27bb03bbc0
* adding copyright header * fix fmt and a test
105 lines
3.2 KiB
JavaScript
105 lines
3.2 KiB
JavaScript
/**
|
||
* Copyright (c) HashiCorp, Inc.
|
||
* SPDX-License-Identifier: MPL-2.0
|
||
*/
|
||
|
||
import Model, { attr } from '@ember-data/model';
|
||
import { computed } from '@ember/object';
|
||
import { apiPath } from 'vault/macros/lazy-capabilities';
|
||
import { expandAttributeMeta } from 'vault/utils/field-to-attrs';
|
||
import attachCapabilities from 'vault/lib/attach-capabilities';
|
||
|
||
// these arrays define the order in which the fields will be displayed
|
||
// see
|
||
//https://www.vaultproject.io/api-docs/secret/transform#create-update-transformation
|
||
const TYPES = [
|
||
{
|
||
value: 'fpe',
|
||
displayName: 'Format Preserving Encryption (FPE)',
|
||
},
|
||
{
|
||
value: 'masking',
|
||
displayName: 'Masking',
|
||
},
|
||
];
|
||
|
||
const TWEAK_SOURCE = [
|
||
{
|
||
value: 'supplied',
|
||
displayName: 'supplied',
|
||
},
|
||
{
|
||
value: 'generated',
|
||
displayName: 'generated',
|
||
},
|
||
{
|
||
value: 'internal',
|
||
displayName: 'internal',
|
||
},
|
||
];
|
||
|
||
const ModelExport = Model.extend({
|
||
name: attr('string', {
|
||
// CBS TODO: make this required for making a transformation
|
||
label: 'Name',
|
||
readOnly: true,
|
||
subText: 'The name for your transformation. This cannot be edited later.',
|
||
}),
|
||
type: attr('string', {
|
||
defaultValue: 'fpe',
|
||
label: 'Type',
|
||
possibleValues: TYPES,
|
||
subText:
|
||
'Vault provides two types of transformations: Format Preserving Encryption (FPE) is reversible, while Masking is not. This cannot be edited later.',
|
||
}),
|
||
tweak_source: attr('string', {
|
||
defaultValue: 'supplied',
|
||
label: 'Tweak source',
|
||
possibleValues: TWEAK_SOURCE,
|
||
subText: `A tweak value is used when performing FPE transformations. This can be supplied, generated, or internal.`, // CBS TODO: I do not include the link here. Need to figure out the best way to approach this.
|
||
}),
|
||
masking_character: attr('string', {
|
||
characterLimit: 1,
|
||
defaultValue: '*',
|
||
label: 'Masking character',
|
||
subText: 'Specify which character you’d like to mask your data.',
|
||
}),
|
||
template: attr('array', {
|
||
editType: 'searchSelect',
|
||
isSectionHeader: true,
|
||
fallbackComponent: 'string-list',
|
||
label: 'Template', // CBS TODO: make this required for making a transformation
|
||
models: ['transform/template'],
|
||
selectLimit: 1,
|
||
onlyAllowExisting: true,
|
||
subText:
|
||
'Templates allow Vault to determine what and how to capture the value to be transformed. Type to use an existing template or create a new one.',
|
||
}),
|
||
allowed_roles: attr('array', {
|
||
editType: 'searchSelect',
|
||
isSectionHeader: true,
|
||
label: 'Allowed roles',
|
||
fallbackComponent: 'string-list',
|
||
models: ['transform/role'],
|
||
subText: 'Search for an existing role, type a new role to create it, or use a wildcard (*).',
|
||
wildcardLabel: 'role',
|
||
}),
|
||
transformAttrs: computed('type', function () {
|
||
if (this.type === 'masking') {
|
||
return ['name', 'type', 'masking_character', 'template', 'allowed_roles'];
|
||
}
|
||
return ['name', 'type', 'tweak_source', 'template', 'allowed_roles'];
|
||
}),
|
||
transformFieldAttrs: computed('transformAttrs', function () {
|
||
return expandAttributeMeta(this, this.transformAttrs);
|
||
}),
|
||
|
||
backend: attr('string', {
|
||
readOnly: true,
|
||
}),
|
||
});
|
||
|
||
export default attachCapabilities(ModelExport, {
|
||
updatePath: apiPath`${'backend'}/transformation/${'id'}`,
|
||
});
|