412eec7f5d
* 6 new components for new login/logout flow, plus SSO support UI Components: 1. AuthDialog: Wraps/orchestrates AuthForm and AuthProfile 2. AuthForm: Authorization form shown when logged out. 3. AuthProfile: Simple presentational component to show the users 'Profile' 4. OidcSelect: A 'select' component for selecting an OIDC provider, dynamically uses either a single select menu or multiple buttons depending on the amount of providers Data Components: 1. JwtSource: Given an OIDC provider URL this component will request a token from the provider and fire an donchange event when it has been retrieved. Used by TokenSource. 2. TokenSource: Given a oidc provider name or a Consul SecretID, TokenSource will use whichever method/API requests required to retrieve Consul ACL Token, which is emitted to the onchange event handler. Very basic README documentation included here, which is likely to be refined somewhat. * CSS required for new auth/SSO UI components * Remaining app code required to tie the new auth/SSO work together * CSS code required to help tie the auth/SSO work together * Test code in order to get current tests passing with new auth/SSO flow ..plus extremely basics/skipped rendering tests for the new components * Treat the secret received from the server as the truth Previously we've always treated what the user typed as the truth, this breaks down when using SSO as the user doesn't type anything to retrieve a token. Therefore we change this so that we use the secret in the API response as the truth. * Make sure removing an dom tree from a buffer only removes its own tree
103 lines
3.9 KiB
Handlebars
103 lines
3.9 KiB
Handlebars
<ChildSelector ...attributes @repo={{repo}} @dc={{dc}} @nspace={{nspace}} @type="policy" @placeholder="Search for policy" @items={{items}}>
|
|
{{yield}}
|
|
<BlockSlot @name="label">
|
|
Apply an existing policy
|
|
</BlockSlot>
|
|
<BlockSlot @name="create">
|
|
{{#yield-slot name='trigger'}}
|
|
{{yield}}
|
|
{{else}}
|
|
<label class="type-dialog" for="new-policy-toggle">
|
|
<span>Create new policy</span>
|
|
</label>
|
|
{{!TODO: potentially call trigger something else}}
|
|
{{!the modal has to go here so that if you provide a slot to trigger it doesn't get rendered}}
|
|
<ModalDialog
|
|
data-test-policy-form
|
|
@onopen={{action "open"}}
|
|
@name="new-policy-toggle"
|
|
>
|
|
<BlockSlot @name="header">
|
|
<h2>New Policy</h2>
|
|
</BlockSlot>
|
|
<BlockSlot @name="body">
|
|
<PolicyForm @form={{form}} @dc={{dc}} @allowServiceIdentity={{allowServiceIdentity}} />
|
|
</BlockSlot>
|
|
<BlockSlot @name="actions" as |close|>
|
|
<button type="submit" {{action 'save' item items (queue (action close) (action 'reset'))}} disabled={{if (or item.isSaving item.isPristine item.isInvalid) 'disabled'}}>
|
|
{{#if item.isSaving }}
|
|
<div class="progress indeterminate"></div>
|
|
{{/if}}
|
|
<span>Create and apply</span>
|
|
</button>
|
|
<button type="reset" disabled={{if item.isSaving 'disabled'}} {{action (queue (action close) (action 'reset'))}}>Cancel</button>
|
|
</BlockSlot>
|
|
</ModalDialog>
|
|
{{/yield-slot}}
|
|
</BlockSlot>
|
|
<BlockSlot @name="option" as |option|>
|
|
{{option.Name}}
|
|
</BlockSlot>
|
|
<BlockSlot @name="set">
|
|
<TabularDetails
|
|
data-test-policies
|
|
@onchange={{action 'open'}}
|
|
@items={{sort-by 'CreateTime:desc' 'Name:asc' items}} as |item index|
|
|
>
|
|
<BlockSlot @name="header">
|
|
<th>Name</th>
|
|
</BlockSlot>
|
|
<BlockSlot @name="row">
|
|
<td class={{policy/typeof item}}>
|
|
{{#if item.ID }}
|
|
<a href={{href-to 'dc.acls.policies.edit' item.ID}}>{{item.Name}}</a>
|
|
{{else}}
|
|
<a name={{item.Name}}>{{item.Name}}</a>
|
|
{{/if}}
|
|
</td>
|
|
</BlockSlot>
|
|
<BlockSlot @name="details">
|
|
{{#if (eq item.template '')}}
|
|
<DataSource
|
|
@src={{concat '/' item.Namespace '/' item.Datacenter '/policy/' item.ID}}
|
|
@onchange={{action (mut loadedItem) value="data"}}
|
|
@loading="lazy"
|
|
/>
|
|
{{/if}}
|
|
<dl>
|
|
<dt>Datacenters:</dt>
|
|
<dd>
|
|
{{join ', ' (policy/datacenters (or loadedItem item))}}
|
|
</dd>
|
|
</dl>
|
|
<label class="type-text">
|
|
<span>Rules <a href="{{env 'CONSUL_DOCS_URL'}}/guides/acl.html#rule-specification" rel="help noopener noreferrer" target="_blank">(HCL Format)</a></span>
|
|
{{#if (eq item.template '')}}
|
|
<CodeEditor @syntax="hcl" @readonly={{true}} @value={{or loadedItem.Rules item.Rules}} />
|
|
{{else}}
|
|
<CodeEditor @syntax="hcl" @readonly={{true}}>
|
|
{{~component 'service-identity' name=item.Name~}}
|
|
</CodeEditor>
|
|
{{/if}}
|
|
</label>
|
|
<div>
|
|
<ConfirmationDialog @message="Are you sure you want to remove this policy from this token?">
|
|
<BlockSlot @name="action" as |confirm|>
|
|
<button data-test-delete type="button" class="type-delete" {{action confirm 'remove' item items}}>Remove</button>
|
|
</BlockSlot>
|
|
<BlockSlot @name="dialog" as |execute cancel message|>
|
|
<p>
|
|
{{message}}
|
|
</p>
|
|
|
|
<button type="button" class="type-delete" {{action execute}}>Confirm remove</button>
|
|
<button type="button" class="type-cancel" {{action cancel}}>Cancel</button>
|
|
</BlockSlot>
|
|
</ConfirmationDialog>
|
|
</div>
|
|
</BlockSlot>
|
|
</TabularDetails>
|
|
|
|
</BlockSlot>
|
|
</ChildSelector>
|