Support AD in LDAP authorities extractor. Resolves #54

kafbat · Dec 16, 2024 · 36a62bc · 36a62bc
1 parent 4853eca
commit 36a62bc
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/api/src/main/java/io/kafbat/ui/service/rbac/extractor/RbacLdapAuthoritiesExtractor.java b/api/src/main/java/io/kafbat/ui/service/rbac/extractor/RbacLdapAuthoritiesExtractor.java
@@ -16,6 +16,8 @@
 @Slf4j
 public class RbacLdapAuthoritiesExtractor extends NestedLdapAuthoritiesPopulator {
 
+  private static final Set<Provider> SUPPORTED_PROVIDERS = Set.of(Provider.LDAP, Provider.LDAP_AD);
+
   private final AccessControlService acs;
 
   public RbacLdapAuthoritiesExtractor(ApplicationContext context,
@@ -36,7 +38,7 @@ protected Set<GrantedAuthority> getAdditionalRoles(DirContextOperations user, St
         .stream()
         .filter(r -> r.getSubjects()
             .stream()
-            .filter(subject -> subject.getProvider().equals(Provider.LDAP))
+            .filter(subject -> SUPPORTED_PROVIDERS.contains(subject.getProvider()))
             .filter(subject -> subject.getType().equals("group"))
             .anyMatch(subject -> ldapGroups.contains(subject.getValue()))
         )