LDAP auth provider (#9074)

* Added LDAP implementation

* Cleanup and added refresh checking

* Added provider check to ldap

* Added LDAP docs

* Always update LDAP user role on authentication

* Fetched package-json from github

* Fixed lint error

* Update api/src/auth/drivers/ldap.ts

* Update api/src/auth/drivers/ldap.ts

* Added missing locale key

* Update docs/guides/api-config.md

* Update docs/configuration/config-options.md

* Update api/src/auth/drivers/ldap.ts

* Added back LDAP example

* Update config-options.md

* getUserID function sjhouldn't care about password

* Added LOCKOUT to INVALID_ACCOUNT_FLAGS

* Update styling approach for v-select

Co-authored-by: rijkvanzanten <rijkvanzanten@me.com>

api/package.json

@@ -122,6 +122,7 @@
 		"keyv": "^4.0.3",
 		"knex": "^0.95.11",
 		"knex-schema-inspector": "1.6.4",
+		"ldapjs": "^2.3.1",
 		"liquidjs": "^9.25.0",
 		"lodash": "^4.17.21",
 		"macos-release": "^2.4.1",
@@ -186,6 +187,7 @@
 		"@types/json2csv": "5.0.3",
 		"@types/jsonwebtoken": "8.5.5",
 		"@types/keyv": "3.1.3",
+		"@types/ldapjs": "^2.2.1",
 		"@types/lodash": "4.14.176",
 		"@types/mime-types": "2.1.1",
 		"@types/ms": "0.7.31",

api/src/auth.ts

@@ -2,7 +2,7 @@ import getDatabase from './database';
 import env from './env';
 import logger from './logger';
 import { AuthDriver } from './auth/auth';
-import { LocalAuthDriver, OAuth2AuthDriver, OpenIDAuthDriver } from './auth/drivers';
+import { LocalAuthDriver, OAuth2AuthDriver, OpenIDAuthDriver, LDAPAuthDriver } from './auth/drivers';
 import { DEFAULT_AUTH_PROVIDER } from './constants';
 import { InvalidConfigException } from './exceptions';
 import { AuthDriverOptions } from './types';
@@ -74,5 +74,8 @@ function getProviderInstance(
 
 		case 'openid':
 			return new OpenIDAuthDriver(options, config);
+
+		case 'ldap':
+			return new LDAPAuthDriver(options, config);
 	}
 }

api/src/auth/drivers/index.ts

@@ -1,3 +1,4 @@
 export * from './local';
 export * from './oauth2';
 export * from './openid';
+export * from './ldap';