Docker/documize
Docker/documize
1
0
Fork 0
mirror of https://github.com/documize/community.git synced 2025-07-19 05:09:42 +02:00
Code Releases Activity

Skip LDAP user creation if not sync'ed

Browse source
This commit is contained in:
HarveyKandola 2022-01-12 14:12:51 -05:00
parent 4b89f3b1c2
commit a97b6b22d9
6 changed files with 27 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

21
domain/auth/ldap/endpoint.go
View file

@ -327,21 +327,16 @@ func (h *Handler) Authenticate(w http.ResponseWriter, r *http.Request) {
h.Runtime.Log.Error(method, err)
return
}
if len(lu.Email) == 0 || len(u.Email) == 0 {
response.WriteUnauthorizedError(w)
h.Runtime.Log.Infof("LDAP user without email faild auth (%s)", username)
return
}
// Create user account if not found
// If user authenticated BUT is not within Documize, we fail authentication.
// If dual auth is enabled, we can try regular email/password login (see next).
if err == sql.ErrNoRows {
h.Runtime.Log.Info("Adding new LDAP user " + lu.Email + " @ " + dom)
u = convertUser(lc, lu)
u.Salt = secrets.GenerateSalt()
u.Password = secrets.GeneratePassword(secrets.GenerateRandomPassword(), u.Salt)
u, err = auth.AddExternalUser(ctx, h.Runtime, h.Store, u, lc.DefaultPermissionAddSpace)
if err != nil {
response.WriteServerError(w, method, err)
h.Runtime.Log.Error(method, err)
return
}
ok = false
}
}