Skip to content

Latest commit

 

History

History
224 lines (128 loc) · 5.18 KB

CHANGES.md

File metadata and controls

224 lines (128 loc) · 5.18 KB
Raw

node-ldapauth-fork Changelog

6.0.0

  • ldapjs library upgraded to version 3
  • includeRaw has been removed from clientOptions. Append ;binary to the searchAttributes option if you need the binary data, for example with objectGUID:
new LdapAuth({
  searchAttributes: ['dn', 'cn', 'givenName', 'name', 'memberOf', 'sAMAccountName', 'objectGUID;binary'],
});

The resulting user object will then have a property objectGUID;binary with the base64 encoded value of the objectGUID LDAP attribute.

This change was made as a consequence of changes in the underlying ldapjs library, see https://github.com/ldapjs/node-ldapjs/releases/tag/v3.0.0 section Known Breaking Changes.

5.0.3

  • [pull request #99] Ensure groupDnProperty is included in attributes

5.0.2

  • [pull request #97] Sanitize group search filters

5.0.0

  • Update ldapjs to version 2

4.3.3

  • [pull request #86] Fix typedef of tlsOptions

4.3.2

  • [pull request #83] Allow any @types/node version

4.3.0

  • [issue #59, pull request #80] Add starttls

4.2.0

  • [issue #69, pull request #71] Defer installation of reconnect event listener

4.1.1

  • [issue #74] Remove direct moment.js dependency

4.1.0

  • [pull request #68] Rebind admin client after reconnect

4.0.2

  • [pull request #49] Re-emit connectTimeout

4.0.0

  • Added TypeScript types
  • Switch to Bunyan logger since ldapjs uses Bunyan as well
  • Pass all ldapjs client options to it. The available options were taken from the ldapjs TypeScript types.

3.0.1

  • [pull request #44] Two more ldapjs options passthrough

3.0.0

  • [issues #20, #39, #25, #26, #41] LdapAuth is now inheriting EventEmitter and re-emits ldapjs error events. This should solve crashing because of network issues or such. Other ldapjs events are not emitted.

2.5.5

  • [issue #43] Allow empty search base

2.5.4

  • [pull request #42] Update ldapjs to 1.0.1 (and use ~ in package.json for it)

2.5.3

  • [pull request #36] groupSearchFilter can be a function(user) returning the actual filter

2.5.2

  • [pull request #31] Forward reconnect option to ldapjs

2.5.1

  • [pull request #33] Check user provided password is not falsy (fixes #32)

2.5.0

  • Falsy values in bind credentials now passed on to ldapjs (fixes #27)

2.4.0

  • Update ldapjs to 1.0.0 (fixes #25)

2.3.3

  • [issue #20] Sanitize user input

2.3.2

  • [issue #19] Added messages to options asserts

2.3.1

  • [issue #14] Use bcryptjs instead of the C++ version.

2.3.0

  • [passport-ldapauth issue #10] Added support for fetching user groups. If groupSearchBase and groupSearchFilter are defined, a group search is conducted after the user has succesfully authenticated. The found groups are stored to user._groups:
new LdapAuth({
  url: 'ldaps://ldap.example.com:636',
  adminDn: 'cn=LdapAdmin,dc=local',
  adminPassword: 'LdapAdminPassword',
  searchBase: 'dc=users,dc=local',
  searchFilter: '(&(objectClass=person)(sAMAccountName={{username}}))',
  searchAttributes: ['dn', 'cn', 'givenName', 'name', 'memberOf', 'sAMAccountName'],
  groupSearchBase: 'dc=groups,dc=local',
  groupSearchFilter: '(member={{dn}})',
  groupSearchAttributes: ['dn', 'cn', 'sAMAccountName'],
});

2.2.19

  • [issue #9] Configurable bind parameter. Thanks to @oanuna

2.2.18

  • [issue #8] Fix options to actually work as documented

2.2.17

  • Added bindCredentials option. Now defaulting to same names as ldapjs.

2.2.16

  • Added option includeRaw for including entry.raw to the returned object (relates to ldapjs issue #238)

2.2.15

  • [issue #5] Handle missing bcrypt and throw a explanatory exception instead

2.2.14

  • [issue #4] Log error properties code, name, and message instead of the object

2.2.12

  • [issue #1] Add more ldapjs options

2.2.11

  • [passport-ldapauth issue #3] Update to ldapjs 0.7.0 fixes unhandled errors when using anonymous binding

2.2.10

  • Try to bind with empty adminDn string (undefined/null equals no admin bind)

2.2.9

  • [ldapauth issue #13] bcrypt as an optional dependency

2.2.8

  • [ldapauth issue #2] support anonymous binding
  • [ldapauth issue #3] unbind clients in close()
  • Added option searchScope, default to sub

2.2.7

  • Renamed to node-ldapauth-fork

2.2.6

  • Another readme fix

2.2.5

  • Readme updated

2.2.4

  • [ldapauth issues #11, #12] update to ldapjs 0.6.3
  • [ldapauth issue #10] use global search/replace for {{username}}
  • [ldapauth issue #8] enable defining attributes to fetch from LDAP server

node-ldapauth Changelog

2.2.3 (not yet released)

(nothing yet)

2.2.2

  • [issue #5] update to bcrypt 0.7.5 (0.7.3 fixes potential mem issues)

2.2.1

  • Fix a bug where ldapauth authenticate() would raise an example on an empty username.

2.2.0

  • Update to latest ldapjs (0.5.6) and other deps. Note: This makes ldapauth only work with node >=0.8 (because of internal dep in ldapjs 0.5).

2.1.0

  • Update to ldapjs 0.4 (from 0.3). Crossing fingers that this doesn't cause breakage.

2.0.0

  • Add make check for checking jsstyle.
  • [issue #1] Update to bcrypt 0.5. This means increasing the base node from 0.4 to 0.6, hence the major version bump.

1.0.2

First working version.