test/cuba
1
0
Fork 0
mirror of https://gitee.com/jmix/cuba.git synced 2024-12-04 20:28:00 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

StandardAuthenticationUsers for IDP with LDAP #791

Browse Source 
New application property "cuba.idp.standardAuthenticationUsers" -
list of users permitted to use standard authentication in IDP even if
LDAP is enabled.
This commit is contained in:
Yuriy Artamonov 2018-05-07 19:38:09 +04:00
parent f59bc52919
commit ffec1a6cd7
2 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
modules/idp/src/com/haulmont/idp/IdpAuthConfig.java
View File

@ -59,4 +59,14 @@ public interface IdpAuthConfig extends Config {
@Property("cuba.idp.ldap.userLoginField")
@DefaultString("sAMAccountName")
String getLdapUserLoginField();
/**
* @return list of users that are not allowed to use external authentication. They can use only standard authentication.
* Empty list means that everyone is allowed to login using external authentication.
*
* @see #getAuthenticationMode()
*/
@Property("cuba.idp.standardAuthenticationUsers")
@Factory(factory = CommaSeparatedStringListTypeFactory.class)
List<String> getStandardAuthenticationUsers();
}

10
modules/idp/src/com/haulmont/idp/controllers/IdpLoginManager.java
View File

@ -53,7 +53,15 @@ public class IdpLoginManager implements InitializingBean {
protected LdapTemplate ldapTemplate;
public IdpService.IdpLoginResult login(AuthRequest auth, Locale sessionLocale) throws LoginException {
switch (authenticationConfig.getAuthenticationMode()) {
IdpAuthMode authenticationMode = authenticationConfig.getAuthenticationMode();
List<String> standardAuthenticationUsers = authenticationConfig.getStandardAuthenticationUsers();
if (standardAuthenticationUsers.contains(auth.getUsername())) {
// user can only use STANDARD authentication
authenticationMode = IdpAuthMode.STANDARD;
}
switch (authenticationMode) {
case STANDARD: {
LoginPasswordCredentials credentials = new LoginPasswordCredentials(
auth.getUsername(),