@sync-in/server 1.10.1 → 2.0.0

package/server/authentication/providers/ldap/auth-ldap.config.js

@@ -0,0 +1,143 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get AuthProviderLDAPAttributesConfig () {
+        return AuthProviderLDAPAttributesConfig;
+    },
+    get AuthProviderLDAPConfig () {
+        return AuthProviderLDAPConfig;
+    },
+    get AuthProviderLDAPOptionsConfig () {
+        return AuthProviderLDAPOptionsConfig;
+    }
+});
+const _classtransformer = require("class-transformer");
+const _classvalidator = require("class-validator");
+const _user = require("../../../applications/users/constants/user");
+const _authldapconstants = require("./auth-ldap.constants");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let AuthProviderLDAPAttributesConfig = class AuthProviderLDAPAttributesConfig {
+    constructor(){
+        this.login = _authldapconstants.LDAP_LOGIN_ATTR.UID;
+        this.email = _authldapconstants.LDAP_COMMON_ATTR.MAIL;
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classtransformer.Transform)(({ value })=>value || _authldapconstants.LDAP_LOGIN_ATTR.UID),
+    (0, _classvalidator.IsEnum)(_authldapconstants.LDAP_LOGIN_ATTR),
+    _ts_metadata("design:type", typeof _authldapconstants.LDAP_LOGIN_ATTR === "undefined" ? Object : _authldapconstants.LDAP_LOGIN_ATTR)
+], AuthProviderLDAPAttributesConfig.prototype, "login", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classtransformer.Transform)(({ value })=>value || _authldapconstants.LDAP_COMMON_ATTR.MAIL),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPAttributesConfig.prototype, "email", void 0);
+let AuthProviderLDAPOptionsConfig = class AuthProviderLDAPOptionsConfig {
+    constructor(){
+        this.autoCreateUser = true;
+        this.autoCreatePermissions = [];
+        this.enablePasswordAuthFallback = true;
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPOptionsConfig.prototype, "adminGroup", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsBoolean)()
+], AuthProviderLDAPOptionsConfig.prototype, "autoCreateUser", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsArray)(),
+    (0, _classvalidator.IsEnum)(_user.USER_PERMISSION, {
+        each: true
+    }),
+    _ts_metadata("design:type", Array)
+], AuthProviderLDAPOptionsConfig.prototype, "autoCreatePermissions", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsBoolean)()
+], AuthProviderLDAPOptionsConfig.prototype, "enablePasswordAuthFallback", void 0);
+let AuthProviderLDAPConfig = class AuthProviderLDAPConfig {
+    constructor(){
+        this.attributes = new AuthProviderLDAPAttributesConfig();
+        this.options = new AuthProviderLDAPOptionsConfig();
+    }
+};
+_ts_decorate([
+    (0, _classtransformer.Transform)(({ value })=>Array.isArray(value) ? value.filter((v)=>Boolean(v)) : value),
+    (0, _classvalidator.ArrayNotEmpty)(),
+    (0, _classvalidator.IsArray)(),
+    (0, _classvalidator.IsString)({
+        each: true
+    }),
+    _ts_metadata("design:type", Array)
+], AuthProviderLDAPConfig.prototype, "servers", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPConfig.prototype, "baseDN", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPConfig.prototype, "filter", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthProviderLDAPAttributesConfig),
+    _ts_metadata("design:type", typeof AuthProviderLDAPAttributesConfig === "undefined" ? Object : AuthProviderLDAPAttributesConfig)
+], AuthProviderLDAPConfig.prototype, "attributes", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPConfig.prototype, "upnSuffix", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPConfig.prototype, "netbiosName", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPConfig.prototype, "serviceBindDN", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AuthProviderLDAPConfig.prototype, "serviceBindPassword", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>AuthProviderLDAPOptionsConfig),
+    _ts_metadata("design:type", typeof AuthProviderLDAPOptionsConfig === "undefined" ? Object : AuthProviderLDAPOptionsConfig)
+], AuthProviderLDAPConfig.prototype, "options", void 0);
+
+//# sourceMappingURL=auth-ldap.config.js.map

package/server/authentication/providers/ldap/auth-ldap.config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/authentication/providers/ldap/auth-ldap.config.ts"],"sourcesContent":["import { Transform, Type } from 'class-transformer'\nimport {\n  ArrayNotEmpty,\n  IsArray,\n  IsBoolean,\n  IsDefined,\n  IsEnum,\n  IsNotEmpty,\n  IsNotEmptyObject,\n  IsObject,\n  IsOptional,\n  IsString,\n  ValidateNested\n} from 'class-validator'\nimport { USER_PERMISSION } from '../../../applications/users/constants/user'\nimport { LDAP_COMMON_ATTR, LDAP_LOGIN_ATTR } from './auth-ldap.constants'\n\nexport class AuthProviderLDAPAttributesConfig {\n  @IsOptional()\n  @Transform(({ value }) => value || LDAP_LOGIN_ATTR.UID)\n  @IsEnum(LDAP_LOGIN_ATTR)\n  login: LDAP_LOGIN_ATTR = LDAP_LOGIN_ATTR.UID\n\n  @IsOptional()\n  @IsString()\n  @Transform(({ value }) => value || LDAP_COMMON_ATTR.MAIL)\n  email: string = LDAP_COMMON_ATTR.MAIL\n}\n\nexport class AuthProviderLDAPOptionsConfig {\n  @IsOptional()\n  @IsString()\n  adminGroup?: string\n\n  @IsOptional()\n  @IsBoolean()\n  autoCreateUser? = true\n\n  @IsOptional()\n  @IsArray()\n  @IsEnum(USER_PERMISSION, { each: true })\n  autoCreatePermissions?: USER_PERMISSION[] = []\n\n  @IsOptional()\n  @IsBoolean()\n  enablePasswordAuthFallback? = true\n}\n\nexport class AuthProviderLDAPConfig {\n  @Transform(({ value }) => (Array.isArray(value) ? value.filter((v: string) => Boolean(v)) : value))\n  @ArrayNotEmpty()\n  @IsArray()\n  @IsString({ each: true })\n  servers: string[]\n\n  @IsString()\n  @IsNotEmpty()\n  baseDN: string\n\n  @IsOptional()\n  @IsString()\n  filter?: string\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthProviderLDAPAttributesConfig)\n  attributes: AuthProviderLDAPAttributesConfig = new AuthProviderLDAPAttributesConfig()\n\n  @IsOptional()\n  @IsString()\n  upnSuffix?: string\n\n  @IsOptional()\n  @IsString()\n  netbiosName?: string\n\n  @IsOptional()\n  @IsString()\n  serviceBindDN?: string\n\n  @IsOptional()\n  @IsString()\n  serviceBindPassword?: string\n\n  @IsDefined()\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => AuthProviderLDAPOptionsConfig)\n  options: AuthProviderLDAPOptionsConfig = new AuthProviderLDAPOptionsConfig()\n}\n"],"names":["AuthProviderLDAPAttributesConfig","AuthProviderLDAPConfig","AuthProviderLDAPOptionsConfig","login","LDAP_LOGIN_ATTR","UID","email","LDAP_COMMON_ATTR","MAIL","value","autoCreateUser","autoCreatePermissions","enablePasswordAuthFallback","each","attributes","options","Array","isArray","filter","v","Boolean"],"mappings":";;;;;;;;;;;QAiBaA;eAAAA;;QA+BAC;eAAAA;;QAnBAC;eAAAA;;;kCA7BmB;gCAazB;sBACyB;mCACkB;;;;;;;;;;AAE3C,IAAA,AAAMF,mCAAN,MAAMA;;aAIXG,QAAyBC,kCAAe,CAACC,GAAG;aAK5CC,QAAgBC,mCAAgB,CAACC,IAAI;;AACvC;;;sCARc,EAAEC,KAAK,EAAE,GAAKA,SAASL,kCAAe,CAACC,GAAG;;;;;;;sCAM1C,EAAEI,KAAK,EAAE,GAAKA,SAASF,mCAAgB,CAACC,IAAI;;;AAInD,IAAA,AAAMN,gCAAN,MAAMA;;aAOXQ,iBAAkB;aAKlBC,wBAA4C,EAAE;aAI9CC,6BAA8B;;AAChC;;;;;;;;;;;;;;QAN6BC,MAAM;;;;;;;;AAQ5B,IAAA,AAAMZ,yBAAN,MAAMA;;aAoBXa,aAA+C,IAAId;aAuBnDe,UAAyC,IAAIb;;AAC/C;;sCA3Cc,EAAEO,KAAK,EAAE,GAAMO,MAAMC,OAAO,CAACR,SAASA,MAAMS,MAAM,CAAC,CAACC,IAAcC,QAAQD,MAAMV;;;;QAGhFI,MAAM;;;;;;;;;;;;;;;;;;;oCAeNb;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCAuBAE"}

package/server/authentication/{constants/auth-ldap.js → providers/ldap/auth-ldap.constants.js}

@@ -1,8 +1,4 @@
-/*
- * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
- * This file is part of Sync-in | The open source file sync and share solution
- * See the LICENSE file for licensing details
- */ "use strict";
+"use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
@@ -21,6 +17,9 @@ _export(exports, {
     },
     get LDAP_LOGIN_ATTR () {
         return LDAP_LOGIN_ATTR;
+    },
+    get LDAP_SEARCH_ATTR () {
+        return LDAP_SEARCH_ATTR;
     }
 });
 var LDAP_LOGIN_ATTR = /*#__PURE__*/ function(LDAP_LOGIN_ATTR) {
@@ -39,9 +38,16 @@ const LDAP_COMMON_ATTR = {
     DISPLAY_NAME: 'displayName',
     MEMBER_OF: 'memberOf'
 };
+const LDAP_SEARCH_ATTR = {
+    BASE: 'base',
+    SUB: 'sub',
+    GROUP_OF_NAMES: 'groupOfNames',
+    OBJECT_CLASS: 'objectClass',
+    MEMBER: 'member'
+};
 const ALL_LDAP_ATTRIBUTES = [
     ...Object.values(LDAP_LOGIN_ATTR),
     ...Object.values(LDAP_COMMON_ATTR)
 ];
 
-//# sourceMappingURL=auth-ldap.js.map
+//# sourceMappingURL=auth-ldap.constants.js.map

package/server/authentication/providers/ldap/auth-ldap.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/authentication/providers/ldap/auth-ldap.constants.ts"],"sourcesContent":["export enum LDAP_LOGIN_ATTR {\n  UID = 'uid',\n  CN = 'cn',\n  MAIL = 'mail',\n  SAM = 'sAMAccountName',\n  UPN = 'userPrincipalName'\n}\n\nexport const LDAP_COMMON_ATTR = {\n  MAIL: 'mail',\n  GIVEN_NAME: 'givenName',\n  SN: 'sn',\n  CN: 'cn',\n  DISPLAY_NAME: 'displayName',\n  MEMBER_OF: 'memberOf'\n} as const\n\nexport const LDAP_SEARCH_ATTR = {\n  BASE: 'base',\n  SUB: 'sub',\n  GROUP_OF_NAMES: 'groupOfNames',\n  OBJECT_CLASS: 'objectClass',\n  MEMBER: 'member'\n} as const\n\nexport const ALL_LDAP_ATTRIBUTES = [...Object.values(LDAP_LOGIN_ATTR), ...Object.values(LDAP_COMMON_ATTR)]\n"],"names":["ALL_LDAP_ATTRIBUTES","LDAP_COMMON_ATTR","LDAP_LOGIN_ATTR","LDAP_SEARCH_ATTR","MAIL","GIVEN_NAME","SN","CN","DISPLAY_NAME","MEMBER_OF","BASE","SUB","GROUP_OF_NAMES","OBJECT_CLASS","MEMBER","Object","values"],"mappings":";;;;;;;;;;;QAyBaA;eAAAA;;QAjBAC;eAAAA;;QARDC;eAAAA;;QAiBCC;eAAAA;;;AAjBN,IAAA,AAAKD,yCAAAA;;;;;;WAAAA;;AAQL,MAAMD,mBAAmB;IAC9BG,MAAM;IACNC,YAAY;IACZC,IAAI;IACJC,IAAI;IACJC,cAAc;IACdC,WAAW;AACb;AAEO,MAAMN,mBAAmB;IAC9BO,MAAM;IACNC,KAAK;IACLC,gBAAgB;IAChBC,cAAc;IACdC,QAAQ;AACV;AAEO,MAAMd,sBAAsB;OAAIe,OAAOC,MAAM,CAACd;OAAqBa,OAAOC,MAAM,CAACf;CAAkB"}