feat: auth

This commit is contained in:
2025-11-15 21:43:29 +01:00
parent 3c372878a3
commit 2ea90554ef
9 changed files with 1356 additions and 98 deletions

39
.env.example Normal file
View File

@@ -0,0 +1,39 @@
# LDAP Configuration
LDAP_ADDRESS=ldaps://ldap-server:636
LDAP_IMPLEMENTATION=custom
LDAP_TIMEOUT=5000
LDAP_START_TLS=false
LDAP_TLS_SERVER_NAME=ldap-server
LDAP_TLS_SKIP_VERIFY=true
LDAP_TLS_MINIMUM_VERSION=TLS1.2
LDAP_BASE_DN=dc=dcentral,dc=systems
LDAP_ADDITIONAL_USERS_DN=cn=users
LDAP_USERS_FILTER=(&({username_attribute}={input}))
LDAP_ADDITIONAL_GROUPS_DN=cn=groups
LDAP_GROUPS_FILTER=(cn=users)
LDAP_USER=uid=root,cn=users,dc=dcentral,dc=systems
LDAP_PASSWORD=super-secret
LDAP_ATTRIBUTE_DISTINGUISHED_NAME=distinguishedName
LDAP_ATTRIBUTE_USERNAME=uid
LDAP_ATTRIBUTE_MAIL=mail
LDAP_ATTRIBUTE_MEMBER_OF=memberOf
LDAP_ATTRIBUTE_GROUP_NAME=cn
# Session Configuration
SESSION_SECRET=your-secret-key-change-this-in-production
# Server Configuration
PORT=3000
# Session Configuration
SESSION_SECRET=your-secret-key-change-this-in-production
SESSION_NAME=connect.sid
TRUST_PROXY=true
COOKIE_SECURE=true
COOKIE_SAMESITE=none
COOKIE_DOMAIN=
COOKIE_PATH=/
# Server Configuration
PORT=3000
NODE_ENV=production