Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[LDAP][Seatunnel-web] Add ldap support for seatunnel web api calls #245

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

BilwaST
Copy link
Contributor

@BilwaST BilwaST commented Nov 27, 2024

Purpose of this pull request

Check list

@davidzollo
Copy link
Contributor

davidzollo commented Dec 19, 2024

Can you change the dependenet jar to org.springframework.ldap? its license is much more clear, and it seems much more lightweight

<dependency>
            <groupId>org.springframework.ldap</groupId>
            <artifactId>spring-ldap-core</artifactId>
</dependency>

What do you think?

@shashwatsai
Copy link
Contributor

Can you change the dependenet jar to org.springframework.ldap? its license is much more clear, and it seems much more lightweight

<dependency>
            <groupId>org.springframework.ldap</groupId>
            <artifactId>spring-ldap-core</artifactId>
</dependency>

What do you think?

In ConfiguredAuthenticationProvider#L45 we are using an out of box AuthenticationProvider.

Are you suggesting to change the implementation?

"Error while authenticating user : {}, reason :{}",
authentication.getName(),
ex.getMessage());
ex.printStackTrace();
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove the stack trace

return Result.success(iUserService.login(req));
public Result<UserSimpleInfoRes> login(
@RequestBody UserLoginReq req,
@RequestHeader(value = "Auth-Type", required = false) String authType) {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we make the auth-type part of UserLoginReq?

// 2. add a new user.
final UpdateUserDto dto =
UpdateUserDto.builder().id(null).username(username).password("").build();
userDaoImpl.add(dto);
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

After the first login, an LDAP user is added to the database. From the second login onwards, the same user can log in as a DB_USER by just not providing Auth-Type header.
There should be a way to differentiate between user types.

spring-plugin-core-1.2.0.RELEASE.jar
spring-plugin-metadata-1.2.0.RELEASE.jar
spring-security-core-6.3.0.jar
spring-security-ldap-6.3.0.jar
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is spring 6.x java 8 compatible? can you use java 8 compatible version of spring?

@arshadmohammad
Copy link
Collaborator

@BilwaST Are you still working on this?
If not, would it be okay if someone else takes over?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants