-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Clean up LDAP Connector #483
Conversation
b35c661
to
16b3ee0
Compare
Groups implementation added. Need to figure out how to have this work with refresh tokens (hopefully without too much refactoring). |
b51a22c
to
c629cfa
Compare
This PR has been changed to just include the cleanups to the LDAP connector. Ready for review. |
Woops, left some docs unfinished. |
Ready for review |
(&(objectClass=person)(uid=janedoe)) | ||
``` | ||
|
||
If the search finds an entry |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
dangling sentence fragment
found a few minor things, otherwise LGTM |
👍 updated |
* Remove some unlikely to be used fields to help configurability. * Combined "serverHost" and "serverPort" into "host" * Remove "timeout" (just default to 30 seconds). * Remove "maxIdleConn" will add it back if users feel the need to control the number of cached connections. * Remove "trustedEmailProvider" (just always trust). * Remove "skipCertVerification" you can't make this connector ingore TLS errors. * Fix configs that don't search before bind (previously broken). * Add more examples to Documentation * Refactor LDAPPool Acquire() and Put() into a Do() function which always does the flow correctly. * Added more comments and renamed some functions. * Moved methods on LDAPIdentityProvider to the LDAPConnector
The first commit cleans up the LDAP connector a bit. A follow up one will add the groups implementation.
Cleanup includes:
to control the number of cached connections.
ingore TLS errors.
always does the flow correctly.
Edit: