ldap

type Client interface {
	GetGroupData(ctx context.Context, groupDN string) ([]SyncUser, error)
	GetUserByEmail(ctx context.Context, email string) (map[string]any, error)
	GetUserByID(ctx context.Context, userID string) (map[string]any, error)
}

type Config struct {
	// Server is the LDAP server URL (e.g., "ldap://ldap.example.com:389").
	Server string `yaml:"server" json:"server"`
	// GroupDN is the base DN for group searches.
	GroupDN string `yaml:"groupDN" json:"groupDN"`
	// UserDN is the DN template for user lookups (must contain %s for the user ID).
	UserDN string `yaml:"userDN" json:"userDN"`
	// BaseUserDN is the base DN for user searches.
	BaseUserDN string `yaml:"baseUserDN" json:"baseUserDN"`
	// UserSearchFilter is the LDAP filter for user searches (e.g., "(objectClass=person)").
	UserSearchFilter string `yaml:"userSearchFilter" json:"userSearchFilter"`
	// EmailAttribute is the LDAP attribute containing user email addresses (e.g., "mail").
	EmailAttribute string `yaml:"emailAttribute" json:"emailAttribute"`
	// Attributes is the list of LDAP attributes to retrieve.
	Attributes []string `yaml:"attributes" json:"attributes"`
}

type LDAPConn struct {
	// contains filtered or unexported fields
}

type LDAPConnClient interface {
	IsClosing() bool
	Search(*ldap.SearchRequest) (*ldap.SearchResult, error)
	UnauthenticatedBind(username string) error
}

type SyncUser struct {
	UID string
}