LDAPWeb/server-connection/docs/api/service-ldap.md

API — LDAP Service

Base URL: https://console.gisportal.id/api/v1 Auth: Authorization: Bearer <token> + scope ldap:read / ldap:write

---

LDAP Users

GET /ldap/users

List semua user Active Directory.

Response 200:

{
    "data": [
        {
            "username": "rbsetiawan",
            "display_name": "R B Setiawan",
            "email": "rbsetiawan@gisportal.id",
            "department": "IT",
            "groups": ["Domain Admins"],
            "enabled": true
        }
    ]
}

---

GET /ldap/users/{username}

Detail user LDAP.

---

PUT /ldap/users/{username}

Update user LDAP (scope: ldap:write).

Request:

{"display_name": "Nama Baru", "department": "IT Infra"}

---

POST /ldap/users/{username}/groups

Tambah user ke group AD (scope: ldap:write).

Request:

{"group": "IT-Admin"}

---

DELETE /ldap/users/{username}/groups/{group}

Hapus user dari group AD (scope: ldap:write).

---

LDAP Groups

GET /ldap/groups

List semua group AD.

Response 200:

{
    "data": [
        {"name": "Domain Admins", "member_count": 3},
        {"name": "IT-Admin", "member_count": 5}
    ]
}

---

GET /ldap/groups/{group}

Detail group termasuk daftar member.

---

POST /ldap/groups

Buat group baru di AD (scope: ldap:write, admin only).

Request:

{"name": "IT-GIS", "description": "GIS Team"}

---

POST /ldap/groups/{group}/members

Tambah member ke group.

Request:

{"username": "rbsetiawan"}

---

DELETE /ldap/groups/{group}/members/{username}

Hapus member dari group.