.NET 8 API for ADSelfService.
This component centralizes:
- Active Directory authentication
- LDAP/AD operations for users, groups, OUs, and explorer views
- server-side access enforcement
- startup-time security configuration validation
Program.cs: bootstrap, configuration, endpoints, main logic.ADSelfService-API.Server.csproj: .NET 8 project file.LDAP-CONFIG.en.md: LDAP / AD guide.ENDPOINTS.en.md: route reference.CHANGELOG.en.md: notable changes.
The API reads config.json or config.yaml next to the binary.
On first start:
- if no config file exists, the application may generate a template
- you must then complete the configuration before real use
For available options:
Security.AllowedIpsSecurity.InternalSharedSecretSecurity.RequireAppContextHeader- protected LDAP transport is mandatory:
Ldap.Ssl=true, orLdap.UseKerberosSealing=true
Debug.ShowPasswords=trueis forbidden
copy ..\config.example.json .\config.json
dotnet run --project ADSelfService-API.ServerThen verify:
GET /health
The project can be published as a folder deployment or packaged for releases.
Example:
dotnet publish ADSelfService-API.Server -c Release -r win-x64 --self-contained falseThe .csproj still contains SpaRoot / SpaProxy* properties.
In the current repository state, the actively maintained and shipped client is WEB-CLIENT-PHP, not a versioned SPA frontend inside this repo.
Treat these properties as a technical / historical leftover unless a dedicated frontend folder is added back.