
|
console.error('LdapAuth: ', err);
|
|
});
|
|
}
|
|
|
|
async authenticate(username: string, password: string) {
|
|
const authResult: boolean = await new Promise((resolve, reject) => {
|
|
this.ldap.authenticate(username, password, function (err, user) {
|
|
if (err) {
|
|
resolve(false);
|
|
console.error('ldap error', err);
|
|
// reject(err);
|
|
}
|
|
if (user) resolve(user);
|
|
else reject();
|
|
});
|
|
});
|
|
|
|
return !!authResult;
|
|
}
|
|
}
|