66ab14144a
This builds on API changes in #6017 and #6021 to conditionally turn off the “Run Job” button based on the current token’s capabilities, or the capabilities of the anonymous policy if no token is present. If you try to visit the job-run route directly, it redirects to the job list.
93 lines
2.5 KiB
JavaScript
93 lines
2.5 KiB
JavaScript
import Service, { inject as service } from '@ember/service';
|
|
import { computed } from '@ember/object';
|
|
import { alias } from '@ember/object/computed';
|
|
import { getOwner } from '@ember/application';
|
|
import { assign } from '@ember/polyfills';
|
|
import { task } from 'ember-concurrency';
|
|
import queryString from 'query-string';
|
|
import fetch from 'nomad-ui/utils/fetch';
|
|
|
|
export default Service.extend({
|
|
store: service(),
|
|
system: service(),
|
|
|
|
secret: computed({
|
|
get() {
|
|
return window.localStorage.nomadTokenSecret;
|
|
},
|
|
set(key, value) {
|
|
if (value == null) {
|
|
window.localStorage.removeItem('nomadTokenSecret');
|
|
} else {
|
|
window.localStorage.nomadTokenSecret = value;
|
|
}
|
|
|
|
return value;
|
|
},
|
|
}),
|
|
|
|
fetchSelfToken: task(function*() {
|
|
const TokenAdapter = getOwner(this).lookup('adapter:token');
|
|
try {
|
|
return yield TokenAdapter.findSelf();
|
|
} catch (e) {
|
|
return null;
|
|
}
|
|
}),
|
|
|
|
selfToken: alias('fetchSelfToken.lastSuccessful.value'),
|
|
|
|
fetchSelfTokenPolicies: task(function*() {
|
|
try {
|
|
if (this.selfToken) {
|
|
return yield this.selfToken.get('policies');
|
|
} else {
|
|
let policy = yield this.store.findRecord('policy', 'anonymous');
|
|
return [policy];
|
|
}
|
|
} catch (e) {
|
|
return [];
|
|
}
|
|
}),
|
|
|
|
selfTokenPolicies: alias('fetchSelfTokenPolicies.lastSuccessful.value'),
|
|
|
|
fetchSelfTokenAndPolicies: task(function*() {
|
|
yield this.fetchSelfToken.perform();
|
|
yield this.fetchSelfTokenPolicies.perform();
|
|
}),
|
|
|
|
// All non Ember Data requests should go through authorizedRequest.
|
|
// However, the request that gets regions falls into that category.
|
|
// This authorizedRawRequest is necessary in order to fetch data
|
|
// with the guarantee of a token but without the automatic region
|
|
// param since the region cannot be known at this point.
|
|
authorizedRawRequest(url, options = { credentials: 'include' }) {
|
|
const headers = {};
|
|
const token = this.secret;
|
|
|
|
if (token) {
|
|
headers['X-Nomad-Token'] = token;
|
|
}
|
|
|
|
return fetch(url, assign(options, { headers }));
|
|
},
|
|
|
|
authorizedRequest(url, options) {
|
|
if (this.get('system.shouldIncludeRegion')) {
|
|
const region = this.get('system.activeRegion');
|
|
if (region) {
|
|
url = addParams(url, { region });
|
|
}
|
|
}
|
|
|
|
return this.authorizedRawRequest(url, options);
|
|
},
|
|
});
|
|
|
|
function addParams(url, params) {
|
|
const paramsStr = queryString.stringify(params);
|
|
const delimiter = url.includes('?') ? '&' : '?';
|
|
return `${url}${delimiter}${paramsStr}`;
|
|
}
|