You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Pavel Ezhov 98770d3db8
Fix group filter for ldap source sync (#22506)
There are 2 separate flows of creating a user: authentication and source
sync.
When a group filter is defined, source sync ignores group filter, while
authentication respects it.
With this PR I've fixed this behavior, so both flows now apply this
filter when searching users in LDAP in a unified way.

- Unified LDAP group membership lookup for authentication and source
sync flows
- Replaced custom group membership lookup (used for authentication flow)
with an existing listLdapGroupMemberships method (used for source sync
flow)
- Modified listLdapGroupMemberships and getUserAttributeListedInGroup in
a way group lookup could be called separately
- Added user filtering based on a group membership for a source sync
- Added tests to cover this logic

Co-authored-by: Pavel Ezhov <paejov@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
1 year ago
..
source Fix group filter for ldap source sync (#22506) 1 year ago
auth.go Implement FSFE REUSE for golang files (#21840) 2 years ago
auth_test.go Implement FSFE REUSE for golang files (#21840) 2 years ago
basic.go Implement actions (#21937) 1 year ago
group.go refactor auth interface to return error when verify failure (#22119) 2 years ago
httpsign.go refactor auth interface to return error when verify failure (#22119) 2 years ago
interface.go refactor auth interface to return error when verify failure (#22119) 2 years ago
oauth2.go Implement actions (#21937) 1 year ago
reverseproxy.go refactor auth interface to return error when verify failure (#22119) 2 years ago
session.go refactor auth interface to return error when verify failure (#22119) 2 years ago
signin.go Implement FSFE REUSE for golang files (#21840) 2 years ago
source.go Implement FSFE REUSE for golang files (#21840) 2 years ago
sspi_windows.go refactor auth interface to return error when verify failure (#22119) 2 years ago
sync.go Implement FSFE REUSE for golang files (#21840) 2 years ago