feat(ldap): FallbackServers option + boot-time validation

2026-08-10 16:33:32 -04:00
parent 5fbf53601c
commit 8997a46b74
3 changed files with 59 additions and 2 deletions
@@ -88,4 +88,32 @@ public class LdapOptionsValidatorTests
                ServiceAccountDn = "",
            })
            .Failed);
+
+    [Fact]
+    public void Validator_Succeeds_WithValidFallbackServers() =>
+        Assert.False(new LdapOptionsValidator()
+            .Validate(null, Opts() with { FallbackServers = new[] { "dc2", "dc3:3894" } })
+            .Failed);
+
+    [Theory]
+    [InlineData("")]
+    [InlineData(":636")]
+    [InlineData("dc2:0")]
+    [InlineData("dc2:notaport")]
+    public void Validator_Fails_OnMalformedFallbackServer(string entry)
+    {
+        var result = new LdapOptionsValidator()
+            .Validate(null, Opts() with { FallbackServers = new[] { entry } });
+
+        Assert.True(result.Failed);
+        Assert.Contains(nameof(LdapOptions.FallbackServers), result.FailureMessage);
+    }
+
+    [Fact]
+    public void Validator_Skips_FallbackServers_WhenDisabled() =>
+        // Same inert-when-disabled rule as every other connection field: a disabled
+        // provider never opens a connection, so its fallback list is never walked.
+        Assert.False(new LdapOptionsValidator()
+            .Validate(null, Opts() with { Enabled = false, FallbackServers = new[] { ":::" } })
+            .Failed);
 }