com.eldrix.concierge.wales.nadex — com.eldrix/concierge 1.0.150

Integration with NHS Wales' active directory for authentication and user lookup.

assoc-professional-registration clj

(assoc-professional-registration {:keys [postOfficeBox] :as user})

Attempt to infer professional regulator and code from user data. NHS Wales keeps the number in the postOfficeBox field of the national directory. I am not sure this is documented anywhere, but this should fail gracefully if this changes.

by-job clj

(by-job name)

by-name clj

(by-name names)

Create an LDAP filter to search by name of individual. This searches both surname 'sn' and first name 'givenName' fields.

by-params clj

(by-params params)

Create an LDAP filter to search for the specified arbitrary parameters.

by-username clj

(by-username username)

Create an LDAP filter to search by username.

can-authenticate? clj

(can-authenticate? pool username password)

Can the user 'username' authenticate using the 'password' specified? Parameters:

• pool : a connection pool
• username : username
• password : password.

do-ldap-search clj

(do-ldap-search pool bind-username bind-password search-filter)

make-connection-options clj

(make-connection-options opts)

make-connection-pool clj

(make-connection-pool {:keys [hosts _host pool-size] :as opts})

Make a connection pool to the NHS Wales 'NADEX' user directory. Unfortunately, NHS Wales uses a self-signed certificate, so you will need to specify 'trust-all-certificates?'. This is the default.

make-failover-server-set clj

(make-failover-server-set {:keys [hosts port trust-all-certificates?] :as opts})

make-unauthenticated-connection clj

(make-unauthenticated-connection)

(make-unauthenticated-connection {:keys [host port trust-all-certificates?]
                                  :as opts})

Creates a secure but unauthenticated connection.

parse-entry clj

(parse-entry result)

search clj

(search pool bind-username bind-password)

(search pool bind-username bind-password search-filter)

Search for users, either using their own credentials (and implicitly searching for themselves, or using specific generic binding credentials and the 'filter' specified.