135 lines
3.5 KiB
JavaScript
135 lines
3.5 KiB
JavaScript
import Model, { attr } from '@ember-data/model';
|
|
import { alias } from '@ember/object/computed';
|
|
import { computed } from '@ember/object';
|
|
import lazyCapabilities, { apiPath } from 'vault/macros/lazy-capabilities';
|
|
import fieldToAttrs, { expandAttributeMeta } from 'vault/utils/field-to-attrs';
|
|
|
|
export default Model.extend({
|
|
idPrefix: 'cert/',
|
|
//the id prefixed with `cert/` so we can use it as the *secret param for the secret show route
|
|
idForNav: attr('string', {
|
|
readOnly: true,
|
|
}),
|
|
DISPLAY_FIELDS: computed(function () {
|
|
return [
|
|
'certificate',
|
|
'commonName',
|
|
'issuingCa',
|
|
'caChain',
|
|
'privateKey',
|
|
'privateKeyType',
|
|
'revocationTime',
|
|
'issueDate',
|
|
'expiryDate',
|
|
'serialNumber',
|
|
];
|
|
}),
|
|
|
|
altNames: attr('string', {
|
|
label: 'DNS/Email Subject Alternative Names (SANs)',
|
|
}),
|
|
backend: attr('string', {
|
|
readOnly: true,
|
|
}),
|
|
caChain: attr('string', {
|
|
label: 'CA chain',
|
|
masked: true,
|
|
}),
|
|
canParse: attr('boolean'),
|
|
certificate: attr('string', {
|
|
masked: true,
|
|
}),
|
|
commonName: attr('string'),
|
|
excludeCnFromSans: attr('boolean', {
|
|
label: 'Exclude Common Name from Subject Alternative Names (SANs)',
|
|
defaultValue: false,
|
|
}),
|
|
expiryDate: attr('string', {
|
|
label: 'Expiration date',
|
|
}),
|
|
format: attr('string', {
|
|
defaultValue: 'pem',
|
|
possibleValues: ['pem', 'der', 'pem_bundle'],
|
|
}),
|
|
ipSans: attr('string', {
|
|
label: 'IP Subject Alternative Names (SANs)',
|
|
}),
|
|
issueDate: attr('string'),
|
|
issuingCa: attr('string', {
|
|
label: 'Issuing CA',
|
|
masked: true,
|
|
}),
|
|
otherSans: attr({
|
|
editType: 'stringArray',
|
|
label: 'Other SANs',
|
|
helpText:
|
|
'The format is the same as OpenSSL: <oid>;<type>:<value> where the only current valid type is UTF8',
|
|
}),
|
|
privateKey: attr('string', {
|
|
masked: true,
|
|
}),
|
|
privateKeyType: attr('string'),
|
|
revocationTime: attr('number'),
|
|
role: attr('object', {
|
|
readOnly: true,
|
|
}),
|
|
serialNumber: attr('string'),
|
|
ttl: attr({
|
|
label: 'TTL',
|
|
editType: 'ttl',
|
|
}),
|
|
|
|
fieldsToAttrs(fieldGroups) {
|
|
return fieldToAttrs(this, fieldGroups);
|
|
},
|
|
|
|
fieldDefinition: computed(function () {
|
|
const groups = [
|
|
{ default: ['commonName', 'format'] },
|
|
{ Options: ['altNames', 'ipSans', 'ttl', 'excludeCnFromSans', 'otherSans'] },
|
|
];
|
|
return groups;
|
|
}),
|
|
|
|
fieldGroups: computed('fieldDefinition', function () {
|
|
return this.fieldsToAttrs(this.fieldDefinition);
|
|
}),
|
|
|
|
attrs: computed('DISPLAY_FIELDS', 'certificate', 'csr', function () {
|
|
const keys = this.certificate || this.csr ? this.DISPLAY_FIELDS.slice(0) : [];
|
|
return expandAttributeMeta(this, keys);
|
|
}),
|
|
|
|
toCreds: computed(
|
|
'certificate',
|
|
'issuingCa',
|
|
'caChain',
|
|
'privateKey',
|
|
'privateKeyType',
|
|
'revocationTime',
|
|
'serialNumber',
|
|
function () {
|
|
const props = {
|
|
certificate: this.certificate,
|
|
issuingCa: this.issuingCa,
|
|
caChain: this.caChain,
|
|
privateKey: this.privateKey,
|
|
privateKeyType: this.privateKeyType,
|
|
revocationTime: this.revocationTime,
|
|
serialNumber: this.serialNumber,
|
|
};
|
|
const propsWithVals = Object.keys(props).reduce((ret, prop) => {
|
|
if (props[prop]) {
|
|
ret[prop] = props[prop];
|
|
return ret;
|
|
}
|
|
return ret;
|
|
}, {});
|
|
return JSON.stringify(propsWithVals, null, 2);
|
|
}
|
|
),
|
|
|
|
revokePath: lazyCapabilities(apiPath`${'backend'}/revoke`, 'backend'),
|
|
canRevoke: alias('revokePath.canUpdate'),
|
|
});
|