schalli 9d1323fe97 feat(ldap): per-user exclude/denylist filter for sync ...

Add a per-username denylist so individual accounts (service accounts like
administrator, krbtgt, guest, ldap$) can be excluded from LDAP sync,
independent of the group/OU include-filter which only scopes the search.

- schema: LdapConfig.userExcludeList String[] (+ migration)
- sync: skip excluded usernames (case-insensitive) before recording the DN,
  so an already-imported user added to the list gets deactivated next sync
- DTO / config service / controller / scheduler: thread userExcludeList through
- web: exclude-list admin UI section (add/remove/save) + de/en translations
- tests: 3 specs covering empty list, case-insensitive skip, deactivation

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-14 09:34:01 +02:00

..

public

fix(06-03): add .gitkeep to apps/web/public for Docker build

2026-06-25 13:19:33 +02:00

src

feat(ldap): per-user exclude/denylist filter for sync

2026-07-14 09:34:01 +02:00

Dockerfile

fix(web): proxy client API calls through Next.js to fix production connectivity

2026-06-29 15:36:06 +02:00

next-env.d.ts

feat(01-02): portal layout with header, sidebar, theme toggle, locale switcher

2026-06-18 10:27:46 +02:00

next.config.ts

fix(web): use http://api:3001 as default rewrite destination

2026-06-29 15:42:44 +02:00

package.json

feat(cert-manager): cert role badges + ZIP download in split view

2026-07-02 10:40:39 +02:00

postcss.config.mjs

feat(01-01): Next.js app + Docker Compose stack with network segmentation

2026-06-18 10:17:21 +02:00

tsconfig.json

fix(web): exclude test files from tsconfig to fix type-check

2026-07-02 09:59:35 +02:00

vitest.config.ts

feat(05-02): add search and note widgets with tests

2026-06-24 11:33:01 +02:00