LdapAuthenticator
final class LdapAuthenticator (View source)
Session login against an LDAP directory, with lockout tracking, a cached bind result and MFA hand-off.
Methods
__construct(AuthUserLookupInterface $userLookup, ConfigurationInterface $configManager, AuditService $auditService, CsrfTokenService $csrfTokenService, LoggerInterface $logger, LoginAttemptService $loginAttemptService, UserContextService $userContextService, ClientContext $client, MfaService $mfaService, UserProvisioningService $provisioningService, SessionInterface $session)
No description
authenticate(LoginCredentials|null $credentials = null)
Verifies the session's stored credentials, or the just-posted $credentials on the login request, against the directory and records the result in the session.
void
invalidateAuthenticationCache()
Invalidate LDAP authentication cache
Details
__construct(AuthUserLookupInterface $userLookup, ConfigurationInterface $configManager, AuditService $auditService, CsrfTokenService $csrfTokenService, LoggerInterface $logger, LoginAttemptService $loginAttemptService, UserContextService $userContextService, ClientContext $client, MfaService $mfaService, UserProvisioningService $provisioningService, SessionInterface $session)
No description
AuthOutcome
authenticate(LoginCredentials|null $credentials = null)
Verifies the session's stored credentials, or the just-posted $credentials on the login request, against the directory and records the result in the session.
The caller turns the outcome into a redirect; nothing here writes to the response.
void
invalidateAuthenticationCache()
Invalidate LDAP authentication cache