Autentication using Microsoft exchange: explore

[nathcast]

Authentication for this project needs to be linked to the local environment and use the Microsoft server.
Explore how it is done in LARAVEL,
Make a test Apptest apps
Ask Colin or Oli #how they did it in their methods

[nathcast]

Message for ITS: not sent yet:
Hi, this might be for Constantin, or Oli, or Nik

Hi

For the eRAcuration App which will want to restrict it to solely people authorized to edit the eRA metadata. I could implement a login system, however, as per Roth practice, I beleive it would be better to use rothamsted login for that.

at this stage, I would like to see how it is done on other Rothamsted apps, see how it is transferable to PHP and Laravel.

I have found one article about it, https://www.webappfix.com/post/microsoft-authentication-implement-on-laravel-app.html and I would like to know if I am going in the right direction.

thanks for pointers

Nathalie

[nathcast]

These look promissing:
LDAPRecord - https://github.com/DirectoryTree/LdapRecord-Laravel -LdapRecord-Laravel is a package that provides you the ability to search your LDAP directory, perform operations, and authenticate LDAP users into your Laravel application.

https://medium.com/geekculture/laravel-ldap-authentication-laravel-login-with-ldap-437674903068

How to enable API authentication with LDAP and Laravel passport?
https://itqaguru.com/how-to-enable-api-authentication-with-ldap-and-laravel-passport/

LARAVEL SOCIALITE: https://laravel.com/docs/9.x/socialite#main-content

[nathcast]

Raised ticket to get LDAP information

[nathcast]

https://laravel.io/forum/06-23-2015-authenticating-users-in-laravel-via-windows-authentication
I have tried but not working.

[nathcast]

from Constantin, I learn that on the ODYSSEY server, we are not using LDAP or active directory, but PAM.

So I had some thoughts and we can use for authentication either LDAP/PAM if it is relatively easy, or they could use the Rothamsted Syndicated Login that is in the pipeline
So what can I do so far? I can at least get the middleware sorted so that I know what actions need login and which don't. Let's not be too complicated. If not logged in, there should not be any access: can user see what they want in eraCuration if there is no login?