public/mailtrain
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add ldap authentication

Browse source
This commit is contained in:
Johannes Zellner 2016-08-11 13:21:48 +02:00
parent 65c2e9db98
commit 4f3b2e9dcb
1 changed files with 61 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

74
lib/passport.js
View file

@ -1,8 +1,11 @@
'use strict'; 'use strict';
let config = require('config'); let config = require('config');
let log = require('npmlog');
let passport = require('passport'); let passport = require('passport');
let LocalStrategy = require('passport-local').Strategy; let LocalStrategy = require('passport-local').Strategy;
let LdapStrategy = require('passport-ldapjs').Strategy;
let csrf = require('csurf'); let csrf = require('csurf');
let bodyParser = require('body-parser'); let bodyParser = require('body-parser');
let users = require('./models/users'); let users = require('./models/users');
@ -30,7 +33,7 @@ module.exports.logout = (req, res) => {
}; };
module.exports.login = (req, res, next) => { module.exports.login = (req, res, next) => {
passport.authenticate('local', (err, user, info) => { passport.authenticate(config.ldap.enabled ? 'ldap' : 'local', (err, user, info) => {
if (err) { if (err) {
req.flash('danger', err.message); req.flash('danger', err.message);
return next(err); return next(err);
@ -58,21 +61,66 @@ module.exports.login = (req, res, next) => {
})(req, res, next); })(req, res, next);
}; };
passport.use(new LocalStrategy((username, password, done) => { if (config.ldap.enabled) {
users.authenticate(username, password, (err, user) => { log.info('Using LDAP auth');
if (err) {
return done(err);
}
if (!user) { var opts = {
return done(null, false, { server: {
message: 'Incorrect username or password' url: 'ldap://' + config.ldap.host + ':' + config.ldap.port,
}); },
base: config.ldap.baseDN,
search: {
filter: config.ldap.filter,
attributes: ['username', 'mail'],
scope: 'sub'
} }
};
return done(null, user); passport.use(new LdapStrategy(opts, function (profile, done) {
}); users.findByUsername(profile.username, (err, user) => {
})); if (err) {
return done(err);
}
if (!user) {
// password is empty for ldap
users.add(profile.username, '', profile.mail, (err, id) => {
if (err) {
return done(err);
}
return done(null, {
id: id,
username: profile.username
});
});
} else {
return done(null, {
id: user.id,
username: user.username
});
}
});
}));
} else {
log.info('Using local auth');
passport.use(new LocalStrategy((username, password, done) => {
users.authenticate(username, password, (err, user) => {
if (err) {
return done(err);
}
if (!user) {
return done(null, false, {
message: 'Incorrect username or password'
});
}
return done(null, user);
});
}));
}
passport.serializeUser((user, done) => { passport.serializeUser((user, done) => {
done(null, user.id); done(null, user.id);