schalli a1cf05404c feat(auth): LDAP login — authenticate imported users against the directory ...

LDAP-imported users have no local passwordHash, and validateUser only checked
the local password, so they could never log in. Now a passwordless user with
an ldapDn is authenticated by binding as their OWN DN with the entered
password against the tenant's active LDAP config (reusing the ldaps TLS-skip
option). Empty passwords are rejected before binding to avoid AD's
unauthenticated-bind bypass. Local-password users are unchanged.

LdapService.verifyUserCredentials added; LdapModule now exports
LdapConfigService; AuthModule imports LdapModule (no circular dep). 8 new
specs (bind success/fail, empty-password guard, login via bind, wrong pw, no
config, no ldapDn, inactive). API 226 green, tsc clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-22 14:51:23 +02:00

.claude

docs(quick-260630-gbh): User Settings: Passwort ändern (nur non-LDAP) + Profilbild setzen

2026-06-30 12:04:20 +02:00

.gitea/workflows

ci: push images via localhost:3002 to bypass NPM proxy

2026-06-29 14:27:42 +02:00

.planning

docs(12): phase verified — live email UAT passed (digest sent via tenant SMTP, no double-send)

2026-07-22 09:57:20 +02:00

apps

feat(auth): LDAP login — authenticate imported users against the directory

2026-07-22 14:51:23 +02:00

docs

feat(06-03): add act_runner compose definition and CI/CD setup runbook

2026-06-25 10:57:45 +02:00

packages

feat(03-01): add Module SDK package and Prisma module registry schema

2026-06-19 12:33:55 +02:00

.dockerignore

feat(01-01): monorepo scaffold with root configs and shared package

2026-06-18 10:02:21 +02:00

.env.example

feat(01-01): monorepo scaffold with root configs and shared package

2026-06-18 10:02:21 +02:00

.env.prod.example

chore: clarify SMTP env vars as optional bootstrap fallback

2026-06-29 14:42:33 +02:00

.gitignore

chore: gitignore playwright-mcp and research cache dirs

2026-07-02 08:58:05 +02:00

.mcp.json

fix(mcp): use bundled Playwright chromium instead of system binary

2026-07-07 08:37:44 +02:00

biome.json

feat(01-01): monorepo scaffold with root configs and shared package

2026-06-18 10:02:21 +02:00

CLAUDE.md

chore: replace Traefik with Nginx Proxy Manager in stack docs

2026-06-29 11:54:12 +02:00

docker-compose.ci.yml

feat(06-03): add act_runner compose definition and CI/CD setup runbook

2026-06-25 10:57:45 +02:00

docker-compose.dev.yml

feat(02-04): LdapModule with sync service, config service, scheduler, and controller

2026-06-19 08:38:07 +02:00

docker-compose.prod.yml

fix(prod): default TESSERA_FORCE_CHANGE to false

2026-06-29 16:34:10 +02:00

docker-compose.yml

fix(05): add dev default for CALENDAR_ENCRYPTION_KEY in docker-compose

2026-06-24 15:37:48 +02:00

package.json

chore(04-01): install and configure Vitest test infrastructure for apps/web

2026-06-22 14:45:54 +02:00

pnpm-lock.yaml

feat(10-01): add Tender/TenderSourcePollConfig models + ingestion packages

2026-07-21 10:33:24 +02:00

pnpm-workspace.yaml

feat(01-01): monorepo scaffold with root configs and shared package

2026-06-18 10:02:21 +02:00

tsconfig.base.json

feat(01-01): monorepo scaffold with root configs and shared package

2026-06-18 10:02:21 +02:00

turbo.json

chore(04-01): install and configure Vitest test infrastructure for apps/web

2026-06-22 14:45:54 +02:00

S

Description

Tessera - Modulare Workflow-Automatisierung und Tool-Integration

35 MiB

Releases 15

Tessera 1.9.2 Latest

2026-10-02 10:13:53 +02:00

Languages

TypeScript 90.7%

JavaScript 5.4%

Rust 1.4%

HTML 1%

Shell 0.6%

Other 0.8%