# LDAP Service

## Deskripsi

Manajemen user dan group Active Directory via LDAP. Read dan write ke domain `gisportal.id`.

## Dependency

- LDAP Server: `10.100.1.40:389`
- Domain: `DC=gisportal,DC=id`
- Service account: `Administrator@gisportal.id`

## Endpoint Users

| Method | Path | Scope | Deskripsi |
|--------|------|-------|-----------|
| GET | `/ldap/users` | `ldap:read` | List semua user |
| GET | `/ldap/users/{username}` | `ldap:read` | Detail user |
| PUT | `/ldap/users/{username}` | `ldap:write` | Update user |
| POST | `/ldap/users/{username}/groups` | `ldap:write` | Tambah ke group |
| DELETE | `/ldap/users/{username}/groups/{group}` | `ldap:write` | Hapus dari group |

## Endpoint Groups

| Method | Path | Scope | Deskripsi |
|--------|------|-------|-----------|
| GET | `/ldap/groups` | `ldap:read` | List semua group |
| GET | `/ldap/groups/{group}` | `ldap:read` | Detail group |
| POST | `/ldap/groups` | `ldap:write` | Buat group baru |
| POST | `/ldap/groups/{group}/members` | `ldap:write` | Tambah member |
| DELETE | `/ldap/groups/{group}/members/{username}` | `ldap:write` | Hapus member |

## Contoh Request

```bash
# List users
curl -s https://console.gisportal.id/api/v1/ldap/users \
  -H "Authorization: Bearer <token_dengan_scope_ldap:read>"

# List groups
curl -s https://console.gisportal.id/api/v1/ldap/groups \
  -H "Authorization: Bearer <token>"
```

## Changelog

| Tanggal | Perubahan |
|---------|-----------|
| 2026-06-23 | README dibuat |