Add service attribute to LDAP user entry #91

raucao · 2023-02-27T15:49:43Z

raucao commented

2023-02-27 15:49:43 +00:00

Add a new service attribute to LDAP user entries, as well as methods to enable and disable services. This can then be used in LDAP filters for the various services to only allow users with the enabled service to actually log in.

New users automatically get the entries added when confirming their account. Once services are configured to check for the new attribute/role, this also fixes the current problem of users being able to log in to services before having confirmed their email address.

Adding default services for existing users in production should be easy with the Rails console:

User.confirmed.each { |u| u.devise_after_confirmation }

Add a new service attribute to LDAP user entries, as well as methods to enable and disable services. This can then be used in LDAP filters for the various services to only allow users with the enabled service to actually log in. New users automatically get the entries added when confirming their account. Once services are configured to check for the new attribute/role, this also fixes the current problem of users being able to log in to services before having confirmed their email address. Adding default services for existing users in production should be easy with the Rails console: ```ruby User.confirmed.each { |u| u.devise_after_confirmation } ```

raucao added the

feature

label 2023-02-27 15:49:43 +00:00

raucao added 1 commit 2023-02-27 15:49:44 +00:00

Add service attribute to LDAP user entry

continuous-integration/drone/push Build is passing

Details

continuous-integration/drone/pr Build is passing

Details

75ffd4e2f1

raucao requested review from greg 2023-02-27 15:49:51 +00:00

raucao requested review from galfert 2023-02-27 15:49:52 +00:00

raucao added the

kredits-2

label 2023-02-27 15:52:40 +00:00

greg added 1 commit 2023-03-01 09:35:54 +00:00

Merge branch 'master' into feature/ldap_services

continuous-integration/drone/push Build is passing

Details

continuous-integration/drone/pr Build is passing

Details

2861254adf

greg approved these changes 2023-03-01 09:57:40 +00:00

greg left a comment

👍

greg merged commit c8b65de7f6 into master

2023-03-01 09:57:53 +00:00

greg deleted branch feature/ldap_services

2023-03-01 09:57:54 +00:00

greg referenced this issue from a commit

2023-03-01 09:57:54 +00:00

Merge pull request 'Add service attribute to LDAP user entry' (#91) from feature/ldap_services into master

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/akkounts#91