How to sync user enabled field and only let enabled users login?

[Restingo]

How can I sync the ldap state of the user into the database (e.g. with field is_enabled in database) and how can I check that only enabled users are able to login?

[Restingo]

@stevebauman any news?

[stevebauman]

Hi @Restingo,

You can create an attribute handler to set the is_enabled flag on your user's Eloquent model upon sync or login:

<?php

namespace App\Ldap;

use App\User as EloquentUser;
use App\Ldap\User as LdapUser;

class SyncEnablementOnUser
{
    public function handle(LdapUser $ldap, EloquentUser $eloquent)
    {
        $eloquent->is_enabled = '...';
    }
}

Insert it the attribute handler into your sync_attributes array:

'providers' => [
    // ...

    'users' => [
        // ...
        'database' => [
            // ...
            'sync_attributes' => [
                // ...
                 \App\Ldap\SyncEnablementOnUser::class,
            ],
        ],
    ],
],

Create a new authentication rule:

php artisan make:ldap-rule OnlyEnabledUsers

Only allow enabled users:

<?php

namespace App\Ldap\Rules;

use LdapRecord\Laravel\Auth\Rule;

class OnlyEnabledUsers extends Rule
{
    /**
     * Check if the rule passes validation.
     *
     * @return bool
     */
    public function isValid()
    {
        return $this->model->is_enabled;
    }
}

[stevebauman]

Also, apologies for the lateness of this reply ❤️

If you can, please create an issue so it doesn't get lost in discussions. I watch issues every day, but discussions can slip past me in my email inbox.

[Restingo]

@stevebauman thank you very much!