Merge branch 'master' of https://github.com/open-inc/node-parse-server-ldap

Author: nicovitt

CHANGELOG.md

@@ -1,3 +1,16 @@
+# [0.7.0](https://github.com/open-inc/node-parse-server-ldap/compare/v0.6.8...v0.7.0) (2025-07-04)
+
+
+### Bug Fixes
+
+* ensure session token after signup ([164cf7f](https://github.com/open-inc/node-parse-server-ldap/commit/164cf7f0dc9c7158c032bf975f22066dda6e379b))
+
+
+### Features
+
+* introduce env variable for tls option rejectUnauthorized ([ce1422c](https://github.com/open-inc/node-parse-server-ldap/commit/ce1422c11ef66f80b7b24a7e56f14484ba3ce73c))
+* set default tenant using env variable ([8e5b964](https://github.com/open-inc/node-parse-server-ldap/commit/8e5b9646696b6dc236e2a7007de57a76e6388bf7))
+
 ## [0.6.8](https://github.com/open-inc/node-parse-server-ldap/compare/v0.6.7...v0.6.8) (2025-06-04)
 
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openinc/parse-server-ldap",
-  "version": "0.6.8",
+  "version": "0.7.0",
   "description": "Parse Server Cloud Code to authenticate with LDAP/AD",
   "packageManager": "pnpm@10.12.4",
   "type": "module",

pnpm-lock.yaml

@@ -35,6 +35,10 @@ let PARSE_LDAP_EXPIRE_LENGTH = process.env.PARSE_LDAP_EXPIRE_LENGTH
   : new Date(Date.now() + 1000 * 60 * 60 * 24 * 365);
 
 const PARSE_LDAP_UNIFY_CREDENTIALS = process.env.PARSE_LDAP_UNIFY_CREDENTIALS === "true";
+const PARSE_LDAP_DEFAULT_TENANT_ID = process.env.PARSE_LDAP_DEFAULT_TENANT_ID || undefined;
+const PARSE_LDAP_REJECT_UNAUTHORIZED = process.env.PARSE_LDAP_REJECT_UNAUTHORIZED === "true";
+
+const clientOptions = PARSE_LDAP_REJECT_UNAUTHORIZED ? {url: PARSE_LDAP_URL} : {url: PARSE_LDAP_URL, tlsOptions: {rejectUnauthorized: false}};
 
 export async function init() {
   if (!PARSE_LDAP_URL) {
@@ -169,9 +173,17 @@ export async function init() {
       user_c.set(PARSE_LDAP_PARSE_LDAP_DN_ATTRIBUTE, user.dn);
       user_c.set("password", token);
 
+      if (PARSE_LDAP_DEFAULT_TENANT_ID !== undefined) {
+        const tenant = new Parse.Object("OD3_Tenant");
+        tenant.id = PARSE_LDAP_DEFAULT_TENANT_ID;
+        user_c.set("tenant", tenant);
+      }
+
       await user_c.signUp();
 
-      return { ...user, session: user_c.getSessionToken() };
+      const user_b = await Parse.User.logIn(user.username as string, token);
+
+      return { ...user, session: user_b.getSessionToken() };
     } catch (error) {
       console.error(error);
 
@@ -181,7 +193,7 @@ export async function init() {
 }
 
 async function validateCredentials(username: string, password: string) {
-  const client = new Client({ url: PARSE_LDAP_URL });
+  const client = new Client(clientOptions);
 
   try {
     const user = username;
@@ -273,7 +285,7 @@ async function getBindPath(params: Record<string, string>) {
     return replaceParams(PARSE_LDAP_LOGIN_BIND_DN, params);
   }
 
-  const client = new Client({ url: PARSE_LDAP_URL });
+  const client = new Client(clientOptions);
 
   try {
     await client.bind(
@@ -307,7 +319,7 @@ async function getBindPath(params: Record<string, string>) {
 }
 
 async function validateGroupMember(dn: string | string[] | Buffer | Buffer[]): Promise<boolean> {
-  const client = new Client({ url: PARSE_LDAP_URL });
+  const client = new Client(clientOptions);
 
   try {
     await client.bind(
@@ -346,7 +358,7 @@ async function validateGroupMember(dn: string | string[] | Buffer | Buffer[]): P
 }
 
 async function getValidGroupMembers() {
-  const client = new Client({ url: PARSE_LDAP_URL });
+  const client = new Client(clientOptions);
 
   try {
     await client.bind(