Yapi 集成 freeIPA 进行统一认证

vi my-api/config.json

...
    "ldapLogin": {
      "enable": true,
      "server": "ldap://ldap.bybon.cn",
      "baseDn": "uid=manager,cn=users,cn=accounts,dc=bybon,dc=cn",
      "bindPassword": "xxxxxxxx",
      "searchDn": "cn=users,cn=accounts,dc=bybon,dc=cn",
      "searchStandard": "mail",
      "emailPostfix": "@bybon.cn",
      "emailKey": "mail",
      "usernameKey": "displayName"
   }

  /**
   * ldap登录
   * @interface /user/login_by_ldap
   * @method
   * @category user
   * @foldnumber 10
   * @param {String} email email名称，不能为空
   * @param  {String} password 密码，不能为空
   * @returns {Object}
   *
   */
  async getLdapAuth(ctx) {
    try {
      const { email, password } = ctx.request.body;
      //no const username = email.split(/\@/g)[0];
      //1 const { info: ldapInfo } = await ldap.ldapQuery(email, password);
      //2 const emailPrefix = email.split(/\@/g)[0];
      //3 const emailPostfix = yapi.WEBCONFIG.ldapLogin.emailPostfix;

      //zrr
      const emailPrefix = email.split(/\@/g)[0];
      const emailPostfix = yapi.WEBCONFIG.ldapLogin.emailPostfix;
      const { info: ldapInfo } = await ldap.ldapQuery(
        (emailPostfix ? emailPrefix + emailPostfix : email),password);
      //zrr


      const emailParams =
        ldapInfo[yapi.WEBCONFIG.ldapLogin.emailKey || 'mail'] ||
        (emailPostfix ? emailPrefix + emailPostfix : email);
      const username = ldapInfo[yapi.WEBCONFIG.ldapLogin.usernameKey] || emailPrefix;