@backstage/plugin-catalog-backend-module-ldap 0.12.9 → 0.12.10-next.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @backstage/plugin-catalog-backend-module-ldap
 
+## 0.12.10-next.0
+
+### Patch Changes
+
+- 916e5b2: Improved the performance of LDAP organization ingestion, especially for large directories, without changing the resulting catalog entities.
+- 1a20364: Improved large LDAP organization refreshes by yielding to the event loop while resolving relations.
+- Updated dependencies
+  - @backstage/config@1.3.10-next.0
+  - @backstage/errors@1.3.2-next.0
+  - @backstage/backend-plugin-api@1.10.2-next.0
+  - @backstage/catalog-model@1.10.2-next.0
+  - @backstage/plugin-catalog-node@2.2.6-next.0
+  - @backstage/plugin-catalog-common@1.2.1-next.0
+
 ## 0.12.9
 
 ### Patch Changes

package/dist/ldap/client.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.cjs.js","sources":["../../src/ldap/client.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { ForwardedError } from '@backstage/errors';\nimport { readFile } from 'node:fs/promises';\nimport { Client, Entry, SearchOptions, SearchResult } from 'ldapts';\nimport tlsLib from 'node:tls';\nimport { BindConfig, TLSConfig } from './config';\nimport {\n  AEDirVendor,\n  ActiveDirectoryVendor,\n  DefaultLdapVendor,\n  LLDAPVendor,\n  FreeIpaVendor,\n  LdapVendor,\n  GoogleLdapVendor,\n} from './vendors';\nimport { LoggerService } from '@backstage/backend-plugin-api';\n\n/**\n * Basic wrapper for the `ldapjs` library.\n *\n * Helps out with promisifying calls, paging, binding etc.\n *\n * @public\n */\n\nexport class LdapClient {\n  private vendor: Promise<LdapVendor> | undefined;\n\n  static async create(\n    logger: LoggerService,\n    target: string,\n    bind?: BindConfig,\n    tls?: TLSConfig,\n  ): Promise<LdapClient> {\n    let secureContext;\n    if (tls && tls.certs && tls.keys) {\n      const cert = await readFile(tls.certs, 'utf-8');\n      const key = await readFile(tls.keys, 'utf-8');\n      secureContext = tlsLib.createSecureContext({\n        cert: cert,\n        key: key,\n      });\n    }\n    const tlsOptions: tlsLib.ConnectionOptions = {\n      secureContext,\n      rejectUnauthorized: tls?.rejectUnauthorized,\n    };\n    const client = new Client({\n      url: target,\n      ...(Object.values(tlsOptions).some(v => v !== undefined)\n        ? { tlsOptions }\n        : undefined),\n    });\n\n    const ldapClient = new LdapClient(client, logger);\n\n    if (bind) {\n      try {\n        await client.bind(bind.dn, bind.secret);\n      } catch (error) {\n        await client.unbind();\n        throw new ForwardedError(\n          `LDAP bind failed for ${bind.dn}, ${error}`,\n          error,\n        );\n      }\n    }\n    return ldapClient;\n  }\n\n  private readonly client: Client;\n  private readonly logger: LoggerService;\n\n  constructor(client: Client, logger: LoggerService) {\n    this.client = client;\n    this.logger = logger;\n  }\n\n  /**\n   * Performs an LDAP search operation.\n   *\n   * @param dn - The fully qualified base DN to search within\n   * @param options - The search options\n   */\n  async search(dn: string, options: SearchOptions): Promise<SearchResult> {\n    this.logger.debug(`Reading LDAP entries so far`);\n    try {\n      const ldaptsOptions: SearchOptions = {\n        scope: options.scope,\n        filter: options.filter,\n        attributes: options.attributes,\n        sizeLimit: options.sizeLimit,\n        timeLimit: options.timeLimit,\n        derefAliases: options.derefAliases,\n        paged: options.paged,\n      };\n\n      const result = await this.client.search(dn, ldaptsOptions);\n\n      return result;\n    } catch (e) {\n      throw new ForwardedError(`LDAP search at DN \"${dn}\" failed`, e);\n    }\n  }\n\n  /**\n   * Get the Server Vendor.\n   * Currently only detects Microsoft Active Directory Servers.\n   *\n   * @see https://ldapwiki.com/wiki/Determine%20LDAP%20Server%20Vendor\n   */\n  async getVendor(): Promise<LdapVendor> {\n    if (this.vendor) {\n      return this.vendor;\n    }\n    // const clientHost = this.client?.host || '';\n    this.vendor = this.getRootDSE()\n      .then(root => {\n        if (root && root.forestFunctionality) {\n          return ActiveDirectoryVendor;\n        } else if (root && root.ipaDomainLevel) {\n          return FreeIpaVendor;\n        } else if (root && 'aeRoot' in root) {\n          return AEDirVendor;\n        } else if (this.isGoogleLDAP(root)) {\n          return GoogleLdapVendor;\n        } else if (root && root.vendorName?.toString() === 'LLDAP') {\n          return LLDAPVendor;\n        }\n        return DefaultLdapVendor;\n      })\n      .catch(err => {\n        this.vendor = undefined;\n        throw err;\n      });\n    return this.vendor;\n  }\n\n  /**\n   * Check if the LDAP server is Google LDAP by examining RootDSE and schema\n   */\n  private isGoogleLDAP(rootDSE: Entry | undefined): boolean {\n    if (!rootDSE) {\n      return false;\n    }\n\n    // RootDSE characteristics\n    const hasGoogleRootDSEPattern =\n      !rootDSE.namingContexts && // No namingContexts\n      !rootDSE.supportedControl && // No supportedControl\n      !rootDSE.vendorName && // No vendor info\n      !rootDSE.vendorVersion &&\n      rootDSE.subschemaSubentry === 'cn=subschema';\n\n    if (!hasGoogleRootDSEPattern) {\n      return false;\n    }\n\n    try {\n      const schemaHasGoogleAttributes = this.checkGoogleSchema(rootDSE);\n      return schemaHasGoogleAttributes;\n    } catch (error) {\n      throw new ForwardedError('Schema check failed', error);\n    }\n  }\n\n  // Check a schema for Google-specific patterns\n  private checkGoogleSchema(rootDSE: Entry): boolean {\n    try {\n      const objectClasses = this.parseSchemaValues(rootDSE.objectClasses);\n      const attributeTypes = this.parseSchemaValues(rootDSE.attributeTypes);\n\n      // Check if any Google-specific attributes are present\n      const hasGoogleAttributes =\n        objectClasses.some(oc => oc.includes('googleUid')) ||\n        attributeTypes.some(at => at.includes('googleAdminCreated'));\n\n      return hasGoogleAttributes;\n    } catch (error) {\n      this.logger.warn('Error checking schema:', error);\n      return false;\n    }\n  }\n\n  private parseSchemaValues(\n    schemaValue: Buffer | Buffer[] | string[] | string,\n  ): string[] {\n    if (!schemaValue) return [];\n\n    const values = Array.isArray(schemaValue) ? schemaValue : [schemaValue];\n    return values.map(v => v.toString());\n  }\n\n  /**\n   * Get the Root DSE.\n   *\n   * @see https://ldapwiki.com/wiki/RootDSE\n   */\n  async getRootDSE(): Promise<Entry | undefined> {\n    const result = await this.client.search('', {\n      scope: 'base',\n      filter: '(objectclass=*)',\n    } as SearchOptions);\n    if (result && result.searchEntries.length === 1) {\n      return result.searchEntries[0];\n    }\n    return undefined;\n  }\n}\n"],"names":["readFile","tlsLib","Client","ForwardedError","ActiveDirectoryVendor","FreeIpaVendor","AEDirVendor","GoogleLdapVendor","LLDAPVendor","DefaultLdapVendor"],"mappings":";;;;;;;;;;;;AAwCO,MAAM,UAAA,CAAW;AAAA,EACd,MAAA;AAAA,EAER,aAAa,MAAA,CACX,MAAA,EACA,MAAA,EACA,MACA,GAAA,EACqB;AACrB,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,GAAA,IAAO,GAAA,CAAI,KAAA,IAAS,GAAA,CAAI,IAAA,EAAM;AAChC,MAAA,MAAM,IAAA,GAAO,MAAMA,iBAAA,CAAS,GAAA,CAAI,OAAO,OAAO,CAAA;AAC9C,MAAA,MAAM,GAAA,GAAM,MAAMA,iBAAA,CAAS,GAAA,CAAI,MAAM,OAAO,CAAA;AAC5C,MAAA,aAAA,GAAgBC,wBAAO,mBAAA,CAAoB;AAAA,QACzC,IAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH;AACA,IAAA,MAAM,UAAA,GAAuC;AAAA,MAC3C,aAAA;AAAA,MACA,oBAAoB,GAAA,EAAK;AAAA,KAC3B;AACA,IAAA,MAAM,MAAA,GAAS,IAAIC,aAAA,CAAO;AAAA,MACxB,GAAA,EAAK,MAAA;AAAA,MACL,GAAI,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA,CAAE,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,KAAM,MAAS,CAAA,GACnD,EAAE,UAAA,EAAW,GACb;AAAA,KACL,CAAA;AAED,IAAA,MAAM,UAAA,GAAa,IAAI,UAAA,CAAW,MAAA,EAAQ,MAAM,CAAA;AAEhD,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,EAAA,EAAI,KAAK,MAAM,CAAA;AAAA,MACxC,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,OAAO,MAAA,EAAO;AACpB,QAAA,MAAM,IAAIC,qBAAA;AAAA,UACR,CAAA,qBAAA,EAAwB,IAAA,CAAK,EAAE,CAAA,EAAA,EAAK,KAAK,CAAA,CAAA;AAAA,UACzC;AAAA,SACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO,UAAA;AAAA,EACT;AAAA,EAEiB,MAAA;AAAA,EACA,MAAA;AAAA,EAEjB,WAAA,CAAY,QAAgB,MAAA,EAAuB;AACjD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAA,CAAO,EAAA,EAAY,OAAA,EAA+C;AACtE,IAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,2BAAA,CAA6B,CAAA;AAC/C,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,GAA+B;AAAA,QACnC,OAAO,OAAA,CAAQ,KAAA;AAAA,QACf,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,WAAW,OAAA,CAAQ,SAAA;AAAA,QACnB,WAAW,OAAA,CAAQ,SAAA;AAAA,QACnB,cAAc,OAAA,CAAQ,YAAA;AAAA,QACtB,OAAO,OAAA,CAAQ;AAAA,OACjB;AAEA,MAAA,MAAM,SAAS,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,IAAI,aAAa,CAAA;AAEzD,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,CAAA,EAAG;AACV,MAAA,MAAM,IAAIA,qBAAA,CAAe,CAAA,mBAAA,EAAsB,EAAE,YAAY,CAAC,CAAA;AAAA,IAChE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,SAAA,GAAiC;AACrC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAO,IAAA,CAAK,MAAA;AAAA,IACd;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,UAAA,EAAW,CAC3B,KAAK,CAAA,IAAA,KAAQ;AACZ,MAAA,IAAI,IAAA,IAAQ,KAAK,mBAAA,EAAqB;AACpC,QAAA,OAAOC,6BAAA;AAAA,MACT,CAAA,MAAA,IAAW,IAAA,IAAQ,IAAA,CAAK,cAAA,EAAgB;AACtC,QAAA,OAAOC,qBAAA;AAAA,MACT,CAAA,MAAA,IAAW,IAAA,IAAQ,QAAA,IAAY,IAAA,EAAM;AACnC,QAAA,OAAOC,mBAAA;AAAA,MACT,CAAA,MAAA,IAAW,IAAA,CAAK,YAAA,CAAa,IAAI,CAAA,EAAG;AAClC,QAAA,OAAOC,wBAAA;AAAA,MACT,WAAW,IAAA,IAAQ,IAAA,CAAK,UAAA,EAAY,QAAA,OAAe,OAAA,EAAS;AAC1D,QAAA,OAAOC,mBAAA;AAAA,MACT;AACA,MAAA,OAAOC,yBAAA;AAAA,IACT,CAAC,CAAA,CACA,KAAA,CAAM,CAAA,GAAA,KAAO;AACZ,MAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,MAAA,MAAM,GAAA;AAAA,IACR,CAAC,CAAA;AACH,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,OAAA,EAAqC;AACxD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,MAAM,uBAAA,GACJ,CAAC,OAAA,CAAQ,cAAA;AAAA,IACT,CAAC,OAAA,CAAQ,gBAAA;AAAA,IACT,CAAC,OAAA,CAAQ,UAAA;AAAA,IACT,CAAC,OAAA,CAAQ,aAAA,IACT,OAAA,CAAQ,iBAAA,KAAsB,cAAA;AAEhC,IAAA,IAAI,CAAC,uBAAA,EAAyB;AAC5B,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,yBAAA,GAA4B,IAAA,CAAK,iBAAA,CAAkB,OAAO,CAAA;AAChE,MAAA,OAAO,yBAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAIN,qBAAA,CAAe,qBAAA,EAAuB,KAAK,CAAA;AAAA,IACvD;AAAA,EACF;AAAA;AAAA,EAGQ,kBAAkB,OAAA,EAAyB;AACjD,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,iBAAA,CAAkB,OAAA,CAAQ,aAAa,CAAA;AAClE,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,iBAAA,CAAkB,OAAA,CAAQ,cAAc,CAAA;AAGpE,MAAA,MAAM,mBAAA,GACJ,aAAA,CAAc,IAAA,CAAK,CAAA,EAAA,KAAM,GAAG,QAAA,CAAS,WAAW,CAAC,CAAA,IACjD,eAAe,IAAA,CAAK,CAAA,EAAA,KAAM,EAAA,CAAG,QAAA,CAAS,oBAAoB,CAAC,CAAA;AAE7D,MAAA,OAAO,mBAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,wBAAA,EAA0B,KAAK,CAAA;AAChD,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,kBACN,WAAA,EACU;AACV,IAAA,IAAI,CAAC,WAAA,EAAa,OAAO,EAAC;AAE1B,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA,GAAc,CAAC,WAAW,CAAA;AACtE,IAAA,OAAO,MAAA,CAAO,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAA,GAAyC;AAC7C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,OAAO,EAAA,EAAI;AAAA,MAC1C,KAAA,EAAO,MAAA;AAAA,MACP,MAAA,EAAQ;AAAA,KACQ,CAAA;AAClB,IAAA,IAAI,MAAA,IAAU,MAAA,CAAO,aAAA,CAAc,MAAA,KAAW,CAAA,EAAG;AAC/C,MAAA,OAAO,MAAA,CAAO,cAAc,CAAC,CAAA;AAAA,IAC/B;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;;"}
+{"version":3,"file":"client.cjs.js","sources":["../../src/ldap/client.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { ForwardedError } from '@backstage/errors';\nimport { readFile } from 'node:fs/promises';\nimport { Client, Entry, SearchOptions, SearchResult } from 'ldapts';\nimport tlsLib from 'node:tls';\nimport { BindConfig, TLSConfig } from './config';\nimport {\n  AEDirVendor,\n  ActiveDirectoryVendor,\n  DefaultLdapVendor,\n  LLDAPVendor,\n  FreeIpaVendor,\n  LdapVendor,\n  GoogleLdapVendor,\n} from './vendors';\nimport { LoggerService } from '@backstage/backend-plugin-api';\n\n/**\n * Basic wrapper for the `ldapjs` library.\n *\n * Helps out with promisifying calls, paging, binding etc.\n *\n * @public\n */\n\nexport class LdapClient {\n  private vendor: Promise<LdapVendor> | undefined;\n\n  static async create(\n    logger: LoggerService,\n    target: string,\n    bind?: BindConfig,\n    tls?: TLSConfig,\n  ): Promise<LdapClient> {\n    let secureContext;\n    if (tls && tls.certs && tls.keys) {\n      const cert = await readFile(tls.certs, 'utf-8');\n      const key = await readFile(tls.keys, 'utf-8');\n      secureContext = tlsLib.createSecureContext({\n        cert: cert,\n        key: key,\n      });\n    }\n    const tlsOptions: tlsLib.ConnectionOptions = {\n      secureContext,\n      rejectUnauthorized: tls?.rejectUnauthorized,\n    };\n    const client = new Client({\n      url: target,\n      ...(Object.values(tlsOptions).some(v => v !== undefined)\n        ? { tlsOptions }\n        : undefined),\n    });\n\n    const ldapClient = new LdapClient(client, logger);\n\n    if (bind) {\n      try {\n        await client.bind(bind.dn, bind.secret);\n      } catch (error) {\n        await client.unbind();\n        throw new ForwardedError(\n          `LDAP bind failed for ${bind.dn}, ${error}`,\n          error,\n        );\n      }\n    }\n    return ldapClient;\n  }\n\n  private readonly client: Client;\n  private readonly logger: LoggerService;\n\n  constructor(client: Client, logger: LoggerService) {\n    this.client = client;\n    this.logger = logger;\n  }\n\n  /**\n   * Performs an LDAP search operation.\n   *\n   * @param dn - The fully qualified base DN to search within\n   * @param options - The search options\n   */\n  async search(dn: string, options: SearchOptions): Promise<SearchResult> {\n    this.logger.debug(`Reading LDAP entries so far`);\n    try {\n      const ldaptsOptions: SearchOptions = {\n        scope: options.scope,\n        filter: options.filter,\n        attributes: options.attributes,\n        sizeLimit: options.sizeLimit,\n        timeLimit: options.timeLimit,\n        derefAliases: options.derefAliases,\n        paged: options.paged,\n      };\n\n      const result = await this.client.search(dn, ldaptsOptions);\n\n      return result;\n    } catch (e) {\n      throw new ForwardedError(`LDAP search at DN \"${dn}\" failed`, e);\n    }\n  }\n\n  /**\n   * Get the Server Vendor.\n   * Currently only detects Microsoft Active Directory Servers.\n   *\n   * @see https://ldapwiki.com/wiki/Determine%20LDAP%20Server%20Vendor\n   */\n  async getVendor(): Promise<LdapVendor> {\n    if (this.vendor) {\n      return this.vendor;\n    }\n    // const clientHost = this.client?.host || '';\n    this.vendor = this.getRootDSE()\n      .then(root => {\n        if (root && root.forestFunctionality) {\n          return ActiveDirectoryVendor;\n        } else if (root && root.ipaDomainLevel) {\n          return FreeIpaVendor;\n        } else if (root && 'aeRoot' in root) {\n          return AEDirVendor;\n        } else if (this.isGoogleLDAP(root)) {\n          return GoogleLdapVendor;\n        } else if (root && root.vendorName?.toString() === 'LLDAP') {\n          return LLDAPVendor;\n        }\n        return DefaultLdapVendor;\n      })\n      .catch(err => {\n        this.vendor = undefined;\n        throw err;\n      });\n    return this.vendor;\n  }\n\n  /**\n   * Check if the LDAP server is Google LDAP by examining RootDSE and schema\n   */\n  private isGoogleLDAP(rootDSE: Entry | undefined): boolean {\n    if (!rootDSE) {\n      return false;\n    }\n\n    // RootDSE characteristics\n    const hasGoogleRootDSEPattern =\n      !rootDSE.namingContexts && // No namingContexts\n      !rootDSE.supportedControl && // No supportedControl\n      !rootDSE.vendorName && // No vendor info\n      !rootDSE.vendorVersion &&\n      rootDSE.subschemaSubentry === 'cn=subschema';\n\n    if (!hasGoogleRootDSEPattern) {\n      return false;\n    }\n\n    try {\n      const schemaHasGoogleAttributes = this.checkGoogleSchema(rootDSE);\n      return schemaHasGoogleAttributes;\n    } catch (error) {\n      throw new ForwardedError('Schema check failed', error);\n    }\n  }\n\n  // Check a schema for Google-specific patterns\n  private checkGoogleSchema(rootDSE: Entry): boolean {\n    try {\n      const objectClasses = this.parseSchemaValues(rootDSE.objectClasses);\n      const attributeTypes = this.parseSchemaValues(rootDSE.attributeTypes);\n\n      // Check if any Google-specific attributes are present\n      const hasGoogleAttributes =\n        objectClasses.some(oc => oc.includes('googleUid')) ||\n        attributeTypes.some(at => at.includes('googleAdminCreated'));\n\n      return hasGoogleAttributes;\n    } catch (error) {\n      this.logger.warn('Error checking schema:', error);\n      return false;\n    }\n  }\n\n  private parseSchemaValues(\n    schemaValue: Buffer | Buffer[] | string[] | string,\n  ): string[] {\n    if (!schemaValue) return [];\n\n    const values = Array.isArray(schemaValue) ? schemaValue : [schemaValue];\n    return values.map(v => v.toString());\n  }\n\n  /**\n   * Get the Root DSE.\n   *\n   * @see https://ldapwiki.com/wiki/RootDSE\n   */\n  async getRootDSE(): Promise<Entry | undefined> {\n    const result = await this.client.search('', {\n      scope: 'base',\n      filter: '(objectclass=*)',\n    } as SearchOptions);\n    if (result && result.searchEntries.length === 1) {\n      return result.searchEntries[0];\n    }\n    return undefined;\n  }\n}\n"],"names":["readFile","tlsLib","Client","ForwardedError","ActiveDirectoryVendor","FreeIpaVendor","AEDirVendor","GoogleLdapVendor","LLDAPVendor","DefaultLdapVendor"],"mappings":";;;;;;;;;;;;AAwCO,MAAM,UAAA,CAAW;AAAA,EACd,MAAA;AAAA,EAER,aAAa,MAAA,CACX,MAAA,EACA,MAAA,EACA,MACA,GAAA,EACqB;AACrB,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,GAAA,IAAO,GAAA,CAAI,KAAA,IAAS,GAAA,CAAI,IAAA,EAAM;AAChC,MAAA,MAAM,IAAA,GAAO,MAAMA,iBAAA,CAAS,GAAA,CAAI,OAAO,OAAO,CAAA;AAC9C,MAAA,MAAM,GAAA,GAAM,MAAMA,iBAAA,CAAS,GAAA,CAAI,MAAM,OAAO,CAAA;AAC5C,MAAA,aAAA,GAAgBC,wBAAO,mBAAA,CAAoB;AAAA,QACzC,IAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH;AACA,IAAA,MAAM,UAAA,GAAuC;AAAA,MAC3C,aAAA;AAAA,MACA,oBAAoB,GAAA,EAAK;AAAA,KAC3B;AACA,IAAA,MAAM,MAAA,GAAS,IAAIC,aAAA,CAAO;AAAA,MACxB,GAAA,EAAK,MAAA;AAAA,MACL,GAAI,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA,CAAE,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,KAAM,MAAS,CAAA,GACnD,EAAE,UAAA,EAAW,GACb;AAAA,KACL,CAAA;AAED,IAAA,MAAM,UAAA,GAAa,IAAI,UAAA,CAAW,MAAA,EAAQ,MAAM,CAAA;AAEhD,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,EAAA,EAAI,KAAK,MAAM,CAAA;AAAA,MACxC,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,OAAO,MAAA,EAAO;AACpB,QAAA,MAAM,IAAIC,qBAAA;AAAA,UACR,CAAA,qBAAA,EAAwB,IAAA,CAAK,EAAE,CAAA,EAAA,EAAK,KAAK,CAAA,CAAA;AAAA,UACzC;AAAA,SACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO,UAAA;AAAA,EACT;AAAA,EAEiB,MAAA;AAAA,EACA,MAAA;AAAA,EAEjB,WAAA,CAAY,QAAgB,MAAA,EAAuB;AACjD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAA,CAAO,EAAA,EAAY,OAAA,EAA+C;AACtE,IAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,2BAAA,CAA6B,CAAA;AAC/C,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,GAA+B;AAAA,QACnC,OAAO,OAAA,CAAQ,KAAA;AAAA,QACf,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,WAAW,OAAA,CAAQ,SAAA;AAAA,QACnB,WAAW,OAAA,CAAQ,SAAA;AAAA,QACnB,cAAc,OAAA,CAAQ,YAAA;AAAA,QACtB,OAAO,OAAA,CAAQ;AAAA,OACjB;AAEA,MAAA,MAAM,SAAS,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,IAAI,aAAa,CAAA;AAEzD,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,CAAA,EAAG;AACV,MAAA,MAAM,IAAIA,qBAAA,CAAe,CAAA,mBAAA,EAAsB,EAAE,YAAY,CAAC,CAAA;AAAA,IAChE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,SAAA,GAAiC;AACrC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAO,IAAA,CAAK,MAAA;AAAA,IACd;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,UAAA,EAAW,CAC3B,KAAK,CAAA,IAAA,KAAQ;AACZ,MAAA,IAAI,IAAA,IAAQ,KAAK,mBAAA,EAAqB;AACpC,QAAA,OAAOC,6BAAA;AAAA,MACT,CAAA,MAAA,IAAW,IAAA,IAAQ,IAAA,CAAK,cAAA,EAAgB;AACtC,QAAA,OAAOC,qBAAA;AAAA,MACT,CAAA,MAAA,IAAW,IAAA,IAAQ,QAAA,IAAY,IAAA,EAAM;AACnC,QAAA,OAAOC,mBAAA;AAAA,MACT,CAAA,MAAA,IAAW,IAAA,CAAK,YAAA,CAAa,IAAI,CAAA,EAAG;AAClC,QAAA,OAAOC,wBAAA;AAAA,MACT,WAAW,IAAA,IAAQ,IAAA,CAAK,UAAA,EAAY,QAAA,OAAe,OAAA,EAAS;AAC1D,QAAA,OAAOC,mBAAA;AAAA,MACT;AACA,MAAA,OAAOC,yBAAA;AAAA,IACT,CAAC,CAAA,CACA,KAAA,CAAM,CAAA,GAAA,KAAO;AACZ,MAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,MAAA,MAAM,GAAA;AAAA,IACR,CAAC,CAAA;AACH,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,OAAA,EAAqC;AACxD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,MAAM,uBAAA,GACJ,CAAC,OAAA,CAAQ,cAAA;AAAA,IACT,CAAC,OAAA,CAAQ,gBAAA;AAAA,IACT,CAAC,OAAA,CAAQ,UAAA;AAAA,IACT,CAAC,OAAA,CAAQ,aAAA,IACT,OAAA,CAAQ,iBAAA,KAAsB,cAAA;AAEhC,IAAA,IAAI,CAAC,uBAAA,EAAyB;AAC5B,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,yBAAA,GAA4B,IAAA,CAAK,iBAAA,CAAkB,OAAO,CAAA;AAChE,MAAA,OAAO,yBAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAIN,qBAAA,CAAe,qBAAA,EAAuB,KAAK,CAAA;AAAA,IACvD;AAAA,EACF;AAAA;AAAA,EAGQ,kBAAkB,OAAA,EAAyB;AACjD,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,iBAAA,CAAkB,OAAA,CAAQ,aAAa,CAAA;AAClE,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,iBAAA,CAAkB,OAAA,CAAQ,cAAc,CAAA;AAGpE,MAAA,MAAM,mBAAA,GACJ,aAAA,CAAc,IAAA,CAAK,CAAA,EAAA,KAAM,GAAG,QAAA,CAAS,WAAW,CAAC,CAAA,IACjD,eAAe,IAAA,CAAK,CAAA,EAAA,KAAM,EAAA,CAAG,QAAA,CAAS,oBAAoB,CAAC,CAAA;AAE7D,MAAA,OAAO,mBAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,wBAAA,EAA0B,KAAK,CAAA;AAChD,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,kBACN,WAAA,EACU;AACV,IAAA,IAAI,CAAC,WAAA,EAAa,OAAO,EAAC;AAE1B,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA,GAAc,CAAC,WAAW,CAAA;AACtE,IAAA,OAAO,MAAA,CAAO,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAA,GAAyC;AAC7C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,OAAO,EAAA,EAAI;AAAA,MAC1C,KAAA,EAAO,MAAA;AAAA,MACP,MAAA,EAAQ;AAAA,KACQ,CAAA;AAClB,IAAA,IAAI,MAAA,IAAU,MAAA,CAAO,aAAA,CAAc,MAAA,KAAW,CAAA,EAAG;AAC/C,MAAA,OAAO,MAAA,CAAO,cAAc,CAAC,CAAA;AAAA,IAC/B;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;"}

package/dist/ldap/config.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.cjs.js","sources":["../../src/ldap/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  SchedulerServiceTaskScheduleDefinition,\n  readSchedulerServiceTaskScheduleDefinitionFromConfig,\n} from '@backstage/backend-plugin-api';\nimport { Config } from '@backstage/config';\nimport { JsonValue } from '@backstage/types';\nimport { SearchOptions } from 'ldapts';\nimport mergeWith from 'lodash/mergeWith';\nimport { trimEnd } from 'lodash';\nimport { RecursivePartial } from './util';\n\n/**\n * The configuration parameters for a single LDAP provider.\n *\n * @public\n */\nexport type LdapProviderConfig = {\n  // The id of the\n  id: string;\n  // The prefix of the target that this matches on, e.g.\n  // \"ldaps://ds.example.net\", with no trailing slash.\n  target: string;\n  // TLS settings\n  tls?: TLSConfig;\n  // The settings to use for the bind command. If none are specified, the bind\n  // command is not issued.\n  bind?: BindConfig;\n  // The settings that govern the reading and interpretation of users\n  users: UserConfig[];\n  // The settings that govern the reading and interpretation of groups\n  groups: GroupConfig[];\n  // Schedule configuration for refresh tasks.\n  schedule?: SchedulerServiceTaskScheduleDefinition;\n  // Configuration for overriding the vendor-specific default attribute names.\n  vendor?: VendorConfig;\n};\n\n/**\n * TLS settings\n *\n * @public\n */\nexport type TLSConfig = {\n  // Node TLS rejectUnauthorized\n  rejectUnauthorized?: boolean;\n  // A file containing private keys in PEM format\n  keys?: string;\n  // A file containing cert chains in PEM format\n  certs?: string;\n};\n\n/**\n * The settings to use for the a command.\n *\n * @public\n */\nexport type BindConfig = {\n  // The DN of the user to auth as, e.g.\n  // uid=ldap-robot,ou=robots,ou=example,dc=example,dc=net\n  dn: string;\n  // The secret of the user to auth as (its password)\n  secret: string;\n};\n\n/**\n * The settings that govern the reading and interpretation of users.\n *\n * @public\n */\nexport type UserConfig = {\n  // The DN under which users are stored.\n  dn: string;\n  // The search options to use.\n  // Only the scope, filter, attributes, and paged fields are supported. The\n  // default is scope \"one\" and attributes \"*\" and \"+\".\n  options: SearchOptions;\n\n  // JSON paths (on a.b.c form) and hard coded values to set on those paths\n  set?: { [path: string]: JsonValue };\n  // Mappings from well known entity fields, to LDAP attribute names\n  map: {\n    // The name of the attribute that holds the relative distinguished name of\n    // each entry. Defaults to \"uid\".\n    rdn: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.name field of the entity. Defaults to \"uid\".\n    name: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.description field of the entity.\n    description?: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.displayName field of the entity. Defaults to \"cn\".\n    displayName: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.email field of the entity. Defaults to \"mail\".\n    email: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.picture field of the entity.\n    picture?: string;\n    // The name of the attribute that shall be used for the values of the\n    // spec.memberOf field of the entity. Defaults to \"memberOf\".\n    memberOf: string | null;\n  };\n};\n\n/**\n * The settings that govern the reading and interpretation of groups.\n *\n * @public\n */\nexport type GroupConfig = {\n  // The DN under which groups are stored.\n  dn: string;\n  // The search options to use.\n  // Only the scope, filter, attributes, and paged fields are supported.\n  options: SearchOptions;\n\n  // JSON paths (on a.b.c form) and hard coded values to set on those paths\n  set?: { [path: string]: JsonValue };\n  // Mappings from well known entity fields, to LDAP attribute names\n  map: {\n    // The name of the attribute that holds the relative distinguished name of\n    // each entry. Defaults to \"cn\".\n    rdn: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.name field of the entity. Defaults to \"cn\".\n    name: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.description field of the entity. Defaults to \"description\".\n    description: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.type field of the entity. Defaults to \"groupType\".\n    type: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.displayName field of the entity. Defaults to \"cn\".\n    displayName: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.email field of the entity.\n    email?: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.picture field of the entity.\n    picture?: string;\n    // The name of the attribute that shall be used for the values of the\n    // spec.parent field of the entity. Defaults to \"memberOf\".\n    memberOf: string | null;\n    // The name of the attribute that shall be used for the values of the\n    // spec.children field of the entity. Defaults to \"member\".\n    members: string | null;\n  };\n};\n\n/**\n * Configuration for LDAP vendor-specific attributes.\n *\n * Allows custom attribute names for distinguished names (DN) and\n * universally unique identifiers (UUID) in LDAP directories.\n *\n * @public\n */\nexport type VendorConfig = {\n  /**\n   * Attribute name for the distinguished name (DN) of an entry,\n   */\n  dnAttributeName?: string;\n\n  /**\n   * Attribute name for the unique identifier (UUID) of an entry,\n   */\n  uuidAttributeName?: string;\n};\n\nconst defaultUserConfig = {\n  options: {\n    scope: 'one',\n    attributes: ['*', '+'],\n  },\n  map: {\n    rdn: 'uid',\n    name: 'uid',\n    displayName: 'cn',\n    email: 'mail',\n    memberOf: 'memberOf',\n  },\n};\n\nconst defaultGroupConfig = {\n  options: {\n    scope: 'one',\n    attributes: ['*', '+'],\n  },\n  map: {\n    rdn: 'cn',\n    name: 'cn',\n    description: 'description',\n    displayName: 'cn',\n    type: 'groupType',\n    memberOf: 'memberOf',\n    members: 'member',\n  },\n};\n\nfunction freeze<T>(data: T): T {\n  return JSON.parse(JSON.stringify(data), (_key, value) => {\n    if (typeof value === 'object' && value !== null) {\n      Object.freeze(value);\n    }\n    return value;\n  });\n}\n\nfunction readTlsConfig(\n  c: Config | undefined,\n): LdapProviderConfig['tls'] | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return {\n    rejectUnauthorized: c.getOptionalBoolean('rejectUnauthorized'),\n    keys: c.getOptionalString('keys'),\n    certs: c.getOptionalString('certs'),\n  };\n}\n\nfunction readBindConfig(\n  c: Config | undefined,\n): LdapProviderConfig['bind'] | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return {\n    dn: c.getString('dn'),\n    secret: c.getString('secret'),\n  };\n}\n\nfunction readVendorConfig(\n  c: Config | undefined,\n): LdapProviderConfig['vendor'] | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return {\n    dnAttributeName: c.getOptionalString('dnAttributeName'),\n    uuidAttributeName: c.getOptionalString('uuidAttributeName'),\n  };\n}\n\nfunction readOptionsConfig(c: Config | undefined): SearchOptions {\n  if (!c) {\n    return {};\n  }\n\n  const paged = readOptionsPagedConfig(c);\n\n  return {\n    scope: c.getOptionalString('scope') as SearchOptions['scope'],\n    filter: formatFilter(c.getOptionalString('filter')),\n    attributes: c.getOptionalStringArray('attributes'),\n    sizeLimit: c.getOptionalNumber('sizeLimit'),\n    timeLimit: c.getOptionalNumber('timeLimit'),\n    derefAliases: c.getOptionalNumber(\n      'derefAliases',\n    ) as SearchOptions['derefAliases'],\n    returnAttributeValues: c.getOptionalBoolean('attributeValues'),\n    ...(paged !== undefined ? { paged } : undefined),\n  };\n}\n\nfunction readOptionsPagedConfig(c: Config): SearchOptions['paged'] {\n  const pagedConfig = c.getOptional('paged');\n  if (pagedConfig === undefined) {\n    return undefined;\n  }\n\n  if (pagedConfig === true || pagedConfig === false) {\n    return pagedConfig;\n  }\n\n  const pageSize = c.getOptionalNumber('paged.pageSize');\n  const pagePause = c.getOptionalBoolean('paged.pagePause');\n  return {\n    ...(pageSize !== undefined ? { pageSize } : undefined),\n    ...(pagePause !== undefined ? { pagePause } : undefined),\n  };\n}\n\nfunction readSetConfig(\n  c: Config | undefined,\n): { [path: string]: JsonValue } | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return c.get();\n}\n\nfunction readUserMapConfig(c: Config | undefined): Partial<UserConfig['map']> {\n  if (!c) {\n    return {};\n  }\n\n  return {\n    rdn: c.getOptionalString('rdn'),\n    name: c.getOptionalString('name'),\n    description: c.getOptionalString('description'),\n    displayName: c.getOptionalString('displayName'),\n    email: c.getOptionalString('email'),\n    picture: c.getOptionalString('picture'),\n    memberOf: c.getOptionalString('memberOf'),\n  };\n}\n\nfunction readGroupMapConfig(\n  c: Config | undefined,\n): Partial<GroupConfig['map']> {\n  if (!c) {\n    return {};\n  }\n\n  return {\n    rdn: c.getOptionalString('rdn'),\n    name: c.getOptionalString('name'),\n    description: c.getOptionalString('description'),\n    type: c.getOptionalString('type'),\n    displayName: c.getOptionalString('displayName'),\n    email: c.getOptionalString('email'),\n    picture: c.getOptionalString('picture'),\n    memberOf: c.getOptionalString('memberOf'),\n    members: c.getOptionalString('members'),\n  };\n}\n\nfunction readUserConfig(\n  c: Config | Config[] | undefined,\n): RecursivePartial<LdapProviderConfig['users']> {\n  if (!c) {\n    return [];\n  }\n  if (Array.isArray(c)) {\n    return c.map(it => readSingleUserConfig(it));\n  }\n  return [readSingleUserConfig(c)];\n}\n\nfunction readSingleUserConfig(c: Config): RecursivePartial<UserConfig> {\n  return {\n    dn: c.getString('dn'),\n    options: readOptionsConfig(c.getOptionalConfig('options')),\n    set: readSetConfig(c.getOptionalConfig('set')),\n    map: readUserMapConfig(c.getOptionalConfig('map')),\n  };\n}\n\nfunction readGroupConfig(\n  c: Config | Config[] | undefined,\n): RecursivePartial<LdapProviderConfig['groups']> {\n  if (!c) {\n    return [];\n  }\n  if (Array.isArray(c)) {\n    return c.map(it => readSingleGroupConfig(it));\n  }\n  return [readSingleGroupConfig(c)];\n}\n\nfunction readSingleGroupConfig(c: Config): RecursivePartial<GroupConfig> {\n  return {\n    dn: c.getString('dn'),\n    options: readOptionsConfig(c.getOptionalConfig('options')),\n    set: readSetConfig(c.getOptionalConfig('set')),\n    map: readGroupMapConfig(c.getOptionalConfig('map')),\n  };\n}\n\nfunction formatFilter(filter?: string): string | undefined {\n  // Remove extra whitespace between blocks to support multiline filters from the configuration\n  return filter?.replace(/\\s*(\\(|\\))/g, '$1')?.trim();\n}\n\n/**\n * Parses configuration.\n *\n * @param config - The root of the LDAP config hierarchy\n *\n * @public\n * @deprecated This exists for backwards compatibility only and will be removed in the future.\n */\nexport function readLdapLegacyConfig(config: Config): LdapProviderConfig[] {\n  const providerConfigs = config.getOptionalConfigArray('providers') ?? [];\n  return providerConfigs.map(c => {\n    const newConfig = {\n      target: trimEnd(c.getString('target'), '/'),\n      tls: readTlsConfig(c.getOptionalConfig('tls')),\n      bind: readBindConfig(c.getOptionalConfig('bind')),\n      users: readUserConfig(c.getConfig('users')).map(it => {\n        return mergeWith({}, defaultUserConfig, it, replaceArraysIfPresent);\n      }),\n      groups: readGroupConfig(c.getConfig('groups')).map(it => {\n        return mergeWith({}, defaultGroupConfig, it, replaceArraysIfPresent);\n      }),\n      vendor: readVendorConfig(c.getOptionalConfig('vendor')),\n    };\n\n    return freeze(newConfig) as LdapProviderConfig;\n  });\n}\n\n/**\n * Parses all configured providers.\n *\n * @param config - The root of the LDAP config hierarchy\n *\n * @public\n */\nexport function readProviderConfigs(config: Config): LdapProviderConfig[] {\n  const providersConfig = config.getOptionalConfig('catalog.providers.ldapOrg');\n  if (!providersConfig) {\n    return [];\n  }\n\n  return providersConfig.keys().map(id => {\n    const c = providersConfig.getConfig(id);\n    const schedule = c.has('schedule')\n      ? readSchedulerServiceTaskScheduleDefinitionFromConfig(\n          c.getConfig('schedule'),\n        )\n      : undefined;\n\n    const isUserList = Array.isArray(c.getOptional('users'));\n    const isGroupList = Array.isArray(c.getOptional('groups'));\n\n    const newConfig = {\n      id,\n      target: trimEnd(c.getString('target'), '/'),\n      tls: readTlsConfig(c.getOptionalConfig('tls')),\n      bind: readBindConfig(c.getOptionalConfig('bind')),\n      users: readUserConfig(\n        isUserList\n          ? c.getOptionalConfigArray('users')\n          : c.getOptionalConfig('users'),\n      ).map(it => {\n        return mergeWith({}, defaultUserConfig, it, replaceArraysIfPresent);\n      }),\n      groups: readGroupConfig(\n        isGroupList\n          ? c.getOptionalConfigArray('groups')\n          : c.getOptionalConfig('groups'),\n      ).map(it => {\n        return mergeWith({}, defaultGroupConfig, it, replaceArraysIfPresent);\n      }),\n      schedule,\n      vendor: readVendorConfig(c.getOptionalConfig('vendor')),\n    };\n\n    return freeze(newConfig) as LdapProviderConfig;\n  });\n}\n\nfunction replaceArraysIfPresent(_into: any, from: any) {\n  // Replace arrays instead of merging, otherwise default behavior\n  return Array.isArray(from) ? from : undefined;\n}\n"],"names":["trimEnd","mergeWith","readSchedulerServiceTaskScheduleDefinitionFromConfig"],"mappings":";;;;;;;;;;AA2LA,MAAM,iBAAA,GAAoB;AAAA,EACxB,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,KAAA;AAAA,IACP,UAAA,EAAY,CAAC,GAAA,EAAK,GAAG;AAAA,GACvB;AAAA,EACA,GAAA,EAAK;AAAA,IACH,GAAA,EAAK,KAAA;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,WAAA,EAAa,IAAA;AAAA,IACb,KAAA,EAAO,MAAA;AAAA,IACP,QAAA,EAAU;AAAA;AAEd,CAAA;AAEA,MAAM,kBAAA,GAAqB;AAAA,EACzB,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,KAAA;AAAA,IACP,UAAA,EAAY,CAAC,GAAA,EAAK,GAAG;AAAA,GACvB;AAAA,EACA,GAAA,EAAK;AAAA,IACH,GAAA,EAAK,IAAA;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,WAAA,EAAa,aAAA;AAAA,IACb,WAAA,EAAa,IAAA;AAAA,IACb,IAAA,EAAM,WAAA;AAAA,IACN,QAAA,EAAU,UAAA;AAAA,IACV,OAAA,EAAS;AAAA;AAEb,CAAA;AAEA,SAAS,OAAU,IAAA,EAAY;AAC7B,EAAA,OAAO,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG,CAAC,MAAM,KAAA,KAAU;AACvD,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,MAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AAAA,IACrB;AACA,IAAA,OAAO,KAAA;AAAA,EACT,CAAC,CAAA;AACH;AAEA,SAAS,cACP,CAAA,EACuC;AACvC,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,kBAAA,EAAoB,CAAA,CAAE,kBAAA,CAAmB,oBAAoB,CAAA;AAAA,IAC7D,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO;AAAA,GACpC;AACF;AAEA,SAAS,eACP,CAAA,EACwC;AACxC,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,CAAE,SAAA,CAAU,IAAI,CAAA;AAAA,IACpB,MAAA,EAAQ,CAAA,CAAE,SAAA,CAAU,QAAQ;AAAA,GAC9B;AACF;AAEA,SAAS,iBACP,CAAA,EAC0C;AAC1C,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,eAAA,EAAiB,CAAA,CAAE,iBAAA,CAAkB,iBAAiB,CAAA;AAAA,IACtD,iBAAA,EAAmB,CAAA,CAAE,iBAAA,CAAkB,mBAAmB;AAAA,GAC5D;AACF;AAEA,SAAS,kBAAkB,CAAA,EAAsC;AAC/D,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,MAAM,KAAA,GAAQ,uBAAuB,CAAC,CAAA;AAEtC,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAA;AAAA,IAClC,MAAA,EAAQ,YAAA,CAAa,CAAA,CAAE,iBAAA,CAAkB,QAAQ,CAAC,CAAA;AAAA,IAClD,UAAA,EAAY,CAAA,CAAE,sBAAA,CAAuB,YAAY,CAAA;AAAA,IACjD,SAAA,EAAW,CAAA,CAAE,iBAAA,CAAkB,WAAW,CAAA;AAAA,IAC1C,SAAA,EAAW,CAAA,CAAE,iBAAA,CAAkB,WAAW,CAAA;AAAA,IAC1C,cAAc,CAAA,CAAE,iBAAA;AAAA,MACd;AAAA,KACF;AAAA,IACA,qBAAA,EAAuB,CAAA,CAAE,kBAAA,CAAmB,iBAAiB,CAAA;AAAA,IAC7D,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,OAAM,GAAI;AAAA,GACxC;AACF;AAEA,SAAS,uBAAuB,CAAA,EAAmC;AACjE,EAAA,MAAM,WAAA,GAAc,CAAA,CAAE,WAAA,CAAY,OAAO,CAAA;AACzC,EAAA,IAAI,gBAAgB,MAAA,EAAW;AAC7B,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,IAAI,WAAA,KAAgB,IAAA,IAAQ,WAAA,KAAgB,KAAA,EAAO;AACjD,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,CAAA,CAAE,iBAAA,CAAkB,gBAAgB,CAAA;AACrD,EAAA,MAAM,SAAA,GAAY,CAAA,CAAE,kBAAA,CAAmB,iBAAiB,CAAA;AACxD,EAAA,OAAO;AAAA,IACL,GAAI,QAAA,KAAa,MAAA,GAAY,EAAE,UAAS,GAAI,MAAA;AAAA,IAC5C,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,WAAU,GAAI;AAAA,GAChD;AACF;AAEA,SAAS,cACP,CAAA,EAC2C;AAC3C,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,EAAE,GAAA,EAAI;AACf;AAEA,SAAS,kBAAkB,CAAA,EAAmD;AAC5E,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAA;AAAA,IAC9B,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAA;AAAA,IAClC,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAA;AAAA,IACtC,QAAA,EAAU,CAAA,CAAE,iBAAA,CAAkB,UAAU;AAAA,GAC1C;AACF;AAEA,SAAS,mBACP,CAAA,EAC6B;AAC7B,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAA;AAAA,IAC9B,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAA;AAAA,IAClC,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAA;AAAA,IACtC,QAAA,EAAU,CAAA,CAAE,iBAAA,CAAkB,UAAU,CAAA;AAAA,IACxC,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,SAAS;AAAA,GACxC;AACF;AAEA,SAAS,eACP,CAAA,EAC+C;AAC/C,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AACpB,IAAA,OAAO,CAAA,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM,oBAAA,CAAqB,EAAE,CAAC,CAAA;AAAA,EAC7C;AACA,EAAA,OAAO,CAAC,oBAAA,CAAqB,CAAC,CAAC,CAAA;AACjC;AAEA,SAAS,qBAAqB,CAAA,EAAyC;AACrE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,CAAE,SAAA,CAAU,IAAI,CAAA;AAAA,IACpB,OAAA,EAAS,iBAAA,CAAkB,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAC,CAAA;AAAA,IACzD,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,IAC7C,GAAA,EAAK,iBAAA,CAAkB,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC;AAAA,GACnD;AACF;AAEA,SAAS,gBACP,CAAA,EACgD;AAChD,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AACpB,IAAA,OAAO,CAAA,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM,qBAAA,CAAsB,EAAE,CAAC,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,CAAC,qBAAA,CAAsB,CAAC,CAAC,CAAA;AAClC;AAEA,SAAS,sBAAsB,CAAA,EAA0C;AACvE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,CAAE,SAAA,CAAU,IAAI,CAAA;AAAA,IACpB,OAAA,EAAS,iBAAA,CAAkB,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAC,CAAA;AAAA,IACzD,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,IAC7C,GAAA,EAAK,kBAAA,CAAmB,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC;AAAA,GACpD;AACF;AAEA,SAAS,aAAa,MAAA,EAAqC;AAEzD,EAAA,OAAO,MAAA,EAAQ,OAAA,CAAQ,aAAA,EAAe,IAAI,GAAG,IAAA,EAAK;AACpD;AAUO,SAAS,qBAAqB,MAAA,EAAsC;AACzE,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,sBAAA,CAAuB,WAAW,KAAK,EAAC;AACvE,EAAA,OAAO,eAAA,CAAgB,IAAI,CAAA,CAAA,KAAK;AAC9B,IAAA,MAAM,SAAA,GAAY;AAAA,MAChB,QAAQA,cAAA,CAAQ,CAAA,CAAE,SAAA,CAAU,QAAQ,GAAG,GAAG,CAAA;AAAA,MAC1C,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,MAC7C,IAAA,EAAM,cAAA,CAAe,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAChD,KAAA,EAAO,eAAe,CAAA,CAAE,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,IAAI,CAAA,EAAA,KAAM;AACpD,QAAA,OAAOC,0BAAA,CAAU,EAAC,EAAG,iBAAA,EAAmB,IAAI,sBAAsB,CAAA;AAAA,MACpE,CAAC,CAAA;AAAA,MACD,MAAA,EAAQ,gBAAgB,CAAA,CAAE,SAAA,CAAU,QAAQ,CAAC,CAAA,CAAE,IAAI,CAAA,EAAA,KAAM;AACvD,QAAA,OAAOA,0BAAA,CAAU,EAAC,EAAG,kBAAA,EAAoB,IAAI,sBAAsB,CAAA;AAAA,MACrE,CAAC,CAAA;AAAA,MACD,MAAA,EAAQ,gBAAA,CAAiB,CAAA,CAAE,iBAAA,CAAkB,QAAQ,CAAC;AAAA,KACxD;AAEA,IAAA,OAAO,OAAO,SAAS,CAAA;AAAA,EACzB,CAAC,CAAA;AACH;AASO,SAAS,oBAAoB,MAAA,EAAsC;AACxE,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,iBAAA,CAAkB,2BAA2B,CAAA;AAC5E,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO,eAAA,CAAgB,IAAA,EAAK,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM;AACtC,IAAA,MAAM,CAAA,GAAI,eAAA,CAAgB,SAAA,CAAU,EAAE,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,CAAA,CAAE,GAAA,CAAI,UAAU,CAAA,GAC7BC,qEAAA;AAAA,MACE,CAAA,CAAE,UAAU,UAAU;AAAA,KACxB,GACA,MAAA;AAEJ,IAAA,MAAM,aAAa,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,WAAA,CAAY,OAAO,CAAC,CAAA;AACvD,IAAA,MAAM,cAAc,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,WAAA,CAAY,QAAQ,CAAC,CAAA;AAEzD,IAAA,MAAM,SAAA,GAAY;AAAA,MAChB,EAAA;AAAA,MACA,QAAQF,cAAA,CAAQ,CAAA,CAAE,SAAA,CAAU,QAAQ,GAAG,GAAG,CAAA;AAAA,MAC1C,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,MAC7C,IAAA,EAAM,cAAA,CAAe,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAChD,KAAA,EAAO,cAAA;AAAA,QACL,aACI,CAAA,CAAE,sBAAA,CAAuB,OAAO,CAAA,GAChC,CAAA,CAAE,kBAAkB,OAAO;AAAA,OACjC,CAAE,IAAI,CAAA,EAAA,KAAM;AACV,QAAA,OAAOC,0BAAA,CAAU,EAAC,EAAG,iBAAA,EAAmB,IAAI,sBAAsB,CAAA;AAAA,MACpE,CAAC,CAAA;AAAA,MACD,MAAA,EAAQ,eAAA;AAAA,QACN,cACI,CAAA,CAAE,sBAAA,CAAuB,QAAQ,CAAA,GACjC,CAAA,CAAE,kBAAkB,QAAQ;AAAA,OAClC,CAAE,IAAI,CAAA,EAAA,KAAM;AACV,QAAA,OAAOA,0BAAA,CAAU,EAAC,EAAG,kBAAA,EAAoB,IAAI,sBAAsB,CAAA;AAAA,MACrE,CAAC,CAAA;AAAA,MACD,QAAA;AAAA,MACA,MAAA,EAAQ,gBAAA,CAAiB,CAAA,CAAE,iBAAA,CAAkB,QAAQ,CAAC;AAAA,KACxD;AAEA,IAAA,OAAO,OAAO,SAAS,CAAA;AAAA,EACzB,CAAC,CAAA;AACH;AAEA,SAAS,sBAAA,CAAuB,OAAY,IAAA,EAAW;AAErD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GAAI,IAAA,GAAO,MAAA;AACtC;;;;;"}
+{"version":3,"file":"config.cjs.js","sources":["../../src/ldap/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  SchedulerServiceTaskScheduleDefinition,\n  readSchedulerServiceTaskScheduleDefinitionFromConfig,\n} from '@backstage/backend-plugin-api';\nimport { Config } from '@backstage/config';\nimport { JsonValue } from '@backstage/types';\nimport { SearchOptions } from 'ldapts';\nimport mergeWith from 'lodash/mergeWith';\nimport { trimEnd } from 'lodash';\nimport { RecursivePartial } from './util';\n\n/**\n * The configuration parameters for a single LDAP provider.\n *\n * @public\n */\nexport type LdapProviderConfig = {\n  // The id of the\n  id: string;\n  // The prefix of the target that this matches on, e.g.\n  // \"ldaps://ds.example.net\", with no trailing slash.\n  target: string;\n  // TLS settings\n  tls?: TLSConfig;\n  // The settings to use for the bind command. If none are specified, the bind\n  // command is not issued.\n  bind?: BindConfig;\n  // The settings that govern the reading and interpretation of users\n  users: UserConfig[];\n  // The settings that govern the reading and interpretation of groups\n  groups: GroupConfig[];\n  // Schedule configuration for refresh tasks.\n  schedule?: SchedulerServiceTaskScheduleDefinition;\n  // Configuration for overriding the vendor-specific default attribute names.\n  vendor?: VendorConfig;\n};\n\n/**\n * TLS settings\n *\n * @public\n */\nexport type TLSConfig = {\n  // Node TLS rejectUnauthorized\n  rejectUnauthorized?: boolean;\n  // A file containing private keys in PEM format\n  keys?: string;\n  // A file containing cert chains in PEM format\n  certs?: string;\n};\n\n/**\n * The settings to use for the a command.\n *\n * @public\n */\nexport type BindConfig = {\n  // The DN of the user to auth as, e.g.\n  // uid=ldap-robot,ou=robots,ou=example,dc=example,dc=net\n  dn: string;\n  // The secret of the user to auth as (its password)\n  secret: string;\n};\n\n/**\n * The settings that govern the reading and interpretation of users.\n *\n * @public\n */\nexport type UserConfig = {\n  // The DN under which users are stored.\n  dn: string;\n  // The search options to use.\n  // Only the scope, filter, attributes, and paged fields are supported. The\n  // default is scope \"one\" and attributes \"*\" and \"+\".\n  options: SearchOptions;\n\n  // JSON paths (on a.b.c form) and hard coded values to set on those paths\n  set?: { [path: string]: JsonValue };\n  // Mappings from well known entity fields, to LDAP attribute names\n  map: {\n    // The name of the attribute that holds the relative distinguished name of\n    // each entry. Defaults to \"uid\".\n    rdn: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.name field of the entity. Defaults to \"uid\".\n    name: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.description field of the entity.\n    description?: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.displayName field of the entity. Defaults to \"cn\".\n    displayName: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.email field of the entity. Defaults to \"mail\".\n    email: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.picture field of the entity.\n    picture?: string;\n    // The name of the attribute that shall be used for the values of the\n    // spec.memberOf field of the entity. Defaults to \"memberOf\".\n    memberOf: string | null;\n  };\n};\n\n/**\n * The settings that govern the reading and interpretation of groups.\n *\n * @public\n */\nexport type GroupConfig = {\n  // The DN under which groups are stored.\n  dn: string;\n  // The search options to use.\n  // Only the scope, filter, attributes, and paged fields are supported.\n  options: SearchOptions;\n\n  // JSON paths (on a.b.c form) and hard coded values to set on those paths\n  set?: { [path: string]: JsonValue };\n  // Mappings from well known entity fields, to LDAP attribute names\n  map: {\n    // The name of the attribute that holds the relative distinguished name of\n    // each entry. Defaults to \"cn\".\n    rdn: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.name field of the entity. Defaults to \"cn\".\n    name: string;\n    // The name of the attribute that shall be used for the value of the\n    // metadata.description field of the entity. Defaults to \"description\".\n    description: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.type field of the entity. Defaults to \"groupType\".\n    type: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.displayName field of the entity. Defaults to \"cn\".\n    displayName: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.email field of the entity.\n    email?: string;\n    // The name of the attribute that shall be used for the value of the\n    // spec.profile.picture field of the entity.\n    picture?: string;\n    // The name of the attribute that shall be used for the values of the\n    // spec.parent field of the entity. Defaults to \"memberOf\".\n    memberOf: string | null;\n    // The name of the attribute that shall be used for the values of the\n    // spec.children field of the entity. Defaults to \"member\".\n    members: string | null;\n  };\n};\n\n/**\n * Configuration for LDAP vendor-specific attributes.\n *\n * Allows custom attribute names for distinguished names (DN) and\n * universally unique identifiers (UUID) in LDAP directories.\n *\n * @public\n */\nexport type VendorConfig = {\n  /**\n   * Attribute name for the distinguished name (DN) of an entry,\n   */\n  dnAttributeName?: string;\n\n  /**\n   * Attribute name for the unique identifier (UUID) of an entry,\n   */\n  uuidAttributeName?: string;\n};\n\nconst defaultUserConfig = {\n  options: {\n    scope: 'one',\n    attributes: ['*', '+'],\n  },\n  map: {\n    rdn: 'uid',\n    name: 'uid',\n    displayName: 'cn',\n    email: 'mail',\n    memberOf: 'memberOf',\n  },\n};\n\nconst defaultGroupConfig = {\n  options: {\n    scope: 'one',\n    attributes: ['*', '+'],\n  },\n  map: {\n    rdn: 'cn',\n    name: 'cn',\n    description: 'description',\n    displayName: 'cn',\n    type: 'groupType',\n    memberOf: 'memberOf',\n    members: 'member',\n  },\n};\n\nfunction freeze<T>(data: T): T {\n  return JSON.parse(JSON.stringify(data), (_key, value) => {\n    if (typeof value === 'object' && value !== null) {\n      Object.freeze(value);\n    }\n    return value;\n  });\n}\n\nfunction readTlsConfig(\n  c: Config | undefined,\n): LdapProviderConfig['tls'] | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return {\n    rejectUnauthorized: c.getOptionalBoolean('rejectUnauthorized'),\n    keys: c.getOptionalString('keys'),\n    certs: c.getOptionalString('certs'),\n  };\n}\n\nfunction readBindConfig(\n  c: Config | undefined,\n): LdapProviderConfig['bind'] | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return {\n    dn: c.getString('dn'),\n    secret: c.getString('secret'),\n  };\n}\n\nfunction readVendorConfig(\n  c: Config | undefined,\n): LdapProviderConfig['vendor'] | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return {\n    dnAttributeName: c.getOptionalString('dnAttributeName'),\n    uuidAttributeName: c.getOptionalString('uuidAttributeName'),\n  };\n}\n\nfunction readOptionsConfig(c: Config | undefined): SearchOptions {\n  if (!c) {\n    return {};\n  }\n\n  const paged = readOptionsPagedConfig(c);\n\n  return {\n    scope: c.getOptionalString('scope') as SearchOptions['scope'],\n    filter: formatFilter(c.getOptionalString('filter')),\n    attributes: c.getOptionalStringArray('attributes'),\n    sizeLimit: c.getOptionalNumber('sizeLimit'),\n    timeLimit: c.getOptionalNumber('timeLimit'),\n    derefAliases: c.getOptionalNumber(\n      'derefAliases',\n    ) as SearchOptions['derefAliases'],\n    returnAttributeValues: c.getOptionalBoolean('attributeValues'),\n    ...(paged !== undefined ? { paged } : undefined),\n  };\n}\n\nfunction readOptionsPagedConfig(c: Config): SearchOptions['paged'] {\n  const pagedConfig = c.getOptional('paged');\n  if (pagedConfig === undefined) {\n    return undefined;\n  }\n\n  if (pagedConfig === true || pagedConfig === false) {\n    return pagedConfig;\n  }\n\n  const pageSize = c.getOptionalNumber('paged.pageSize');\n  const pagePause = c.getOptionalBoolean('paged.pagePause');\n  return {\n    ...(pageSize !== undefined ? { pageSize } : undefined),\n    ...(pagePause !== undefined ? { pagePause } : undefined),\n  };\n}\n\nfunction readSetConfig(\n  c: Config | undefined,\n): { [path: string]: JsonValue } | undefined {\n  if (!c) {\n    return undefined;\n  }\n  return c.get();\n}\n\nfunction readUserMapConfig(c: Config | undefined): Partial<UserConfig['map']> {\n  if (!c) {\n    return {};\n  }\n\n  return {\n    rdn: c.getOptionalString('rdn'),\n    name: c.getOptionalString('name'),\n    description: c.getOptionalString('description'),\n    displayName: c.getOptionalString('displayName'),\n    email: c.getOptionalString('email'),\n    picture: c.getOptionalString('picture'),\n    memberOf: c.getOptionalString('memberOf'),\n  };\n}\n\nfunction readGroupMapConfig(\n  c: Config | undefined,\n): Partial<GroupConfig['map']> {\n  if (!c) {\n    return {};\n  }\n\n  return {\n    rdn: c.getOptionalString('rdn'),\n    name: c.getOptionalString('name'),\n    description: c.getOptionalString('description'),\n    type: c.getOptionalString('type'),\n    displayName: c.getOptionalString('displayName'),\n    email: c.getOptionalString('email'),\n    picture: c.getOptionalString('picture'),\n    memberOf: c.getOptionalString('memberOf'),\n    members: c.getOptionalString('members'),\n  };\n}\n\nfunction readUserConfig(\n  c: Config | Config[] | undefined,\n): RecursivePartial<LdapProviderConfig['users']> {\n  if (!c) {\n    return [];\n  }\n  if (Array.isArray(c)) {\n    return c.map(it => readSingleUserConfig(it));\n  }\n  return [readSingleUserConfig(c)];\n}\n\nfunction readSingleUserConfig(c: Config): RecursivePartial<UserConfig> {\n  return {\n    dn: c.getString('dn'),\n    options: readOptionsConfig(c.getOptionalConfig('options')),\n    set: readSetConfig(c.getOptionalConfig('set')),\n    map: readUserMapConfig(c.getOptionalConfig('map')),\n  };\n}\n\nfunction readGroupConfig(\n  c: Config | Config[] | undefined,\n): RecursivePartial<LdapProviderConfig['groups']> {\n  if (!c) {\n    return [];\n  }\n  if (Array.isArray(c)) {\n    return c.map(it => readSingleGroupConfig(it));\n  }\n  return [readSingleGroupConfig(c)];\n}\n\nfunction readSingleGroupConfig(c: Config): RecursivePartial<GroupConfig> {\n  return {\n    dn: c.getString('dn'),\n    options: readOptionsConfig(c.getOptionalConfig('options')),\n    set: readSetConfig(c.getOptionalConfig('set')),\n    map: readGroupMapConfig(c.getOptionalConfig('map')),\n  };\n}\n\nfunction formatFilter(filter?: string): string | undefined {\n  // Remove extra whitespace between blocks to support multiline filters from the configuration\n  return filter?.replace(/\\s*(\\(|\\))/g, '$1')?.trim();\n}\n\n/**\n * Parses configuration.\n *\n * @param config - The root of the LDAP config hierarchy\n *\n * @public\n * @deprecated This exists for backwards compatibility only and will be removed in the future.\n */\nexport function readLdapLegacyConfig(config: Config): LdapProviderConfig[] {\n  const providerConfigs = config.getOptionalConfigArray('providers') ?? [];\n  return providerConfigs.map(c => {\n    const newConfig = {\n      target: trimEnd(c.getString('target'), '/'),\n      tls: readTlsConfig(c.getOptionalConfig('tls')),\n      bind: readBindConfig(c.getOptionalConfig('bind')),\n      users: readUserConfig(c.getConfig('users')).map(it => {\n        return mergeWith({}, defaultUserConfig, it, replaceArraysIfPresent);\n      }),\n      groups: readGroupConfig(c.getConfig('groups')).map(it => {\n        return mergeWith({}, defaultGroupConfig, it, replaceArraysIfPresent);\n      }),\n      vendor: readVendorConfig(c.getOptionalConfig('vendor')),\n    };\n\n    return freeze(newConfig) as LdapProviderConfig;\n  });\n}\n\n/**\n * Parses all configured providers.\n *\n * @param config - The root of the LDAP config hierarchy\n *\n * @public\n */\nexport function readProviderConfigs(config: Config): LdapProviderConfig[] {\n  const providersConfig = config.getOptionalConfig('catalog.providers.ldapOrg');\n  if (!providersConfig) {\n    return [];\n  }\n\n  return providersConfig.keys().map(id => {\n    const c = providersConfig.getConfig(id);\n    const schedule = c.has('schedule')\n      ? readSchedulerServiceTaskScheduleDefinitionFromConfig(\n          c.getConfig('schedule'),\n        )\n      : undefined;\n\n    const isUserList = Array.isArray(c.getOptional('users'));\n    const isGroupList = Array.isArray(c.getOptional('groups'));\n\n    const newConfig = {\n      id,\n      target: trimEnd(c.getString('target'), '/'),\n      tls: readTlsConfig(c.getOptionalConfig('tls')),\n      bind: readBindConfig(c.getOptionalConfig('bind')),\n      users: readUserConfig(\n        isUserList\n          ? c.getOptionalConfigArray('users')\n          : c.getOptionalConfig('users'),\n      ).map(it => {\n        return mergeWith({}, defaultUserConfig, it, replaceArraysIfPresent);\n      }),\n      groups: readGroupConfig(\n        isGroupList\n          ? c.getOptionalConfigArray('groups')\n          : c.getOptionalConfig('groups'),\n      ).map(it => {\n        return mergeWith({}, defaultGroupConfig, it, replaceArraysIfPresent);\n      }),\n      schedule,\n      vendor: readVendorConfig(c.getOptionalConfig('vendor')),\n    };\n\n    return freeze(newConfig) as LdapProviderConfig;\n  });\n}\n\nfunction replaceArraysIfPresent(_into: any, from: any) {\n  // Replace arrays instead of merging, otherwise default behavior\n  return Array.isArray(from) ? from : undefined;\n}\n"],"names":["trimEnd","mergeWith","readSchedulerServiceTaskScheduleDefinitionFromConfig"],"mappings":";;;;;;;;;;AA2LA,MAAM,iBAAA,GAAoB;AAAA,EACxB,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,KAAA;AAAA,IACP,UAAA,EAAY,CAAC,GAAA,EAAK,GAAG;AAAA,GACvB;AAAA,EACA,GAAA,EAAK;AAAA,IACH,GAAA,EAAK,KAAA;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,WAAA,EAAa,IAAA;AAAA,IACb,KAAA,EAAO,MAAA;AAAA,IACP,QAAA,EAAU;AAAA;AAEd,CAAA;AAEA,MAAM,kBAAA,GAAqB;AAAA,EACzB,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,KAAA;AAAA,IACP,UAAA,EAAY,CAAC,GAAA,EAAK,GAAG;AAAA,GACvB;AAAA,EACA,GAAA,EAAK;AAAA,IACH,GAAA,EAAK,IAAA;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,WAAA,EAAa,aAAA;AAAA,IACb,WAAA,EAAa,IAAA;AAAA,IACb,IAAA,EAAM,WAAA;AAAA,IACN,QAAA,EAAU,UAAA;AAAA,IACV,OAAA,EAAS;AAAA;AAEb,CAAA;AAEA,SAAS,OAAU,IAAA,EAAY;AAC7B,EAAA,OAAO,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG,CAAC,MAAM,KAAA,KAAU;AACvD,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,MAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AAAA,IACrB;AACA,IAAA,OAAO,KAAA;AAAA,EACT,CAAC,CAAA;AACH;AAEA,SAAS,cACP,CAAA,EACuC;AACvC,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,kBAAA,EAAoB,CAAA,CAAE,kBAAA,CAAmB,oBAAoB,CAAA;AAAA,IAC7D,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO;AAAA,GACpC;AACF;AAEA,SAAS,eACP,CAAA,EACwC;AACxC,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,CAAE,SAAA,CAAU,IAAI,CAAA;AAAA,IACpB,MAAA,EAAQ,CAAA,CAAE,SAAA,CAAU,QAAQ;AAAA,GAC9B;AACF;AAEA,SAAS,iBACP,CAAA,EAC0C;AAC1C,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,eAAA,EAAiB,CAAA,CAAE,iBAAA,CAAkB,iBAAiB,CAAA;AAAA,IACtD,iBAAA,EAAmB,CAAA,CAAE,iBAAA,CAAkB,mBAAmB;AAAA,GAC5D;AACF;AAEA,SAAS,kBAAkB,CAAA,EAAsC;AAC/D,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,MAAM,KAAA,GAAQ,uBAAuB,CAAC,CAAA;AAEtC,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAA;AAAA,IAClC,MAAA,EAAQ,YAAA,CAAa,CAAA,CAAE,iBAAA,CAAkB,QAAQ,CAAC,CAAA;AAAA,IAClD,UAAA,EAAY,CAAA,CAAE,sBAAA,CAAuB,YAAY,CAAA;AAAA,IACjD,SAAA,EAAW,CAAA,CAAE,iBAAA,CAAkB,WAAW,CAAA;AAAA,IAC1C,SAAA,EAAW,CAAA,CAAE,iBAAA,CAAkB,WAAW,CAAA;AAAA,IAC1C,cAAc,CAAA,CAAE,iBAAA;AAAA,MACd;AAAA,KACF;AAAA,IACA,qBAAA,EAAuB,CAAA,CAAE,kBAAA,CAAmB,iBAAiB,CAAA;AAAA,IAC7D,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,OAAM,GAAI;AAAA,GACxC;AACF;AAEA,SAAS,uBAAuB,CAAA,EAAmC;AACjE,EAAA,MAAM,WAAA,GAAc,CAAA,CAAE,WAAA,CAAY,OAAO,CAAA;AACzC,EAAA,IAAI,gBAAgB,MAAA,EAAW;AAC7B,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,IAAI,WAAA,KAAgB,IAAA,IAAQ,WAAA,KAAgB,KAAA,EAAO;AACjD,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,CAAA,CAAE,iBAAA,CAAkB,gBAAgB,CAAA;AACrD,EAAA,MAAM,SAAA,GAAY,CAAA,CAAE,kBAAA,CAAmB,iBAAiB,CAAA;AACxD,EAAA,OAAO;AAAA,IACL,GAAI,QAAA,KAAa,MAAA,GAAY,EAAE,UAAS,GAAI,MAAA;AAAA,IAC5C,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,WAAU,GAAI;AAAA,GAChD;AACF;AAEA,SAAS,cACP,CAAA,EAC2C;AAC3C,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,EAAE,GAAA,EAAI;AACf;AAEA,SAAS,kBAAkB,CAAA,EAAmD;AAC5E,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAA;AAAA,IAC9B,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAA;AAAA,IAClC,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAA;AAAA,IACtC,QAAA,EAAU,CAAA,CAAE,iBAAA,CAAkB,UAAU;AAAA,GAC1C;AACF;AAEA,SAAS,mBACP,CAAA,EAC6B;AAC7B,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAA;AAAA,IAC9B,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,IAAA,EAAM,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAA;AAAA,IAChC,WAAA,EAAa,CAAA,CAAE,iBAAA,CAAkB,aAAa,CAAA;AAAA,IAC9C,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAA;AAAA,IAClC,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAA;AAAA,IACtC,QAAA,EAAU,CAAA,CAAE,iBAAA,CAAkB,UAAU,CAAA;AAAA,IACxC,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,SAAS;AAAA,GACxC;AACF;AAEA,SAAS,eACP,CAAA,EAC+C;AAC/C,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AACpB,IAAA,OAAO,CAAA,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM,oBAAA,CAAqB,EAAE,CAAC,CAAA;AAAA,EAC7C;AACA,EAAA,OAAO,CAAC,oBAAA,CAAqB,CAAC,CAAC,CAAA;AACjC;AAEA,SAAS,qBAAqB,CAAA,EAAyC;AACrE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,CAAE,SAAA,CAAU,IAAI,CAAA;AAAA,IACpB,OAAA,EAAS,iBAAA,CAAkB,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAC,CAAA;AAAA,IACzD,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,IAC7C,GAAA,EAAK,iBAAA,CAAkB,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC;AAAA,GACnD;AACF;AAEA,SAAS,gBACP,CAAA,EACgD;AAChD,EAAA,IAAI,CAAC,CAAA,EAAG;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AACpB,IAAA,OAAO,CAAA,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM,qBAAA,CAAsB,EAAE,CAAC,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,CAAC,qBAAA,CAAsB,CAAC,CAAC,CAAA;AAClC;AAEA,SAAS,sBAAsB,CAAA,EAA0C;AACvE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,CAAE,SAAA,CAAU,IAAI,CAAA;AAAA,IACpB,OAAA,EAAS,iBAAA,CAAkB,CAAA,CAAE,iBAAA,CAAkB,SAAS,CAAC,CAAA;AAAA,IACzD,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,IAC7C,GAAA,EAAK,kBAAA,CAAmB,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC;AAAA,GACpD;AACF;AAEA,SAAS,aAAa,MAAA,EAAqC;AAEzD,EAAA,OAAO,MAAA,EAAQ,OAAA,CAAQ,aAAA,EAAe,IAAI,GAAG,IAAA,EAAK;AACpD;AAUO,SAAS,qBAAqB,MAAA,EAAsC;AACzE,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,sBAAA,CAAuB,WAAW,KAAK,EAAC;AACvE,EAAA,OAAO,eAAA,CAAgB,IAAI,CAAA,CAAA,KAAK;AAC9B,IAAA,MAAM,SAAA,GAAY;AAAA,MAChB,QAAQA,cAAA,CAAQ,CAAA,CAAE,SAAA,CAAU,QAAQ,GAAG,GAAG,CAAA;AAAA,MAC1C,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,MAC7C,IAAA,EAAM,cAAA,CAAe,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAChD,KAAA,EAAO,eAAe,CAAA,CAAE,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,IAAI,CAAA,EAAA,KAAM;AACpD,QAAA,OAAOC,0BAAA,CAAU,EAAC,EAAG,iBAAA,EAAmB,IAAI,sBAAsB,CAAA;AAAA,MACpE,CAAC,CAAA;AAAA,MACD,MAAA,EAAQ,gBAAgB,CAAA,CAAE,SAAA,CAAU,QAAQ,CAAC,CAAA,CAAE,IAAI,CAAA,EAAA,KAAM;AACvD,QAAA,OAAOA,0BAAA,CAAU,EAAC,EAAG,kBAAA,EAAoB,IAAI,sBAAsB,CAAA;AAAA,MACrE,CAAC,CAAA;AAAA,MACD,MAAA,EAAQ,gBAAA,CAAiB,CAAA,CAAE,iBAAA,CAAkB,QAAQ,CAAC;AAAA,KACxD;AAEA,IAAA,OAAO,OAAO,SAAS,CAAA;AAAA,EACzB,CAAC,CAAA;AACH;AASO,SAAS,oBAAoB,MAAA,EAAsC;AACxE,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,iBAAA,CAAkB,2BAA2B,CAAA;AAC5E,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO,eAAA,CAAgB,IAAA,EAAK,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM;AACtC,IAAA,MAAM,CAAA,GAAI,eAAA,CAAgB,SAAA,CAAU,EAAE,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,CAAA,CAAE,GAAA,CAAI,UAAU,CAAA,GAC7BC,qEAAA;AAAA,MACE,CAAA,CAAE,UAAU,UAAU;AAAA,KACxB,GACA,MAAA;AAEJ,IAAA,MAAM,aAAa,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,WAAA,CAAY,OAAO,CAAC,CAAA;AACvD,IAAA,MAAM,cAAc,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,WAAA,CAAY,QAAQ,CAAC,CAAA;AAEzD,IAAA,MAAM,SAAA,GAAY;AAAA,MAChB,EAAA;AAAA,MACA,QAAQF,cAAA,CAAQ,CAAA,CAAE,SAAA,CAAU,QAAQ,GAAG,GAAG,CAAA;AAAA,MAC1C,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,iBAAA,CAAkB,KAAK,CAAC,CAAA;AAAA,MAC7C,IAAA,EAAM,cAAA,CAAe,CAAA,CAAE,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAChD,KAAA,EAAO,cAAA;AAAA,QACL,aACI,CAAA,CAAE,sBAAA,CAAuB,OAAO,CAAA,GAChC,CAAA,CAAE,kBAAkB,OAAO;AAAA,OACjC,CAAE,IAAI,CAAA,EAAA,KAAM;AACV,QAAA,OAAOC,0BAAA,CAAU,EAAC,EAAG,iBAAA,EAAmB,IAAI,sBAAsB,CAAA;AAAA,MACpE,CAAC,CAAA;AAAA,MACD,MAAA,EAAQ,eAAA;AAAA,QACN,cACI,CAAA,CAAE,sBAAA,CAAuB,QAAQ,CAAA,GACjC,CAAA,CAAE,kBAAkB,QAAQ;AAAA,OAClC,CAAE,IAAI,CAAA,EAAA,KAAM;AACV,QAAA,OAAOA,0BAAA,CAAU,EAAC,EAAG,kBAAA,EAAoB,IAAI,sBAAsB,CAAA;AAAA,MACrE,CAAC,CAAA;AAAA,MACD,QAAA;AAAA,MACA,MAAA,EAAQ,gBAAA,CAAiB,CAAA,CAAE,iBAAA,CAAkB,QAAQ,CAAC;AAAA,KACxD;AAEA,IAAA,OAAO,OAAO,SAAS,CAAA;AAAA,EACzB,CAAC,CAAA;AACH;AAEA,SAAS,sBAAA,CAAuB,OAAY,IAAA,EAAW;AAErD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GAAI,IAAA,GAAO,MAAA;AACtC;;;"}

package/dist/ldap/constants.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.cjs.js","sources":["../../src/ldap/constants.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The name of an entity annotation, that references the RDN of the LDAP object\n * it was ingested from.\n *\n * The RDN is the name of the leftmost attribute that identifies the item; for\n * example, for an item with the fully qualified DN\n * uid=john,ou=people,ou=spotify,dc=spotify,dc=net the generated entity would\n * have this annotation, with the value \"john\".\n *\n * @public\n */\nexport const LDAP_RDN_ANNOTATION = 'backstage.io/ldap-rdn';\n\n/**\n * The name of an entity annotation, that references the DN of the LDAP object\n * it was ingested from.\n *\n * The DN is the fully qualified name that identifies the item; for example,\n * for an item with the DN uid=john,ou=people,ou=spotify,dc=spotify,dc=net the\n * generated entity would have this annotation, with that full string as its\n * value.\n *\n * @public\n */\nexport const LDAP_DN_ANNOTATION = 'backstage.io/ldap-dn';\n\n/**\n * The name of an entity annotation, that references the UUID of the LDAP\n * object it was ingested from.\n *\n * The UUID is the globally unique ID that identifies the item; for example,\n * for an item with the UUID 76ef928a-b251-1037-9840-d78227f36a7e, the\n * generated entity would have this annotation, with that full string as its\n * value.\n *\n * @public\n */\nexport const LDAP_UUID_ANNOTATION = 'backstage.io/ldap-uuid';\n"],"names":[],"mappings":";;AA2BO,MAAM,mBAAA,GAAsB;AAa5B,MAAM,kBAAA,GAAqB;AAa3B,MAAM,oBAAA,GAAuB;;;;;;"}
+{"version":3,"file":"constants.cjs.js","sources":["../../src/ldap/constants.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The name of an entity annotation, that references the RDN of the LDAP object\n * it was ingested from.\n *\n * The RDN is the name of the leftmost attribute that identifies the item; for\n * example, for an item with the fully qualified DN\n * uid=john,ou=people,ou=spotify,dc=spotify,dc=net the generated entity would\n * have this annotation, with the value \"john\".\n *\n * @public\n */\nexport const LDAP_RDN_ANNOTATION = 'backstage.io/ldap-rdn';\n\n/**\n * The name of an entity annotation, that references the DN of the LDAP object\n * it was ingested from.\n *\n * The DN is the fully qualified name that identifies the item; for example,\n * for an item with the DN uid=john,ou=people,ou=spotify,dc=spotify,dc=net the\n * generated entity would have this annotation, with that full string as its\n * value.\n *\n * @public\n */\nexport const LDAP_DN_ANNOTATION = 'backstage.io/ldap-dn';\n\n/**\n * The name of an entity annotation, that references the UUID of the LDAP\n * object it was ingested from.\n *\n * The UUID is the globally unique ID that identifies the item; for example,\n * for an item with the UUID 76ef928a-b251-1037-9840-d78227f36a7e, the\n * generated entity would have this annotation, with that full string as its\n * value.\n *\n * @public\n */\nexport const LDAP_UUID_ANNOTATION = 'backstage.io/ldap-uuid';\n"],"names":[],"mappings":";;AA2BO,MAAM,mBAAA,GAAsB;AAa5B,MAAM,kBAAA,GAAqB;AAa3B,MAAM,oBAAA,GAAuB;;;;"}

package/dist/ldap/index.cjs.js

@@ -8,9 +8,10 @@ require('node:tls');
 require('@backstage/backend-plugin-api');
 require('lodash/mergeWith');
 require('lodash');
-require('@backstage/catalog-model');
 require('lodash/set');
 require('lodash/cloneDeep');
+require('@backstage/catalog-model');
+require('node:timers/promises');
 
 const vendors = {
   activeDirectory: vendors$1.ActiveDirectoryVendor,

package/dist/ldap/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":["../../src/ldap/index.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  ActiveDirectoryVendor,\n  AEDirVendor,\n  DefaultLdapVendor,\n  FreeIpaVendor,\n  GoogleLdapVendor,\n  LdapVendor,\n  LLDAPVendor,\n} from './vendors';\n\nexport { LdapClient } from './client';\nexport { mapStringAttr } from './util';\nexport { readProviderConfigs, readLdapLegacyConfig } from './config';\nexport type {\n  LdapProviderConfig,\n  GroupConfig,\n  UserConfig,\n  BindConfig,\n  TLSConfig,\n  VendorConfig,\n} from './config';\nexport type { LdapVendor } from './vendors';\nexport {\n  LDAP_DN_ANNOTATION,\n  LDAP_RDN_ANNOTATION,\n  LDAP_UUID_ANNOTATION,\n} from './constants';\nexport {\n  defaultGroupTransformer,\n  defaultUserTransformer,\n  readLdapOrg,\n} from './read';\nexport type { GroupTransformer, UserTransformer } from './types';\n/**\n * An LDAP Vendor types.\n *\n * @public\n */\nexport const vendors = {\n  activeDirectory: ActiveDirectoryVendor as LdapVendor,\n  aeDir: AEDirVendor as LdapVendor,\n  freeIpa: FreeIpaVendor as LdapVendor,\n  googleLdap: GoogleLdapVendor as LdapVendor,\n  lldap: LLDAPVendor as LdapVendor,\n  default: DefaultLdapVendor as LdapVendor,\n} as const;\n"],"names":["ActiveDirectoryVendor","AEDirVendor","FreeIpaVendor","GoogleLdapVendor","LLDAPVendor","DefaultLdapVendor"],"mappings":";;;;;;;;;;;;;;AAqDO,MAAM,OAAA,GAAU;AAAA,EACrB,eAAA,EAAiBA,+BAAA;AAAA,EACjB,KAAA,EAAOC,qBAAA;AAAA,EACP,OAAA,EAASC,uBAAA;AAAA,EACT,UAAA,EAAYC,0BAAA;AAAA,EACZ,KAAA,EAAOC,qBAAA;AAAA,EACP,OAAA,EAASC;AACX;;;;"}
+{"version":3,"file":"index.cjs.js","sources":["../../src/ldap/index.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  ActiveDirectoryVendor,\n  AEDirVendor,\n  DefaultLdapVendor,\n  FreeIpaVendor,\n  GoogleLdapVendor,\n  LdapVendor,\n  LLDAPVendor,\n} from './vendors';\n\nexport { LdapClient } from './client';\nexport { mapStringAttr } from './util';\nexport { readProviderConfigs, readLdapLegacyConfig } from './config';\nexport type {\n  LdapProviderConfig,\n  GroupConfig,\n  UserConfig,\n  BindConfig,\n  TLSConfig,\n  VendorConfig,\n} from './config';\nexport type { LdapVendor } from './vendors';\nexport {\n  LDAP_DN_ANNOTATION,\n  LDAP_RDN_ANNOTATION,\n  LDAP_UUID_ANNOTATION,\n} from './constants';\nexport {\n  defaultGroupTransformer,\n  defaultUserTransformer,\n  readLdapOrg,\n} from './read';\nexport type { GroupTransformer, UserTransformer } from './types';\n/**\n * An LDAP Vendor types.\n *\n * @public\n */\nexport const vendors = {\n  activeDirectory: ActiveDirectoryVendor as LdapVendor,\n  aeDir: AEDirVendor as LdapVendor,\n  freeIpa: FreeIpaVendor as LdapVendor,\n  googleLdap: GoogleLdapVendor as LdapVendor,\n  lldap: LLDAPVendor as LdapVendor,\n  default: DefaultLdapVendor as LdapVendor,\n} as const;\n"],"names":["ActiveDirectoryVendor","AEDirVendor","FreeIpaVendor","GoogleLdapVendor","LLDAPVendor","DefaultLdapVendor"],"mappings":";;;;;;;;;;;;;;;AAqDO,MAAM,OAAA,GAAU;AAAA,EACrB,eAAA,EAAiBA,+BAAA;AAAA,EACjB,KAAA,EAAOC,qBAAA;AAAA,EACP,OAAA,EAASC,uBAAA;AAAA,EACT,UAAA,EAAYC,0BAAA;AAAA,EACZ,KAAA,EAAOC,qBAAA;AAAA,EACP,OAAA,EAASC;AACX;;"}

package/dist/ldap/read.cjs.js

@@ -1,12 +1,11 @@
 'use strict';
 
-var catalogModel = require('@backstage/catalog-model');
 var lodashSet = require('lodash/set');
 var cloneDeep = require('lodash/cloneDeep');
-var org = require('./org.cjs.js');
 var constants = require('./constants.cjs.js');
 var util = require('./util.cjs.js');
 var errors = require('@backstage/errors');
+var relations = require('./relations.cjs.js');
 
 function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
 
@@ -198,7 +197,11 @@ async function readLdapOrg(client, userConfig, groupConfig, vendorConfig, option
     vendorConfig,
     { transformer: options?.groupTransformer }
   );
-  resolveRelations(groups, users, userMemberOf, groupMemberOf, groupMember);
+  await relations.resolveOrgRelations(groups, users, {
+    userMemberOf,
+    groupMemberOf,
+    groupMember
+  });
   users.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));
   groups.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));
   return { users, groups };
@@ -226,125 +229,10 @@ function ensureItems(target, key, values) {
     }
   }
 }
-function getValueFromMapWithInsensitiveKey(map, searchValue) {
-  const result = map.get(searchValue);
-  return result ? result : map.get(searchValue.toLowerCase());
-}
-function resolveRelations(groups, users, userMemberOf, groupMemberOf, groupMember) {
-  const userMap = /* @__PURE__ */ new Map();
-  const groupMap = /* @__PURE__ */ new Map();
-  for (const user of users) {
-    userMap.set(catalogModel.stringifyEntityRef(user), user);
-    userMap.set(user.metadata.annotations[constants.LDAP_DN_ANNOTATION], user);
-    userMap.set(
-      user.metadata.annotations[constants.LDAP_DN_ANNOTATION]?.toLowerCase(),
-      user
-    );
-    userMap.set(user.metadata.annotations[constants.LDAP_RDN_ANNOTATION], user);
-    userMap.set(user.metadata.annotations[constants.LDAP_UUID_ANNOTATION], user);
-  }
-  for (const group of groups) {
-    groupMap.set(catalogModel.stringifyEntityRef(group), group);
-    groupMap.set(group.metadata.annotations[constants.LDAP_DN_ANNOTATION], group);
-    groupMap.set(
-      group.metadata.annotations[constants.LDAP_DN_ANNOTATION]?.toLowerCase(),
-      group
-    );
-    groupMap.set(group.metadata.annotations[constants.LDAP_RDN_ANNOTATION], group);
-    groupMap.set(group.metadata.annotations[constants.LDAP_UUID_ANNOTATION], group);
-  }
-  userMap.delete("");
-  groupMap.delete("");
-  userMap.delete(void 0);
-  groupMap.delete(void 0);
-  const newUserMemberOf = /* @__PURE__ */ new Map();
-  const newGroupParents = /* @__PURE__ */ new Map();
-  const newGroupChildren = /* @__PURE__ */ new Map();
-  for (const [userN, groupsN] of userMemberOf.entries()) {
-    const user = getValueFromMapWithInsensitiveKey(userMap, userN);
-    if (user) {
-      for (const groupN of groupsN) {
-        const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);
-        if (group) {
-          ensureItems(newUserMemberOf, catalogModel.stringifyEntityRef(user), [
-            catalogModel.stringifyEntityRef(group)
-          ]);
-        }
-      }
-    }
-  }
-  for (const [groupN, parentsN] of groupMemberOf.entries()) {
-    const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);
-    if (group) {
-      for (const parentN of parentsN) {
-        const parentGroup = getValueFromMapWithInsensitiveKey(
-          groupMap,
-          parentN
-        );
-        if (parentGroup) {
-          ensureItems(newGroupParents, catalogModel.stringifyEntityRef(group), [
-            catalogModel.stringifyEntityRef(parentGroup)
-          ]);
-          ensureItems(newGroupChildren, catalogModel.stringifyEntityRef(parentGroup), [
-            catalogModel.stringifyEntityRef(group)
-          ]);
-        }
-      }
-    }
-  }
-  for (const [groupN, membersN] of groupMember.entries()) {
-    const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);
-    if (group) {
-      for (const memberN of membersN) {
-        const memberUser = getValueFromMapWithInsensitiveKey(userMap, memberN);
-        if (memberUser) {
-          ensureItems(newUserMemberOf, catalogModel.stringifyEntityRef(memberUser), [
-            catalogModel.stringifyEntityRef(group)
-          ]);
-        } else {
-          const memberGroup = getValueFromMapWithInsensitiveKey(
-            groupMap,
-            memberN
-          );
-          if (memberGroup) {
-            ensureItems(newGroupChildren, catalogModel.stringifyEntityRef(group), [
-              catalogModel.stringifyEntityRef(memberGroup)
-            ]);
-            ensureItems(newGroupParents, catalogModel.stringifyEntityRef(memberGroup), [
-              catalogModel.stringifyEntityRef(group)
-            ]);
-          }
-        }
-      }
-    }
-  }
-  for (const [userN, groupsN] of newUserMemberOf.entries()) {
-    const user = getValueFromMapWithInsensitiveKey(userMap, userN);
-    if (user) {
-      user.spec.memberOf = Array.from(groupsN).sort();
-    }
-  }
-  for (const [groupN, parentsN] of newGroupParents.entries()) {
-    if (parentsN.size === 1) {
-      const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);
-      if (group) {
-        group.spec.parent = parentsN.values().next().value;
-      }
-    }
-  }
-  for (const [groupN, childrenN] of newGroupChildren.entries()) {
-    const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);
-    if (group) {
-      group.spec.children = Array.from(childrenN).sort();
-    }
-  }
-  org.buildOrgHierarchy(groups);
-}
 
 exports.defaultGroupTransformer = defaultGroupTransformer;
 exports.defaultUserTransformer = defaultUserTransformer;
 exports.readLdapGroups = readLdapGroups;
 exports.readLdapOrg = readLdapOrg;
 exports.readLdapUsers = readLdapUsers;
-exports.resolveRelations = resolveRelations;
 //# sourceMappingURL=read.cjs.js.map

package/dist/ldap/read.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.cjs.js","sources":["../../src/ldap/read.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  GroupEntity,\n  stringifyEntityRef,\n  UserEntity,\n} from '@backstage/catalog-model';\nimport { Entry } from 'ldapts';\nimport lodashSet from 'lodash/set';\nimport cloneDeep from 'lodash/cloneDeep';\nimport { buildOrgHierarchy } from './org';\nimport { LdapClient } from './client';\nimport { GroupConfig, UserConfig, VendorConfig } from './config';\nimport {\n  LDAP_DN_ANNOTATION,\n  LDAP_RDN_ANNOTATION,\n  LDAP_UUID_ANNOTATION,\n} from './constants';\nimport { LdapVendor } from './vendors';\nimport { GroupTransformer, UserTransformer } from './types';\nimport { mapStringAttr } from './util';\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { InputError } from '@backstage/errors';\n\n/**\n * The default implementation of the transformation from an LDAP entry to a\n * User entity.\n *\n * @public\n */\nexport async function defaultUserTransformer(\n  vendor: LdapVendor,\n  config: UserConfig,\n  entry: Entry,\n): Promise<UserEntity | undefined> {\n  const { set, map } = config;\n\n  const entity: UserEntity = {\n    apiVersion: 'backstage.io/v1beta1',\n    kind: 'User',\n    metadata: {\n      name: '',\n      annotations: {},\n    },\n    spec: {\n      profile: {},\n      memberOf: [],\n    },\n  };\n\n  if (set) {\n    for (const [path, value] of Object.entries(set)) {\n      lodashSet(entity, path, cloneDeep(value));\n    }\n  }\n\n  mapStringAttr(entry, vendor, map.name, v => {\n    entity.metadata.name = v;\n  });\n\n  if (!entity.metadata.name) {\n    throw new InputError(\n      `User syncing failed: missing '${map.name}' attribute, consider applying a user filter to skip processing users with incomplete data.`,\n    );\n  }\n\n  mapStringAttr(entry, vendor, map.description, v => {\n    entity.metadata.description = v;\n  });\n  mapStringAttr(entry, vendor, map.rdn, v => {\n    entity.metadata.annotations![LDAP_RDN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.uuidAttributeName, v => {\n    entity.metadata.annotations![LDAP_UUID_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.dnAttributeName, v => {\n    entity.metadata.annotations![LDAP_DN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, map.displayName, v => {\n    entity.spec.profile!.displayName = v;\n  });\n  mapStringAttr(entry, vendor, map.email, v => {\n    entity.spec.profile!.email = v;\n  });\n  mapStringAttr(entry, vendor, map.picture, v => {\n    entity.spec.profile!.picture = v;\n  });\n\n  return entity;\n}\n\n/**\n * Reads users out of an LDAP provider.\n *\n * @param client - The LDAP client\n * @param config - The user data configuration\n * @param opts - Additional options\n */\nexport async function readLdapUsers(\n  client: LdapClient,\n  userConfig: UserConfig[],\n  vendorConfig: VendorConfig | undefined,\n  opts?: { transformer?: UserTransformer },\n): Promise<{\n  users: UserEntity[]; // With all relations empty\n  userMemberOf: Map<string, Set<string>>; // DN -> DN or UUID of groups\n}> {\n  if (userConfig.length === 0) {\n    return { users: [], userMemberOf: new Map() };\n  }\n  const entities: UserEntity[] = [];\n  const userMemberOf: Map<string, Set<string>> = new Map();\n  const vendorDefaults = await client.getVendor();\n  const vendor: LdapVendor = {\n    dnAttributeName:\n      vendorConfig?.dnAttributeName ?? vendorDefaults.dnAttributeName,\n    uuidAttributeName:\n      vendorConfig?.uuidAttributeName ?? vendorDefaults.uuidAttributeName,\n    decodeStringAttribute: vendorDefaults.decodeStringAttribute,\n  };\n  const transformer = opts?.transformer ?? defaultUserTransformer;\n\n  for (const cfg of userConfig) {\n    const { dn, options, map } = cfg;\n    const searchResult = await client.search(dn, options);\n    for (const entry of searchResult.searchEntries) {\n      const entity = await transformer(vendor, cfg, entry);\n\n      if (!entity) {\n        continue;\n      }\n\n      mapReferencesAttr(entry, vendor, map.memberOf, (myDn, vs) => {\n        ensureItems(userMemberOf, myDn, vs);\n      });\n\n      entities.push(entity);\n    }\n  }\n\n  return { users: entities, userMemberOf };\n}\n\n/**\n * The default implementation of the transformation from an LDAP entry to a\n * Group entity.\n *\n * @public\n */\nexport async function defaultGroupTransformer(\n  vendor: LdapVendor,\n  config: GroupConfig,\n  entry: Entry,\n): Promise<GroupEntity | undefined> {\n  const { set, map } = config;\n  const entity: GroupEntity = {\n    apiVersion: 'backstage.io/v1beta1',\n    kind: 'Group',\n    metadata: {\n      name: '',\n      annotations: {},\n    },\n    spec: {\n      type: 'unknown',\n      profile: {},\n      children: [],\n    },\n  };\n\n  if (set) {\n    for (const [path, value] of Object.entries(set)) {\n      lodashSet(entity, path, cloneDeep(value));\n    }\n  }\n\n  mapStringAttr(entry, vendor, map.name, v => {\n    entity.metadata.name = v;\n  });\n\n  if (!entity.metadata.name) {\n    throw new InputError(\n      `Group syncing failed: missing '${map.name}' attribute, consider applying a group filter to skip processing groups with incomplete data.`,\n    );\n  }\n\n  mapStringAttr(entry, vendor, map.description, v => {\n    entity.metadata.description = v;\n  });\n  mapStringAttr(entry, vendor, map.rdn, v => {\n    entity.metadata.annotations![LDAP_RDN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.uuidAttributeName, v => {\n    entity.metadata.annotations![LDAP_UUID_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.dnAttributeName, v => {\n    entity.metadata.annotations![LDAP_DN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, map.type, v => {\n    entity.spec.type = v;\n  });\n  mapStringAttr(entry, vendor, map.displayName, v => {\n    entity.spec.profile!.displayName = v;\n  });\n  mapStringAttr(entry, vendor, map.email, v => {\n    entity.spec.profile!.email = v;\n  });\n  mapStringAttr(entry, vendor, map.picture, v => {\n    entity.spec.profile!.picture = v;\n  });\n\n  return entity;\n}\n\n/**\n * Reads groups out of an LDAP provider.\n *\n * @param client - The LDAP client\n * @param config - The group data configuration\n * @param opts - Additional options\n */\nexport async function readLdapGroups(\n  client: LdapClient,\n  groupConfig: GroupConfig[],\n  vendorConfig: VendorConfig | undefined,\n  opts?: {\n    transformer?: GroupTransformer;\n  },\n): Promise<{\n  groups: GroupEntity[]; // With all relations empty\n  groupMemberOf: Map<string, Set<string>>; // DN -> DN or UUID of groups\n  groupMember: Map<string, Set<string>>; // DN -> DN or UUID of groups & users\n}> {\n  if (groupConfig.length === 0) {\n    return { groups: [], groupMemberOf: new Map(), groupMember: new Map() };\n  }\n  const groups: GroupEntity[] = [];\n  const groupMemberOf: Map<string, Set<string>> = new Map();\n  const groupMember: Map<string, Set<string>> = new Map();\n\n  const vendorDefaults = await client.getVendor();\n  const vendor: LdapVendor = {\n    dnAttributeName:\n      vendorConfig?.dnAttributeName ?? vendorDefaults.dnAttributeName,\n    uuidAttributeName:\n      vendorConfig?.uuidAttributeName ?? vendorDefaults.uuidAttributeName,\n    decodeStringAttribute: vendorDefaults.decodeStringAttribute,\n  };\n\n  const transformer = opts?.transformer ?? defaultGroupTransformer;\n\n  for (const cfg of groupConfig) {\n    const { dn, map, options } = cfg;\n    const searchResult = await client.search(dn, options);\n    for (const entry of searchResult.searchEntries) {\n      const entity = await transformer(vendor, cfg, entry);\n\n      if (!entity) {\n        continue;\n      }\n\n      mapReferencesAttr(entry, vendor, map.memberOf, (myDn, vs) => {\n        ensureItems(groupMemberOf, myDn, vs);\n      });\n\n      mapReferencesAttr(entry, vendor, map.members, (myDn, vs) => {\n        ensureItems(groupMember, myDn, vs);\n      });\n\n      groups.push(entity);\n    }\n  }\n\n  return {\n    groups,\n    groupMemberOf,\n    groupMember,\n  };\n}\n\n/**\n * Reads users and groups out of an LDAP provider.\n *\n * @param client - The LDAP client\n * @param userConfig - The user data configuration\n * @param groupConfig - The group data configuration\n * @param options - Additional options\n *\n * @public\n */\nexport async function readLdapOrg(\n  client: LdapClient,\n  userConfig: UserConfig[],\n  groupConfig: GroupConfig[],\n  vendorConfig: VendorConfig | undefined,\n  options: {\n    groupTransformer?: GroupTransformer;\n    userTransformer?: UserTransformer;\n    logger: LoggerService;\n  },\n): Promise<{\n  users: UserEntity[];\n  groups: GroupEntity[];\n}> {\n  // Invokes the above \"raw\" read functions and stitches together the results\n  // with all relations etc filled in.\n\n  const { users, userMemberOf } = await readLdapUsers(\n    client,\n    userConfig,\n    vendorConfig,\n    {\n      transformer: options?.userTransformer,\n    },\n  );\n  const { groups, groupMemberOf, groupMember } = await readLdapGroups(\n    client,\n    groupConfig,\n    vendorConfig,\n    { transformer: options?.groupTransformer },\n  );\n\n  resolveRelations(groups, users, userMemberOf, groupMemberOf, groupMember);\n  users.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n  groups.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n\n  return { users, groups };\n}\n\n//\n// Helpers\n//\n\n// Maps a multi-valued attribute of references to other objects, to a consumer\nfunction mapReferencesAttr(\n  entry: Entry,\n  vendor: LdapVendor,\n  attributeName: string | undefined | null,\n  setter: (sourceDn: string, targets: string[]) => void,\n) {\n  if (attributeName) {\n    const values = vendor.decodeStringAttribute(entry, attributeName);\n    const dn = vendor.decodeStringAttribute(entry, vendor.dnAttributeName);\n    if (values && dn && dn.length === 1) {\n      setter(dn[0], values);\n    }\n  }\n}\n\n// Inserts a number of values in a key-values mapping\nfunction ensureItems(\n  target: Map<string, Set<string>>,\n  key: string,\n  values: string[],\n) {\n  if (key) {\n    let set = target.get(key);\n    if (!set) {\n      set = new Set();\n      target.set(key, set);\n    }\n    for (const value of values) {\n      if (value) {\n        set!.add(value);\n      }\n    }\n  }\n}\n\n/**\n * Helper function which dual searches the user/group maps first for original value, then for lowercased value.\n * @param map - The map of DN's user or group as the key usually multicased.\n * @param searchValue - The DN/memberOf search criteria which could potentially not match the map DN by case.\n * @returns The value/result of the search criteria dual searching.\n */\nfunction getValueFromMapWithInsensitiveKey(\n  map: Map<string, any>,\n  searchValue: string,\n) {\n  const result = map.get(searchValue);\n  return result ? result : map.get(searchValue.toLowerCase());\n}\n\n/**\n * Takes groups and entities with empty relations, and fills in the various\n * relations that were returned by the readers, and forms the org hierarchy.\n *\n * @param groups - Group entities with empty relations; modified in place\n * @param users - User entities with empty relations; modified in place\n * @param userMemberOf - For a user DN, the set of group DNs or UUIDs that the\n *        user is a member of\n * @param groupMemberOf - For a group DN, the set of group DNs or UUIDs that\n *        the group is a member of (parents in the hierarchy)\n * @param groupMember - For a group DN, the set of group DNs or UUIDs that are\n *        members of the group (children in the hierarchy)\n */\nexport function resolveRelations(\n  groups: GroupEntity[],\n  users: UserEntity[],\n  userMemberOf: Map<string, Set<string>>,\n  groupMemberOf: Map<string, Set<string>>,\n  groupMember: Map<string, Set<string>>,\n) {\n  // Build reference lookup tables - all of the relations that are output from\n  // the above calls can be expressed as either DNs or UUIDs so we need to be\n  // able to find by both, as well as the entity reference. Note that we expect them to not\n  // collide here - this is a reasonable assumption as long as the fields are\n  // the supported forms.\n  const userMap: Map<string, UserEntity> = new Map(); // by entityRef, dn, uuid\n  const groupMap: Map<string, GroupEntity> = new Map(); // by entityRef, dn, uuid\n  for (const user of users) {\n    userMap.set(stringifyEntityRef(user), user);\n    userMap.set(user.metadata.annotations![LDAP_DN_ANNOTATION], user);\n    userMap.set(\n      user.metadata.annotations![LDAP_DN_ANNOTATION]?.toLowerCase(),\n      user,\n    );\n    userMap.set(user.metadata.annotations![LDAP_RDN_ANNOTATION], user);\n    userMap.set(user.metadata.annotations![LDAP_UUID_ANNOTATION], user);\n  }\n  for (const group of groups) {\n    groupMap.set(stringifyEntityRef(group), group);\n    groupMap.set(group.metadata.annotations![LDAP_DN_ANNOTATION], group);\n    groupMap.set(\n      group.metadata.annotations![LDAP_DN_ANNOTATION]?.toLowerCase(),\n      group,\n    );\n    groupMap.set(group.metadata.annotations![LDAP_RDN_ANNOTATION], group);\n    groupMap.set(group.metadata.annotations![LDAP_UUID_ANNOTATION], group);\n  }\n\n  // This can happen e.g. if entryUUID wasn't returned by the server\n  userMap.delete('');\n  groupMap.delete('');\n  userMap.delete(undefined!);\n  groupMap.delete(undefined!);\n\n  // Fill in all of the immediate relations, now keyed on the entity reference. We\n  // keep all parents at this point, whether the target model can support more\n  // than one or not (it gets filtered farther down). And group children are\n  // only groups in here.\n  const newUserMemberOf: Map<string, Set<string>> = new Map();\n  const newGroupParents: Map<string, Set<string>> = new Map();\n  const newGroupChildren: Map<string, Set<string>> = new Map();\n\n  // Resolve and store in the intermediaries. It may seem redundant that the\n  // input data has both parent and children directions, as well as both\n  // user->group and group->user - the reason is that different LDAP schemas\n  // express relations in different directions. Some may have a user memberOf\n  // overlay, some don't, for example.\n  for (const [userN, groupsN] of userMemberOf.entries()) {\n    const user = getValueFromMapWithInsensitiveKey(userMap, userN);\n    if (user) {\n      for (const groupN of groupsN) {\n        const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);\n        if (group) {\n          ensureItems(newUserMemberOf, stringifyEntityRef(user), [\n            stringifyEntityRef(group),\n          ]);\n        }\n      }\n    }\n  }\n  for (const [groupN, parentsN] of groupMemberOf.entries()) {\n    const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);\n    if (group) {\n      for (const parentN of parentsN) {\n        const parentGroup = getValueFromMapWithInsensitiveKey(\n          groupMap,\n          parentN,\n        );\n        if (parentGroup) {\n          ensureItems(newGroupParents, stringifyEntityRef(group), [\n            stringifyEntityRef(parentGroup),\n          ]);\n          ensureItems(newGroupChildren, stringifyEntityRef(parentGroup), [\n            stringifyEntityRef(group),\n          ]);\n        }\n      }\n    }\n  }\n  for (const [groupN, membersN] of groupMember.entries()) {\n    const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);\n    if (group) {\n      for (const memberN of membersN) {\n        // Group members can be both users and groups in the input model, so\n        // try both\n        const memberUser = getValueFromMapWithInsensitiveKey(userMap, memberN);\n        if (memberUser) {\n          ensureItems(newUserMemberOf, stringifyEntityRef(memberUser), [\n            stringifyEntityRef(group),\n          ]);\n        } else {\n          const memberGroup = getValueFromMapWithInsensitiveKey(\n            groupMap,\n            memberN,\n          );\n          if (memberGroup) {\n            ensureItems(newGroupChildren, stringifyEntityRef(group), [\n              stringifyEntityRef(memberGroup),\n            ]);\n            ensureItems(newGroupParents, stringifyEntityRef(memberGroup), [\n              stringifyEntityRef(group),\n            ]);\n          }\n        }\n      }\n    }\n  }\n\n  // Write down the relations again into the actual entities\n  for (const [userN, groupsN] of newUserMemberOf.entries()) {\n    const user = getValueFromMapWithInsensitiveKey(userMap, userN);\n    if (user) {\n      user.spec.memberOf = Array.from(groupsN).sort();\n    }\n  }\n  for (const [groupN, parentsN] of newGroupParents.entries()) {\n    if (parentsN.size === 1) {\n      const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);\n      if (group) {\n        group.spec.parent = parentsN.values().next().value;\n      }\n    }\n  }\n  for (const [groupN, childrenN] of newGroupChildren.entries()) {\n    const group = getValueFromMapWithInsensitiveKey(groupMap, groupN);\n    if (group) {\n      group.spec.children = Array.from(childrenN).sort();\n    }\n  }\n\n  // Fill out the rest of the hierarchy\n  buildOrgHierarchy(groups);\n}\n"],"names":["lodashSet","cloneDeep","mapStringAttr","InputError","LDAP_RDN_ANNOTATION","LDAP_UUID_ANNOTATION","LDAP_DN_ANNOTATION","stringifyEntityRef","buildOrgHierarchy"],"mappings":";;;;;;;;;;;;;;;AA4CA,eAAsB,sBAAA,CACpB,MAAA,EACA,MAAA,EACA,KAAA,EACiC;AACjC,EAAA,MAAM,EAAE,GAAA,EAAK,GAAA,EAAI,GAAI,MAAA;AAErB,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,UAAA,EAAY,sBAAA;AAAA,IACZ,IAAA,EAAM,MAAA;AAAA,IACN,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,EAAA;AAAA,MACN,aAAa;AAAC,KAChB;AAAA,IACA,IAAA,EAAM;AAAA,MACJ,SAAS,EAAC;AAAA,MACV,UAAU;AAAC;AACb,GACF;AAEA,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC/C,MAAAA,0BAAA,CAAU,MAAA,EAAQ,IAAA,EAAMC,0BAAA,CAAU,KAAK,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAEA,EAAAC,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,IAAA,EAAM,CAAA,CAAA,KAAK;AAC1C,IAAA,MAAA,CAAO,SAAS,IAAA,GAAO,CAAA;AAAA,EACzB,CAAC,CAAA;AAED,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,IAAA,EAAM;AACzB,IAAA,MAAM,IAAIC,iBAAA;AAAA,MACR,CAAA,8BAAA,EAAiC,IAAI,IAAI,CAAA,2FAAA;AAAA,KAC3C;AAAA,EACF;AAEA,EAAAD,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,SAAS,WAAA,GAAc,CAAA;AAAA,EAChC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,GAAA,EAAK,CAAA,CAAA,KAAK;AACzC,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaE,6BAAmB,CAAA,GAAI,CAAA;AAAA,EACtD,CAAC,CAAA;AACD,EAAAF,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,CAAA,CAAA,KAAK;AAC1D,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaG,8BAAoB,CAAA,GAAI,CAAA;AAAA,EACvD,CAAC,CAAA;AACD,EAAAH,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,eAAA,EAAiB,CAAA,CAAA,KAAK;AACxD,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaI,4BAAkB,CAAA,GAAI,CAAA;AAAA,EACrD,CAAC,CAAA;AACD,EAAAJ,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,WAAA,GAAc,CAAA;AAAA,EACrC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,KAAA,EAAO,CAAA,CAAA,KAAK;AAC3C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,KAAA,GAAQ,CAAA;AAAA,EAC/B,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,OAAA,EAAS,CAAA,CAAA,KAAK;AAC7C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,OAAA,GAAU,CAAA;AAAA,EACjC,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;AASA,eAAsB,aAAA,CACpB,MAAA,EACA,UAAA,EACA,YAAA,EACA,IAAA,EAIC;AACD,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAO,EAAE,KAAA,EAAO,IAAI,YAAA,kBAAc,IAAI,KAAI,EAAE;AAAA,EAC9C;AACA,EAAA,MAAM,WAAyB,EAAC;AAChC,EAAA,MAAM,YAAA,uBAA6C,GAAA,EAAI;AACvD,EAAA,MAAM,cAAA,GAAiB,MAAM,MAAA,CAAO,SAAA,EAAU;AAC9C,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,eAAA,EACE,YAAA,EAAc,eAAA,IAAmB,cAAA,CAAe,eAAA;AAAA,IAClD,iBAAA,EACE,YAAA,EAAc,iBAAA,IAAqB,cAAA,CAAe,iBAAA;AAAA,IACpD,uBAAuB,cAAA,CAAe;AAAA,GACxC;AACA,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,IAAe,sBAAA;AAEzC,EAAA,KAAA,MAAW,OAAO,UAAA,EAAY;AAC5B,IAAA,MAAM,EAAE,EAAA,EAAI,OAAA,EAAS,GAAA,EAAI,GAAI,GAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,OAAO,CAAA;AACpD,IAAA,KAAA,MAAW,KAAA,IAAS,aAAa,aAAA,EAAe;AAC9C,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAK,KAAK,CAAA;AAEnD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA;AAAA,MACF;AAEA,MAAA,iBAAA,CAAkB,OAAO,MAAA,EAAQ,GAAA,CAAI,QAAA,EAAU,CAAC,MAAM,EAAA,KAAO;AAC3D,QAAA,WAAA,CAAY,YAAA,EAAc,MAAM,EAAE,CAAA;AAAA,MACpC,CAAC,CAAA;AAED,MAAA,QAAA,CAAS,KAAK,MAAM,CAAA;AAAA,IACtB;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,KAAA,EAAO,QAAA,EAAU,YAAA,EAAa;AACzC;AAQA,eAAsB,uBAAA,CACpB,MAAA,EACA,MAAA,EACA,KAAA,EACkC;AAClC,EAAA,MAAM,EAAE,GAAA,EAAK,GAAA,EAAI,GAAI,MAAA;AACrB,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,UAAA,EAAY,sBAAA;AAAA,IACZ,IAAA,EAAM,OAAA;AAAA,IACN,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,EAAA;AAAA,MACN,aAAa;AAAC,KAChB;AAAA,IACA,IAAA,EAAM;AAAA,MACJ,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,EAAC;AAAA,MACV,UAAU;AAAC;AACb,GACF;AAEA,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC/C,MAAAF,0BAAA,CAAU,MAAA,EAAQ,IAAA,EAAMC,0BAAA,CAAU,KAAK,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAEA,EAAAC,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,IAAA,EAAM,CAAA,CAAA,KAAK;AAC1C,IAAA,MAAA,CAAO,SAAS,IAAA,GAAO,CAAA;AAAA,EACzB,CAAC,CAAA;AAED,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,IAAA,EAAM;AACzB,IAAA,MAAM,IAAIC,iBAAA;AAAA,MACR,CAAA,+BAAA,EAAkC,IAAI,IAAI,CAAA,6FAAA;AAAA,KAC5C;AAAA,EACF;AAEA,EAAAD,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,SAAS,WAAA,GAAc,CAAA;AAAA,EAChC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,GAAA,EAAK,CAAA,CAAA,KAAK;AACzC,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaE,6BAAmB,CAAA,GAAI,CAAA;AAAA,EACtD,CAAC,CAAA;AACD,EAAAF,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,CAAA,CAAA,KAAK;AAC1D,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaG,8BAAoB,CAAA,GAAI,CAAA;AAAA,EACvD,CAAC,CAAA;AACD,EAAAH,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,eAAA,EAAiB,CAAA,CAAA,KAAK;AACxD,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaI,4BAAkB,CAAA,GAAI,CAAA;AAAA,EACrD,CAAC,CAAA;AACD,EAAAJ,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,IAAA,EAAM,CAAA,CAAA,KAAK;AAC1C,IAAA,MAAA,CAAO,KAAK,IAAA,GAAO,CAAA;AAAA,EACrB,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,WAAA,GAAc,CAAA;AAAA,EACrC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,KAAA,EAAO,CAAA,CAAA,KAAK;AAC3C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,KAAA,GAAQ,CAAA;AAAA,EAC/B,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,OAAA,EAAS,CAAA,CAAA,KAAK;AAC7C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,OAAA,GAAU,CAAA;AAAA,EACjC,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;AASA,eAAsB,cAAA,CACpB,MAAA,EACA,WAAA,EACA,YAAA,EACA,IAAA,EAOC;AACD,EAAA,IAAI,WAAA,CAAY,WAAW,CAAA,EAAG;AAC5B,IAAA,OAAO,EAAE,MAAA,EAAQ,EAAC,EAAG,aAAA,kBAAe,IAAI,GAAA,EAAI,EAAG,WAAA,kBAAa,IAAI,GAAA,EAAI,EAAE;AAAA,EACxE;AACA,EAAA,MAAM,SAAwB,EAAC;AAC/B,EAAA,MAAM,aAAA,uBAA8C,GAAA,EAAI;AACxD,EAAA,MAAM,WAAA,uBAA4C,GAAA,EAAI;AAEtD,EAAA,MAAM,cAAA,GAAiB,MAAM,MAAA,CAAO,SAAA,EAAU;AAC9C,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,eAAA,EACE,YAAA,EAAc,eAAA,IAAmB,cAAA,CAAe,eAAA;AAAA,IAClD,iBAAA,EACE,YAAA,EAAc,iBAAA,IAAqB,cAAA,CAAe,iBAAA;AAAA,IACpD,uBAAuB,cAAA,CAAe;AAAA,GACxC;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,IAAe,uBAAA;AAEzC,EAAA,KAAA,MAAW,OAAO,WAAA,EAAa;AAC7B,IAAA,MAAM,EAAE,EAAA,EAAI,GAAA,EAAK,OAAA,EAAQ,GAAI,GAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,OAAO,CAAA;AACpD,IAAA,KAAA,MAAW,KAAA,IAAS,aAAa,aAAA,EAAe;AAC9C,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAK,KAAK,CAAA;AAEnD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA;AAAA,MACF;AAEA,MAAA,iBAAA,CAAkB,OAAO,MAAA,EAAQ,GAAA,CAAI,QAAA,EAAU,CAAC,MAAM,EAAA,KAAO;AAC3D,QAAA,WAAA,CAAY,aAAA,EAAe,MAAM,EAAE,CAAA;AAAA,MACrC,CAAC,CAAA;AAED,MAAA,iBAAA,CAAkB,OAAO,MAAA,EAAQ,GAAA,CAAI,OAAA,EAAS,CAAC,MAAM,EAAA,KAAO;AAC1D,QAAA,WAAA,CAAY,WAAA,EAAa,MAAM,EAAE,CAAA;AAAA,MACnC,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,KAAK,MAAM,CAAA;AAAA,IACpB;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AACF;AAYA,eAAsB,WAAA,CACpB,MAAA,EACA,UAAA,EACA,WAAA,EACA,cACA,OAAA,EAQC;AAID,EAAA,MAAM,EAAE,KAAA,EAAO,YAAA,EAAa,GAAI,MAAM,aAAA;AAAA,IACpC,MAAA;AAAA,IACA,UAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,MACE,aAAa,OAAA,EAAS;AAAA;AACxB,GACF;AACA,EAAA,MAAM,EAAE,MAAA,EAAQ,aAAA,EAAe,WAAA,KAAgB,MAAM,cAAA;AAAA,IACnD,MAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,EAAE,WAAA,EAAa,OAAA,EAAS,gBAAA;AAAiB,GAC3C;AAEA,EAAA,gBAAA,CAAiB,MAAA,EAAQ,KAAA,EAAO,YAAA,EAAc,aAAA,EAAe,WAAW,CAAA;AACxE,EAAA,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AACnE,EAAA,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AAEpE,EAAA,OAAO,EAAE,OAAO,MAAA,EAAO;AACzB;AAOA,SAAS,iBAAA,CACP,KAAA,EACA,MAAA,EACA,aAAA,EACA,MAAA,EACA;AACA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,qBAAA,CAAsB,KAAA,EAAO,aAAa,CAAA;AAChE,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,eAAe,CAAA;AACrE,IAAA,IAAI,MAAA,IAAU,EAAA,IAAM,EAAA,CAAG,MAAA,KAAW,CAAA,EAAG;AACnC,MAAA,MAAA,CAAO,EAAA,CAAG,CAAC,CAAA,EAAG,MAAM,CAAA;AAAA,IACtB;AAAA,EACF;AACF;AAGA,SAAS,WAAA,CACP,MAAA,EACA,GAAA,EACA,MAAA,EACA;AACA,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AACxB,IAAA,IAAI,CAAC,GAAA,EAAK;AACR,MAAA,GAAA,uBAAU,GAAA,EAAI;AACd,MAAA,MAAA,CAAO,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,IACrB;AACA,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,GAAA,CAAK,IAAI,KAAK,CAAA;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;AAQA,SAAS,iCAAA,CACP,KACA,WAAA,EACA;AACA,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,GAAA,CAAI,WAAW,CAAA;AAClC,EAAA,OAAO,SAAS,MAAA,GAAS,GAAA,CAAI,GAAA,CAAI,WAAA,CAAY,aAAa,CAAA;AAC5D;AAeO,SAAS,gBAAA,CACd,MAAA,EACA,KAAA,EACA,YAAA,EACA,eACA,WAAA,EACA;AAMA,EAAA,MAAM,OAAA,uBAAuC,GAAA,EAAI;AACjD,EAAA,MAAM,QAAA,uBAAyC,GAAA,EAAI;AACnD,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,OAAA,CAAQ,GAAA,CAAIK,+BAAA,CAAmB,IAAI,CAAA,EAAG,IAAI,CAAA;AAC1C,IAAA,OAAA,CAAQ,IAAI,IAAA,CAAK,QAAA,CAAS,WAAA,CAAaD,4BAAkB,GAAG,IAAI,CAAA;AAChE,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,IAAA,CAAK,QAAA,CAAS,WAAA,CAAaA,4BAAkB,GAAG,WAAA,EAAY;AAAA,MAC5D;AAAA,KACF;AACA,IAAA,OAAA,CAAQ,IAAI,IAAA,CAAK,QAAA,CAAS,WAAA,CAAaF,6BAAmB,GAAG,IAAI,CAAA;AACjE,IAAA,OAAA,CAAQ,IAAI,IAAA,CAAK,QAAA,CAAS,WAAA,CAAaC,8BAAoB,GAAG,IAAI,CAAA;AAAA,EACpE;AACA,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,QAAA,CAAS,GAAA,CAAIE,+BAAA,CAAmB,KAAK,CAAA,EAAG,KAAK,CAAA;AAC7C,IAAA,QAAA,CAAS,IAAI,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaD,4BAAkB,GAAG,KAAK,CAAA;AACnE,IAAA,QAAA,CAAS,GAAA;AAAA,MACP,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaA,4BAAkB,GAAG,WAAA,EAAY;AAAA,MAC7D;AAAA,KACF;AACA,IAAA,QAAA,CAAS,IAAI,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaF,6BAAmB,GAAG,KAAK,CAAA;AACpE,IAAA,QAAA,CAAS,IAAI,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaC,8BAAoB,GAAG,KAAK,CAAA;AAAA,EACvE;AAGA,EAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AACjB,EAAA,QAAA,CAAS,OAAO,EAAE,CAAA;AAClB,EAAA,OAAA,CAAQ,OAAO,MAAU,CAAA;AACzB,EAAA,QAAA,CAAS,OAAO,MAAU,CAAA;AAM1B,EAAA,MAAM,eAAA,uBAAgD,GAAA,EAAI;AAC1D,EAAA,MAAM,eAAA,uBAAgD,GAAA,EAAI;AAC1D,EAAA,MAAM,gBAAA,uBAAiD,GAAA,EAAI;AAO3D,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,CAAA,IAAK,YAAA,CAAa,SAAQ,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,iCAAA,CAAkC,OAAA,EAAS,KAAK,CAAA;AAC7D,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,QAAA,MAAM,KAAA,GAAQ,iCAAA,CAAkC,QAAA,EAAU,MAAM,CAAA;AAChE,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,WAAA,CAAY,eAAA,EAAiBE,+BAAA,CAAmB,IAAI,CAAA,EAAG;AAAA,YACrDA,gCAAmB,KAAK;AAAA,WACzB,CAAA;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,QAAQ,CAAA,IAAK,aAAA,CAAc,SAAQ,EAAG;AACxD,IAAA,MAAM,KAAA,GAAQ,iCAAA,CAAkC,QAAA,EAAU,MAAM,CAAA;AAChE,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,QAAA,MAAM,WAAA,GAAc,iCAAA;AAAA,UAClB,QAAA;AAAA,UACA;AAAA,SACF;AACA,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,WAAA,CAAY,eAAA,EAAiBA,+BAAA,CAAmB,KAAK,CAAA,EAAG;AAAA,YACtDA,gCAAmB,WAAW;AAAA,WAC/B,CAAA;AACD,UAAA,WAAA,CAAY,gBAAA,EAAkBA,+BAAA,CAAmB,WAAW,CAAA,EAAG;AAAA,YAC7DA,gCAAmB,KAAK;AAAA,WACzB,CAAA;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,QAAQ,CAAA,IAAK,WAAA,CAAY,SAAQ,EAAG;AACtD,IAAA,MAAM,KAAA,GAAQ,iCAAA,CAAkC,QAAA,EAAU,MAAM,CAAA;AAChE,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAG9B,QAAA,MAAM,UAAA,GAAa,iCAAA,CAAkC,OAAA,EAAS,OAAO,CAAA;AACrE,QAAA,IAAI,UAAA,EAAY;AACd,UAAA,WAAA,CAAY,eAAA,EAAiBA,+BAAA,CAAmB,UAAU,CAAA,EAAG;AAAA,YAC3DA,gCAAmB,KAAK;AAAA,WACzB,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,MAAM,WAAA,GAAc,iCAAA;AAAA,YAClB,QAAA;AAAA,YACA;AAAA,WACF;AACA,UAAA,IAAI,WAAA,EAAa;AACf,YAAA,WAAA,CAAY,gBAAA,EAAkBA,+BAAA,CAAmB,KAAK,CAAA,EAAG;AAAA,cACvDA,gCAAmB,WAAW;AAAA,aAC/B,CAAA;AACD,YAAA,WAAA,CAAY,eAAA,EAAiBA,+BAAA,CAAmB,WAAW,CAAA,EAAG;AAAA,cAC5DA,gCAAmB,KAAK;AAAA,aACzB,CAAA;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,CAAA,IAAK,eAAA,CAAgB,SAAQ,EAAG;AACxD,IAAA,MAAM,IAAA,GAAO,iCAAA,CAAkC,OAAA,EAAS,KAAK,CAAA;AAC7D,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,IAAA,CAAK,KAAK,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,OAAO,EAAE,IAAA,EAAK;AAAA,IAChD;AAAA,EACF;AACA,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,QAAQ,CAAA,IAAK,eAAA,CAAgB,SAAQ,EAAG;AAC1D,IAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,MAAA,MAAM,KAAA,GAAQ,iCAAA,CAAkC,QAAA,EAAU,MAAM,CAAA;AAChE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,KAAA,CAAM,KAAK,MAAA,GAAS,QAAA,CAAS,MAAA,EAAO,CAAE,MAAK,CAAE,KAAA;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACA,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,gBAAA,CAAiB,SAAQ,EAAG;AAC5D,IAAA,MAAM,KAAA,GAAQ,iCAAA,CAAkC,QAAA,EAAU,MAAM,CAAA;AAChE,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,KAAA,CAAM,KAAK,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,SAAS,EAAE,IAAA,EAAK;AAAA,IACnD;AAAA,EACF;AAGA,EAAAC,qBAAA,CAAkB,MAAM,CAAA;AAC1B;;;;;;;;;"}
+{"version":3,"file":"read.cjs.js","sources":["../../src/ldap/read.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { GroupEntity, UserEntity } from '@backstage/catalog-model';\nimport { Entry } from 'ldapts';\nimport lodashSet from 'lodash/set';\nimport cloneDeep from 'lodash/cloneDeep';\nimport { LdapClient } from './client';\nimport { GroupConfig, UserConfig, VendorConfig } from './config';\nimport {\n  LDAP_DN_ANNOTATION,\n  LDAP_RDN_ANNOTATION,\n  LDAP_UUID_ANNOTATION,\n} from './constants';\nimport { LdapVendor } from './vendors';\nimport { GroupTransformer, UserTransformer } from './types';\nimport { mapStringAttr } from './util';\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { InputError } from '@backstage/errors';\nimport { resolveOrgRelations } from './relations';\n\n/**\n * The default implementation of the transformation from an LDAP entry to a\n * User entity.\n *\n * @public\n */\nexport async function defaultUserTransformer(\n  vendor: LdapVendor,\n  config: UserConfig,\n  entry: Entry,\n): Promise<UserEntity | undefined> {\n  const { set, map } = config;\n\n  const entity: UserEntity = {\n    apiVersion: 'backstage.io/v1beta1',\n    kind: 'User',\n    metadata: {\n      name: '',\n      annotations: {},\n    },\n    spec: {\n      profile: {},\n      memberOf: [],\n    },\n  };\n\n  if (set) {\n    for (const [path, value] of Object.entries(set)) {\n      lodashSet(entity, path, cloneDeep(value));\n    }\n  }\n\n  mapStringAttr(entry, vendor, map.name, v => {\n    entity.metadata.name = v;\n  });\n\n  if (!entity.metadata.name) {\n    throw new InputError(\n      `User syncing failed: missing '${map.name}' attribute, consider applying a user filter to skip processing users with incomplete data.`,\n    );\n  }\n\n  mapStringAttr(entry, vendor, map.description, v => {\n    entity.metadata.description = v;\n  });\n  mapStringAttr(entry, vendor, map.rdn, v => {\n    entity.metadata.annotations![LDAP_RDN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.uuidAttributeName, v => {\n    entity.metadata.annotations![LDAP_UUID_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.dnAttributeName, v => {\n    entity.metadata.annotations![LDAP_DN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, map.displayName, v => {\n    entity.spec.profile!.displayName = v;\n  });\n  mapStringAttr(entry, vendor, map.email, v => {\n    entity.spec.profile!.email = v;\n  });\n  mapStringAttr(entry, vendor, map.picture, v => {\n    entity.spec.profile!.picture = v;\n  });\n\n  return entity;\n}\n\n/**\n * Reads users out of an LDAP provider.\n *\n * @param client - The LDAP client\n * @param config - The user data configuration\n * @param opts - Additional options\n */\nexport async function readLdapUsers(\n  client: LdapClient,\n  userConfig: UserConfig[],\n  vendorConfig: VendorConfig | undefined,\n  opts?: { transformer?: UserTransformer },\n): Promise<{\n  users: UserEntity[]; // With all relations empty\n  userMemberOf: Map<string, Set<string>>; // DN -> DN or UUID of groups\n}> {\n  if (userConfig.length === 0) {\n    return { users: [], userMemberOf: new Map() };\n  }\n  const entities: UserEntity[] = [];\n  const userMemberOf: Map<string, Set<string>> = new Map();\n  const vendorDefaults = await client.getVendor();\n  const vendor: LdapVendor = {\n    dnAttributeName:\n      vendorConfig?.dnAttributeName ?? vendorDefaults.dnAttributeName,\n    uuidAttributeName:\n      vendorConfig?.uuidAttributeName ?? vendorDefaults.uuidAttributeName,\n    decodeStringAttribute: vendorDefaults.decodeStringAttribute,\n  };\n  const transformer = opts?.transformer ?? defaultUserTransformer;\n\n  for (const cfg of userConfig) {\n    const { dn, options, map } = cfg;\n    const searchResult = await client.search(dn, options);\n    for (const entry of searchResult.searchEntries) {\n      const entity = await transformer(vendor, cfg, entry);\n\n      if (!entity) {\n        continue;\n      }\n\n      mapReferencesAttr(entry, vendor, map.memberOf, (myDn, vs) => {\n        ensureItems(userMemberOf, myDn, vs);\n      });\n\n      entities.push(entity);\n    }\n  }\n\n  return { users: entities, userMemberOf };\n}\n\n/**\n * The default implementation of the transformation from an LDAP entry to a\n * Group entity.\n *\n * @public\n */\nexport async function defaultGroupTransformer(\n  vendor: LdapVendor,\n  config: GroupConfig,\n  entry: Entry,\n): Promise<GroupEntity | undefined> {\n  const { set, map } = config;\n  const entity: GroupEntity = {\n    apiVersion: 'backstage.io/v1beta1',\n    kind: 'Group',\n    metadata: {\n      name: '',\n      annotations: {},\n    },\n    spec: {\n      type: 'unknown',\n      profile: {},\n      children: [],\n    },\n  };\n\n  if (set) {\n    for (const [path, value] of Object.entries(set)) {\n      lodashSet(entity, path, cloneDeep(value));\n    }\n  }\n\n  mapStringAttr(entry, vendor, map.name, v => {\n    entity.metadata.name = v;\n  });\n\n  if (!entity.metadata.name) {\n    throw new InputError(\n      `Group syncing failed: missing '${map.name}' attribute, consider applying a group filter to skip processing groups with incomplete data.`,\n    );\n  }\n\n  mapStringAttr(entry, vendor, map.description, v => {\n    entity.metadata.description = v;\n  });\n  mapStringAttr(entry, vendor, map.rdn, v => {\n    entity.metadata.annotations![LDAP_RDN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.uuidAttributeName, v => {\n    entity.metadata.annotations![LDAP_UUID_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, vendor.dnAttributeName, v => {\n    entity.metadata.annotations![LDAP_DN_ANNOTATION] = v;\n  });\n  mapStringAttr(entry, vendor, map.type, v => {\n    entity.spec.type = v;\n  });\n  mapStringAttr(entry, vendor, map.displayName, v => {\n    entity.spec.profile!.displayName = v;\n  });\n  mapStringAttr(entry, vendor, map.email, v => {\n    entity.spec.profile!.email = v;\n  });\n  mapStringAttr(entry, vendor, map.picture, v => {\n    entity.spec.profile!.picture = v;\n  });\n\n  return entity;\n}\n\n/**\n * Reads groups out of an LDAP provider.\n *\n * @param client - The LDAP client\n * @param config - The group data configuration\n * @param opts - Additional options\n */\nexport async function readLdapGroups(\n  client: LdapClient,\n  groupConfig: GroupConfig[],\n  vendorConfig: VendorConfig | undefined,\n  opts?: {\n    transformer?: GroupTransformer;\n  },\n): Promise<{\n  groups: GroupEntity[]; // With all relations empty\n  groupMemberOf: Map<string, Set<string>>; // DN -> DN or UUID of groups\n  groupMember: Map<string, Set<string>>; // DN -> DN or UUID of groups & users\n}> {\n  if (groupConfig.length === 0) {\n    return { groups: [], groupMemberOf: new Map(), groupMember: new Map() };\n  }\n  const groups: GroupEntity[] = [];\n  const groupMemberOf: Map<string, Set<string>> = new Map();\n  const groupMember: Map<string, Set<string>> = new Map();\n\n  const vendorDefaults = await client.getVendor();\n  const vendor: LdapVendor = {\n    dnAttributeName:\n      vendorConfig?.dnAttributeName ?? vendorDefaults.dnAttributeName,\n    uuidAttributeName:\n      vendorConfig?.uuidAttributeName ?? vendorDefaults.uuidAttributeName,\n    decodeStringAttribute: vendorDefaults.decodeStringAttribute,\n  };\n\n  const transformer = opts?.transformer ?? defaultGroupTransformer;\n\n  for (const cfg of groupConfig) {\n    const { dn, map, options } = cfg;\n    const searchResult = await client.search(dn, options);\n    for (const entry of searchResult.searchEntries) {\n      const entity = await transformer(vendor, cfg, entry);\n\n      if (!entity) {\n        continue;\n      }\n\n      mapReferencesAttr(entry, vendor, map.memberOf, (myDn, vs) => {\n        ensureItems(groupMemberOf, myDn, vs);\n      });\n\n      mapReferencesAttr(entry, vendor, map.members, (myDn, vs) => {\n        ensureItems(groupMember, myDn, vs);\n      });\n\n      groups.push(entity);\n    }\n  }\n\n  return {\n    groups,\n    groupMemberOf,\n    groupMember,\n  };\n}\n\n/**\n * Reads users and groups out of an LDAP provider.\n *\n * @param client - The LDAP client\n * @param userConfig - The user data configuration\n * @param groupConfig - The group data configuration\n * @param options - Additional options\n *\n * @public\n */\nexport async function readLdapOrg(\n  client: LdapClient,\n  userConfig: UserConfig[],\n  groupConfig: GroupConfig[],\n  vendorConfig: VendorConfig | undefined,\n  options: {\n    groupTransformer?: GroupTransformer;\n    userTransformer?: UserTransformer;\n    logger: LoggerService;\n  },\n): Promise<{\n  users: UserEntity[];\n  groups: GroupEntity[];\n}> {\n  // Invokes the above \"raw\" read functions and stitches together the results\n  // with all relations etc filled in.\n\n  const { users, userMemberOf } = await readLdapUsers(\n    client,\n    userConfig,\n    vendorConfig,\n    {\n      transformer: options?.userTransformer,\n    },\n  );\n  const { groups, groupMemberOf, groupMember } = await readLdapGroups(\n    client,\n    groupConfig,\n    vendorConfig,\n    { transformer: options?.groupTransformer },\n  );\n\n  await resolveOrgRelations(groups, users, {\n    userMemberOf,\n    groupMemberOf,\n    groupMember,\n  });\n  users.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n  groups.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n\n  return { users, groups };\n}\n\n//\n// Helpers\n//\n\n// Maps a multi-valued attribute of references to other objects, to a consumer\nfunction mapReferencesAttr(\n  entry: Entry,\n  vendor: LdapVendor,\n  attributeName: string | undefined | null,\n  setter: (sourceDn: string, targets: string[]) => void,\n) {\n  if (attributeName) {\n    const values = vendor.decodeStringAttribute(entry, attributeName);\n    const dn = vendor.decodeStringAttribute(entry, vendor.dnAttributeName);\n    if (values && dn && dn.length === 1) {\n      setter(dn[0], values);\n    }\n  }\n}\n\n// Inserts a number of values in a key-values mapping\nfunction ensureItems(\n  target: Map<string, Set<string>>,\n  key: string,\n  values: string[],\n) {\n  if (key) {\n    let set = target.get(key);\n    if (!set) {\n      set = new Set();\n      target.set(key, set);\n    }\n    for (const value of values) {\n      if (value) {\n        set!.add(value);\n      }\n    }\n  }\n}\n"],"names":["lodashSet","cloneDeep","mapStringAttr","InputError","LDAP_RDN_ANNOTATION","LDAP_UUID_ANNOTATION","LDAP_DN_ANNOTATION","resolveOrgRelations"],"mappings":";;;;;;;;;;;;;;AAwCA,eAAsB,sBAAA,CACpB,MAAA,EACA,MAAA,EACA,KAAA,EACiC;AACjC,EAAA,MAAM,EAAE,GAAA,EAAK,GAAA,EAAI,GAAI,MAAA;AAErB,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,UAAA,EAAY,sBAAA;AAAA,IACZ,IAAA,EAAM,MAAA;AAAA,IACN,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,EAAA;AAAA,MACN,aAAa;AAAC,KAChB;AAAA,IACA,IAAA,EAAM;AAAA,MACJ,SAAS,EAAC;AAAA,MACV,UAAU;AAAC;AACb,GACF;AAEA,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC/C,MAAAA,0BAAA,CAAU,MAAA,EAAQ,IAAA,EAAMC,0BAAA,CAAU,KAAK,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAEA,EAAAC,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,IAAA,EAAM,CAAA,CAAA,KAAK;AAC1C,IAAA,MAAA,CAAO,SAAS,IAAA,GAAO,CAAA;AAAA,EACzB,CAAC,CAAA;AAED,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,IAAA,EAAM;AACzB,IAAA,MAAM,IAAIC,iBAAA;AAAA,MACR,CAAA,8BAAA,EAAiC,IAAI,IAAI,CAAA,2FAAA;AAAA,KAC3C;AAAA,EACF;AAEA,EAAAD,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,SAAS,WAAA,GAAc,CAAA;AAAA,EAChC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,GAAA,EAAK,CAAA,CAAA,KAAK;AACzC,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaE,6BAAmB,CAAA,GAAI,CAAA;AAAA,EACtD,CAAC,CAAA;AACD,EAAAF,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,CAAA,CAAA,KAAK;AAC1D,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaG,8BAAoB,CAAA,GAAI,CAAA;AAAA,EACvD,CAAC,CAAA;AACD,EAAAH,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,eAAA,EAAiB,CAAA,CAAA,KAAK;AACxD,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaI,4BAAkB,CAAA,GAAI,CAAA;AAAA,EACrD,CAAC,CAAA;AACD,EAAAJ,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,WAAA,GAAc,CAAA;AAAA,EACrC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,KAAA,EAAO,CAAA,CAAA,KAAK;AAC3C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,KAAA,GAAQ,CAAA;AAAA,EAC/B,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,OAAA,EAAS,CAAA,CAAA,KAAK;AAC7C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,OAAA,GAAU,CAAA;AAAA,EACjC,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;AASA,eAAsB,aAAA,CACpB,MAAA,EACA,UAAA,EACA,YAAA,EACA,IAAA,EAIC;AACD,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAO,EAAE,KAAA,EAAO,IAAI,YAAA,kBAAc,IAAI,KAAI,EAAE;AAAA,EAC9C;AACA,EAAA,MAAM,WAAyB,EAAC;AAChC,EAAA,MAAM,YAAA,uBAA6C,GAAA,EAAI;AACvD,EAAA,MAAM,cAAA,GAAiB,MAAM,MAAA,CAAO,SAAA,EAAU;AAC9C,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,eAAA,EACE,YAAA,EAAc,eAAA,IAAmB,cAAA,CAAe,eAAA;AAAA,IAClD,iBAAA,EACE,YAAA,EAAc,iBAAA,IAAqB,cAAA,CAAe,iBAAA;AAAA,IACpD,uBAAuB,cAAA,CAAe;AAAA,GACxC;AACA,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,IAAe,sBAAA;AAEzC,EAAA,KAAA,MAAW,OAAO,UAAA,EAAY;AAC5B,IAAA,MAAM,EAAE,EAAA,EAAI,OAAA,EAAS,GAAA,EAAI,GAAI,GAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,OAAO,CAAA;AACpD,IAAA,KAAA,MAAW,KAAA,IAAS,aAAa,aAAA,EAAe;AAC9C,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAK,KAAK,CAAA;AAEnD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA;AAAA,MACF;AAEA,MAAA,iBAAA,CAAkB,OAAO,MAAA,EAAQ,GAAA,CAAI,QAAA,EAAU,CAAC,MAAM,EAAA,KAAO;AAC3D,QAAA,WAAA,CAAY,YAAA,EAAc,MAAM,EAAE,CAAA;AAAA,MACpC,CAAC,CAAA;AAED,MAAA,QAAA,CAAS,KAAK,MAAM,CAAA;AAAA,IACtB;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,KAAA,EAAO,QAAA,EAAU,YAAA,EAAa;AACzC;AAQA,eAAsB,uBAAA,CACpB,MAAA,EACA,MAAA,EACA,KAAA,EACkC;AAClC,EAAA,MAAM,EAAE,GAAA,EAAK,GAAA,EAAI,GAAI,MAAA;AACrB,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,UAAA,EAAY,sBAAA;AAAA,IACZ,IAAA,EAAM,OAAA;AAAA,IACN,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,EAAA;AAAA,MACN,aAAa;AAAC,KAChB;AAAA,IACA,IAAA,EAAM;AAAA,MACJ,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,EAAC;AAAA,MACV,UAAU;AAAC;AACb,GACF;AAEA,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC/C,MAAAF,0BAAA,CAAU,MAAA,EAAQ,IAAA,EAAMC,0BAAA,CAAU,KAAK,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAEA,EAAAC,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,IAAA,EAAM,CAAA,CAAA,KAAK;AAC1C,IAAA,MAAA,CAAO,SAAS,IAAA,GAAO,CAAA;AAAA,EACzB,CAAC,CAAA;AAED,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,IAAA,EAAM;AACzB,IAAA,MAAM,IAAIC,iBAAA;AAAA,MACR,CAAA,+BAAA,EAAkC,IAAI,IAAI,CAAA,6FAAA;AAAA,KAC5C;AAAA,EACF;AAEA,EAAAD,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,SAAS,WAAA,GAAc,CAAA;AAAA,EAChC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,GAAA,EAAK,CAAA,CAAA,KAAK;AACzC,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaE,6BAAmB,CAAA,GAAI,CAAA;AAAA,EACtD,CAAC,CAAA;AACD,EAAAF,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,CAAA,CAAA,KAAK;AAC1D,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaG,8BAAoB,CAAA,GAAI,CAAA;AAAA,EACvD,CAAC,CAAA;AACD,EAAAH,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,MAAA,CAAO,eAAA,EAAiB,CAAA,CAAA,KAAK;AACxD,IAAA,MAAA,CAAO,QAAA,CAAS,WAAA,CAAaI,4BAAkB,CAAA,GAAI,CAAA;AAAA,EACrD,CAAC,CAAA;AACD,EAAAJ,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,IAAA,EAAM,CAAA,CAAA,KAAK;AAC1C,IAAA,MAAA,CAAO,KAAK,IAAA,GAAO,CAAA;AAAA,EACrB,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,WAAA,EAAa,CAAA,CAAA,KAAK;AACjD,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,WAAA,GAAc,CAAA;AAAA,EACrC,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,KAAA,EAAO,CAAA,CAAA,KAAK;AAC3C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,KAAA,GAAQ,CAAA;AAAA,EAC/B,CAAC,CAAA;AACD,EAAAA,kBAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,OAAA,EAAS,CAAA,CAAA,KAAK;AAC7C,IAAA,MAAA,CAAO,IAAA,CAAK,QAAS,OAAA,GAAU,CAAA;AAAA,EACjC,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;AASA,eAAsB,cAAA,CACpB,MAAA,EACA,WAAA,EACA,YAAA,EACA,IAAA,EAOC;AACD,EAAA,IAAI,WAAA,CAAY,WAAW,CAAA,EAAG;AAC5B,IAAA,OAAO,EAAE,MAAA,EAAQ,EAAC,EAAG,aAAA,kBAAe,IAAI,GAAA,EAAI,EAAG,WAAA,kBAAa,IAAI,GAAA,EAAI,EAAE;AAAA,EACxE;AACA,EAAA,MAAM,SAAwB,EAAC;AAC/B,EAAA,MAAM,aAAA,uBAA8C,GAAA,EAAI;AACxD,EAAA,MAAM,WAAA,uBAA4C,GAAA,EAAI;AAEtD,EAAA,MAAM,cAAA,GAAiB,MAAM,MAAA,CAAO,SAAA,EAAU;AAC9C,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,eAAA,EACE,YAAA,EAAc,eAAA,IAAmB,cAAA,CAAe,eAAA;AAAA,IAClD,iBAAA,EACE,YAAA,EAAc,iBAAA,IAAqB,cAAA,CAAe,iBAAA;AAAA,IACpD,uBAAuB,cAAA,CAAe;AAAA,GACxC;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,IAAe,uBAAA;AAEzC,EAAA,KAAA,MAAW,OAAO,WAAA,EAAa;AAC7B,IAAA,MAAM,EAAE,EAAA,EAAI,GAAA,EAAK,OAAA,EAAQ,GAAI,GAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,OAAO,CAAA;AACpD,IAAA,KAAA,MAAW,KAAA,IAAS,aAAa,aAAA,EAAe;AAC9C,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAK,KAAK,CAAA;AAEnD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA;AAAA,MACF;AAEA,MAAA,iBAAA,CAAkB,OAAO,MAAA,EAAQ,GAAA,CAAI,QAAA,EAAU,CAAC,MAAM,EAAA,KAAO;AAC3D,QAAA,WAAA,CAAY,aAAA,EAAe,MAAM,EAAE,CAAA;AAAA,MACrC,CAAC,CAAA;AAED,MAAA,iBAAA,CAAkB,OAAO,MAAA,EAAQ,GAAA,CAAI,OAAA,EAAS,CAAC,MAAM,EAAA,KAAO;AAC1D,QAAA,WAAA,CAAY,WAAA,EAAa,MAAM,EAAE,CAAA;AAAA,MACnC,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,KAAK,MAAM,CAAA;AAAA,IACpB;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AACF;AAYA,eAAsB,WAAA,CACpB,MAAA,EACA,UAAA,EACA,WAAA,EACA,cACA,OAAA,EAQC;AAID,EAAA,MAAM,EAAE,KAAA,EAAO,YAAA,EAAa,GAAI,MAAM,aAAA;AAAA,IACpC,MAAA;AAAA,IACA,UAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,MACE,aAAa,OAAA,EAAS;AAAA;AACxB,GACF;AACA,EAAA,MAAM,EAAE,MAAA,EAAQ,aAAA,EAAe,WAAA,KAAgB,MAAM,cAAA;AAAA,IACnD,MAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,EAAE,WAAA,EAAa,OAAA,EAAS,gBAAA;AAAiB,GAC3C;AAEA,EAAA,MAAMK,6BAAA,CAAoB,QAAQ,KAAA,EAAO;AAAA,IACvC,YAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AACnE,EAAA,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AAEpE,EAAA,OAAO,EAAE,OAAO,MAAA,EAAO;AACzB;AAOA,SAAS,iBAAA,CACP,KAAA,EACA,MAAA,EACA,aAAA,EACA,MAAA,EACA;AACA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,qBAAA,CAAsB,KAAA,EAAO,aAAa,CAAA;AAChE,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,eAAe,CAAA;AACrE,IAAA,IAAI,MAAA,IAAU,EAAA,IAAM,EAAA,CAAG,MAAA,KAAW,CAAA,EAAG;AACnC,MAAA,MAAA,CAAO,EAAA,CAAG,CAAC,CAAA,EAAG,MAAM,CAAA;AAAA,IACtB;AAAA,EACF;AACF;AAGA,SAAS,WAAA,CACP,MAAA,EACA,GAAA,EACA,MAAA,EACA;AACA,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AACxB,IAAA,IAAI,CAAC,GAAA,EAAK;AACR,MAAA,GAAA,uBAAU,GAAA,EAAI;AACd,MAAA,MAAA,CAAO,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,IACrB;AACA,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,GAAA,CAAK,IAAI,KAAK,CAAA;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;;;;;;"}

package/dist/ldap/relations.cjs.js

@@ -0,0 +1,182 @@
+'use strict';
+
+var catalogModel = require('@backstage/catalog-model');
+var constants = require('./constants.cjs.js');
+var promises = require('node:timers/promises');
+
+const RELATION_RESOLUTION_BATCH_SIZE = 5e3;
+class WorkCheckpoint {
+  #processed = 0;
+  shouldYield(items = 1) {
+    this.#processed += items;
+    if (this.#processed >= RELATION_RESOLUTION_BATCH_SIZE) {
+      this.#processed -= RELATION_RESOLUTION_BATCH_SIZE;
+      return true;
+    }
+    return false;
+  }
+}
+class EntityIndex {
+  #byRef = /* @__PURE__ */ new Map();
+  #refByAlias = /* @__PURE__ */ new Map();
+  add(entity) {
+    const ref = catalogModel.stringifyEntityRef(entity);
+    this.#byRef.set(ref, entity);
+    const annotations = entity.metadata.annotations;
+    this.#addAlias(ref, ref);
+    this.#addAlias(annotations[constants.LDAP_DN_ANNOTATION], ref);
+    this.#addAlias(annotations[constants.LDAP_DN_ANNOTATION]?.toLowerCase(), ref);
+    this.#addAlias(annotations[constants.LDAP_RDN_ANNOTATION], ref);
+    this.#addAlias(annotations[constants.LDAP_UUID_ANNOTATION], ref);
+    return ref;
+  }
+  resolve(alias) {
+    return this.#refByAlias.get(alias) ?? this.#refByAlias.get(alias.toLowerCase());
+  }
+  get(ref) {
+    return this.#byRef.get(ref);
+  }
+  #addAlias(alias, ref) {
+    if (alias) {
+      this.#refByAlias.set(alias, ref);
+    }
+  }
+}
+function addToSet(map, source, target) {
+  let values = map.get(source);
+  if (!values) {
+    values = /* @__PURE__ */ new Set();
+    map.set(source, values);
+  }
+  values.add(target);
+}
+async function buildGraph(userIndex, groupIndex, relations, checkpoint) {
+  const graph = {
+    userMemberOf: /* @__PURE__ */ new Map(),
+    groupParents: /* @__PURE__ */ new Map(),
+    groupChildren: /* @__PURE__ */ new Map()
+  };
+  for (const [userAlias, groupAliases] of relations.userMemberOf) {
+    const userRef = userIndex.resolve(userAlias);
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+    if (!userRef) {
+      continue;
+    }
+    for (const groupAlias of groupAliases) {
+      const groupRef = groupIndex.resolve(groupAlias);
+      if (groupRef) {
+        addToSet(graph.userMemberOf, userRef, groupRef);
+      }
+      if (checkpoint.shouldYield()) await promises.setImmediate();
+    }
+  }
+  for (const [groupAlias, parentAliases] of relations.groupMemberOf) {
+    const groupRef = groupIndex.resolve(groupAlias);
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+    if (!groupRef) {
+      continue;
+    }
+    for (const parentAlias of parentAliases) {
+      const parentRef = groupIndex.resolve(parentAlias);
+      if (parentRef) {
+        addToSet(graph.groupParents, groupRef, parentRef);
+        addToSet(graph.groupChildren, parentRef, groupRef);
+      }
+      if (checkpoint.shouldYield()) await promises.setImmediate();
+    }
+  }
+  for (const [groupAlias, memberAliases] of relations.groupMember) {
+    const groupRef = groupIndex.resolve(groupAlias);
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+    if (!groupRef) {
+      continue;
+    }
+    for (const memberAlias of memberAliases) {
+      const userRef = userIndex.resolve(memberAlias);
+      if (userRef) {
+        addToSet(graph.userMemberOf, userRef, groupRef);
+        if (checkpoint.shouldYield()) await promises.setImmediate();
+        continue;
+      }
+      const childRef = groupIndex.resolve(memberAlias);
+      if (childRef) {
+        addToSet(graph.groupChildren, groupRef, childRef);
+        addToSet(graph.groupParents, childRef, groupRef);
+      }
+      if (checkpoint.shouldYield()) await promises.setImmediate();
+    }
+  }
+  return graph;
+}
+async function resolveOrgRelations(groups, users, relations) {
+  const checkpoint = new WorkCheckpoint();
+  const userIndex = new EntityIndex();
+  const groupIndex = new EntityIndex();
+  for (const user of users) {
+    userIndex.add(user);
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+  }
+  const indexedGroups = [];
+  for (const group of groups) {
+    indexedGroups.push({ group, ref: groupIndex.add(group) });
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+  }
+  const graph = await buildGraph(userIndex, groupIndex, relations, checkpoint);
+  const plannedUserMemberOf = /* @__PURE__ */ new Map();
+  for (const [userRef, groupRefs] of graph.userMemberOf) {
+    const user = userIndex.get(userRef);
+    if (user) {
+      plannedUserMemberOf.set(user, [...groupRefs].sort());
+    }
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+  }
+  const plannedGroups = [];
+  const plannedGroupsByRef = /* @__PURE__ */ new Map();
+  for (const { group, ref } of indexedGroups) {
+    const isIndexedEntity = groupIndex.get(ref) === group;
+    const parents = isIndexedEntity ? graph.groupParents.get(ref) : void 0;
+    const children = isIndexedEntity ? graph.groupChildren.get(ref) : void 0;
+    const planned = {
+      group,
+      ref,
+      parent: parents?.size === 1 ? parents.values().next().value : group.spec.parent,
+      children: children ? [...children].sort() : [...group.spec.children],
+      childSet: new Set(children ?? group.spec.children)
+    };
+    plannedGroups.push(planned);
+    plannedGroupsByRef.set(ref, planned);
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+  }
+  for (const planned of plannedGroups) {
+    const parentRef = planned.parent;
+    if (parentRef) {
+      const parent = plannedGroupsByRef.get(parentRef);
+      if (parent && !parent.childSet.has(planned.ref)) {
+        parent.children.push(planned.ref);
+        parent.childSet.add(planned.ref);
+      }
+    }
+    if (checkpoint.shouldYield()) await promises.setImmediate();
+  }
+  for (const planned of plannedGroups) {
+    for (const childRef of planned.children) {
+      const child = plannedGroupsByRef.get(childRef);
+      if (child && !child.parent) {
+        child.parent = planned.ref;
+      }
+      if (checkpoint.shouldYield()) await promises.setImmediate();
+    }
+  }
+  for (const [user, memberOf] of plannedUserMemberOf) {
+    user.spec.memberOf = memberOf;
+  }
+  for (const planned of plannedGroups) {
+    if (planned.parent) {
+      planned.group.spec.parent = planned.parent;
+    }
+    planned.group.spec.children = planned.children;
+  }
+}
+
+exports.resolveOrgRelations = resolveOrgRelations;
+//# sourceMappingURL=relations.cjs.js.map

package/dist/ldap/relations.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations.cjs.js","sources":["../../src/ldap/relations.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  GroupEntity,\n  stringifyEntityRef,\n  UserEntity,\n} from '@backstage/catalog-model';\nimport {\n  LDAP_DN_ANNOTATION,\n  LDAP_RDN_ANNOTATION,\n  LDAP_UUID_ANNOTATION,\n} from './constants';\nimport { setImmediate } from 'node:timers/promises';\n\nconst RELATION_RESOLUTION_BATCH_SIZE = 5_000;\n\nexport type RawLdapRelations = {\n  userMemberOf: ReadonlyMap<string, ReadonlySet<string>>;\n  groupMemberOf: ReadonlyMap<string, ReadonlySet<string>>;\n  groupMember: ReadonlyMap<string, ReadonlySet<string>>;\n};\n\ntype OrgEntity = UserEntity | GroupEntity;\n\nclass WorkCheckpoint {\n  #processed = 0;\n\n  shouldYield(items = 1): boolean {\n    this.#processed += items;\n    if (this.#processed >= RELATION_RESOLUTION_BATCH_SIZE) {\n      this.#processed -= RELATION_RESOLUTION_BATCH_SIZE;\n      return true;\n    }\n    return false;\n  }\n}\n\nclass EntityIndex<T extends OrgEntity> {\n  readonly #byRef = new Map<string, T>();\n  readonly #refByAlias = new Map<string, string>();\n\n  add(entity: T): string {\n    const ref = stringifyEntityRef(entity);\n    this.#byRef.set(ref, entity);\n\n    const annotations = entity.metadata.annotations!;\n    this.#addAlias(ref, ref);\n    this.#addAlias(annotations[LDAP_DN_ANNOTATION], ref);\n    this.#addAlias(annotations[LDAP_DN_ANNOTATION]?.toLowerCase(), ref);\n    this.#addAlias(annotations[LDAP_RDN_ANNOTATION], ref);\n    this.#addAlias(annotations[LDAP_UUID_ANNOTATION], ref);\n    return ref;\n  }\n\n  resolve(alias: string): string | undefined {\n    return (\n      this.#refByAlias.get(alias) ?? this.#refByAlias.get(alias.toLowerCase())\n    );\n  }\n\n  get(ref: string): T | undefined {\n    return this.#byRef.get(ref);\n  }\n\n  #addAlias(alias: string | undefined, ref: string): void {\n    if (alias) {\n      this.#refByAlias.set(alias, ref);\n    }\n  }\n}\n\ntype OrgRelationGraph = {\n  userMemberOf: Map<string, Set<string>>;\n  groupParents: Map<string, Set<string>>;\n  groupChildren: Map<string, Set<string>>;\n};\n\ntype PlannedGroupRelations = {\n  group: GroupEntity;\n  ref: string;\n  parent: string | undefined;\n  children: string[];\n  childSet: Set<string>;\n};\n\nfunction addToSet(\n  map: Map<string, Set<string>>,\n  source: string,\n  target: string,\n): void {\n  let values = map.get(source);\n  if (!values) {\n    values = new Set();\n    map.set(source, values);\n  }\n  values.add(target);\n}\n\nasync function buildGraph(\n  userIndex: EntityIndex<UserEntity>,\n  groupIndex: EntityIndex<GroupEntity>,\n  relations: RawLdapRelations,\n  checkpoint: WorkCheckpoint,\n): Promise<OrgRelationGraph> {\n  const graph: OrgRelationGraph = {\n    userMemberOf: new Map(),\n    groupParents: new Map(),\n    groupChildren: new Map(),\n  };\n\n  for (const [userAlias, groupAliases] of relations.userMemberOf) {\n    const userRef = userIndex.resolve(userAlias);\n    if (checkpoint.shouldYield()) await setImmediate();\n    if (!userRef) {\n      continue;\n    }\n    for (const groupAlias of groupAliases) {\n      const groupRef = groupIndex.resolve(groupAlias);\n      if (groupRef) {\n        addToSet(graph.userMemberOf, userRef, groupRef);\n      }\n      if (checkpoint.shouldYield()) await setImmediate();\n    }\n  }\n\n  for (const [groupAlias, parentAliases] of relations.groupMemberOf) {\n    const groupRef = groupIndex.resolve(groupAlias);\n    if (checkpoint.shouldYield()) await setImmediate();\n    if (!groupRef) {\n      continue;\n    }\n    for (const parentAlias of parentAliases) {\n      const parentRef = groupIndex.resolve(parentAlias);\n      if (parentRef) {\n        addToSet(graph.groupParents, groupRef, parentRef);\n        addToSet(graph.groupChildren, parentRef, groupRef);\n      }\n      if (checkpoint.shouldYield()) await setImmediate();\n    }\n  }\n\n  for (const [groupAlias, memberAliases] of relations.groupMember) {\n    const groupRef = groupIndex.resolve(groupAlias);\n    if (checkpoint.shouldYield()) await setImmediate();\n    if (!groupRef) {\n      continue;\n    }\n    for (const memberAlias of memberAliases) {\n      const userRef = userIndex.resolve(memberAlias);\n      if (userRef) {\n        addToSet(graph.userMemberOf, userRef, groupRef);\n        if (checkpoint.shouldYield()) await setImmediate();\n        continue;\n      }\n\n      const childRef = groupIndex.resolve(memberAlias);\n      if (childRef) {\n        addToSet(graph.groupChildren, groupRef, childRef);\n        addToSet(graph.groupParents, childRef, groupRef);\n      }\n      if (checkpoint.shouldYield()) await setImmediate();\n    }\n  }\n\n  return graph;\n}\n\nexport async function resolveOrgRelations(\n  groups: GroupEntity[],\n  users: UserEntity[],\n  relations: RawLdapRelations,\n): Promise<void> {\n  const checkpoint = new WorkCheckpoint();\n  const userIndex = new EntityIndex<UserEntity>();\n  const groupIndex = new EntityIndex<GroupEntity>();\n  for (const user of users) {\n    userIndex.add(user);\n    if (checkpoint.shouldYield()) await setImmediate();\n  }\n  const indexedGroups: Array<{ group: GroupEntity; ref: string }> = [];\n  for (const group of groups) {\n    indexedGroups.push({ group, ref: groupIndex.add(group) });\n    if (checkpoint.shouldYield()) await setImmediate();\n  }\n\n  const graph = await buildGraph(userIndex, groupIndex, relations, checkpoint);\n  const plannedUserMemberOf = new Map<UserEntity, string[]>();\n  for (const [userRef, groupRefs] of graph.userMemberOf) {\n    const user = userIndex.get(userRef);\n    if (user) {\n      plannedUserMemberOf.set(user, [...groupRefs].sort());\n    }\n    if (checkpoint.shouldYield()) await setImmediate();\n  }\n\n  const plannedGroups: PlannedGroupRelations[] = [];\n  const plannedGroupsByRef = new Map<string, PlannedGroupRelations>();\n  for (const { group, ref } of indexedGroups) {\n    const isIndexedEntity = groupIndex.get(ref) === group;\n    const parents = isIndexedEntity ? graph.groupParents.get(ref) : undefined;\n    const children = isIndexedEntity ? graph.groupChildren.get(ref) : undefined;\n    const planned = {\n      group,\n      ref,\n      parent:\n        parents?.size === 1 ? parents.values().next().value : group.spec.parent,\n      children: children ? [...children].sort() : [...group.spec.children],\n      childSet: new Set(children ?? group.spec.children),\n    };\n    plannedGroups.push(planned);\n    plannedGroupsByRef.set(ref, planned);\n    if (checkpoint.shouldYield()) await setImmediate();\n  }\n\n  for (const planned of plannedGroups) {\n    const parentRef = planned.parent;\n    if (parentRef) {\n      const parent = plannedGroupsByRef.get(parentRef);\n      if (parent && !parent.childSet.has(planned.ref)) {\n        parent.children.push(planned.ref);\n        parent.childSet.add(planned.ref);\n      }\n    }\n    if (checkpoint.shouldYield()) await setImmediate();\n  }\n\n  for (const planned of plannedGroups) {\n    for (const childRef of planned.children) {\n      const child = plannedGroupsByRef.get(childRef);\n      if (child && !child.parent) {\n        child.parent = planned.ref;\n      }\n      if (checkpoint.shouldYield()) await setImmediate();\n    }\n  }\n\n  for (const [user, memberOf] of plannedUserMemberOf) {\n    user.spec.memberOf = memberOf;\n  }\n  for (const planned of plannedGroups) {\n    if (planned.parent) {\n      planned.group.spec.parent = planned.parent;\n    }\n    planned.group.spec.children = planned.children;\n  }\n}\n"],"names":["stringifyEntityRef","LDAP_DN_ANNOTATION","LDAP_RDN_ANNOTATION","LDAP_UUID_ANNOTATION","setImmediate"],"mappings":";;;;;;AA4BA,MAAM,8BAAA,GAAiC,GAAA;AAUvC,MAAM,cAAA,CAAe;AAAA,EACnB,UAAA,GAAa,CAAA;AAAA,EAEb,WAAA,CAAY,QAAQ,CAAA,EAAY;AAC9B,IAAA,IAAA,CAAK,UAAA,IAAc,KAAA;AACnB,IAAA,IAAI,IAAA,CAAK,cAAc,8BAAA,EAAgC;AACrD,MAAA,IAAA,CAAK,UAAA,IAAc,8BAAA;AACnB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,MAAM,WAAA,CAAiC;AAAA,EAC5B,MAAA,uBAAa,GAAA,EAAe;AAAA,EAC5B,WAAA,uBAAkB,GAAA,EAAoB;AAAA,EAE/C,IAAI,MAAA,EAAmB;AACrB,IAAA,MAAM,GAAA,GAAMA,gCAAmB,MAAM,CAAA;AACrC,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,MAAM,CAAA;AAE3B,IAAA,MAAM,WAAA,GAAc,OAAO,QAAA,CAAS,WAAA;AACpC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,GAAG,CAAA;AACvB,IAAA,IAAA,CAAK,SAAA,CAAU,WAAA,CAAYC,4BAAkB,CAAA,EAAG,GAAG,CAAA;AACnD,IAAA,IAAA,CAAK,UAAU,WAAA,CAAYA,4BAAkB,CAAA,EAAG,WAAA,IAAe,GAAG,CAAA;AAClE,IAAA,IAAA,CAAK,SAAA,CAAU,WAAA,CAAYC,6BAAmB,CAAA,EAAG,GAAG,CAAA;AACpD,IAAA,IAAA,CAAK,SAAA,CAAU,WAAA,CAAYC,8BAAoB,CAAA,EAAG,GAAG,CAAA;AACrD,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEA,QAAQ,KAAA,EAAmC;AACzC,IAAA,OACE,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,KAAK,CAAA,IAAK,KAAK,WAAA,CAAY,GAAA,CAAI,KAAA,CAAM,WAAA,EAAa,CAAA;AAAA,EAE3E;AAAA,EAEA,IAAI,GAAA,EAA4B;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AAAA,EAC5B;AAAA,EAEA,SAAA,CAAU,OAA2B,GAAA,EAAmB;AACtD,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,KAAA,EAAO,GAAG,CAAA;AAAA,IACjC;AAAA,EACF;AACF;AAgBA,SAAS,QAAA,CACP,GAAA,EACA,MAAA,EACA,MAAA,EACM;AACN,EAAA,IAAI,MAAA,GAAS,GAAA,CAAI,GAAA,CAAI,MAAM,CAAA;AAC3B,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAA,uBAAa,GAAA,EAAI;AACjB,IAAA,GAAA,CAAI,GAAA,CAAI,QAAQ,MAAM,CAAA;AAAA,EACxB;AACA,EAAA,MAAA,CAAO,IAAI,MAAM,CAAA;AACnB;AAEA,eAAe,UAAA,CACb,SAAA,EACA,UAAA,EACA,SAAA,EACA,UAAA,EAC2B;AAC3B,EAAA,MAAM,KAAA,GAA0B;AAAA,IAC9B,YAAA,sBAAkB,GAAA,EAAI;AAAA,IACtB,YAAA,sBAAkB,GAAA,EAAI;AAAA,IACtB,aAAA,sBAAmB,GAAA;AAAI,GACzB;AAEA,EAAA,KAAA,MAAW,CAAC,SAAA,EAAW,YAAY,CAAA,IAAK,UAAU,YAAA,EAAc;AAC9D,IAAA,MAAM,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,SAAS,CAAA;AAC3C,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMC,qBAAA,EAAa;AACjD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA;AAAA,IACF;AACA,IAAA,KAAA,MAAW,cAAc,YAAA,EAAc;AACrC,MAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,CAAQ,UAAU,CAAA;AAC9C,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,QAAA,CAAS,KAAA,CAAM,YAAA,EAAc,OAAA,EAAS,QAAQ,CAAA;AAAA,MAChD;AACA,MAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,IACnD;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,CAAC,UAAA,EAAY,aAAa,CAAA,IAAK,UAAU,aAAA,EAAe;AACjE,IAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,CAAQ,UAAU,CAAA;AAC9C,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AACjD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA;AAAA,IACF;AACA,IAAA,KAAA,MAAW,eAAe,aAAA,EAAe;AACvC,MAAA,MAAM,SAAA,GAAY,UAAA,CAAW,OAAA,CAAQ,WAAW,CAAA;AAChD,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,QAAA,CAAS,KAAA,CAAM,YAAA,EAAc,QAAA,EAAU,SAAS,CAAA;AAChD,QAAA,QAAA,CAAS,KAAA,CAAM,aAAA,EAAe,SAAA,EAAW,QAAQ,CAAA;AAAA,MACnD;AACA,MAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,IACnD;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,CAAC,UAAA,EAAY,aAAa,CAAA,IAAK,UAAU,WAAA,EAAa;AAC/D,IAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,CAAQ,UAAU,CAAA;AAC9C,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AACjD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA;AAAA,IACF;AACA,IAAA,KAAA,MAAW,eAAe,aAAA,EAAe;AACvC,MAAA,MAAM,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,WAAW,CAAA;AAC7C,MAAA,IAAI,OAAA,EAAS;AACX,QAAA,QAAA,CAAS,KAAA,CAAM,YAAA,EAAc,OAAA,EAAS,QAAQ,CAAA;AAC9C,QAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AACjD,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,CAAQ,WAAW,CAAA;AAC/C,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,QAAA,CAAS,KAAA,CAAM,aAAA,EAAe,QAAA,EAAU,QAAQ,CAAA;AAChD,QAAA,QAAA,CAAS,KAAA,CAAM,YAAA,EAAc,QAAA,EAAU,QAAQ,CAAA;AAAA,MACjD;AACA,MAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,IACnD;AAAA,EACF;AAEA,EAAA,OAAO,KAAA;AACT;AAEA,eAAsB,mBAAA,CACpB,MAAA,EACA,KAAA,EACA,SAAA,EACe;AACf,EAAA,MAAM,UAAA,GAAa,IAAI,cAAA,EAAe;AACtC,EAAA,MAAM,SAAA,GAAY,IAAI,WAAA,EAAwB;AAC9C,EAAA,MAAM,UAAA,GAAa,IAAI,WAAA,EAAyB;AAChD,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,SAAA,CAAU,IAAI,IAAI,CAAA;AAClB,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,EACnD;AACA,EAAA,MAAM,gBAA4D,EAAC;AACnE,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,aAAA,CAAc,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,WAAW,GAAA,CAAI,KAAK,GAAG,CAAA;AACxD,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,EACnD;AAEA,EAAA,MAAM,QAAQ,MAAM,UAAA,CAAW,SAAA,EAAW,UAAA,EAAY,WAAW,UAAU,CAAA;AAC3E,EAAA,MAAM,mBAAA,uBAA0B,GAAA,EAA0B;AAC1D,EAAA,KAAA,MAAW,CAAC,OAAA,EAAS,SAAS,CAAA,IAAK,MAAM,YAAA,EAAc;AACrD,IAAA,MAAM,IAAA,GAAO,SAAA,CAAU,GAAA,CAAI,OAAO,CAAA;AAClC,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,mBAAA,CAAoB,IAAI,IAAA,EAAM,CAAC,GAAG,SAAS,CAAA,CAAE,MAAM,CAAA;AAAA,IACrD;AACA,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,EACnD;AAEA,EAAA,MAAM,gBAAyC,EAAC;AAChD,EAAA,MAAM,kBAAA,uBAAyB,GAAA,EAAmC;AAClE,EAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAI,IAAK,aAAA,EAAe;AAC1C,IAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA,KAAM,KAAA;AAChD,IAAA,MAAM,UAAU,eAAA,GAAkB,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA,GAAI,MAAA;AAChE,IAAA,MAAM,WAAW,eAAA,GAAkB,KAAA,CAAM,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA,GAAI,MAAA;AAClE,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,KAAA;AAAA,MACA,GAAA;AAAA,MACA,MAAA,EACE,OAAA,EAAS,IAAA,KAAS,CAAA,GAAI,OAAA,CAAQ,MAAA,EAAO,CAAE,IAAA,EAAK,CAAE,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,MAAA;AAAA,MACnE,QAAA,EAAU,QAAA,GAAW,CAAC,GAAG,QAAQ,CAAA,CAAE,IAAA,EAAK,GAAI,CAAC,GAAG,KAAA,CAAM,IAAA,CAAK,QAAQ,CAAA;AAAA,MACnE,UAAU,IAAI,GAAA,CAAI,QAAA,IAAY,KAAA,CAAM,KAAK,QAAQ;AAAA,KACnD;AACA,IAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAC1B,IAAA,kBAAA,CAAmB,GAAA,CAAI,KAAK,OAAO,CAAA;AACnC,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,EACnD;AAEA,EAAA,KAAA,MAAW,WAAW,aAAA,EAAe;AACnC,IAAA,MAAM,YAAY,OAAA,CAAQ,MAAA;AAC1B,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAM,MAAA,GAAS,kBAAA,CAAmB,GAAA,CAAI,SAAS,CAAA;AAC/C,MAAA,IAAI,UAAU,CAAC,MAAA,CAAO,SAAS,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC/C,QAAA,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAChC,QAAA,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAAA,MACjC;AAAA,IACF;AACA,IAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,EACnD;AAEA,EAAA,KAAA,MAAW,WAAW,aAAA,EAAe;AACnC,IAAA,KAAA,MAAW,QAAA,IAAY,QAAQ,QAAA,EAAU;AACvC,MAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,GAAA,CAAI,QAAQ,CAAA;AAC7C,MAAA,IAAI,KAAA,IAAS,CAAC,KAAA,CAAM,MAAA,EAAQ;AAC1B,QAAA,KAAA,CAAM,SAAS,OAAA,CAAQ,GAAA;AAAA,MACzB;AACA,MAAA,IAAI,UAAA,CAAW,WAAA,EAAY,EAAG,MAAMA,qBAAA,EAAa;AAAA,IACnD;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,mBAAA,EAAqB;AAClD,IAAA,IAAA,CAAK,KAAK,QAAA,GAAW,QAAA;AAAA,EACvB;AACA,EAAA,KAAA,MAAW,WAAW,aAAA,EAAe;AACnC,IAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,MAAA,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,OAAA,CAAQ,MAAA;AAAA,IACtC;AACA,IAAA,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,QAAA,GAAW,OAAA,CAAQ,QAAA;AAAA,EACxC;AACF;;"}

package/dist/ldap/util.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.cjs.js","sources":["../../src/ldap/util.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Entry } from 'ldapts';\nimport { LdapVendor } from './vendors';\n\n/**\n * Maps a single-valued attribute to a consumer.\n *\n * This helper can be useful when implementing a user or group transformer.\n *\n * @param entry - The LDAP source entry\n * @param vendor - The LDAP vendor\n * @param attributeName - The source attribute to map. If the attribute is\n *        undefined the mapping will be silently ignored.\n * @param setter - The function to be called with the decoded attribute from the\n *        source entry\n *\n * @public\n */\nexport function mapStringAttr(\n  entry: Entry,\n  vendor: LdapVendor,\n  attributeName: string | undefined,\n  setter: (value: string) => void,\n) {\n  if (attributeName) {\n    const values = vendor.decodeStringAttribute(entry, attributeName);\n    if (values && values.length === 1) {\n      setter(values[0]);\n    }\n  }\n}\n\nexport type RecursivePartial<T> = {\n  [P in keyof T]?: T[P] extends (infer U)[]\n    ? RecursivePartial<U>[]\n    : T[P] extends object\n    ? RecursivePartial<T[P]>\n    : T[P];\n};\n"],"names":[],"mappings":";;AAiCO,SAAS,aAAA,CACd,KAAA,EACA,MAAA,EACA,aAAA,EACA,MAAA,EACA;AACA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,qBAAA,CAAsB,KAAA,EAAO,aAAa,CAAA;AAChE,IAAA,IAAI,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AACjC,MAAA,MAAA,CAAO,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IAClB;AAAA,EACF;AACF;;;;"}
+{"version":3,"file":"util.cjs.js","sources":["../../src/ldap/util.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Entry } from 'ldapts';\nimport { LdapVendor } from './vendors';\n\n/**\n * Maps a single-valued attribute to a consumer.\n *\n * This helper can be useful when implementing a user or group transformer.\n *\n * @param entry - The LDAP source entry\n * @param vendor - The LDAP vendor\n * @param attributeName - The source attribute to map. If the attribute is\n *        undefined the mapping will be silently ignored.\n * @param setter - The function to be called with the decoded attribute from the\n *        source entry\n *\n * @public\n */\nexport function mapStringAttr(\n  entry: Entry,\n  vendor: LdapVendor,\n  attributeName: string | undefined,\n  setter: (value: string) => void,\n) {\n  if (attributeName) {\n    const values = vendor.decodeStringAttribute(entry, attributeName);\n    if (values && values.length === 1) {\n      setter(values[0]);\n    }\n  }\n}\n\nexport type RecursivePartial<T> = {\n  [P in keyof T]?: T[P] extends (infer U)[]\n    ? RecursivePartial<U>[]\n    : T[P] extends object\n    ? RecursivePartial<T[P]>\n    : T[P];\n};\n"],"names":[],"mappings":";;AAiCO,SAAS,aAAA,CACd,KAAA,EACA,MAAA,EACA,aAAA,EACA,MAAA,EACA;AACA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,qBAAA,CAAsB,KAAA,EAAO,aAAa,CAAA;AAChE,IAAA,IAAI,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AACjC,MAAA,MAAA,CAAO,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IAClB;AAAA,EACF;AACF;;"}

package/dist/ldap/vendors.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"vendors.cjs.js","sources":["../../src/ldap/vendors.ts"],"sourcesContent":["/*\n * Copyright 2021 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Entry } from 'ldapts';\n\n/**\n * An LDAP Vendor handles unique nuances between different vendors.\n *\n * @public\n */\nexport type LdapVendor = {\n  /**\n   * The attribute name that holds the distinguished name (DN) for an entry.\n   */\n  dnAttributeName: string;\n  /**\n   * The attribute name that holds a universal unique identifier for an entry.\n   */\n  uuidAttributeName: string;\n\n  /**\n   * Decode ldap entry values for a given attribute name to their string representation.\n   *\n   * @param entry - The ldap entry\n   * @param name - The attribute to decode\n   */\n  decodeStringAttribute: (entry: Entry, name: string) => string[];\n};\n\nexport const DefaultLdapVendor: LdapVendor = {\n  dnAttributeName: 'entryDN',\n  uuidAttributeName: 'entryUUID',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const ActiveDirectoryVendor: LdapVendor = {\n  dnAttributeName: 'distinguishedName',\n  uuidAttributeName: 'objectGUID',\n  decodeStringAttribute: (entry, name) => {\n    const decoder = (value: string | Buffer) => {\n      if (name === ActiveDirectoryVendor.uuidAttributeName) {\n        return formatGUID(value);\n      }\n      return value.toString();\n    };\n    return decode(entry, name, decoder);\n  },\n};\n\nexport const FreeIpaVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'ipaUniqueID',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const AEDirVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'entryUUID',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const GoogleLdapVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'uid',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const LLDAPVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'entryuuid',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name.toLowerCase(), value => {\n      return value.toString();\n    });\n  },\n};\n\n// Decode an attribute to a consumer\nfunction decode(\n  entry: Entry,\n  attributeName: string,\n  decoder: (value: string | Buffer) => string,\n): string[] {\n  const values = entry[attributeName];\n  if (Array.isArray(values)) {\n    return values.map(v => {\n      return decoder(v);\n    });\n  } else if (values) {\n    return [decoder(values)];\n  }\n  return [];\n}\n\n// Formats a Microsoft Active Directory binary-encoded uuid to a readable string\n// See https://github.com/ldapjs/node-ldapjs/issues/297#issuecomment-137765214\nfunction formatGUID(objectGUID: string | Buffer): string {\n  let data: Buffer;\n  if (typeof objectGUID === 'string') {\n    data = Buffer.from(objectGUID, 'binary');\n  } else {\n    data = objectGUID;\n  }\n  // GUID_FORMAT_D\n  let template = '{3}{2}{1}{0}-{5}{4}-{7}{6}-{8}{9}-{10}{11}{12}{13}{14}{15}';\n\n  // check each byte\n  for (let i = 0; i < data.length; i++) {\n    let dataStr = data[i].toString(16);\n    dataStr = data[i] >= 16 ? dataStr : `0${dataStr}`;\n\n    // insert that character into the template\n    template = template.replace(`{${i}}`, dataStr);\n  }\n  return template;\n}\n"],"names":[],"mappings":";;AA0CO,MAAM,iBAAA,GAAgC;AAAA,EAC3C,eAAA,EAAiB,SAAA;AAAA,EACjB,iBAAA,EAAmB,WAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,qBAAA,GAAoC;AAAA,EAC/C,eAAA,EAAiB,mBAAA;AAAA,EACjB,iBAAA,EAAmB,YAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,MAAM,OAAA,GAAU,CAAC,KAAA,KAA2B;AAC1C,MAAA,IAAI,IAAA,KAAS,sBAAsB,iBAAA,EAAmB;AACpD,QAAA,OAAO,WAAW,KAAK,CAAA;AAAA,MACzB;AACA,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAA;AACA,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,OAAO,CAAA;AAAA,EACpC;AACF;AAEO,MAAM,aAAA,GAA4B;AAAA,EACvC,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,aAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,WAAA,GAA0B;AAAA,EACrC,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,WAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,gBAAA,GAA+B;AAAA,EAC1C,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,KAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,WAAA,GAA0B;AAAA,EACrC,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,WAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,WAAA,IAAe,CAAA,KAAA,KAAS;AAChD,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAGA,SAAS,MAAA,CACP,KAAA,EACA,aAAA,EACA,OAAA,EACU;AACV,EAAA,MAAM,MAAA,GAAS,MAAM,aAAa,CAAA;AAClC,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AACzB,IAAA,OAAO,MAAA,CAAO,IAAI,CAAA,CAAA,KAAK;AACrB,MAAA,OAAO,QAAQ,CAAC,CAAA;AAAA,IAClB,CAAC,CAAA;AAAA,EACH,WAAW,MAAA,EAAQ;AACjB,IAAA,OAAO,CAAC,OAAA,CAAQ,MAAM,CAAC,CAAA;AAAA,EACzB;AACA,EAAA,OAAO,EAAC;AACV;AAIA,SAAS,WAAW,UAAA,EAAqC;AACvD,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,UAAA,EAAY,QAAQ,CAAA;AAAA,EACzC,CAAA,MAAO;AACL,IAAA,IAAA,GAAO,UAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAA,GAAW,4DAAA;AAGf,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,IAAI,OAAA,GAAU,IAAA,CAAK,CAAC,CAAA,CAAE,SAAS,EAAE,CAAA;AACjC,IAAA,OAAA,GAAU,KAAK,CAAC,CAAA,IAAK,EAAA,GAAK,OAAA,GAAU,IAAI,OAAO,CAAA,CAAA;AAG/C,IAAA,QAAA,GAAW,QAAA,CAAS,OAAA,CAAQ,CAAA,CAAA,EAAI,CAAC,KAAK,OAAO,CAAA;AAAA,EAC/C;AACA,EAAA,OAAO,QAAA;AACT;;;;;;;;;"}
+{"version":3,"file":"vendors.cjs.js","sources":["../../src/ldap/vendors.ts"],"sourcesContent":["/*\n * Copyright 2021 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Entry } from 'ldapts';\n\n/**\n * An LDAP Vendor handles unique nuances between different vendors.\n *\n * @public\n */\nexport type LdapVendor = {\n  /**\n   * The attribute name that holds the distinguished name (DN) for an entry.\n   */\n  dnAttributeName: string;\n  /**\n   * The attribute name that holds a universal unique identifier for an entry.\n   */\n  uuidAttributeName: string;\n\n  /**\n   * Decode ldap entry values for a given attribute name to their string representation.\n   *\n   * @param entry - The ldap entry\n   * @param name - The attribute to decode\n   */\n  decodeStringAttribute: (entry: Entry, name: string) => string[];\n};\n\nexport const DefaultLdapVendor: LdapVendor = {\n  dnAttributeName: 'entryDN',\n  uuidAttributeName: 'entryUUID',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const ActiveDirectoryVendor: LdapVendor = {\n  dnAttributeName: 'distinguishedName',\n  uuidAttributeName: 'objectGUID',\n  decodeStringAttribute: (entry, name) => {\n    const decoder = (value: string | Buffer) => {\n      if (name === ActiveDirectoryVendor.uuidAttributeName) {\n        return formatGUID(value);\n      }\n      return value.toString();\n    };\n    return decode(entry, name, decoder);\n  },\n};\n\nexport const FreeIpaVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'ipaUniqueID',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const AEDirVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'entryUUID',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const GoogleLdapVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'uid',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name, value => {\n      return value.toString();\n    });\n  },\n};\n\nexport const LLDAPVendor: LdapVendor = {\n  dnAttributeName: 'dn',\n  uuidAttributeName: 'entryuuid',\n  decodeStringAttribute: (entry, name) => {\n    return decode(entry, name.toLowerCase(), value => {\n      return value.toString();\n    });\n  },\n};\n\n// Decode an attribute to a consumer\nfunction decode(\n  entry: Entry,\n  attributeName: string,\n  decoder: (value: string | Buffer) => string,\n): string[] {\n  const values = entry[attributeName];\n  if (Array.isArray(values)) {\n    return values.map(v => {\n      return decoder(v);\n    });\n  } else if (values) {\n    return [decoder(values)];\n  }\n  return [];\n}\n\n// Formats a Microsoft Active Directory binary-encoded uuid to a readable string\n// See https://github.com/ldapjs/node-ldapjs/issues/297#issuecomment-137765214\nfunction formatGUID(objectGUID: string | Buffer): string {\n  let data: Buffer;\n  if (typeof objectGUID === 'string') {\n    data = Buffer.from(objectGUID, 'binary');\n  } else {\n    data = objectGUID;\n  }\n  // GUID_FORMAT_D\n  let template = '{3}{2}{1}{0}-{5}{4}-{7}{6}-{8}{9}-{10}{11}{12}{13}{14}{15}';\n\n  // check each byte\n  for (let i = 0; i < data.length; i++) {\n    let dataStr = data[i].toString(16);\n    dataStr = data[i] >= 16 ? dataStr : `0${dataStr}`;\n\n    // insert that character into the template\n    template = template.replace(`{${i}}`, dataStr);\n  }\n  return template;\n}\n"],"names":[],"mappings":";;AA0CO,MAAM,iBAAA,GAAgC;AAAA,EAC3C,eAAA,EAAiB,SAAA;AAAA,EACjB,iBAAA,EAAmB,WAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,qBAAA,GAAoC;AAAA,EAC/C,eAAA,EAAiB,mBAAA;AAAA,EACjB,iBAAA,EAAmB,YAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,MAAM,OAAA,GAAU,CAAC,KAAA,KAA2B;AAC1C,MAAA,IAAI,IAAA,KAAS,sBAAsB,iBAAA,EAAmB;AACpD,QAAA,OAAO,WAAW,KAAK,CAAA;AAAA,MACzB;AACA,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAA;AACA,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,OAAO,CAAA;AAAA,EACpC;AACF;AAEO,MAAM,aAAA,GAA4B;AAAA,EACvC,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,aAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,WAAA,GAA0B;AAAA,EACrC,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,WAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,gBAAA,GAA+B;AAAA,EAC1C,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,KAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,CAAA,KAAA,KAAS;AAClC,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAEO,MAAM,WAAA,GAA0B;AAAA,EACrC,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAA,EAAmB,WAAA;AAAA,EACnB,qBAAA,EAAuB,CAAC,KAAA,EAAO,IAAA,KAAS;AACtC,IAAA,OAAO,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,WAAA,IAAe,CAAA,KAAA,KAAS;AAChD,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AACF;AAGA,SAAS,MAAA,CACP,KAAA,EACA,aAAA,EACA,OAAA,EACU;AACV,EAAA,MAAM,MAAA,GAAS,MAAM,aAAa,CAAA;AAClC,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AACzB,IAAA,OAAO,MAAA,CAAO,IAAI,CAAA,CAAA,KAAK;AACrB,MAAA,OAAO,QAAQ,CAAC,CAAA;AAAA,IAClB,CAAC,CAAA;AAAA,EACH,WAAW,MAAA,EAAQ;AACjB,IAAA,OAAO,CAAC,OAAA,CAAQ,MAAM,CAAC,CAAA;AAAA,EACzB;AACA,EAAA,OAAO,EAAC;AACV;AAIA,SAAS,WAAW,UAAA,EAAqC;AACvD,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,UAAA,EAAY,QAAQ,CAAA;AAAA,EACzC,CAAA,MAAO;AACL,IAAA,IAAA,GAAO,UAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAA,GAAW,4DAAA;AAGf,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,IAAI,OAAA,GAAU,IAAA,CAAK,CAAC,CAAA,CAAE,SAAS,EAAE,CAAA;AACjC,IAAA,OAAA,GAAU,KAAK,CAAC,CAAA,IAAK,EAAA,GAAK,OAAA,GAAU,IAAI,OAAO,CAAA,CAAA;AAG/C,IAAA,QAAA,GAAW,QAAA,CAAS,OAAA,CAAQ,CAAA,CAAA,EAAI,CAAC,KAAK,OAAO,CAAA;AAAA,EAC/C;AACA,EAAA,OAAO,QAAA;AACT;;;;;;;"}

package/dist/module.cjs.js

@@ -9,9 +9,10 @@ require('ldapts');
 require('node:tls');
 require('lodash/mergeWith');
 require('lodash');
-require('@backstage/catalog-model');
 require('lodash/set');
 require('lodash/cloneDeep');
+require('@backstage/catalog-model');
+require('node:timers/promises');
 
 const ldapOrgEntityProviderTransformsExtensionPoint = backendPluginApi.createExtensionPoint({
   id: "catalog.ldapOrgEntityProvider.transforms"

package/dist/module.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.cjs.js","sources":["../src/module.ts"],"sourcesContent":["/*\n * Copyright 2022 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  coreServices,\n  createBackendModule,\n  createExtensionPoint,\n} from '@backstage/backend-plugin-api';\nimport { catalogProcessingExtensionPoint } from '@backstage/plugin-catalog-node';\nimport { LdapOrgEntityProvider } from './processors';\nimport { GroupTransformer, UserTransformer } from './ldap/types';\n\n/**\n * Interface for {@link LdapOrgEntityProviderTransformsExtensionPoint}.\n *\n * @public\n */\nexport interface LdapOrgEntityProviderTransformsExtensionPoint {\n  /**\n   * Set the function that transforms a user entry in LDAP to an entity.\n   * Optionally, you can pass separate transformers per provider ID.\n   */\n  setUserTransformer(\n    transformer: UserTransformer | Record<string, UserTransformer>,\n  ): void;\n\n  /**\n   * Set the function that transforms a group entry in LDAP to an entity.\n   * Optionally, you can pass separate transformers per provider ID.\n   */\n  setGroupTransformer(\n    transformer: GroupTransformer | Record<string, GroupTransformer>,\n  ): void;\n}\n\n/**\n * Extension point used to customize the transforms used by the module.\n *\n * @public\n */\nexport const ldapOrgEntityProviderTransformsExtensionPoint =\n  createExtensionPoint<LdapOrgEntityProviderTransformsExtensionPoint>({\n    id: 'catalog.ldapOrgEntityProvider.transforms',\n  });\n\n/**\n * Registers the LdapOrgEntityProvider with the catalog processing extension point.\n *\n * @public\n */\nexport const catalogModuleLdapOrgEntityProvider = createBackendModule({\n  pluginId: 'catalog',\n  moduleId: 'ldapOrgEntityProvider',\n  register(env) {\n    let userTransformer:\n      | UserTransformer\n      | Record<string, UserTransformer>\n      | undefined;\n    let groupTransformer:\n      | GroupTransformer\n      | Record<string, GroupTransformer>\n      | undefined;\n\n    env.registerExtensionPoint(ldapOrgEntityProviderTransformsExtensionPoint, {\n      setUserTransformer(transformer) {\n        if (userTransformer) {\n          throw new Error('User transformer may only be set once');\n        }\n        userTransformer = transformer;\n      },\n      setGroupTransformer(transformer) {\n        if (groupTransformer) {\n          throw new Error('Group transformer may only be set once');\n        }\n        groupTransformer = transformer;\n      },\n    });\n\n    env.registerInit({\n      deps: {\n        catalog: catalogProcessingExtensionPoint,\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        scheduler: coreServices.scheduler,\n      },\n      async init({ catalog, config, logger, scheduler }) {\n        catalog.addEntityProvider(\n          LdapOrgEntityProvider.fromConfig(config, {\n            logger,\n            scheduler,\n            userTransformer: userTransformer,\n            groupTransformer: groupTransformer,\n          }),\n        );\n      },\n    });\n  },\n});\n"],"names":["createExtensionPoint","createBackendModule","catalogProcessingExtensionPoint","coreServices","LdapOrgEntityProvider"],"mappings":";;;;;;;;;;;;;;;AAqDO,MAAM,gDACXA,qCAAA,CAAoE;AAAA,EAClE,EAAA,EAAI;AACN,CAAC;AAOI,MAAM,qCAAqCC,oCAAA,CAAoB;AAAA,EACpE,QAAA,EAAU,SAAA;AAAA,EACV,QAAA,EAAU,uBAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,eAAA;AAIJ,IAAA,IAAI,gBAAA;AAKJ,IAAA,GAAA,CAAI,uBAAuB,6CAAA,EAA+C;AAAA,MACxE,mBAAmB,WAAA,EAAa;AAC9B,QAAA,IAAI,eAAA,EAAiB;AACnB,UAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAAA,QACzD;AACA,QAAA,eAAA,GAAkB,WAAA;AAAA,MACpB,CAAA;AAAA,MACA,oBAAoB,WAAA,EAAa;AAC/B,QAAA,IAAI,gBAAA,EAAkB;AACpB,UAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,QAC1D;AACA,QAAA,gBAAA,GAAmB,WAAA;AAAA,MACrB;AAAA,KACD,CAAA;AAED,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,OAAA,EAASC,iDAAA;AAAA,QACT,QAAQC,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,WAAWA,6BAAA,CAAa;AAAA,OAC1B;AAAA,MACA,MAAM,IAAA,CAAK,EAAE,SAAS,MAAA,EAAQ,MAAA,EAAQ,WAAU,EAAG;AACjD,QAAA,OAAA,CAAQ,iBAAA;AAAA,UACNC,2CAAA,CAAsB,WAAW,MAAA,EAAQ;AAAA,YACvC,MAAA;AAAA,YACA,SAAA;AAAA,YACA,eAAA;AAAA,YACA;AAAA,WACD;AAAA,SACH;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;;"}
+{"version":3,"file":"module.cjs.js","sources":["../src/module.ts"],"sourcesContent":["/*\n * Copyright 2022 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  coreServices,\n  createBackendModule,\n  createExtensionPoint,\n} from '@backstage/backend-plugin-api';\nimport { catalogProcessingExtensionPoint } from '@backstage/plugin-catalog-node';\nimport { LdapOrgEntityProvider } from './processors';\nimport { GroupTransformer, UserTransformer } from './ldap/types';\n\n/**\n * Interface for {@link LdapOrgEntityProviderTransformsExtensionPoint}.\n *\n * @public\n */\nexport interface LdapOrgEntityProviderTransformsExtensionPoint {\n  /**\n   * Set the function that transforms a user entry in LDAP to an entity.\n   * Optionally, you can pass separate transformers per provider ID.\n   */\n  setUserTransformer(\n    transformer: UserTransformer | Record<string, UserTransformer>,\n  ): void;\n\n  /**\n   * Set the function that transforms a group entry in LDAP to an entity.\n   * Optionally, you can pass separate transformers per provider ID.\n   */\n  setGroupTransformer(\n    transformer: GroupTransformer | Record<string, GroupTransformer>,\n  ): void;\n}\n\n/**\n * Extension point used to customize the transforms used by the module.\n *\n * @public\n */\nexport const ldapOrgEntityProviderTransformsExtensionPoint =\n  createExtensionPoint<LdapOrgEntityProviderTransformsExtensionPoint>({\n    id: 'catalog.ldapOrgEntityProvider.transforms',\n  });\n\n/**\n * Registers the LdapOrgEntityProvider with the catalog processing extension point.\n *\n * @public\n */\nexport const catalogModuleLdapOrgEntityProvider = createBackendModule({\n  pluginId: 'catalog',\n  moduleId: 'ldapOrgEntityProvider',\n  register(env) {\n    let userTransformer:\n      | UserTransformer\n      | Record<string, UserTransformer>\n      | undefined;\n    let groupTransformer:\n      | GroupTransformer\n      | Record<string, GroupTransformer>\n      | undefined;\n\n    env.registerExtensionPoint(ldapOrgEntityProviderTransformsExtensionPoint, {\n      setUserTransformer(transformer) {\n        if (userTransformer) {\n          throw new Error('User transformer may only be set once');\n        }\n        userTransformer = transformer;\n      },\n      setGroupTransformer(transformer) {\n        if (groupTransformer) {\n          throw new Error('Group transformer may only be set once');\n        }\n        groupTransformer = transformer;\n      },\n    });\n\n    env.registerInit({\n      deps: {\n        catalog: catalogProcessingExtensionPoint,\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        scheduler: coreServices.scheduler,\n      },\n      async init({ catalog, config, logger, scheduler }) {\n        catalog.addEntityProvider(\n          LdapOrgEntityProvider.fromConfig(config, {\n            logger,\n            scheduler,\n            userTransformer: userTransformer,\n            groupTransformer: groupTransformer,\n          }),\n        );\n      },\n    });\n  },\n});\n"],"names":["createExtensionPoint","createBackendModule","catalogProcessingExtensionPoint","coreServices","LdapOrgEntityProvider"],"mappings":";;;;;;;;;;;;;;;;AAqDO,MAAM,gDACXA,qCAAA,CAAoE;AAAA,EAClE,EAAA,EAAI;AACN,CAAC;AAOI,MAAM,qCAAqCC,oCAAA,CAAoB;AAAA,EACpE,QAAA,EAAU,SAAA;AAAA,EACV,QAAA,EAAU,uBAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,eAAA;AAIJ,IAAA,IAAI,gBAAA;AAKJ,IAAA,GAAA,CAAI,uBAAuB,6CAAA,EAA+C;AAAA,MACxE,mBAAmB,WAAA,EAAa;AAC9B,QAAA,IAAI,eAAA,EAAiB;AACnB,UAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAAA,QACzD;AACA,QAAA,eAAA,GAAkB,WAAA;AAAA,MACpB,CAAA;AAAA,MACA,oBAAoB,WAAA,EAAa;AAC/B,QAAA,IAAI,gBAAA,EAAkB;AACpB,UAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,QAC1D;AACA,QAAA,gBAAA,GAAmB,WAAA;AAAA,MACrB;AAAA,KACD,CAAA;AAED,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,OAAA,EAASC,iDAAA;AAAA,QACT,QAAQC,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,WAAWA,6BAAA,CAAa;AAAA,OAC1B;AAAA,MACA,MAAM,IAAA,CAAK,EAAE,SAAS,MAAA,EAAQ,MAAA,EAAQ,WAAU,EAAG;AACjD,QAAA,OAAA,CAAQ,iBAAA;AAAA,UACNC,2CAAA,CAAsB,WAAW,MAAA,EAAQ;AAAA,YACvC,MAAA;AAAA,YACA,SAAA;AAAA,YACA,eAAA;AAAA,YACA;AAAA,WACD;AAAA,SACH;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;"}

package/dist/processors/LdapOrgEntityProvider.cjs.js

@@ -12,6 +12,7 @@ class LdapOrgEntityProvider {
   constructor(options) {
     this.options = options;
   }
+  options;
   connection;
   scheduleFn;
   static fromConfig(configRoot, options) {

package/dist/processors/LdapOrgEntityProvider.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"LdapOrgEntityProvider.cjs.js","sources":["../../src/processors/LdapOrgEntityProvider.ts"],"sourcesContent":["/*\n * Copyright 2021 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  ANNOTATION_LOCATION,\n  ANNOTATION_ORIGIN_LOCATION,\n  Entity,\n} from '@backstage/catalog-model';\nimport { Config } from '@backstage/config';\nimport {\n  EntityProvider,\n  EntityProviderConnection,\n} from '@backstage/plugin-catalog-node';\nimport { merge } from 'lodash';\nimport { randomUUID } from 'node:crypto';\nimport {\n  GroupTransformer,\n  LdapClient,\n  LdapProviderConfig,\n  LDAP_DN_ANNOTATION,\n  readLdapOrg,\n  UserTransformer,\n} from '../ldap';\nimport {\n  LoggerService,\n  SchedulerService,\n  SchedulerServiceTaskRunner,\n} from '@backstage/backend-plugin-api';\nimport { readLdapLegacyConfig, readProviderConfigs } from '../ldap';\n\n/**\n * Options for {@link LdapOrgEntityProvider}.\n *\n * @public\n */\nexport type LdapOrgEntityProviderOptions =\n  | LdapOrgEntityProviderLegacyOptions\n  | {\n      /**\n       * The logger to use.\n       */\n      logger: LoggerService;\n\n      /**\n       * The refresh schedule to use.\n       *\n       * @remarks\n       *\n       * If you pass in 'manual', you are responsible for calling the `read` method\n       * manually at some interval.\n       *\n       * But more commonly you will pass in the result of\n       * {@link @backstage/backend-plugin-api#SchedulerService.createScheduledTaskRunner}\n       * to enable automatic scheduling of tasks.\n       */\n      schedule?: 'manual' | SchedulerServiceTaskRunner;\n\n      /**\n       * Scheduler used to schedule refreshes based on\n       * the schedule config.\n       */\n      scheduler?: SchedulerService;\n\n      /**\n       * The function that transforms a user entry in msgraph to an entity.\n       * Optionally, you can pass separate transformers per provider ID.\n       */\n      userTransformer?: UserTransformer | Record<string, UserTransformer>;\n\n      /**\n       * The function that transforms a group entry in msgraph to an entity.\n       * Optionally, you can pass separate transformers per provider ID.\n       */\n      groupTransformer?: GroupTransformer | Record<string, GroupTransformer>;\n    };\n\n/**\n * Options for {@link LdapOrgEntityProvider}.\n *\n * @public\n * @deprecated This interface exists for backwards compatibility only and will be removed in the future.\n */\nexport interface LdapOrgEntityProviderLegacyOptions {\n  /**\n   * A unique, stable identifier for this provider.\n   *\n   * @example \"production\"\n   */\n  id: string;\n\n  /**\n   * The target that this provider should consume.\n   *\n   * Should exactly match the \"target\" field of one of the \"ldap.providers\"\n   * configuration entries.\n   *\n   * @example \"ldaps://ds-read.example.net\"\n   */\n  target: string;\n\n  /**\n   * The logger to use.\n   */\n  logger: LoggerService;\n\n  /**\n   * The refresh schedule to use.\n   *\n   * @remarks\n   *\n   * If you pass in 'manual', you are responsible for calling the `read` method\n   * manually at some interval.\n   *\n   * But more commonly you will pass in the result of\n   * {@link @backstage/backend-plugin-api#SchedulerService.createScheduledTaskRunner}\n   * to enable automatic scheduling of tasks.\n   */\n  schedule: 'manual' | SchedulerServiceTaskRunner;\n\n  /**\n   * The function that transforms a user entry in LDAP to an entity.\n   */\n  userTransformer?: UserTransformer;\n\n  /**\n   * The function that transforms a group entry in LDAP to an entity.\n   */\n  groupTransformer?: GroupTransformer;\n}\n\n/**\n * Reads user and group entries out of an LDAP service, and provides them as\n * User and Group entities for the catalog.\n *\n * @remarks\n *\n * Add an instance of this class to your catalog builder, and then periodically\n * call the {@link LdapOrgEntityProvider.read} method.\n *\n * @public\n */\nexport class LdapOrgEntityProvider implements EntityProvider {\n  private connection?: EntityProviderConnection;\n  private scheduleFn?: () => Promise<void>;\n\n  static fromConfig(\n    configRoot: Config,\n    options: LdapOrgEntityProviderOptions,\n  ): LdapOrgEntityProvider[] {\n    if ('id' in options) {\n      return [LdapOrgEntityProvider.fromLegacyConfig(configRoot, options)];\n    }\n\n    if (!options.schedule && !options.scheduler) {\n      throw new Error('Either schedule or scheduler must be provided.');\n    }\n\n    function getTransformer<T extends Function>(\n      id: string,\n      transformers?: T | Record<string, T>,\n    ): T | undefined {\n      if (['undefined', 'function'].includes(typeof transformers)) {\n        return transformers as T;\n      }\n\n      return (transformers as Record<string, T>)[id];\n    }\n\n    return readProviderConfigs(configRoot).map(providerConfig => {\n      if (!options.schedule && !providerConfig.schedule) {\n        throw new Error(\n          `No schedule provided neither via code nor config for LdapOrgEntityProvider:${providerConfig.id}.`,\n        );\n      }\n\n      const taskRunner =\n        options.schedule ??\n        options.scheduler!.createScheduledTaskRunner(providerConfig.schedule!);\n\n      const provider = new LdapOrgEntityProvider({\n        id: providerConfig.id,\n        provider: providerConfig,\n        logger: options.logger,\n        userTransformer: getTransformer(\n          providerConfig.id,\n          options.userTransformer,\n        ),\n        groupTransformer: getTransformer(\n          providerConfig.id,\n          options.groupTransformer,\n        ),\n      });\n\n      if (taskRunner !== 'manual') {\n        provider.schedule(taskRunner);\n      }\n\n      return provider;\n    });\n  }\n\n  static fromLegacyConfig(\n    configRoot: Config,\n    options: LdapOrgEntityProviderLegacyOptions,\n  ): LdapOrgEntityProvider {\n    // TODO(freben): Deprecate the old catalog.processors.ldapOrg config\n    const config =\n      configRoot.getOptionalConfig('ldap') ||\n      configRoot.getOptionalConfig('catalog.processors.ldapOrg');\n    const providers = config ? readLdapLegacyConfig(config) : [];\n    const provider = providers.find(p => options.target === p.target);\n    if (!provider) {\n      throw new TypeError(\n        `There is no LDAP configuration that matches \"${options.target}\". Please add a configuration entry for it under \"ldap.providers\".`,\n      );\n    }\n\n    const logger = options.logger.child({\n      target: options.target,\n    });\n\n    const result = new LdapOrgEntityProvider({\n      id: options.id,\n      provider,\n      userTransformer: options.userTransformer,\n      groupTransformer: options.groupTransformer,\n      logger,\n    });\n\n    if (options.schedule !== 'manual') {\n      result.schedule(options.schedule);\n    }\n\n    return result;\n  }\n\n  constructor(\n    private options: {\n      id: string;\n      provider: LdapProviderConfig;\n      logger: LoggerService;\n      userTransformer?: UserTransformer;\n      groupTransformer?: GroupTransformer;\n    },\n  ) {}\n\n  /** {@inheritdoc @backstage/plugin-catalog-node#EntityProvider.getProviderName} */\n  getProviderName() {\n    return `LdapOrgEntityProvider:${this.options.id}`;\n  }\n\n  /** {@inheritdoc @backstage/plugin-catalog-node#EntityProvider.connect} */\n  async connect(connection: EntityProviderConnection) {\n    this.connection = connection;\n    await this.scheduleFn?.();\n  }\n\n  /**\n   * Runs one single complete ingestion. This is only necessary if you use\n   * manual scheduling.\n   */\n  async read(options?: { logger?: LoggerService }) {\n    if (!this.connection) {\n      throw new Error('Not initialized');\n    }\n\n    const logger = options?.logger ?? this.options.logger;\n    const { markReadComplete } = trackProgress(logger);\n\n    // Be lazy and create the client each time; even though it's pretty\n    // inefficient, we usually only do this once per entire refresh loop and\n    // don't have to worry about timeouts and reconnects etc.\n    const client = await LdapClient.create(\n      this.options.logger,\n      this.options.provider.target,\n      this.options.provider.bind,\n      this.options.provider.tls,\n    );\n\n    const { users, groups } = await readLdapOrg(\n      client,\n      this.options.provider.users,\n      this.options.provider.groups,\n      this.options.provider.vendor,\n      {\n        groupTransformer: this.options.groupTransformer,\n        userTransformer: this.options.userTransformer,\n        logger,\n      },\n    );\n\n    const { markCommitComplete } = markReadComplete({ users, groups });\n\n    await this.connection.applyMutation({\n      type: 'full',\n      entities: [...users, ...groups].map(entity => ({\n        locationKey: `ldap-org-provider:${this.options.id}`,\n        entity: withLocations(this.options.id, entity),\n      })),\n    });\n\n    markCommitComplete();\n  }\n\n  private schedule(taskRunner: SchedulerServiceTaskRunner) {\n    this.scheduleFn = async () => {\n      const id = `${this.getProviderName()}:refresh`;\n      await taskRunner.run({\n        id,\n        fn: async () => {\n          const logger = this.options.logger.child({\n            class: LdapOrgEntityProvider.prototype.constructor.name,\n            taskId: id,\n            taskInstanceId: randomUUID(),\n          });\n\n          try {\n            await this.read({ logger });\n          } catch (error) {\n            logger.error(\n              `${this.getProviderName()} refresh failed, ${error}`,\n              error,\n            );\n          }\n        },\n      });\n    };\n  }\n}\n\n// Helps wrap the timing and logging behaviors\nfunction trackProgress(logger: LoggerService) {\n  let timestamp = Date.now();\n  let summary: string;\n\n  logger.info('Reading LDAP users and groups');\n\n  function markReadComplete(read: { users: unknown[]; groups: unknown[] }) {\n    summary = `${read.users.length} LDAP users and ${read.groups.length} LDAP groups`;\n    const readDuration = ((Date.now() - timestamp) / 1000).toFixed(1);\n    timestamp = Date.now();\n    logger.info(`Read ${summary} in ${readDuration} seconds. Committing...`);\n    return { markCommitComplete };\n  }\n\n  function markCommitComplete() {\n    const commitDuration = ((Date.now() - timestamp) / 1000).toFixed(1);\n    logger.info(`Committed ${summary} in ${commitDuration} seconds.`);\n  }\n\n  return { markReadComplete };\n}\n\n// Makes sure that emitted entities have a proper location based on their DN\nfunction withLocations(providerId: string, entity: Entity): Entity {\n  const dn =\n    entity.metadata.annotations?.[LDAP_DN_ANNOTATION] || entity.metadata.name;\n  const location = `ldap://${providerId}/${encodeURIComponent(dn)}`;\n  return merge(\n    {\n      metadata: {\n        annotations: {\n          [ANNOTATION_LOCATION]: location,\n          [ANNOTATION_ORIGIN_LOCATION]: location,\n        },\n      },\n    },\n    entity,\n  ) as Entity;\n}\n"],"names":["readProviderConfigs","config","readLdapLegacyConfig","client","LdapClient","readLdapOrg","randomUUID","LDAP_DN_ANNOTATION","merge","ANNOTATION_LOCATION","ANNOTATION_ORIGIN_LOCATION"],"mappings":";;;;;;;;;;AA0JO,MAAM,qBAAA,CAAgD;AAAA,EA+F3D,YACU,OAAA,EAOR;AAPQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAOP;AAAA,EAtGK,UAAA;AAAA,EACA,UAAA;AAAA,EAER,OAAO,UAAA,CACL,UAAA,EACA,OAAA,EACyB;AACzB,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,OAAO,CAAC,qBAAA,CAAsB,gBAAA,CAAiB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACrE;AAEA,IAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,IAAY,CAAC,QAAQ,SAAA,EAAW;AAC3C,MAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,IAClE;AAEA,IAAA,SAAS,cAAA,CACP,IACA,YAAA,EACe;AACf,MAAA,IAAI,CAAC,WAAA,EAAa,UAAU,EAAE,QAAA,CAAS,OAAO,YAAY,CAAA,EAAG;AAC3D,QAAA,OAAO,YAAA;AAAA,MACT;AAEA,MAAA,OAAQ,aAAmC,EAAE,CAAA;AAAA,IAC/C;AAEA,IAAA,OAAOA,0BAAA,CAAoB,UAAU,CAAA,CAAE,GAAA,CAAI,CAAA,cAAA,KAAkB;AAC3D,MAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,IAAY,CAAC,eAAe,QAAA,EAAU;AACjD,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,2EAAA,EAA8E,eAAe,EAAE,CAAA,CAAA;AAAA,SACjG;AAAA,MACF;AAEA,MAAA,MAAM,aACJ,OAAA,CAAQ,QAAA,IACR,QAAQ,SAAA,CAAW,yBAAA,CAA0B,eAAe,QAAS,CAAA;AAEvE,MAAA,MAAM,QAAA,GAAW,IAAI,qBAAA,CAAsB;AAAA,QACzC,IAAI,cAAA,CAAe,EAAA;AAAA,QACnB,QAAA,EAAU,cAAA;AAAA,QACV,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,eAAA,EAAiB,cAAA;AAAA,UACf,cAAA,CAAe,EAAA;AAAA,UACf,OAAA,CAAQ;AAAA,SACV;AAAA,QACA,gBAAA,EAAkB,cAAA;AAAA,UAChB,cAAA,CAAe,EAAA;AAAA,UACf,OAAA,CAAQ;AAAA;AACV,OACD,CAAA;AAED,MAAA,IAAI,eAAe,QAAA,EAAU;AAC3B,QAAA,QAAA,CAAS,SAAS,UAAU,CAAA;AAAA,MAC9B;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAO,gBAAA,CACL,UAAA,EACA,OAAA,EACuB;AAEvB,IAAA,MAAMC,WACJ,UAAA,CAAW,iBAAA,CAAkB,MAAM,CAAA,IACnC,UAAA,CAAW,kBAAkB,4BAA4B,CAAA;AAC3D,IAAA,MAAM,SAAA,GAAYA,QAAA,GAASC,2BAAA,CAAqBD,QAAM,IAAI,EAAC;AAC3D,IAAA,MAAM,WAAW,SAAA,CAAU,IAAA,CAAK,OAAK,OAAA,CAAQ,MAAA,KAAW,EAAE,MAAM,CAAA;AAChE,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,SAAA;AAAA,QACR,CAAA,6CAAA,EAAgD,QAAQ,MAAM,CAAA,kEAAA;AAAA,OAChE;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM;AAAA,MAClC,QAAQ,OAAA,CAAQ;AAAA,KACjB,CAAA;AAED,IAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB;AAAA,MACvC,IAAI,OAAA,CAAQ,EAAA;AAAA,MACZ,QAAA;AAAA,MACA,iBAAiB,OAAA,CAAQ,eAAA;AAAA,MACzB,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,MAC1B;AAAA,KACD,CAAA;AAED,IAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,MAAA,MAAA,CAAO,QAAA,CAAS,QAAQ,QAAQ,CAAA;AAAA,IAClC;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA,EAaA,eAAA,GAAkB;AAChB,IAAA,OAAO,CAAA,sBAAA,EAAyB,IAAA,CAAK,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,EACjD;AAAA;AAAA,EAGA,MAAM,QAAQ,UAAA,EAAsC;AAClD,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,MAAM,KAAK,UAAA,IAAa;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAK,OAAA,EAAsC;AAC/C,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACpB,MAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,IACnC;AAEA,IAAA,MAAM,MAAA,GAAS,OAAA,EAAS,MAAA,IAAU,IAAA,CAAK,OAAA,CAAQ,MAAA;AAC/C,IAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,aAAA,CAAc,MAAM,CAAA;AAKjD,IAAA,MAAME,QAAA,GAAS,MAAMC,iBAAA,CAAW,MAAA;AAAA,MAC9B,KAAK,OAAA,CAAQ,MAAA;AAAA,MACb,IAAA,CAAK,QAAQ,QAAA,CAAS,MAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS,IAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS;AAAA,KACxB;AAEA,IAAA,MAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,MAAMC,gBAAA;AAAA,MAC9BF,QAAA;AAAA,MACA,IAAA,CAAK,QAAQ,QAAA,CAAS,KAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS,MAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS,MAAA;AAAA,MACtB;AAAA,QACE,gBAAA,EAAkB,KAAK,OAAA,CAAQ,gBAAA;AAAA,QAC/B,eAAA,EAAiB,KAAK,OAAA,CAAQ,eAEhC;AAAA,KACF;AAEA,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,iBAAiB,EAAE,KAAA,EAAO,QAAQ,CAAA;AAEjE,IAAA,MAAM,IAAA,CAAK,WAAW,aAAA,CAAc;AAAA,MAClC,IAAA,EAAM,MAAA;AAAA,MACN,QAAA,EAAU,CAAC,GAAG,KAAA,EAAO,GAAG,MAAM,CAAA,CAAE,IAAI,CAAA,MAAA,MAAW;AAAA,QAC7C,WAAA,EAAa,CAAA,kBAAA,EAAqB,IAAA,CAAK,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,QACjD,MAAA,EAAQ,aAAA,CAAc,IAAA,CAAK,OAAA,CAAQ,IAAI,MAAM;AAAA,OAC/C,CAAE;AAAA,KACH,CAAA;AAED,IAAA,kBAAA,EAAmB;AAAA,EACrB;AAAA,EAEQ,SAAS,UAAA,EAAwC;AACvD,IAAA,IAAA,CAAK,aAAa,YAAY;AAC5B,MAAA,MAAM,EAAA,GAAK,CAAA,EAAG,IAAA,CAAK,eAAA,EAAiB,CAAA,QAAA,CAAA;AACpC,MAAA,MAAM,WAAW,GAAA,CAAI;AAAA,QACnB,EAAA;AAAA,QACA,IAAI,YAAY;AACd,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM;AAAA,YACvC,KAAA,EAAO,qBAAA,CAAsB,SAAA,CAAU,WAAA,CAAY,IAAA;AAAA,YACnD,MAAA,EAAQ,EAAA;AAAA,YACR,gBAAgBG,sBAAA;AAAW,WAC5B,CAAA;AAED,UAAA,IAAI;AACF,YAAA,MAAM,IAAA,CAAK,IAAA,CAAK,EAAE,MAAA,EAAQ,CAAA;AAAA,UAC5B,SAAS,KAAA,EAAO;AACd,YAAA,MAAA,CAAO,KAAA;AAAA,cACL,CAAA,EAAG,IAAA,CAAK,eAAA,EAAiB,oBAAoB,KAAK,CAAA,CAAA;AAAA,cAClD;AAAA,aACF;AAAA,UACF;AAAA,QACF;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,EACF;AACF;AAGA,SAAS,cAAc,MAAA,EAAuB;AAC5C,EAAA,IAAI,SAAA,GAAY,KAAK,GAAA,EAAI;AACzB,EAAA,IAAI,OAAA;AAEJ,EAAA,MAAA,CAAO,KAAK,+BAA+B,CAAA;AAE3C,EAAA,SAAS,iBAAiB,IAAA,EAA+C;AACvE,IAAA,OAAA,GAAU,GAAG,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,gBAAA,EAAmB,IAAA,CAAK,OAAO,MAAM,CAAA,YAAA,CAAA;AACnE,IAAA,MAAM,iBAAiB,IAAA,CAAK,GAAA,KAAQ,SAAA,IAAa,GAAA,EAAM,QAAQ,CAAC,CAAA;AAChE,IAAA,SAAA,GAAY,KAAK,GAAA,EAAI;AACrB,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,KAAA,EAAQ,OAAO,CAAA,IAAA,EAAO,YAAY,CAAA,uBAAA,CAAyB,CAAA;AACvE,IAAA,OAAO,EAAE,kBAAA,EAAmB;AAAA,EAC9B;AAEA,EAAA,SAAS,kBAAA,GAAqB;AAC5B,IAAA,MAAM,mBAAmB,IAAA,CAAK,GAAA,KAAQ,SAAA,IAAa,GAAA,EAAM,QAAQ,CAAC,CAAA;AAClE,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,UAAA,EAAa,OAAO,CAAA,IAAA,EAAO,cAAc,CAAA,SAAA,CAAW,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,EAAE,gBAAA,EAAiB;AAC5B;AAGA,SAAS,aAAA,CAAc,YAAoB,MAAA,EAAwB;AACjE,EAAA,MAAM,KACJ,MAAA,CAAO,QAAA,CAAS,cAAcC,4BAAkB,CAAA,IAAK,OAAO,QAAA,CAAS,IAAA;AACvE,EAAA,MAAM,WAAW,CAAA,OAAA,EAAU,UAAU,CAAA,CAAA,EAAI,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AAC/D,EAAA,OAAOC,YAAA;AAAA,IACL;AAAA,MACE,QAAA,EAAU;AAAA,QACR,WAAA,EAAa;AAAA,UACX,CAACC,gCAAmB,GAAG,QAAA;AAAA,UACvB,CAACC,uCAA0B,GAAG;AAAA;AAChC;AACF,KACF;AAAA,IACA;AAAA,GACF;AACF;;;;"}
+{"version":3,"file":"LdapOrgEntityProvider.cjs.js","sources":["../../src/processors/LdapOrgEntityProvider.ts"],"sourcesContent":["/*\n * Copyright 2021 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  ANNOTATION_LOCATION,\n  ANNOTATION_ORIGIN_LOCATION,\n  Entity,\n} from '@backstage/catalog-model';\nimport { Config } from '@backstage/config';\nimport {\n  EntityProvider,\n  EntityProviderConnection,\n} from '@backstage/plugin-catalog-node';\nimport { merge } from 'lodash';\nimport { randomUUID } from 'node:crypto';\nimport {\n  GroupTransformer,\n  LdapClient,\n  LdapProviderConfig,\n  LDAP_DN_ANNOTATION,\n  readLdapOrg,\n  UserTransformer,\n} from '../ldap';\nimport {\n  LoggerService,\n  SchedulerService,\n  SchedulerServiceTaskRunner,\n} from '@backstage/backend-plugin-api';\nimport { readLdapLegacyConfig, readProviderConfigs } from '../ldap';\n\n/**\n * Options for {@link LdapOrgEntityProvider}.\n *\n * @public\n */\nexport type LdapOrgEntityProviderOptions =\n  | LdapOrgEntityProviderLegacyOptions\n  | {\n      /**\n       * The logger to use.\n       */\n      logger: LoggerService;\n\n      /**\n       * The refresh schedule to use.\n       *\n       * @remarks\n       *\n       * If you pass in 'manual', you are responsible for calling the `read` method\n       * manually at some interval.\n       *\n       * But more commonly you will pass in the result of\n       * {@link @backstage/backend-plugin-api#SchedulerService.createScheduledTaskRunner}\n       * to enable automatic scheduling of tasks.\n       */\n      schedule?: 'manual' | SchedulerServiceTaskRunner;\n\n      /**\n       * Scheduler used to schedule refreshes based on\n       * the schedule config.\n       */\n      scheduler?: SchedulerService;\n\n      /**\n       * The function that transforms a user entry in msgraph to an entity.\n       * Optionally, you can pass separate transformers per provider ID.\n       */\n      userTransformer?: UserTransformer | Record<string, UserTransformer>;\n\n      /**\n       * The function that transforms a group entry in msgraph to an entity.\n       * Optionally, you can pass separate transformers per provider ID.\n       */\n      groupTransformer?: GroupTransformer | Record<string, GroupTransformer>;\n    };\n\n/**\n * Options for {@link LdapOrgEntityProvider}.\n *\n * @public\n * @deprecated This interface exists for backwards compatibility only and will be removed in the future.\n */\nexport interface LdapOrgEntityProviderLegacyOptions {\n  /**\n   * A unique, stable identifier for this provider.\n   *\n   * @example \"production\"\n   */\n  id: string;\n\n  /**\n   * The target that this provider should consume.\n   *\n   * Should exactly match the \"target\" field of one of the \"ldap.providers\"\n   * configuration entries.\n   *\n   * @example \"ldaps://ds-read.example.net\"\n   */\n  target: string;\n\n  /**\n   * The logger to use.\n   */\n  logger: LoggerService;\n\n  /**\n   * The refresh schedule to use.\n   *\n   * @remarks\n   *\n   * If you pass in 'manual', you are responsible for calling the `read` method\n   * manually at some interval.\n   *\n   * But more commonly you will pass in the result of\n   * {@link @backstage/backend-plugin-api#SchedulerService.createScheduledTaskRunner}\n   * to enable automatic scheduling of tasks.\n   */\n  schedule: 'manual' | SchedulerServiceTaskRunner;\n\n  /**\n   * The function that transforms a user entry in LDAP to an entity.\n   */\n  userTransformer?: UserTransformer;\n\n  /**\n   * The function that transforms a group entry in LDAP to an entity.\n   */\n  groupTransformer?: GroupTransformer;\n}\n\n/**\n * Reads user and group entries out of an LDAP service, and provides them as\n * User and Group entities for the catalog.\n *\n * @remarks\n *\n * Add an instance of this class to your catalog builder, and then periodically\n * call the {@link LdapOrgEntityProvider.read} method.\n *\n * @public\n */\nexport class LdapOrgEntityProvider implements EntityProvider {\n  private connection?: EntityProviderConnection;\n  private scheduleFn?: () => Promise<void>;\n\n  static fromConfig(\n    configRoot: Config,\n    options: LdapOrgEntityProviderOptions,\n  ): LdapOrgEntityProvider[] {\n    if ('id' in options) {\n      return [LdapOrgEntityProvider.fromLegacyConfig(configRoot, options)];\n    }\n\n    if (!options.schedule && !options.scheduler) {\n      throw new Error('Either schedule or scheduler must be provided.');\n    }\n\n    function getTransformer<T extends Function>(\n      id: string,\n      transformers?: T | Record<string, T>,\n    ): T | undefined {\n      if (['undefined', 'function'].includes(typeof transformers)) {\n        return transformers as T;\n      }\n\n      return (transformers as Record<string, T>)[id];\n    }\n\n    return readProviderConfigs(configRoot).map(providerConfig => {\n      if (!options.schedule && !providerConfig.schedule) {\n        throw new Error(\n          `No schedule provided neither via code nor config for LdapOrgEntityProvider:${providerConfig.id}.`,\n        );\n      }\n\n      const taskRunner =\n        options.schedule ??\n        options.scheduler!.createScheduledTaskRunner(providerConfig.schedule!);\n\n      const provider = new LdapOrgEntityProvider({\n        id: providerConfig.id,\n        provider: providerConfig,\n        logger: options.logger,\n        userTransformer: getTransformer(\n          providerConfig.id,\n          options.userTransformer,\n        ),\n        groupTransformer: getTransformer(\n          providerConfig.id,\n          options.groupTransformer,\n        ),\n      });\n\n      if (taskRunner !== 'manual') {\n        provider.schedule(taskRunner);\n      }\n\n      return provider;\n    });\n  }\n\n  static fromLegacyConfig(\n    configRoot: Config,\n    options: LdapOrgEntityProviderLegacyOptions,\n  ): LdapOrgEntityProvider {\n    // TODO(freben): Deprecate the old catalog.processors.ldapOrg config\n    const config =\n      configRoot.getOptionalConfig('ldap') ||\n      configRoot.getOptionalConfig('catalog.processors.ldapOrg');\n    const providers = config ? readLdapLegacyConfig(config) : [];\n    const provider = providers.find(p => options.target === p.target);\n    if (!provider) {\n      throw new TypeError(\n        `There is no LDAP configuration that matches \"${options.target}\". Please add a configuration entry for it under \"ldap.providers\".`,\n      );\n    }\n\n    const logger = options.logger.child({\n      target: options.target,\n    });\n\n    const result = new LdapOrgEntityProvider({\n      id: options.id,\n      provider,\n      userTransformer: options.userTransformer,\n      groupTransformer: options.groupTransformer,\n      logger,\n    });\n\n    if (options.schedule !== 'manual') {\n      result.schedule(options.schedule);\n    }\n\n    return result;\n  }\n\n  constructor(\n    private options: {\n      id: string;\n      provider: LdapProviderConfig;\n      logger: LoggerService;\n      userTransformer?: UserTransformer;\n      groupTransformer?: GroupTransformer;\n    },\n  ) {}\n\n  /** {@inheritdoc @backstage/plugin-catalog-node#EntityProvider.getProviderName} */\n  getProviderName() {\n    return `LdapOrgEntityProvider:${this.options.id}`;\n  }\n\n  /** {@inheritdoc @backstage/plugin-catalog-node#EntityProvider.connect} */\n  async connect(connection: EntityProviderConnection) {\n    this.connection = connection;\n    await this.scheduleFn?.();\n  }\n\n  /**\n   * Runs one single complete ingestion. This is only necessary if you use\n   * manual scheduling.\n   */\n  async read(options?: { logger?: LoggerService }) {\n    if (!this.connection) {\n      throw new Error('Not initialized');\n    }\n\n    const logger = options?.logger ?? this.options.logger;\n    const { markReadComplete } = trackProgress(logger);\n\n    // Be lazy and create the client each time; even though it's pretty\n    // inefficient, we usually only do this once per entire refresh loop and\n    // don't have to worry about timeouts and reconnects etc.\n    const client = await LdapClient.create(\n      this.options.logger,\n      this.options.provider.target,\n      this.options.provider.bind,\n      this.options.provider.tls,\n    );\n\n    const { users, groups } = await readLdapOrg(\n      client,\n      this.options.provider.users,\n      this.options.provider.groups,\n      this.options.provider.vendor,\n      {\n        groupTransformer: this.options.groupTransformer,\n        userTransformer: this.options.userTransformer,\n        logger,\n      },\n    );\n\n    const { markCommitComplete } = markReadComplete({ users, groups });\n\n    await this.connection.applyMutation({\n      type: 'full',\n      entities: [...users, ...groups].map(entity => ({\n        locationKey: `ldap-org-provider:${this.options.id}`,\n        entity: withLocations(this.options.id, entity),\n      })),\n    });\n\n    markCommitComplete();\n  }\n\n  private schedule(taskRunner: SchedulerServiceTaskRunner) {\n    this.scheduleFn = async () => {\n      const id = `${this.getProviderName()}:refresh`;\n      await taskRunner.run({\n        id,\n        fn: async () => {\n          const logger = this.options.logger.child({\n            class: LdapOrgEntityProvider.prototype.constructor.name,\n            taskId: id,\n            taskInstanceId: randomUUID(),\n          });\n\n          try {\n            await this.read({ logger });\n          } catch (error) {\n            logger.error(\n              `${this.getProviderName()} refresh failed, ${error}`,\n              error,\n            );\n          }\n        },\n      });\n    };\n  }\n}\n\n// Helps wrap the timing and logging behaviors\nfunction trackProgress(logger: LoggerService) {\n  let timestamp = Date.now();\n  let summary: string;\n\n  logger.info('Reading LDAP users and groups');\n\n  function markReadComplete(read: { users: unknown[]; groups: unknown[] }) {\n    summary = `${read.users.length} LDAP users and ${read.groups.length} LDAP groups`;\n    const readDuration = ((Date.now() - timestamp) / 1000).toFixed(1);\n    timestamp = Date.now();\n    logger.info(`Read ${summary} in ${readDuration} seconds. Committing...`);\n    return { markCommitComplete };\n  }\n\n  function markCommitComplete() {\n    const commitDuration = ((Date.now() - timestamp) / 1000).toFixed(1);\n    logger.info(`Committed ${summary} in ${commitDuration} seconds.`);\n  }\n\n  return { markReadComplete };\n}\n\n// Makes sure that emitted entities have a proper location based on their DN\nfunction withLocations(providerId: string, entity: Entity): Entity {\n  const dn =\n    entity.metadata.annotations?.[LDAP_DN_ANNOTATION] || entity.metadata.name;\n  const location = `ldap://${providerId}/${encodeURIComponent(dn)}`;\n  return merge(\n    {\n      metadata: {\n        annotations: {\n          [ANNOTATION_LOCATION]: location,\n          [ANNOTATION_ORIGIN_LOCATION]: location,\n        },\n      },\n    },\n    entity,\n  ) as Entity;\n}\n"],"names":["readProviderConfigs","config","readLdapLegacyConfig","client","LdapClient","readLdapOrg","randomUUID","LDAP_DN_ANNOTATION","merge","ANNOTATION_LOCATION","ANNOTATION_ORIGIN_LOCATION"],"mappings":";;;;;;;;;;AA0JO,MAAM,qBAAA,CAAgD;AAAA,EA+F3D,YACU,OAAA,EAOR;AAPQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAOP;AAAA,EAPO,OAAA;AAAA,EA/FF,UAAA;AAAA,EACA,UAAA;AAAA,EAER,OAAO,UAAA,CACL,UAAA,EACA,OAAA,EACyB;AACzB,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,OAAO,CAAC,qBAAA,CAAsB,gBAAA,CAAiB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACrE;AAEA,IAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,IAAY,CAAC,QAAQ,SAAA,EAAW;AAC3C,MAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,IAClE;AAEA,IAAA,SAAS,cAAA,CACP,IACA,YAAA,EACe;AACf,MAAA,IAAI,CAAC,WAAA,EAAa,UAAU,EAAE,QAAA,CAAS,OAAO,YAAY,CAAA,EAAG;AAC3D,QAAA,OAAO,YAAA;AAAA,MACT;AAEA,MAAA,OAAQ,aAAmC,EAAE,CAAA;AAAA,IAC/C;AAEA,IAAA,OAAOA,0BAAA,CAAoB,UAAU,CAAA,CAAE,GAAA,CAAI,CAAA,cAAA,KAAkB;AAC3D,MAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,IAAY,CAAC,eAAe,QAAA,EAAU;AACjD,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,2EAAA,EAA8E,eAAe,EAAE,CAAA,CAAA;AAAA,SACjG;AAAA,MACF;AAEA,MAAA,MAAM,aACJ,OAAA,CAAQ,QAAA,IACR,QAAQ,SAAA,CAAW,yBAAA,CAA0B,eAAe,QAAS,CAAA;AAEvE,MAAA,MAAM,QAAA,GAAW,IAAI,qBAAA,CAAsB;AAAA,QACzC,IAAI,cAAA,CAAe,EAAA;AAAA,QACnB,QAAA,EAAU,cAAA;AAAA,QACV,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,eAAA,EAAiB,cAAA;AAAA,UACf,cAAA,CAAe,EAAA;AAAA,UACf,OAAA,CAAQ;AAAA,SACV;AAAA,QACA,gBAAA,EAAkB,cAAA;AAAA,UAChB,cAAA,CAAe,EAAA;AAAA,UACf,OAAA,CAAQ;AAAA;AACV,OACD,CAAA;AAED,MAAA,IAAI,eAAe,QAAA,EAAU;AAC3B,QAAA,QAAA,CAAS,SAAS,UAAU,CAAA;AAAA,MAC9B;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAO,gBAAA,CACL,UAAA,EACA,OAAA,EACuB;AAEvB,IAAA,MAAMC,WACJ,UAAA,CAAW,iBAAA,CAAkB,MAAM,CAAA,IACnC,UAAA,CAAW,kBAAkB,4BAA4B,CAAA;AAC3D,IAAA,MAAM,SAAA,GAAYA,QAAA,GAASC,2BAAA,CAAqBD,QAAM,IAAI,EAAC;AAC3D,IAAA,MAAM,WAAW,SAAA,CAAU,IAAA,CAAK,OAAK,OAAA,CAAQ,MAAA,KAAW,EAAE,MAAM,CAAA;AAChE,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,SAAA;AAAA,QACR,CAAA,6CAAA,EAAgD,QAAQ,MAAM,CAAA,kEAAA;AAAA,OAChE;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM;AAAA,MAClC,QAAQ,OAAA,CAAQ;AAAA,KACjB,CAAA;AAED,IAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB;AAAA,MACvC,IAAI,OAAA,CAAQ,EAAA;AAAA,MACZ,QAAA;AAAA,MACA,iBAAiB,OAAA,CAAQ,eAAA;AAAA,MACzB,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,MAC1B;AAAA,KACD,CAAA;AAED,IAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,MAAA,MAAA,CAAO,QAAA,CAAS,QAAQ,QAAQ,CAAA;AAAA,IAClC;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA,EAaA,eAAA,GAAkB;AAChB,IAAA,OAAO,CAAA,sBAAA,EAAyB,IAAA,CAAK,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,EACjD;AAAA;AAAA,EAGA,MAAM,QAAQ,UAAA,EAAsC;AAClD,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,MAAM,KAAK,UAAA,IAAa;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAK,OAAA,EAAsC;AAC/C,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACpB,MAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,IACnC;AAEA,IAAA,MAAM,MAAA,GAAS,OAAA,EAAS,MAAA,IAAU,IAAA,CAAK,OAAA,CAAQ,MAAA;AAC/C,IAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,aAAA,CAAc,MAAM,CAAA;AAKjD,IAAA,MAAME,QAAA,GAAS,MAAMC,iBAAA,CAAW,MAAA;AAAA,MAC9B,KAAK,OAAA,CAAQ,MAAA;AAAA,MACb,IAAA,CAAK,QAAQ,QAAA,CAAS,MAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS,IAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS;AAAA,KACxB;AAEA,IAAA,MAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,MAAMC,gBAAA;AAAA,MAC9BF,QAAA;AAAA,MACA,IAAA,CAAK,QAAQ,QAAA,CAAS,KAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS,MAAA;AAAA,MACtB,IAAA,CAAK,QAAQ,QAAA,CAAS,MAAA;AAAA,MACtB;AAAA,QACE,gBAAA,EAAkB,KAAK,OAAA,CAAQ,gBAAA;AAAA,QAC/B,eAAA,EAAiB,KAAK,OAAA,CAAQ,eAEhC;AAAA,KACF;AAEA,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,iBAAiB,EAAE,KAAA,EAAO,QAAQ,CAAA;AAEjE,IAAA,MAAM,IAAA,CAAK,WAAW,aAAA,CAAc;AAAA,MAClC,IAAA,EAAM,MAAA;AAAA,MACN,QAAA,EAAU,CAAC,GAAG,KAAA,EAAO,GAAG,MAAM,CAAA,CAAE,IAAI,CAAA,MAAA,MAAW;AAAA,QAC7C,WAAA,EAAa,CAAA,kBAAA,EAAqB,IAAA,CAAK,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,QACjD,MAAA,EAAQ,aAAA,CAAc,IAAA,CAAK,OAAA,CAAQ,IAAI,MAAM;AAAA,OAC/C,CAAE;AAAA,KACH,CAAA;AAED,IAAA,kBAAA,EAAmB;AAAA,EACrB;AAAA,EAEQ,SAAS,UAAA,EAAwC;AACvD,IAAA,IAAA,CAAK,aAAa,YAAY;AAC5B,MAAA,MAAM,EAAA,GAAK,CAAA,EAAG,IAAA,CAAK,eAAA,EAAiB,CAAA,QAAA,CAAA;AACpC,MAAA,MAAM,WAAW,GAAA,CAAI;AAAA,QACnB,EAAA;AAAA,QACA,IAAI,YAAY;AACd,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM;AAAA,YACvC,KAAA,EAAO,qBAAA,CAAsB,SAAA,CAAU,WAAA,CAAY,IAAA;AAAA,YACnD,MAAA,EAAQ,EAAA;AAAA,YACR,gBAAgBG,sBAAA;AAAW,WAC5B,CAAA;AAED,UAAA,IAAI;AACF,YAAA,MAAM,IAAA,CAAK,IAAA,CAAK,EAAE,MAAA,EAAQ,CAAA;AAAA,UAC5B,SAAS,KAAA,EAAO;AACd,YAAA,MAAA,CAAO,KAAA;AAAA,cACL,CAAA,EAAG,IAAA,CAAK,eAAA,EAAiB,oBAAoB,KAAK,CAAA,CAAA;AAAA,cAClD;AAAA,aACF;AAAA,UACF;AAAA,QACF;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,EACF;AACF;AAGA,SAAS,cAAc,MAAA,EAAuB;AAC5C,EAAA,IAAI,SAAA,GAAY,KAAK,GAAA,EAAI;AACzB,EAAA,IAAI,OAAA;AAEJ,EAAA,MAAA,CAAO,KAAK,+BAA+B,CAAA;AAE3C,EAAA,SAAS,iBAAiB,IAAA,EAA+C;AACvE,IAAA,OAAA,GAAU,GAAG,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,gBAAA,EAAmB,IAAA,CAAK,OAAO,MAAM,CAAA,YAAA,CAAA;AACnE,IAAA,MAAM,iBAAiB,IAAA,CAAK,GAAA,KAAQ,SAAA,IAAa,GAAA,EAAM,QAAQ,CAAC,CAAA;AAChE,IAAA,SAAA,GAAY,KAAK,GAAA,EAAI;AACrB,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,KAAA,EAAQ,OAAO,CAAA,IAAA,EAAO,YAAY,CAAA,uBAAA,CAAyB,CAAA;AACvE,IAAA,OAAO,EAAE,kBAAA,EAAmB;AAAA,EAC9B;AAEA,EAAA,SAAS,kBAAA,GAAqB;AAC5B,IAAA,MAAM,mBAAmB,IAAA,CAAK,GAAA,KAAQ,SAAA,IAAa,GAAA,EAAM,QAAQ,CAAC,CAAA;AAClE,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,UAAA,EAAa,OAAO,CAAA,IAAA,EAAO,cAAc,CAAA,SAAA,CAAW,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,EAAE,gBAAA,EAAiB;AAC5B;AAGA,SAAS,aAAA,CAAc,YAAoB,MAAA,EAAwB;AACjE,EAAA,MAAM,KACJ,MAAA,CAAO,QAAA,CAAS,cAAcC,4BAAkB,CAAA,IAAK,OAAO,QAAA,CAAS,IAAA;AACvE,EAAA,MAAM,WAAW,CAAA,OAAA,EAAU,UAAU,CAAA,CAAA,EAAI,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AAC/D,EAAA,OAAOC,YAAA;AAAA,IACL;AAAA,MACE,QAAA,EAAU;AAAA,QACR,WAAA,EAAa;AAAA,UACX,CAACC,gCAAmB,GAAG,QAAA;AAAA,UACvB,CAACC,uCAA0B,GAAG;AAAA;AAChC;AACF,KACF;AAAA,IACA;AAAA,GACF;AACF;;"}

package/dist/processors/LdapOrgReaderProcessor.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"LdapOrgReaderProcessor.cjs.js","sources":["../../src/processors/LdapOrgReaderProcessor.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport {\n  GroupTransformer,\n  LdapClient,\n  LdapProviderConfig,\n  readLdapLegacyConfig,\n  readLdapOrg,\n  UserTransformer,\n} from '../ldap';\nimport {\n  CatalogProcessor,\n  CatalogProcessorEmit,\n  processingResult,\n} from '@backstage/plugin-catalog-node';\nimport { LocationSpec } from '@backstage/plugin-catalog-common';\nimport { LoggerService } from '@backstage/backend-plugin-api';\n\n/**\n * Extracts teams and users out of an LDAP server.\n *\n * @public\n */\nexport class LdapOrgReaderProcessor implements CatalogProcessor {\n  private readonly providers: LdapProviderConfig[];\n  private readonly logger: LoggerService;\n  private readonly groupTransformer?: GroupTransformer;\n  private readonly userTransformer?: UserTransformer;\n\n  static fromConfig(\n    configRoot: Config,\n    options: {\n      logger: LoggerService;\n      groupTransformer?: GroupTransformer;\n      userTransformer?: UserTransformer;\n    },\n  ) {\n    // TODO(freben): Deprecate the old catalog.processors.ldapOrg config\n    const config =\n      configRoot.getOptionalConfig('ldap') ||\n      configRoot.getOptionalConfig('catalog.processors.ldapOrg');\n    return new LdapOrgReaderProcessor({\n      ...options,\n      providers: config ? readLdapLegacyConfig(config) : [],\n    });\n  }\n\n  constructor(options: {\n    providers: LdapProviderConfig[];\n    logger: LoggerService;\n    groupTransformer?: GroupTransformer;\n    userTransformer?: UserTransformer;\n  }) {\n    this.providers = options.providers;\n    this.logger = options.logger;\n    this.groupTransformer = options.groupTransformer;\n    this.userTransformer = options.userTransformer;\n  }\n\n  getProcessorName(): string {\n    return 'LdapOrgReaderProcessor';\n  }\n\n  async readLocation(\n    location: LocationSpec,\n    _optional: boolean,\n    emit: CatalogProcessorEmit,\n  ): Promise<boolean> {\n    if (location.type !== 'ldap-org') {\n      return false;\n    }\n\n    const provider = this.providers.find(p => location.target === p.target);\n    if (!provider) {\n      throw new Error(\n        `There is no LDAP configuration that matches \"${location.target}\". Please add a configuration entry for it under \"ldap.providers\".`,\n      );\n    }\n\n    // Read out all of the raw data\n    const startTimestamp = Date.now();\n    this.logger.info('Reading LDAP users and groups');\n\n    // Be lazy and create the client each time; even though it's pretty\n    // inefficient, we usually only do this once per entire refresh loop and\n    // don't have to worry about timeouts and reconnects etc.\n    const client = await LdapClient.create(\n      this.logger,\n      provider.target,\n      provider.bind,\n      provider.tls,\n    );\n    const { users, groups } = await readLdapOrg(\n      client,\n      provider.users,\n      provider.groups,\n      provider.vendor,\n      {\n        groupTransformer: this.groupTransformer,\n        userTransformer: this.userTransformer,\n        logger: this.logger,\n      },\n    );\n\n    const duration = ((Date.now() - startTimestamp) / 1000).toFixed(1);\n    this.logger.debug(\n      `Read ${users.length} LDAP users and ${groups.length} LDAP groups in ${duration} seconds`,\n    );\n\n    // Done!\n    for (const group of groups) {\n      emit(processingResult.entity(location, group));\n    }\n    for (const user of users) {\n      emit(processingResult.entity(location, user));\n    }\n\n    return true;\n  }\n}\n"],"names":["config","readLdapLegacyConfig","client","LdapClient","readLdapOrg","processingResult"],"mappings":";;;;;;;AAsCO,MAAM,sBAAA,CAAmD;AAAA,EAC7C,SAAA;AAAA,EACA,MAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EAEjB,OAAO,UAAA,CACL,UAAA,EACA,OAAA,EAKA;AAEA,IAAA,MAAMA,WACJ,UAAA,CAAW,iBAAA,CAAkB,MAAM,CAAA,IACnC,UAAA,CAAW,kBAAkB,4BAA4B,CAAA;AAC3D,IAAA,OAAO,IAAI,sBAAA,CAAuB;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,SAAA,EAAWA,QAAA,GAASC,2BAAA,CAAqBD,QAAM,IAAI;AAAC,KACrD,CAAA;AAAA,EACH;AAAA,EAEA,YAAY,OAAA,EAKT;AACD,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AACzB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,mBAAmB,OAAA,CAAQ,gBAAA;AAChC,IAAA,IAAA,CAAK,kBAAkB,OAAA,CAAQ,eAAA;AAAA,EACjC;AAAA,EAEA,gBAAA,GAA2B;AACzB,IAAA,OAAO,wBAAA;AAAA,EACT;AAAA,EAEA,MAAM,YAAA,CACJ,QAAA,EACA,SAAA,EACA,IAAA,EACkB;AAClB,IAAA,IAAI,QAAA,CAAS,SAAS,UAAA,EAAY;AAChC,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,QAAA,GAAW,KAAK,SAAA,CAAU,IAAA,CAAK,OAAK,QAAA,CAAS,MAAA,KAAW,EAAE,MAAM,CAAA;AACtE,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,6CAAA,EAAgD,SAAS,MAAM,CAAA,kEAAA;AAAA,OACjE;AAAA,IACF;AAGA,IAAA,MAAM,cAAA,GAAiB,KAAK,GAAA,EAAI;AAChC,IAAA,IAAA,CAAK,MAAA,CAAO,KAAK,+BAA+B,CAAA;AAKhD,IAAA,MAAME,QAAA,GAAS,MAAMC,iBAAA,CAAW,MAAA;AAAA,MAC9B,IAAA,CAAK,MAAA;AAAA,MACL,QAAA,CAAS,MAAA;AAAA,MACT,QAAA,CAAS,IAAA;AAAA,MACT,QAAA,CAAS;AAAA,KACX;AACA,IAAA,MAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,MAAMC,gBAAA;AAAA,MAC9BF,QAAA;AAAA,MACA,QAAA,CAAS,KAAA;AAAA,MACT,QAAA,CAAS,MAAA;AAAA,MACT,QAAA,CAAS,MAAA;AAAA,MACT;AAAA,QACE,kBAAkB,IAAA,CAAK,gBAAA;AAAA,QACvB,iBAAiB,IAAA,CAAK,eAAA;AAAA,QACtB,QAAQ,IAAA,CAAK;AAAA;AACf,KACF;AAEA,IAAA,MAAM,aAAa,IAAA,CAAK,GAAA,KAAQ,cAAA,IAAkB,GAAA,EAAM,QAAQ,CAAC,CAAA;AACjE,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,QAAQ,KAAA,CAAM,MAAM,mBAAmB,MAAA,CAAO,MAAM,mBAAmB,QAAQ,CAAA,QAAA;AAAA,KACjF;AAGA,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAA,CAAKG,kCAAA,CAAiB,MAAA,CAAO,QAAA,EAAU,KAAK,CAAC,CAAA;AAAA,IAC/C;AACA,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAA,CAAKA,kCAAA,CAAiB,MAAA,CAAO,QAAA,EAAU,IAAI,CAAC,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;;"}
+{"version":3,"file":"LdapOrgReaderProcessor.cjs.js","sources":["../../src/processors/LdapOrgReaderProcessor.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport {\n  GroupTransformer,\n  LdapClient,\n  LdapProviderConfig,\n  readLdapLegacyConfig,\n  readLdapOrg,\n  UserTransformer,\n} from '../ldap';\nimport {\n  CatalogProcessor,\n  CatalogProcessorEmit,\n  processingResult,\n} from '@backstage/plugin-catalog-node';\nimport { LocationSpec } from '@backstage/plugin-catalog-common';\nimport { LoggerService } from '@backstage/backend-plugin-api';\n\n/**\n * Extracts teams and users out of an LDAP server.\n *\n * @public\n */\nexport class LdapOrgReaderProcessor implements CatalogProcessor {\n  private readonly providers: LdapProviderConfig[];\n  private readonly logger: LoggerService;\n  private readonly groupTransformer?: GroupTransformer;\n  private readonly userTransformer?: UserTransformer;\n\n  static fromConfig(\n    configRoot: Config,\n    options: {\n      logger: LoggerService;\n      groupTransformer?: GroupTransformer;\n      userTransformer?: UserTransformer;\n    },\n  ) {\n    // TODO(freben): Deprecate the old catalog.processors.ldapOrg config\n    const config =\n      configRoot.getOptionalConfig('ldap') ||\n      configRoot.getOptionalConfig('catalog.processors.ldapOrg');\n    return new LdapOrgReaderProcessor({\n      ...options,\n      providers: config ? readLdapLegacyConfig(config) : [],\n    });\n  }\n\n  constructor(options: {\n    providers: LdapProviderConfig[];\n    logger: LoggerService;\n    groupTransformer?: GroupTransformer;\n    userTransformer?: UserTransformer;\n  }) {\n    this.providers = options.providers;\n    this.logger = options.logger;\n    this.groupTransformer = options.groupTransformer;\n    this.userTransformer = options.userTransformer;\n  }\n\n  getProcessorName(): string {\n    return 'LdapOrgReaderProcessor';\n  }\n\n  async readLocation(\n    location: LocationSpec,\n    _optional: boolean,\n    emit: CatalogProcessorEmit,\n  ): Promise<boolean> {\n    if (location.type !== 'ldap-org') {\n      return false;\n    }\n\n    const provider = this.providers.find(p => location.target === p.target);\n    if (!provider) {\n      throw new Error(\n        `There is no LDAP configuration that matches \"${location.target}\". Please add a configuration entry for it under \"ldap.providers\".`,\n      );\n    }\n\n    // Read out all of the raw data\n    const startTimestamp = Date.now();\n    this.logger.info('Reading LDAP users and groups');\n\n    // Be lazy and create the client each time; even though it's pretty\n    // inefficient, we usually only do this once per entire refresh loop and\n    // don't have to worry about timeouts and reconnects etc.\n    const client = await LdapClient.create(\n      this.logger,\n      provider.target,\n      provider.bind,\n      provider.tls,\n    );\n    const { users, groups } = await readLdapOrg(\n      client,\n      provider.users,\n      provider.groups,\n      provider.vendor,\n      {\n        groupTransformer: this.groupTransformer,\n        userTransformer: this.userTransformer,\n        logger: this.logger,\n      },\n    );\n\n    const duration = ((Date.now() - startTimestamp) / 1000).toFixed(1);\n    this.logger.debug(\n      `Read ${users.length} LDAP users and ${groups.length} LDAP groups in ${duration} seconds`,\n    );\n\n    // Done!\n    for (const group of groups) {\n      emit(processingResult.entity(location, group));\n    }\n    for (const user of users) {\n      emit(processingResult.entity(location, user));\n    }\n\n    return true;\n  }\n}\n"],"names":["config","readLdapLegacyConfig","client","LdapClient","readLdapOrg","processingResult"],"mappings":";;;;;;;AAsCO,MAAM,sBAAA,CAAmD;AAAA,EAC7C,SAAA;AAAA,EACA,MAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EAEjB,OAAO,UAAA,CACL,UAAA,EACA,OAAA,EAKA;AAEA,IAAA,MAAMA,WACJ,UAAA,CAAW,iBAAA,CAAkB,MAAM,CAAA,IACnC,UAAA,CAAW,kBAAkB,4BAA4B,CAAA;AAC3D,IAAA,OAAO,IAAI,sBAAA,CAAuB;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,SAAA,EAAWA,QAAA,GAASC,2BAAA,CAAqBD,QAAM,IAAI;AAAC,KACrD,CAAA;AAAA,EACH;AAAA,EAEA,YAAY,OAAA,EAKT;AACD,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AACzB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,mBAAmB,OAAA,CAAQ,gBAAA;AAChC,IAAA,IAAA,CAAK,kBAAkB,OAAA,CAAQ,eAAA;AAAA,EACjC;AAAA,EAEA,gBAAA,GAA2B;AACzB,IAAA,OAAO,wBAAA;AAAA,EACT;AAAA,EAEA,MAAM,YAAA,CACJ,QAAA,EACA,SAAA,EACA,IAAA,EACkB;AAClB,IAAA,IAAI,QAAA,CAAS,SAAS,UAAA,EAAY;AAChC,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,QAAA,GAAW,KAAK,SAAA,CAAU,IAAA,CAAK,OAAK,QAAA,CAAS,MAAA,KAAW,EAAE,MAAM,CAAA;AACtE,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,6CAAA,EAAgD,SAAS,MAAM,CAAA,kEAAA;AAAA,OACjE;AAAA,IACF;AAGA,IAAA,MAAM,cAAA,GAAiB,KAAK,GAAA,EAAI;AAChC,IAAA,IAAA,CAAK,MAAA,CAAO,KAAK,+BAA+B,CAAA;AAKhD,IAAA,MAAME,QAAA,GAAS,MAAMC,iBAAA,CAAW,MAAA;AAAA,MAC9B,IAAA,CAAK,MAAA;AAAA,MACL,QAAA,CAAS,MAAA;AAAA,MACT,QAAA,CAAS,IAAA;AAAA,MACT,QAAA,CAAS;AAAA,KACX;AACA,IAAA,MAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,MAAMC,gBAAA;AAAA,MAC9BF,QAAA;AAAA,MACA,QAAA,CAAS,KAAA;AAAA,MACT,QAAA,CAAS,MAAA;AAAA,MACT,QAAA,CAAS,MAAA;AAAA,MACT;AAAA,QACE,kBAAkB,IAAA,CAAK,gBAAA;AAAA,QACvB,iBAAiB,IAAA,CAAK,eAAA;AAAA,QACtB,QAAQ,IAAA,CAAK;AAAA;AACf,KACF;AAEA,IAAA,MAAM,aAAa,IAAA,CAAK,GAAA,KAAQ,cAAA,IAAkB,GAAA,EAAM,QAAQ,CAAC,CAAA;AACjE,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,QAAQ,KAAA,CAAM,MAAM,mBAAmB,MAAA,CAAO,MAAM,mBAAmB,QAAQ,CAAA,QAAA;AAAA,KACjF;AAGA,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAA,CAAKG,kCAAA,CAAiB,MAAA,CAAO,QAAA,EAAU,KAAK,CAAC,CAAA;AAAA,IAC/C;AACA,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAA,CAAKA,kCAAA,CAAiB,MAAA,CAAO,QAAA,EAAU,IAAI,CAAC,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-catalog-backend-module-ldap",
-  "version": "0.12.9",
+  "version": "0.12.10-next.0",
   "description": "A Backstage catalog backend module that helps integrate towards LDAP",
   "backstage": {
     "role": "backend-plugin-module",
@@ -41,18 +41,18 @@
     "test": "backstage-cli package test"
   },
   "dependencies": {
-    "@backstage/backend-plugin-api": "^1.10.1",
-    "@backstage/catalog-model": "^1.10.1",
-    "@backstage/config": "^1.3.9",
-    "@backstage/errors": "^1.3.1",
-    "@backstage/plugin-catalog-common": "^1.2.0",
-    "@backstage/plugin-catalog-node": "^2.2.5",
-    "@backstage/types": "^1.2.2",
+    "@backstage/backend-plugin-api": "1.10.2-next.0",
+    "@backstage/catalog-model": "1.10.2-next.0",
+    "@backstage/config": "1.3.10-next.0",
+    "@backstage/errors": "1.3.2-next.0",
+    "@backstage/plugin-catalog-common": "1.2.1-next.0",
+    "@backstage/plugin-catalog-node": "2.2.6-next.0",
+    "@backstage/types": "1.2.2",
     "ldapts": "^8.0.6",
     "lodash": "^4.17.21"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.36.6",
+    "@backstage/cli": "0.36.7-next.0",
     "@types/lodash": "^4.14.151"
   },
   "configSchema": "config.schema.json",

package/dist/ldap/org.cjs.js

@@ -1,29 +0,0 @@
-'use strict';
-
-var catalogModel = require('@backstage/catalog-model');
-
-function buildOrgHierarchy(groups) {
-  const groupsByRef = new Map(groups.map((g) => [catalogModel.stringifyEntityRef(g), g]));
-  for (const group of groups) {
-    const selfRef = catalogModel.stringifyEntityRef(group);
-    const parentRef = group.spec.parent;
-    if (parentRef) {
-      const parent = groupsByRef.get(parentRef);
-      if (parent && !parent.spec.children.includes(selfRef)) {
-        parent.spec.children.push(selfRef);
-      }
-    }
-  }
-  for (const group of groups) {
-    const selfRef = catalogModel.stringifyEntityRef(group);
-    for (const childRef of group.spec.children) {
-      const child = groupsByRef.get(childRef);
-      if (child && !child.spec.parent) {
-        child.spec.parent = selfRef;
-      }
-    }
-  }
-}
-
-exports.buildOrgHierarchy = buildOrgHierarchy;
-//# sourceMappingURL=org.cjs.js.map

package/dist/ldap/org.cjs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"org.cjs.js","sources":["../../src/ldap/org.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  GroupEntity,\n  stringifyEntityRef,\n  UserEntity,\n} from '@backstage/catalog-model';\n\n// TODO: Copied from plugin-catalog-backend, but we could also export them from\n// there. Or move them to catalog-model.\n\nexport function buildOrgHierarchy(groups: GroupEntity[]) {\n  const groupsByRef = new Map(groups.map(g => [stringifyEntityRef(g), g]));\n\n  //\n  // Make sure that g.parent.children contain g\n  //\n\n  for (const group of groups) {\n    const selfRef = stringifyEntityRef(group);\n    const parentRef = group.spec.parent;\n    if (parentRef) {\n      const parent = groupsByRef.get(parentRef);\n      if (parent && !parent.spec.children.includes(selfRef)) {\n        parent.spec.children.push(selfRef);\n      }\n    }\n  }\n\n  //\n  // Make sure that g.children.parent is g\n  //\n\n  for (const group of groups) {\n    const selfRef = stringifyEntityRef(group);\n    for (const childRef of group.spec.children) {\n      const child = groupsByRef.get(childRef);\n      if (child && !child.spec.parent) {\n        child.spec.parent = selfRef;\n      }\n    }\n  }\n}\n\n// Ensure that users have their transitive group memberships. Requires that\n// the groups were previously processed with buildOrgHierarchy()\nexport function buildMemberOf(groups: GroupEntity[], users: UserEntity[]) {\n  const groupsByRef = new Map(groups.map(g => [stringifyEntityRef(g), g]));\n\n  users.forEach(user => {\n    const transitiveMemberOf = new Set<string>();\n\n    const todo = [\n      ...(user.spec.memberOf ?? []),\n      ...groups\n        .filter(g => g.spec.members?.includes(stringifyEntityRef(user)))\n        .map(g => stringifyEntityRef(g)),\n    ];\n\n    for (;;) {\n      const current = todo.pop();\n      if (!current) {\n        break;\n      }\n\n      if (!transitiveMemberOf.has(current)) {\n        transitiveMemberOf.add(current);\n        const group = groupsByRef.get(current);\n        if (group?.spec.parent) {\n          todo.push(group.spec.parent);\n        }\n      }\n    }\n\n    user.spec.memberOf = [...transitiveMemberOf];\n  });\n}\n"],"names":["stringifyEntityRef"],"mappings":";;;;AAyBO,SAAS,kBAAkB,MAAA,EAAuB;AACvD,EAAA,MAAM,WAAA,GAAc,IAAI,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,CAAA,CAAA,KAAK,CAACA,+BAAA,CAAmB,CAAC,CAAA,EAAG,CAAC,CAAC,CAAC,CAAA;AAMvE,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,MAAM,OAAA,GAAUA,gCAAmB,KAAK,CAAA;AACxC,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,MAAA;AAC7B,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAA,CAAI,SAAS,CAAA;AACxC,MAAA,IAAI,UAAU,CAAC,MAAA,CAAO,KAAK,QAAA,CAAS,QAAA,CAAS,OAAO,CAAA,EAAG;AACrD,QAAA,MAAA,CAAO,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAMA,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,MAAM,OAAA,GAAUA,gCAAmB,KAAK,CAAA;AACxC,IAAA,KAAA,MAAW,QAAA,IAAY,KAAA,CAAM,IAAA,CAAK,QAAA,EAAU;AAC1C,MAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,GAAA,CAAI,QAAQ,CAAA;AACtC,MAAA,IAAI,KAAA,IAAS,CAAC,KAAA,CAAM,IAAA,CAAK,MAAA,EAAQ;AAC/B,QAAA,KAAA,CAAM,KAAK,MAAA,GAAS,OAAA;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AACF;;;;"}