finga/ldap0r
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
A minimal and suckless LDAP password reset web application.
2 commits 1 branch 1 tag 65 KiB
Rust 90.5%
Handlebars 9.5%
Find a file
finga 7b0e4b4a31 Password reset functionality 
On the `reset` page an email address can be submitted. If an account
associated with the submitted email address an email is sent
containing an URL. This URL can be used to set a new password.

- Add GPLv3 for licensing
- Add dependencies
  - `rocket_contrib` to be able to use handlebar templates
  - `anyhow` to handle errors
  - `log` for logging
  - `ldap3` to communicate with a LDAP server
  - `lettre` and `lettre_email` to handle the generation of emails and
    to send them
  - `rand` to generate random keys
- Add `README.org` which is also used to generate `README.md`
- Add configuration parameters
  - domain
  - LDAP
    - server
    - base
    - filter
    - bind
    - password
- Change default development address to 0.0.0.0
- Add structs to handle data
- Add functions to handle password reset actions
  - `reset_prepare()` to generate a new key, send it to the requestor
    and keep it in the memory
  - `set_password()` to check for the key and set the password
- Add routes
- Add tests
- Add templates
  - `reset.html.hbs` to submit an email address
  - `reset_key.html.hbs` to set the new password
2020-07-06 15:30:45 +02:00
src Password reset functionality 2020-07-06 15:30:45 +02:00
templates Password reset functionality 2020-07-06 15:30:45 +02:00
.gitignore Prepare rocket requisites to start with 2020-07-03 16:10:46 +02:00
Cargo.lock Password reset functionality 2020-07-06 15:30:45 +02:00
Cargo.toml Password reset functionality 2020-07-06 15:30:45 +02:00
LICENSE Password reset functionality 2020-07-06 15:30:45 +02:00
README.md Password reset functionality 2020-07-06 15:30:45 +02:00
README.org Password reset functionality 2020-07-06 15:30:45 +02:00
Rocket.toml Password reset functionality 2020-07-06 15:30:45 +02:00

README.md

Table of Contents

  1. ldap0r
    1. Installation
    2. Todo List
      1. Password reset [5/10]
      2. Configuration [0/5]
      3. Login Section (not sure if going to happen)

ldap0r

So far ldap0r is simply a very small web application just to reset LDAP passwords. An user enters its email address, receives an email containing a link to reset its LDAP password, thats it so far.

Installation

A rust nightly toolchain which can be aquired via https://rustup.rs is needed in order to successfully build ldap0r. Install rustup, download rust nightly, then clone this repository, set the toolchain inside the source directory to nightly, build and run it.

rustup toolchain install nightly
git clone https://git.onders.org/finga/ldap0r.git
cd ldap0r
rustup override set nightly
cargo run

The application can be configured with the Rocket.toml configuration file.

Todo List

Password reset [5/10]

  1. DONE Form to send resetlink

  2. DONE Parse url with reset key

  3. DONE Cleanup all unwraps

  4. DONE Proper error handling

  5. DONE Implement proper logging

  6. TODO Make `keys.lock()` properly thread safe

  7. TODO Check for existing keys

  8. TODO Implement key validity timeout

  9. TODO Implement proper tests

  10. TODO Optionaly store key persistently between restarts

Configuration [0/5]

  1. TODO Fix domain config

  2. TODO Make size of key configurable

  3. TODO Make key validity timeout

  4. TODO Make it possible to send emails over encrypted connections

  5. TODO Make html/text emails configurable

Login Section (not sure if going to happen)