Adding LDAP login

app/core/config.py

@@ -37,6 +37,19 @@ class Settings(BaseSettings):
     cookie_name: str = "access_token"
     cookie_secure: bool = False
 
+    # LDAP (direct-bind). When enabled, the login page offers an LDAP option.
+    # At login the user's DN is built from ``ldap_bind_dn_template`` (with
+    # ``{username}`` substituted) and bound directly with their password.
+    ldap_enabled: bool = False
+    ldap_host: str = "localhost"
+    ldap_port: int = 389
+    ldap_use_ssl: bool = False
+    ldap_bind_dn_template: str = "uid={username},ou=people,dc=example,dc=com"
+    # Provisioned LDAP users get a synthesized email: "<username>@<domain>".
+    ldap_email_domain: str = "example.com"
+    # LDAP attribute read for the provisioned user's display name.
+    ldap_full_name_attr: str = "cn"
+
     # CORS
     cors_origins: list[str] = ["*"]