Rewrite of the authentication and authorization system

1 files changed, 54 insertions, 0 deletions

diff --git a/app/Group/LdapBackendGroupProvider.php b/app/Group/LdapBackendGroupProvider.php
new file mode 100644
index 00000000..40273466
--- /dev/null
+++ b/app/Group/LdapBackendGroupProvider.php
@@ -0,0 +1,54 @@
+<?php
+
+namespace Kanboard\Group;
+
+use LogicException;
+use Kanboard\Core\Base;
+use Kanboard\Core\Group\GroupBackendProviderInterface;
+use Kanboard\Core\Ldap\Client as LdapClient;
+use Kanboard\Core\Ldap\ClientException as LdapException;
+use Kanboard\Core\Ldap\Group as LdapGroup;
+
+/**
+ * LDAP Backend Group Provider
+ *
+ * @package  group
+ * @author   Frederic Guillot
+ */
+class LdapBackendGroupProvider extends Base implements GroupBackendProviderInterface
+{
+    /**
+     * Find a group from a search query
+     *
+     * @access public
+     * @param  string $input
+     * @return []LdapGroupProvider
+     */
+    public function find($input)
+    {
+        try {
+            $ldap = LdapClient::connect();
+            return LdapGroup::getGroups($ldap, $this->getLdapGroupPattern($input));
+
+        } catch (LdapException $e) {
+            $this->logger->error($e->getMessage());
+            return array();
+        }
+    }
+
+    /**
+     * Get LDAP group pattern
+     *
+     * @access public
+     * @param  string $input
+     * @return string
+     */
+    public function getLdapGroupPattern($input)
+    {
+        if (empty(LDAP_GROUP_FILTER)) {
+            throw new LogicException('LDAP group filter empty, check the parameter LDAP_GROUP_FILTER');
+        }
+
+        return sprintf(LDAP_GROUP_FILTER, $input);
+    }
+}