Adds LDAP group support

[hardillb]

fixes #4002

Description

Adds support for controlling team membership with LDAP groups

I've tested this with my local LDAP instance.

Updated UI

It reuses parts from the SAML group support where possible.

There may be some code duplication in the group managemnts, but as they exist in different areas I didn't re-factor them out to a shared function.

Related Issue(s)

#4002

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on FlowFuse/helm to update ConfigMap Template
  • Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production

Labels

• Includes a DB migration? -> add the area:migration label

[codecov]

Codecov Report

Attention: Patch coverage is 0% with 59 lines in your changes missing coverage. Please review.

Project coverage is 78.18%. Comparing base (8c97fec) to head (845cec1).
Report is 8 commits behind head on main.

Files	Patch %	Lines
forge/ee/lib/sso/index.js	0.00%	59 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4407      +/-   ##
==========================================
- Coverage   78.52%   78.18%   -0.34%     
==========================================
  Files         294      294              
  Lines       13694    13753      +59     
  Branches     3082     3099      +17     
==========================================
  Hits        10753    10753              
- Misses       2941     3000      +59     

Flag	Coverage Δ
backend	78.18% <0.00%> (-0.34%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[Steve-Mcl]

Code wise, it all looks good however I have no way of trying this out and in the spirit of "done" I have to ask about tests. There is no coverage for the new functionality

Happy to approve if there is a follow up raised and @joepavitt agrees.

[hardillb]

@Steve-Mcl all the new functions require a live LDAP server.

And Nick is probably the only other person with a LDAP setup to test against.

[Steve-Mcl]

@Steve-Mcl all the new functions require a live LDAP server.

And Nick is probably the only other person with a LDAP setup to test against.

Indeed which is why I would be ok with approving this so long as there is a follow up task and @joepavitt is on-board.

[joepavitt]

Agreed. Happy to proceed

[Steve-Mcl]

Approved pending follow up issue raised to bring test coverage up

[hardillb]

@Steve-Mcl #4416