Method GetLdapUser

internal/service/auth_service.go:188–221

(userDN string)

}

func (auth *AuthService) GetLdapUser(userDN string) (config.LdapUser, error) {
	if !auth.ldap.IsConfigured() {
		return config.LdapUser{}, errors.New("LDAP service not initialized")
	}

	auth.ldapGroupsMutex.RLock()
	entry, exists := auth.ldapGroupsCache[userDN]
	auth.ldapGroupsMutex.RUnlock()

	if exists && time.Now().Before(entry.Expires) {
		return config.LdapUser{
			DN:     userDN,
			Groups: entry.Groups,
		}, nil
	}

	groups, err := auth.ldap.GetUserGroups(userDN)

	if err != nil {
		return config.LdapUser{}, err
	}

	auth.ldapGroupsMutex.Lock()
	auth.ldapGroupsCache[userDN] = &LdapGroupsCache{
		Groups:  groups,
		Expires: time.Now().Add(time.Duration(auth.config.LDAPGroupsCacheTTL) * time.Second),
	}
	auth.ldapGroupsMutex.Unlock()

	return config.LdapUser{
		DN:     userDN,
		Groups: groups,
	}, nil
}

func (auth *AuthService) CheckPassword(user config.User, password string) bool {
	return bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password)) == nil