58 lines
1.7 KiB
Go
58 lines
1.7 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"time"
|
|
|
|
"astraltech.xyz/accountmanager/src/email"
|
|
"astraltech.xyz/accountmanager/src/logging"
|
|
"astraltech.xyz/accountmanager/src/worker"
|
|
)
|
|
|
|
func InitPasswordExpiry() {
|
|
go func() {
|
|
CheckPasswordExpriy()
|
|
}()
|
|
worker.CreateWorker(time.Hour*12, CheckPasswordExpriy)
|
|
}
|
|
|
|
func CheckPasswordExpriy() {
|
|
logging.Infof("Starting password expiry check")
|
|
|
|
now := time.Now().UTC()
|
|
formatted := now.Format("20060102150405Z")
|
|
|
|
search, err := ldapServer.SerchServer(serverConfig.LDAPConfig.BindDN, serverConfig.LDAPConfig.BindPassword, serverConfig.LDAPConfig.BaseDN, fmt.Sprintf("(&(objectclass=person)(krbPasswordExpiration<=%s))", formatted), []string{"cn", "mail", "krbPasswordExpiration"})
|
|
if err != nil {
|
|
logging.Warn(err.Error())
|
|
}
|
|
|
|
logging.Infof("%d users with expired passwords", search.EntryCount())
|
|
|
|
for i := range search.EntryCount() {
|
|
emailAddr := search.GetEntry(i).GetAttributeValue("mail")
|
|
if len(emailAddr) <= 0 {
|
|
continue
|
|
}
|
|
|
|
t, err := time.Parse("20060102150405Z", search.GetEntry(i).GetAttributeValue("krbPasswordExpiration"))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
formatted := t.Format("January 2, 2006 at 3:04 PM MST")
|
|
|
|
data := map[string]any{
|
|
"Username": search.GetEntry(i).GetAttributeValue("cn"),
|
|
"ExpiredAt": formatted,
|
|
"ResetURL": fmt.Sprintf("%s", serverConfig.WebserverConfig.BaseURL),
|
|
"ServiceName": "Astral Tech",
|
|
}
|
|
|
|
email_template, err := email.RenderTemplate("./data/email-templates/expired-password.html", data, nil)
|
|
if err != nil {
|
|
logging.Errorf("Failed to load email template: %s", err.Error())
|
|
}
|
|
noReplyEmail.SendEmail([]string{emailAddr}, "Password expired", email_template)
|
|
}
|
|
}
|