mastodon/lib/devise/ldap_authenticatable.rb

54 lines
1.4 KiB
Ruby
Raw Normal View History

2018-02-28 10:04:53 -08:00
# frozen_string_literal: true
require 'net/ldap'
require 'devise/strategies/authenticatable'
2018-02-28 10:04:53 -08:00
module Devise
module Strategies
class LdapAuthenticatable < Authenticatable
def authenticate!
if params[:user]
ldap = Net::LDAP.new(
host: Devise.ldap_host,
port: Devise.ldap_port,
base: Devise.ldap_base,
encryption: {
method: Devise.ldap_method,
tls_options: tls_options,
},
auth: {
method: :simple,
username: Devise.ldap_bind_dn,
password: Devise.ldap_password,
},
connect_timeout: 10
)
2018-02-28 10:04:53 -08:00
if (user_info = ldap.bind_as(base: Devise.ldap_base, filter: "(#{Devise.ldap_uid}=#{email})", password: password))
user = User.ldap_get_user(user_info.first)
success!(user)
else
return fail(:invalid_login)
2018-02-28 10:04:53 -08:00
end
end
end
2018-02-28 10:04:53 -08:00
def email
params[:user][:email]
end
2018-02-28 10:04:53 -08:00
def password
params[:user][:password]
end
def tls_options
OpenSSL::SSL::SSLContext::DEFAULT_PARAMS.tap do |options|
options[:verify_mode] = OpenSSL::SSL::VERIFY_NONE if Devise.ldap_tls_no_verify
2018-02-28 10:04:53 -08:00
end
end
end
end
end
Warden::Strategies.add(:ldap_authenticatable, Devise::Strategies::LdapAuthenticatable)