n8n 1.56.2 → 1.58.0

package/dist/ldap/helpers.ee.js

@@ -0,0 +1,243 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteAllLdapIdentities = exports.updateLdapUserOnLocalDb = exports.createLdapUserOnLocalDb = exports.createLdapAuthIdentity = exports.getMappingAttributes = exports.formatUrl = exports.getLdapSynchronizations = exports.saveLdapSynchronization = exports.processUsers = exports.mapLdapUserToDbUser = exports.getLdapUsers = exports.getLdapIds = exports.mapLdapAttributesToUser = exports.getUserByEmail = exports.getAuthIdentityByLdapId = exports.escapeFilter = exports.createFilter = exports.resolveBinaryAttributes = exports.resolveEntryBinaryAttributes = exports.validateLdapConfigurationSchema = exports.isLdapLoginEnabled = exports.getLdapLoginLabel = exports.isLdapEnabled = void 0;
+const Filter_1 = require("ldapts/filters/Filter");
+const typedi_1 = require("typedi");
+const jsonschema_1 = require("jsonschema");
+const n8n_workflow_1 = require("n8n-workflow");
+const Db = __importStar(require("../db"));
+const config_1 = __importDefault(require("../config"));
+const user_1 = require("../databases/entities/user");
+const auth_identity_1 = require("../databases/entities/auth-identity");
+const constants_1 = require("./constants");
+const license_1 = require("../license");
+const user_repository_1 = require("../databases/repositories/user.repository");
+const auth_provider_sync_history_repository_1 = require("../databases/repositories/auth-provider-sync-history.repository");
+const auth_identity_repository_1 = require("../databases/repositories/auth-identity.repository");
+const isLdapEnabled = () => {
+    return typedi_1.Container.get(license_1.License).isLdapEnabled();
+};
+exports.isLdapEnabled = isLdapEnabled;
+const getLdapLoginLabel = () => config_1.default.getEnv(constants_1.LDAP_LOGIN_LABEL);
+exports.getLdapLoginLabel = getLdapLoginLabel;
+const isLdapLoginEnabled = () => config_1.default.getEnv(constants_1.LDAP_LOGIN_ENABLED);
+exports.isLdapLoginEnabled = isLdapLoginEnabled;
+const validateLdapConfigurationSchema = (ldapConfig) => {
+    const { valid, errors } = (0, jsonschema_1.validate)(ldapConfig, constants_1.LDAP_CONFIG_SCHEMA, { nestedErrors: true });
+    let message = '';
+    if (!valid) {
+        message = errors.map((error) => `request.body.${error.path[0]} ${error.message}`).join(',');
+    }
+    return { valid, message };
+};
+exports.validateLdapConfigurationSchema = validateLdapConfigurationSchema;
+const resolveEntryBinaryAttributes = (entry) => {
+    Object.entries(entry)
+        .filter(([k]) => constants_1.BINARY_AD_ATTRIBUTES.includes(k))
+        .forEach(([k]) => {
+        entry[k] = entry[k].toString('hex');
+    });
+    return entry;
+};
+exports.resolveEntryBinaryAttributes = resolveEntryBinaryAttributes;
+const resolveBinaryAttributes = (entries) => {
+    entries.forEach((entry) => (0, exports.resolveEntryBinaryAttributes)(entry));
+};
+exports.resolveBinaryAttributes = resolveBinaryAttributes;
+const createFilter = (filter, userFilter) => {
+    let _filter = `(&(|(objectClass=person)(objectClass=user))${filter})`;
+    if (userFilter) {
+        _filter = `(&${userFilter}${filter}`;
+    }
+    return _filter;
+};
+exports.createFilter = createFilter;
+const escapeFilter = (filter) => {
+    return new Filter_1.Filter().escape(filter);
+};
+exports.escapeFilter = escapeFilter;
+const getAuthIdentityByLdapId = async (idAttributeValue) => {
+    return await typedi_1.Container.get(auth_identity_repository_1.AuthIdentityRepository).findOne({
+        relations: { user: true },
+        where: {
+            providerId: idAttributeValue,
+            providerType: 'ldap',
+        },
+    });
+};
+exports.getAuthIdentityByLdapId = getAuthIdentityByLdapId;
+const getUserByEmail = async (email) => {
+    return await typedi_1.Container.get(user_repository_1.UserRepository).findOne({
+        where: { email },
+    });
+};
+exports.getUserByEmail = getUserByEmail;
+const mapLdapAttributesToUser = (ldapUser, ldapConfig) => {
+    return [
+        ldapUser[ldapConfig.ldapIdAttribute],
+        {
+            email: ldapUser[ldapConfig.emailAttribute],
+            firstName: ldapUser[ldapConfig.firstNameAttribute],
+            lastName: ldapUser[ldapConfig.lastNameAttribute],
+        },
+    ];
+};
+exports.mapLdapAttributesToUser = mapLdapAttributesToUser;
+const getLdapIds = async () => {
+    const identities = await typedi_1.Container.get(auth_identity_repository_1.AuthIdentityRepository).find({
+        select: ['providerId'],
+        where: {
+            providerType: 'ldap',
+        },
+    });
+    return identities.map((i) => i.providerId);
+};
+exports.getLdapIds = getLdapIds;
+const getLdapUsers = async () => {
+    const identities = await typedi_1.Container.get(auth_identity_repository_1.AuthIdentityRepository).find({
+        relations: { user: true },
+        where: {
+            providerType: 'ldap',
+        },
+    });
+    return identities.map((i) => i.user);
+};
+exports.getLdapUsers = getLdapUsers;
+const mapLdapUserToDbUser = (ldapUser, ldapConfig, toCreate = false) => {
+    const user = new user_1.User();
+    const [ldapId, data] = (0, exports.mapLdapAttributesToUser)(ldapUser, ldapConfig);
+    Object.assign(user, data);
+    if (toCreate) {
+        user.role = 'global:member';
+        user.password = (0, n8n_workflow_1.randomString)(8);
+        user.disabled = false;
+    }
+    else {
+        user.disabled = true;
+    }
+    return [ldapId, user];
+};
+exports.mapLdapUserToDbUser = mapLdapUserToDbUser;
+const processUsers = async (toCreateUsers, toUpdateUsers, toDisableUsers) => {
+    const userRepository = typedi_1.Container.get(user_repository_1.UserRepository);
+    await Db.transaction(async (transactionManager) => {
+        return await Promise.all([
+            ...toCreateUsers.map(async ([ldapId, user]) => {
+                const { user: savedUser } = await userRepository.createUserWithProject(user, transactionManager);
+                const authIdentity = auth_identity_1.AuthIdentity.create(savedUser, ldapId);
+                return await transactionManager.save(authIdentity);
+            }),
+            ...toUpdateUsers.map(async ([ldapId, user]) => {
+                const authIdentity = await transactionManager.findOneBy(auth_identity_1.AuthIdentity, {
+                    providerId: ldapId,
+                });
+                if (authIdentity?.userId) {
+                    await transactionManager.update(user_1.User, { id: authIdentity.userId }, { email: user.email, firstName: user.firstName, lastName: user.lastName });
+                }
+            }),
+            ...toDisableUsers.map(async (ldapId) => {
+                const authIdentity = await transactionManager.findOneBy(auth_identity_1.AuthIdentity, {
+                    providerId: ldapId,
+                });
+                if (authIdentity?.userId) {
+                    const user = await transactionManager.findOneBy(user_1.User, { id: authIdentity.userId });
+                    if (user) {
+                        user.disabled = true;
+                        await transactionManager.save(user);
+                    }
+                    await transactionManager.delete(auth_identity_1.AuthIdentity, { userId: authIdentity?.userId });
+                }
+            }),
+        ]);
+    });
+};
+exports.processUsers = processUsers;
+const saveLdapSynchronization = async (data) => {
+    await typedi_1.Container.get(auth_provider_sync_history_repository_1.AuthProviderSyncHistoryRepository).save({
+        ...data,
+        providerType: 'ldap',
+    }, { transaction: false });
+};
+exports.saveLdapSynchronization = saveLdapSynchronization;
+const getLdapSynchronizations = async (page, perPage) => {
+    const _page = Math.abs(page);
+    return await typedi_1.Container.get(auth_provider_sync_history_repository_1.AuthProviderSyncHistoryRepository).find({
+        where: { providerType: 'ldap' },
+        order: { id: 'DESC' },
+        take: perPage,
+        skip: _page * perPage,
+    });
+};
+exports.getLdapSynchronizations = getLdapSynchronizations;
+const formatUrl = (url, port, security) => {
+    const protocol = ['tls'].includes(security) ? 'ldaps' : 'ldap';
+    return `${protocol}://${url}:${port}`;
+};
+exports.formatUrl = formatUrl;
+const getMappingAttributes = (ldapConfig) => {
+    return [
+        ldapConfig.emailAttribute,
+        ldapConfig.ldapIdAttribute,
+        ldapConfig.firstNameAttribute,
+        ldapConfig.lastNameAttribute,
+        ldapConfig.emailAttribute,
+    ];
+};
+exports.getMappingAttributes = getMappingAttributes;
+const createLdapAuthIdentity = async (user, ldapId) => {
+    return await typedi_1.Container.get(auth_identity_repository_1.AuthIdentityRepository).save(auth_identity_1.AuthIdentity.create(user, ldapId), {
+        transaction: false,
+    });
+};
+exports.createLdapAuthIdentity = createLdapAuthIdentity;
+const createLdapUserOnLocalDb = async (data, ldapId) => {
+    const { user } = await typedi_1.Container.get(user_repository_1.UserRepository).createUserWithProject({
+        password: (0, n8n_workflow_1.randomString)(8),
+        role: 'global:member',
+        ...data,
+    });
+    await (0, exports.createLdapAuthIdentity)(user, ldapId);
+    return user;
+};
+exports.createLdapUserOnLocalDb = createLdapUserOnLocalDb;
+const updateLdapUserOnLocalDb = async (identity, data) => {
+    const userId = identity?.user?.id;
+    if (userId) {
+        const user = await typedi_1.Container.get(user_repository_1.UserRepository).findOneBy({ id: userId });
+        if (user) {
+            await typedi_1.Container.get(user_repository_1.UserRepository).save({ id: userId, ...data }, { transaction: true });
+        }
+    }
+};
+exports.updateLdapUserOnLocalDb = updateLdapUserOnLocalDb;
+const deleteAllLdapIdentities = async () => {
+    return await typedi_1.Container.get(auth_identity_repository_1.AuthIdentityRepository).delete({ providerType: 'ldap' });
+};
+exports.deleteAllLdapIdentities = deleteAllLdapIdentities;
+//# sourceMappingURL=helpers.ee.js.map

package/dist/ldap/helpers.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.ee.js","sourceRoot":"","sources":["../../src/ldap/helpers.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,kDAA+C;AAC/C,mCAAmC;AACnC,2CAAsC;AACtC,+CAA4C;AAE5C,yCAA2B;AAC3B,sDAA8B;AAC9B,oDAAiD;AACjD,sEAAkE;AAGlE,2CAKqB;AAErB,uCAAoC;AACpC,8EAA0E;AAC1E,0HAAmH;AACnH,gGAA2F;AAKpF,MAAM,aAAa,GAAG,GAAG,EAAE;IACjC,OAAO,kBAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,aAAa,EAAE,CAAC;AAC/C,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB;AAKK,MAAM,iBAAiB,GAAG,GAAW,EAAE,CAAC,gBAAM,CAAC,MAAM,CAAC,4BAAgB,CAAC,CAAC;AAAlE,QAAA,iBAAiB,qBAAiD;AAKxE,MAAM,kBAAkB,GAAG,GAAY,EAAE,CAAC,gBAAM,CAAC,MAAM,CAAC,8BAAkB,CAAC,CAAC;AAAtE,QAAA,kBAAkB,sBAAoD;AAK5E,MAAM,+BAA+B,GAAG,CAC9C,UAAsB,EACgB,EAAE;IACxC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAQ,EAAC,UAAU,EAAE,8BAAkB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3F,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC,CAAC;AAVW,QAAA,+BAA+B,mCAU1C;AAEK,MAAM,4BAA4B,GAAG,CAAC,KAAe,EAAY,EAAE;IACzE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;SACjD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;QAChB,KAAK,CAAC,CAAC,CAAC,GAAI,KAAK,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAPW,QAAA,4BAA4B,gCAOvC;AAEK,MAAM,uBAAuB,GAAG,CAAC,OAAmB,EAAQ,EAAE;IACpE,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,oCAA4B,EAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAFW,QAAA,uBAAuB,2BAElC;AAEK,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,UAAkB,EAAE,EAAE;IAClE,IAAI,OAAO,GAAG,8CAA8C,MAAM,GAAG,CAAC;IACtE,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,GAAG,KAAK,UAAU,GAAG,MAAM,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC,CAAC;AANW,QAAA,YAAY,gBAMvB;AAEK,MAAM,YAAY,GAAG,CAAC,MAAc,EAAU,EAAE;IAEtD,OAAO,IAAI,eAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CAAC;AAHW,QAAA,YAAY,gBAGvB;AAKK,MAAM,uBAAuB,GAAG,KAAK,EAC3C,gBAAwB,EACO,EAAE;IACjC,OAAO,MAAM,kBAAS,CAAC,GAAG,CAAC,iDAAsB,CAAC,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACzB,KAAK,EAAE;YACN,UAAU,EAAE,gBAAgB;YAC5B,YAAY,EAAE,MAAM;SACpB;KACD,CAAC,CAAC;AACJ,CAAC,CAAC;AAVW,QAAA,uBAAuB,2BAUlC;AAEK,MAAM,cAAc,GAAG,KAAK,EAAE,KAAa,EAAwB,EAAE;IAC3E,OAAO,MAAM,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC,OAAO,CAAC;QAClD,KAAK,EAAE,EAAE,KAAK,EAAE;KAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAJW,QAAA,cAAc,kBAIzB;AAMK,MAAM,uBAAuB,GAAG,CACtC,QAAkB,EAClB,UAAsB,EACyD,EAAE;IACjF,OAAO;QACN,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAW;QAC9C;YACC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAW;YACpD,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAW;YAC5D,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAW;SAC1D;KACD,CAAC;AACH,CAAC,CAAC;AAZW,QAAA,uBAAuB,2BAYlC;AAKK,MAAM,UAAU,GAAG,KAAK,IAAuB,EAAE;IACvD,MAAM,UAAU,GAAG,MAAM,kBAAS,CAAC,GAAG,CAAC,iDAAsB,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,EAAE,CAAC,YAAY,CAAC;QACtB,KAAK,EAAE;YACN,YAAY,EAAE,MAAM;SACpB;KACD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC,CAAC;AARW,QAAA,UAAU,cAQrB;AAEK,MAAM,YAAY,GAAG,KAAK,IAAqB,EAAE;IACvD,MAAM,UAAU,GAAG,MAAM,kBAAS,CAAC,GAAG,CAAC,iDAAsB,CAAC,CAAC,IAAI,CAAC;QACnE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACzB,KAAK,EAAE;YACN,YAAY,EAAE,MAAM;SACpB;KACD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC,CAAC;AARW,QAAA,YAAY,gBAQvB;AAKK,MAAM,mBAAmB,GAAG,CAClC,QAAkB,EAClB,UAAsB,EACtB,QAAQ,GAAG,KAAK,EACC,EAAE;IACnB,MAAM,IAAI,GAAG,IAAI,WAAI,EAAE,CAAC;IACxB,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,IAAA,+BAAuB,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAA,2BAAY,EAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACvB,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC,CAAC;AAhBW,QAAA,mBAAmB,uBAgB9B;AAOK,MAAM,YAAY,GAAG,KAAK,EAChC,aAAoC,EACpC,aAAoC,EACpC,cAAwB,EACR,EAAE;IAClB,MAAM,cAAc,GAAG,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE;QACjD,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC;YACxB,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC7C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CACrE,IAAI,EACJ,kBAAkB,CAClB,CAAC;gBACF,MAAM,YAAY,GAAG,4BAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC5D,OAAO,MAAM,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACpD,CAAC,CAAC;YACF,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC7C,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,4BAAY,EAAE;oBACrE,UAAU,EAAE,MAAM;iBAClB,CAAC,CAAC;gBACH,IAAI,YAAY,EAAE,MAAM,EAAE,CAAC;oBAC1B,MAAM,kBAAkB,CAAC,MAAM,CAC9B,WAAI,EACJ,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,EAC3B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CACzE,CAAC;gBACH,CAAC;YACF,CAAC,CAAC;YACF,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACtC,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,4BAAY,EAAE;oBACrE,UAAU,EAAE,MAAM;iBAClB,CAAC,CAAC;gBACH,IAAI,YAAY,EAAE,MAAM,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,WAAI,EAAE,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;oBAEnF,IAAI,IAAI,EAAE,CAAC;wBACV,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;wBACrB,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrC,CAAC;oBAED,MAAM,kBAAkB,CAAC,MAAM,CAAC,4BAAY,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjF,CAAC;YACF,CAAC,CAAC;SACF,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AA7CW,QAAA,YAAY,gBA6CvB;AAKK,MAAM,uBAAuB,GAAG,KAAK,EAC3C,IAA0D,EAC1C,EAAE;IAClB,MAAM,kBAAS,CAAC,GAAG,CAAC,yEAAiC,CAAC,CAAC,IAAI,CAC1D;QACC,GAAG,IAAI;QACP,YAAY,EAAE,MAAM;KACpB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;AACH,CAAC,CAAC;AAVW,QAAA,uBAAuB,2BAUlC;AAKK,MAAM,uBAAuB,GAAG,KAAK,EAC3C,IAAY,EACZ,OAAe,EACsB,EAAE;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,MAAM,kBAAS,CAAC,GAAG,CAAC,yEAAiC,CAAC,CAAC,IAAI,CAAC;QAClE,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE;QAC/B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;QACrB,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK,GAAG,OAAO;KACrB,CAAC,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,uBAAuB,2BAWlC;AAKK,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,QAA4B,EAAE,EAAE;IACpF,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;AACvC,CAAC,CAAC;AAHW,QAAA,SAAS,aAGpB;AAEK,MAAM,oBAAoB,GAAG,CAAC,UAAsB,EAAY,EAAE;IACxE,OAAO;QACN,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,eAAe;QAC1B,UAAU,CAAC,kBAAkB;QAC7B,UAAU,CAAC,iBAAiB;QAC5B,UAAU,CAAC,cAAc;KACzB,CAAC;AACH,CAAC,CAAC;AARW,QAAA,oBAAoB,wBAQ/B;AAEK,MAAM,sBAAsB,GAAG,KAAK,EAAE,IAAU,EAAE,MAAc,EAAE,EAAE;IAC1E,OAAO,MAAM,kBAAS,CAAC,GAAG,CAAC,iDAAsB,CAAC,CAAC,IAAI,CAAC,4BAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;QAC1F,WAAW,EAAE,KAAK;KAClB,CAAC,CAAC;AACJ,CAAC,CAAC;AAJW,QAAA,sBAAsB,0BAIjC;AAEK,MAAM,uBAAuB,GAAG,KAAK,EAAE,IAAmB,EAAE,MAAc,EAAE,EAAE;IACpF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC,qBAAqB,CAAC;QAC1E,QAAQ,EAAE,IAAA,2BAAY,EAAC,CAAC,CAAC;QACzB,IAAI,EAAE,eAAe;QACrB,GAAG,IAAI;KACP,CAAC,CAAC;IACH,MAAM,IAAA,8BAAsB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACb,CAAC,CAAC;AARW,QAAA,uBAAuB,2BAQlC;AAEK,MAAM,uBAAuB,GAAG,KAAK,EAAE,QAAsB,EAAE,IAAmB,EAAE,EAAE;IAC5F,MAAM,MAAM,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IAClC,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAE3E,IAAI,IAAI,EAAE,CAAC;YACV,MAAM,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;IACF,CAAC;AACF,CAAC,CAAC;AATW,QAAA,uBAAuB,2BASlC;AAEK,MAAM,uBAAuB,GAAG,KAAK,IAAI,EAAE;IACjD,OAAO,MAAM,kBAAS,CAAC,GAAG,CAAC,iDAAsB,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC,CAAC;AAFW,QAAA,uBAAuB,2BAElC"}

package/dist/ldap/ldap.controller.ee.d.ts

@@ -0,0 +1,13 @@
+import { LdapConfiguration } from './types';
+import { LdapService } from './ldap.service.ee';
+import { EventService } from '../events/event.service';
+export declare class LdapController {
+    private readonly ldapService;
+    private readonly eventService;
+    constructor(ldapService: LdapService, eventService: EventService);
+    getConfig(): Promise<import("./types").LdapConfig>;
+    testConnection(): Promise<void>;
+    updateConfig(req: LdapConfiguration.Update): Promise<import("./types").LdapConfig>;
+    getLdapSync(req: LdapConfiguration.GetSync): Promise<import("../databases/entities/auth-provider-sync-history").AuthProviderSyncHistory[]>;
+    syncLdap(req: LdapConfiguration.Sync): Promise<void>;
+}

package/dist/ldap/ldap.controller.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.controller.ee.js","sourceRoot":"","sources":["../../src/ldap/ldap.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,uDAA+B;AAC/B,6CAA2E;AAC3E,kFAA6E;AAE7E,2CAAkE;AAClE,6CAAuD;AAEvD,uDAAgD;AAChD,0DAAsD;AAG/C,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,YAA0B;QAD1B,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAIE,AAAN,KAAK,CAAC,SAAS;QACd,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,cAAc;QACnB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mCAAe,CAAE,KAA6B,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;IAIK,AAAN,KAAK,CAAC,YAAY,CAAC,GAA6B;QAC/C,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mCAAe,CAAE,KAA6B,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAEjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;YAC/C,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACnB,GAAG,IAAA,cAAI,EAAC,IAAI,EAAE,+CAAmC,CAAC;SAClD,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACb,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CAAC,GAA8B;QAC/C,MAAM,EAAE,IAAI,GAAG,GAAG,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QACjD,OAAO,MAAM,IAAA,oCAAuB,EAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CAAC,GAA2B;QACzC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mCAAe,CAAE,KAA6B,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;CACD,CAAA;AAzDY,wCAAc;AAQpB;IAFL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;+CAG1B;AAIK;IAFL,IAAA,iBAAI,EAAC,kBAAkB,CAAC;IACxB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;oDAO1B;AAIK;IAFL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;kDAgB1B;AAIK;IAFL,IAAA,gBAAG,EAAC,OAAO,CAAC;IACZ,IAAA,wBAAW,EAAC,WAAW,CAAC;;;;iDAIxB;AAIK;IAFL,IAAA,iBAAI,EAAC,OAAO,CAAC;IACb,IAAA,wBAAW,EAAC,WAAW,CAAC;;;;8CAOxB;yBAxDW,cAAc;IAD1B,IAAA,2BAAc,EAAC,OAAO,CAAC;qCAGQ,6BAAW;QACV,4BAAY;GAHhC,cAAc,CAyD1B"}

package/dist/ldap/ldap.service.ee.d.ts

@@ -0,0 +1,36 @@
+import type { Entry as LdapUser } from 'ldapts';
+import { Cipher } from 'n8n-core';
+import type { RunningMode } from '../databases/entities/auth-provider-sync-history';
+import { SettingsRepository } from '../databases/repositories/settings.repository';
+import { Logger } from '../logger';
+import type { LdapConfig } from './types';
+import { EventService } from '../events/event.service';
+export declare class LdapService {
+    private readonly logger;
+    private readonly settingsRepository;
+    private readonly cipher;
+    private readonly eventService;
+    private client;
+    private syncTimer;
+    config: LdapConfig;
+    constructor(logger: Logger, settingsRepository: SettingsRepository, cipher: Cipher, eventService: EventService);
+    init(): Promise<void>;
+    loadConfig(): Promise<LdapConfig>;
+    updateConfig(ldapConfig: LdapConfig): Promise<void>;
+    setConfig(ldapConfig: LdapConfig): void;
+    private setGlobalLdapConfigVariables;
+    private setLdapLoginEnabled;
+    private getClient;
+    private bindAdmin;
+    searchWithAdminBinding(filter: string): Promise<LdapUser[]>;
+    validUser(dn: string, password: string): Promise<void>;
+    findAndAuthenticateLdapUser(loginId: string, password: string, loginIdAttribute: string, userFilter: string): Promise<LdapUser | undefined>;
+    testConnection(): Promise<void>;
+    private scheduleSync;
+    runSync(mode: RunningMode): Promise<void>;
+    stopSync(): void;
+    private getUsersToProcess;
+    private getUsersToCreate;
+    private getUsersToUpdate;
+    private getUsersToDisable;
+}

package/dist/ldap/ldap.service.ee.js

@@ -0,0 +1,295 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LdapService = void 0;
+const typedi_1 = require("typedi");
+const typeorm_1 = require("@n8n/typeorm");
+const ldapts_1 = require("ldapts");
+const n8n_workflow_1 = require("n8n-workflow");
+const n8n_core_1 = require("n8n-core");
+const config_1 = __importDefault(require("../config"));
+const settings_repository_1 = require("../databases/repositories/settings.repository");
+const logger_1 = require("../logger");
+const bad_request_error_1 = require("../errors/response-errors/bad-request.error");
+const internal_server_error_1 = require("../errors/response-errors/internal-server.error");
+const sso_helpers_1 = require("../sso/sso-helpers");
+const helpers_ee_1 = require("./helpers.ee");
+const constants_1 = require("./constants");
+const event_service_1 = require("../events/event.service");
+let LdapService = class LdapService {
+    constructor(logger, settingsRepository, cipher, eventService) {
+        this.logger = logger;
+        this.settingsRepository = settingsRepository;
+        this.cipher = cipher;
+        this.eventService = eventService;
+        this.syncTimer = undefined;
+    }
+    async init() {
+        const ldapConfig = await this.loadConfig();
+        try {
+            await this.setGlobalLdapConfigVariables(ldapConfig);
+        }
+        catch (error) {
+            this.logger.warn(`Cannot set LDAP login enabled state when an authentication method other than email or ldap is active (current: ${(0, sso_helpers_1.getCurrentAuthenticationMethod)()})`, error);
+        }
+        this.setConfig(ldapConfig);
+    }
+    async loadConfig() {
+        const { value } = await this.settingsRepository.findOneByOrFail({
+            key: constants_1.LDAP_FEATURE_NAME,
+        });
+        const ldapConfig = (0, n8n_workflow_1.jsonParse)(value);
+        ldapConfig.bindingAdminPassword = this.cipher.decrypt(ldapConfig.bindingAdminPassword);
+        return ldapConfig;
+    }
+    async updateConfig(ldapConfig) {
+        const { valid, message } = (0, helpers_ee_1.validateLdapConfigurationSchema)(ldapConfig);
+        if (!valid) {
+            throw new n8n_workflow_1.ApplicationError(message);
+        }
+        if (ldapConfig.loginEnabled && (0, sso_helpers_1.getCurrentAuthenticationMethod)() === 'saml') {
+            throw new bad_request_error_1.BadRequestError('LDAP cannot be enabled if SSO in enabled');
+        }
+        this.setConfig({ ...ldapConfig });
+        ldapConfig.bindingAdminPassword = this.cipher.encrypt(ldapConfig.bindingAdminPassword);
+        if (!ldapConfig.loginEnabled) {
+            ldapConfig.synchronizationEnabled = false;
+            const ldapUsers = await (0, helpers_ee_1.getLdapUsers)();
+            if (ldapUsers.length) {
+                await (0, helpers_ee_1.deleteAllLdapIdentities)();
+            }
+        }
+        await this.settingsRepository.update({ key: constants_1.LDAP_FEATURE_NAME }, { value: JSON.stringify(ldapConfig), loadOnStartup: true });
+        await this.setGlobalLdapConfigVariables(ldapConfig);
+    }
+    setConfig(ldapConfig) {
+        this.config = ldapConfig;
+        this.client = undefined;
+        if (this.syncTimer && !this.config.synchronizationEnabled) {
+            this.stopSync();
+        }
+        else if (!this.syncTimer && this.config.synchronizationEnabled) {
+            this.scheduleSync();
+        }
+        else if (this.syncTimer && this.config.synchronizationEnabled) {
+            this.stopSync();
+            this.scheduleSync();
+        }
+    }
+    async setGlobalLdapConfigVariables(ldapConfig) {
+        await this.setLdapLoginEnabled(ldapConfig.loginEnabled);
+        config_1.default.set(constants_1.LDAP_LOGIN_LABEL, ldapConfig.loginLabel);
+    }
+    async setLdapLoginEnabled(enabled) {
+        if ((0, sso_helpers_1.isEmailCurrentAuthenticationMethod)() || (0, sso_helpers_1.isLdapCurrentAuthenticationMethod)()) {
+            if (enabled) {
+                config_1.default.set(constants_1.LDAP_LOGIN_ENABLED, true);
+                await (0, sso_helpers_1.setCurrentAuthenticationMethod)('ldap');
+            }
+            else if (!enabled) {
+                config_1.default.set(constants_1.LDAP_LOGIN_ENABLED, false);
+                await (0, sso_helpers_1.setCurrentAuthenticationMethod)('email');
+            }
+        }
+        else {
+            throw new internal_server_error_1.InternalServerError(`Cannot switch LDAP login enabled state when an authentication method other than email or ldap is active (current: ${(0, sso_helpers_1.getCurrentAuthenticationMethod)()})`);
+        }
+    }
+    async getClient() {
+        if (this.config === undefined) {
+            throw new n8n_workflow_1.ApplicationError('Service cannot be used without setting the property config');
+        }
+        if (this.client === undefined) {
+            const url = (0, helpers_ee_1.formatUrl)(this.config.connectionUrl, this.config.connectionPort, this.config.connectionSecurity);
+            const ldapOptions = { url };
+            const tlsOptions = {};
+            if (this.config.connectionSecurity !== 'none') {
+                Object.assign(tlsOptions, {
+                    rejectUnauthorized: !this.config.allowUnauthorizedCerts,
+                });
+                if (this.config.connectionSecurity === 'tls') {
+                    ldapOptions.tlsOptions = tlsOptions;
+                }
+            }
+            this.client = new ldapts_1.Client(ldapOptions);
+            if (this.config.connectionSecurity === 'startTls') {
+                await this.client.startTLS(tlsOptions);
+            }
+        }
+    }
+    async bindAdmin() {
+        await this.getClient();
+        if (this.client) {
+            await this.client.bind(this.config.bindingAdminDn, this.config.bindingAdminPassword);
+        }
+    }
+    async searchWithAdminBinding(filter) {
+        await this.bindAdmin();
+        if (this.client) {
+            const { searchEntries } = await this.client.search(this.config.baseDn, {
+                attributes: (0, helpers_ee_1.getMappingAttributes)(this.config),
+                explicitBufferAttributes: constants_1.BINARY_AD_ATTRIBUTES,
+                filter,
+                timeLimit: this.config.searchTimeout,
+                paged: { pageSize: this.config.searchPageSize },
+                ...(this.config.searchPageSize === 0 && { paged: true }),
+            });
+            await this.client.unbind();
+            return searchEntries;
+        }
+        return [];
+    }
+    async validUser(dn, password) {
+        await this.getClient();
+        if (this.client) {
+            await this.client.bind(dn, password);
+            await this.client.unbind();
+        }
+    }
+    async findAndAuthenticateLdapUser(loginId, password, loginIdAttribute, userFilter) {
+        let searchResult = [];
+        try {
+            searchResult = await this.searchWithAdminBinding((0, helpers_ee_1.createFilter)(`(${loginIdAttribute}=${(0, helpers_ee_1.escapeFilter)(loginId)})`, userFilter));
+        }
+        catch (e) {
+            if (e instanceof Error) {
+                this.eventService.emit('ldap-login-sync-failed', { error: e.message });
+                this.logger.error('LDAP - Error during search', { message: e.message });
+            }
+            return undefined;
+        }
+        if (!searchResult.length) {
+            return undefined;
+        }
+        let user = searchResult.pop();
+        if (user === undefined) {
+            user = { dn: '' };
+        }
+        try {
+            await this.validUser(user.dn, password);
+        }
+        catch (e) {
+            if (e instanceof Error) {
+                this.logger.error('LDAP - Error validating user against LDAP server', {
+                    message: e.message,
+                });
+            }
+            return undefined;
+        }
+        (0, helpers_ee_1.resolveEntryBinaryAttributes)(user);
+        return user;
+    }
+    async testConnection() {
+        await this.bindAdmin();
+    }
+    scheduleSync() {
+        if (!this.config.synchronizationInterval) {
+            throw new n8n_workflow_1.ApplicationError('Interval variable has to be defined');
+        }
+        this.syncTimer = setInterval(async () => {
+            await this.runSync('live');
+        }, this.config.synchronizationInterval * 60000);
+    }
+    async runSync(mode) {
+        this.logger.debug(`LDAP - Starting a synchronization run in ${mode} mode`);
+        let adUsers = [];
+        try {
+            adUsers = await this.searchWithAdminBinding((0, helpers_ee_1.createFilter)(`(${this.config.loginIdAttribute}=*)`, this.config.userFilter));
+            this.logger.debug('LDAP - Users return by the query', {
+                users: adUsers,
+            });
+            (0, helpers_ee_1.resolveBinaryAttributes)(adUsers);
+        }
+        catch (e) {
+            if (e instanceof Error) {
+                this.logger.error(`LDAP - ${e.message}`);
+                throw e;
+            }
+        }
+        const startedAt = new Date();
+        const localAdUsers = await (0, helpers_ee_1.getLdapIds)();
+        const { usersToCreate, usersToUpdate, usersToDisable } = this.getUsersToProcess(adUsers, localAdUsers);
+        this.logger.debug('LDAP - Users to process', {
+            created: usersToCreate.length,
+            updated: usersToUpdate.length,
+            disabled: usersToDisable.length,
+        });
+        const endedAt = new Date();
+        let status = 'success';
+        let errorMessage = '';
+        try {
+            if (mode === 'live') {
+                await (0, helpers_ee_1.processUsers)(usersToCreate, usersToUpdate, usersToDisable);
+            }
+        }
+        catch (error) {
+            if (error instanceof typeorm_1.QueryFailedError) {
+                status = 'error';
+                errorMessage = `${error.message}`;
+            }
+        }
+        await (0, helpers_ee_1.saveLdapSynchronization)({
+            startedAt,
+            endedAt,
+            created: usersToCreate.length,
+            updated: usersToUpdate.length,
+            disabled: usersToDisable.length,
+            scanned: adUsers.length,
+            runMode: mode,
+            status,
+            error: errorMessage,
+        });
+        this.eventService.emit('ldap-general-sync-finished', {
+            type: !this.syncTimer ? 'scheduled' : `manual_${mode}`,
+            succeeded: true,
+            usersSynced: usersToCreate.length + usersToUpdate.length + usersToDisable.length,
+            error: errorMessage,
+        });
+        this.logger.debug('LDAP - Synchronization finished successfully');
+    }
+    stopSync() {
+        clearInterval(this.syncTimer);
+        this.syncTimer = undefined;
+    }
+    getUsersToProcess(adUsers, localAdUsers) {
+        return {
+            usersToCreate: this.getUsersToCreate(adUsers, localAdUsers),
+            usersToUpdate: this.getUsersToUpdate(adUsers, localAdUsers),
+            usersToDisable: this.getUsersToDisable(adUsers, localAdUsers),
+        };
+    }
+    getUsersToCreate(remoteAdUsers, localLdapIds) {
+        return remoteAdUsers
+            .filter((adUser) => !localLdapIds.includes(adUser[this.config.ldapIdAttribute]))
+            .map((adUser) => (0, helpers_ee_1.mapLdapUserToDbUser)(adUser, this.config, true));
+    }
+    getUsersToUpdate(remoteAdUsers, localLdapIds) {
+        return remoteAdUsers
+            .filter((adUser) => localLdapIds.includes(adUser[this.config.ldapIdAttribute]))
+            .map((adUser) => (0, helpers_ee_1.mapLdapUserToDbUser)(adUser, this.config));
+    }
+    getUsersToDisable(remoteAdUsers, localLdapIds) {
+        const remoteAdUserIds = remoteAdUsers.map((adUser) => adUser[this.config.ldapIdAttribute]);
+        return localLdapIds.filter((user) => !remoteAdUserIds.includes(user));
+    }
+};
+exports.LdapService = LdapService;
+exports.LdapService = LdapService = __decorate([
+    (0, typedi_1.Service)(),
+    __metadata("design:paramtypes", [logger_1.Logger,
+        settings_repository_1.SettingsRepository,
+        n8n_core_1.Cipher,
+        event_service_1.EventService])
+], LdapService);
+//# sourceMappingURL=ldap.service.ee.js.map

package/dist/ldap/ldap.service.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.service.ee.js","sourceRoot":"","sources":["../../src/ldap/ldap.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,mCAAiC;AAEjC,0CAAgD;AAEhD,mCAAgC;AAEhC,+CAA2D;AAC3D,uCAAkC;AAElC,sDAA8B;AAG9B,sFAAkF;AAClF,qCAAkC;AAElC,kFAA6E;AAC7E,0FAAqF;AACrF,mDAK2B;AAG3B,6CAcsB;AACtB,2CAKqB;AACrB,0DAAsD;AAG/C,IAAM,WAAW,GAAjB,MAAM,WAAW;IAOvB,YACkB,MAAc,EACd,kBAAsC,EACtC,MAAc,EACd,YAA0B;QAH1B,WAAM,GAAN,MAAM,CAAQ;QACd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,WAAM,GAAN,MAAM,CAAQ;QACd,iBAAY,GAAZ,YAAY,CAAc;QARpC,cAAS,GAA+B,SAAS,CAAC;IASvD,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAE3C,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,kHAAkH,IAAA,4CAA8B,GAAE,GAAG,EAErJ,KAAK,CACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IAGD,KAAK,CAAC,UAAU;QACf,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC;YAC/D,GAAG,EAAE,6BAAiB;SACtB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAA,wBAAS,EAAa,KAAK,CAAC,CAAC;QAChD,UAAU,CAAC,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACvF,OAAO,UAAU,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAsB;QACxC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAA,4CAA+B,EAAC,UAAU,CAAC,CAAC;QAEvE,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,+BAAgB,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,UAAU,CAAC,YAAY,IAAI,IAAA,4CAA8B,GAAE,KAAK,MAAM,EAAE,CAAC;YAC5E,MAAM,IAAI,mCAAe,CAAC,0CAA0C,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;QAElC,UAAU,CAAC,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAEvF,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YAC9B,UAAU,CAAC,sBAAsB,GAAG,KAAK,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,IAAA,yBAAY,GAAE,CAAC;YACvC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAA,oCAAuB,GAAE,CAAC;YACjC,CAAC;QACF,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC,EAAE,GAAG,EAAE,6BAAiB,EAAE,EAC1B,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAC1D,CAAC;QACF,MAAM,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAGD,SAAS,CAAC,UAAsB;QAC/B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAGxB,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QAGjB,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAClE,IAAI,CAAC,YAAY,EAAE,CAAC;QAGrB,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;IAGO,KAAK,CAAC,4BAA4B,CAAC,UAAsB;QAChE,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACxD,gBAAM,CAAC,GAAG,CAAC,4BAAgB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAGO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACjD,IAAI,IAAA,gDAAkC,GAAE,IAAI,IAAA,+CAAiC,GAAE,EAAE,CAAC;YACjF,IAAI,OAAO,EAAE,CAAC;gBACb,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,IAAI,CAAC,CAAC;gBACrC,MAAM,IAAA,4CAA8B,EAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrB,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,IAAA,4CAA8B,GAAE,GAAG,CACxJ,CAAC;QACH,CAAC;IACF,CAAC;IAOO,KAAK,CAAC,SAAS;QACtB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAAgB,CAAC,4DAA4D,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAA,sBAAS,EACpB,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,IAAI,CAAC,MAAM,CAAC,cAAc,EAC1B,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAC9B,CAAC;YACF,MAAM,WAAW,GAAkB,EAAE,GAAG,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAsB,EAAE,CAAC;YAEzC,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;gBAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;oBACzB,kBAAkB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB;iBACvD,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;oBAC9C,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;gBACrC,CAAC;YACF,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;IACF,CAAC;IAKO,KAAK,CAAC,SAAS;QACtB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtF,CAAC;IACF,CAAC;IAMD,KAAK,CAAC,sBAAsB,CAAC,MAAc;QAC1C,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;gBACtE,UAAU,EAAE,IAAA,iCAAoB,EAAC,IAAI,CAAC,MAAM,CAAC;gBAC7C,wBAAwB,EAAE,gCAAoB;gBAC9C,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACpC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;gBAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aACxD,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,CAAC;IACX,CAAC;IAKD,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,QAAgB;QAC3C,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5B,CAAC;IACF,CAAC;IAKD,KAAK,CAAC,2BAA2B,CAChC,OAAe,EACf,QAAgB,EAChB,gBAAwB,EACxB,UAAkB;QAKlB,IAAI,YAAY,GAAe,EAAE,CAAC;QAElC,IAAI,CAAC;YACJ,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAC/C,IAAA,yBAAY,EAAC,IAAI,gBAAgB,IAAI,IAAA,yBAAY,EAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAC1E,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QAClB,CAAC;QAMD,IAAI,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC;QAE9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YAIJ,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;oBACrE,OAAO,EAAE,CAAC,CAAC,OAAO;iBAClB,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAA,yCAA4B,EAAC,IAAI,CAAC,CAAC;QAEnC,OAAO,IAAI,CAAC;IACb,CAAC;IAKD,KAAK,CAAC,cAAc;QACnB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC;IAGO,YAAY;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YAC1C,MAAM,IAAI,+BAAgB,CAAC,qCAAqC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,KAAK,CAAC,CAAC;IACjD,CAAC;IAMD,KAAK,CAAC,OAAO,CAAC,IAAiB;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,IAAI,OAAO,CAAC,CAAC;QAE3E,IAAI,OAAO,GAAe,EAAE,CAAC;QAE7B,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAC1C,IAAA,yBAAY,EAAC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAC3E,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBACrD,KAAK,EAAE,OAAO;aACd,CAAC,CAAC;YAEH,IAAA,oCAAuB,EAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzC,MAAM,CAAC,CAAC;YACT,CAAC;QACF,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,MAAM,YAAY,GAAG,MAAM,IAAA,uBAAU,GAAE,CAAC;QAExC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAC9E,OAAO,EACP,YAAY,CACZ,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YAC5C,OAAO,EAAE,aAAa,CAAC,MAAM;YAC7B,OAAO,EAAE,aAAa,CAAC,MAAM;YAC7B,QAAQ,EAAE,cAAc,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,MAAM,GAAe,SAAS,CAAC;QACnC,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,IAAI,CAAC;YACJ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrB,MAAM,IAAA,yBAAY,EAAC,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YAClE,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,0BAAgB,EAAE,CAAC;gBACvC,MAAM,GAAG,OAAO,CAAC;gBACjB,YAAY,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,CAAC;QACF,CAAC;QAED,MAAM,IAAA,oCAAuB,EAAC;YAC7B,SAAS;YACT,OAAO;YACP,OAAO,EAAE,aAAa,CAAC,MAAM;YAC7B,OAAO,EAAE,aAAa,CAAC,MAAM;YAC7B,QAAQ,EAAE,cAAc,CAAC,MAAM;YAC/B,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,OAAO,EAAE,IAAI;YACb,MAAM;YACN,KAAK,EAAE,YAAY;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACpD,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE;YACtD,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,aAAa,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM;YAChF,KAAK,EAAE,YAAY;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACnE,CAAC;IAGD,QAAQ;QACP,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;IAGO,iBAAiB,CACxB,OAAmB,EACnB,YAAsB;QAMtB,OAAO;YACN,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC;YAC3D,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC;YAC3D,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC;SAC7D,CAAC;IACH,CAAC;IAGO,gBAAgB,CACvB,aAAyB,EACzB,YAAsB;QAEtB,OAAO,aAAa;aAClB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAW,CAAC,CAAC;aACzF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,gCAAmB,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAGO,gBAAgB,CACvB,aAAyB,EACzB,YAAsB;QAEtB,OAAO,aAAa;aAClB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAW,CAAC,CAAC;aACxF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,gCAAmB,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAGO,iBAAiB,CAAC,aAAyB,EAAE,YAAsB;QAC1E,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3F,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;CACD,CAAA;AAvYY,kCAAW;sBAAX,WAAW;IADvB,IAAA,gBAAO,GAAE;qCASiB,eAAM;QACM,wCAAkB;QAC9B,iBAAM;QACA,4BAAY;GAXhC,WAAW,CAuYvB"}