storeldap.h

/*
 * SPDX-FileCopyrightText: (C) 2026 Daniel Nicoletti <dantti12@gmail.com>
 * SPDX-License-Identifier: BSD-3-Clause
 */
#pragma once

#include <Cutelyst/Plugins/Authentication/authenticationstore.h>

namespace Cutelyst {

class CUTELYST_PLUGIN_AUTHENTICATION_EXPORT StoreLDAP : public AuthenticationStore
{
public:
    enum class SearchScope {
        Base,
        OneLevel,
        SubTree,
    };

    StoreLDAP();

    ~StoreLDAP() override;

    AuthenticationUser findUser(Context *c, const ParamsMultiMap &userInfo) override final;

    QVariant forSession(Context *c, const AuthenticationUser &user) override final;

    AuthenticationUser fromSession(Context *c, const QVariant &frozenUser) override final;

    [[nodiscard]] bool validatePassword(Context *c,
                                        const AuthenticationUser &user,
                                        const QString &password) const override;

    void setServerUris(const QStringList &serverUris);

    [[nodiscard]] QStringList serverUris() const;

    void setBindDn(const QString &bindDn);

    [[nodiscard]] QString bindDn() const;

    void setBindPassword(const QString &bindPassword);

    void setUserBaseDn(const QString &baseDn);

    [[nodiscard]] QString userBaseDn() const;

    void setUserField(const QString &userField);

    [[nodiscard]] QString userField() const;

    void setIdAttribute(const QString &idAttribute);

    [[nodiscard]] QString idAttribute() const;

    void setUserFilter(const QString &userFilter);

    [[nodiscard]] QString userFilter() const;

    void setUserScope(SearchScope scope);

    [[nodiscard]] SearchScope userScope() const;

    void setAttributes(const QStringList &attributes);

    [[nodiscard]] QStringList attributes() const;

    void setStartTls(bool startTls);

    [[nodiscard]] bool startTls() const;

private:
    AuthenticationUser
        findUserByAttribute(Context *c, const QString &attribute, const QString &value);

    QStringList m_serverUris;
    QString m_bindDn;
    QString m_bindPassword;
    QString m_userBaseDn;
    QString m_userField;
    QString m_idAttribute;
    QString m_userFilter;
    QStringList m_attributes;
    SearchScope m_userScope;
    bool m_startTls;
};

} // namespace Cutelyst