120 lines
3.7 KiB
JavaScript
120 lines
3.7 KiB
JavaScript
import Ember from 'ember';
|
|
import DS from 'ember-data';
|
|
import { fragment } from 'ember-data-model-fragments/attributes';
|
|
import { queryRecord } from 'ember-computed-query';
|
|
import fieldToAttrs, { expandAttributeMeta } from 'vault/utils/field-to-attrs';
|
|
import { memberAction } from 'ember-api-actions';
|
|
import lazyCapabilities, { apiPath } from 'vault/macros/lazy-capabilities';
|
|
|
|
const { attr, hasMany } = DS;
|
|
const { computed } = Ember;
|
|
|
|
const configPath = function configPath(strings, key) {
|
|
return function(...values) {
|
|
return `${strings[0]}${values[key]}${strings[1]}`;
|
|
};
|
|
};
|
|
export default DS.Model.extend({
|
|
authConfigs: hasMany('auth-config', { polymorphic: true, inverse: 'backend', async: false }),
|
|
path: attr('string'),
|
|
accessor: attr('string'),
|
|
name: attr('string'),
|
|
type: attr('string'),
|
|
// namespaces introduced types with a `ns_` prefix for built-in engines
|
|
// so we need to strip that to normalize the type
|
|
methodType: computed('type', function() {
|
|
return this.get('type').replace(/^ns_/, '');
|
|
}),
|
|
description: attr('string', {
|
|
editType: 'textarea',
|
|
}),
|
|
config: fragment('mount-config', { defaultValue: {} }),
|
|
local: attr('boolean', {
|
|
helpText:
|
|
'When replication is enabled, a local mount will not be replicated across clusters. This can only be specified at mount time.',
|
|
}),
|
|
sealWrap: attr('boolean', {
|
|
helpText:
|
|
'When enabled - if a seal supporting seal wrapping is specified in the configuration, all critical security parameters (CSPs) in this backend will be seal wrapped. (For K/V mounts, all values will be seal wrapped.) This can only be specified at mount time.',
|
|
}),
|
|
|
|
// used when the `auth` prefix is important,
|
|
// currently only when setting perf mount filtering
|
|
apiPath: computed('path', function() {
|
|
return `auth/${this.get('path')}`;
|
|
}),
|
|
localDisplay: computed('local', function() {
|
|
return this.get('local') ? 'local' : 'replicated';
|
|
}),
|
|
|
|
tuneAttrs: computed(function() {
|
|
return expandAttributeMeta(this, [
|
|
'description',
|
|
'config.{listingVisibility,defaultLeaseTtl,maxLeaseTtl,auditNonHmacRequestKeys,auditNonHmacResponseKeys,passthroughRequestHeaders}',
|
|
]);
|
|
}),
|
|
|
|
//sys/mounts/auth/[auth-path]/tune.
|
|
tune: memberAction({
|
|
path: 'tune',
|
|
type: 'post',
|
|
urlType: 'updateRecord',
|
|
}),
|
|
|
|
formFields: [
|
|
'type',
|
|
'path',
|
|
'description',
|
|
'accessor',
|
|
'local',
|
|
'sealWrap',
|
|
'config.{listingVisibility,defaultLeaseTtl,maxLeaseTtl,auditNonHmacRequestKeys,auditNonHmacResponseKeys,passthroughRequestHeaders}',
|
|
],
|
|
|
|
formFieldGroups: [
|
|
{ default: ['path'] },
|
|
{
|
|
'Method Options': [
|
|
'description',
|
|
'config.listingVisibility',
|
|
'local',
|
|
'sealWrap',
|
|
'config.{defaultLeaseTtl,maxLeaseTtl,auditNonHmacRequestKeys,auditNonHmacResponseKeys,passthroughRequestHeaders}',
|
|
],
|
|
},
|
|
],
|
|
|
|
attrs: computed('formFields', function() {
|
|
return expandAttributeMeta(this, this.get('formFields'));
|
|
}),
|
|
|
|
fieldGroups: computed('formFieldGroups', function() {
|
|
return fieldToAttrs(this, this.get('formFieldGroups'));
|
|
}),
|
|
|
|
configPathTmpl: computed('type', function() {
|
|
const type = this.get('type');
|
|
if (type === 'aws') {
|
|
return configPath`auth/${0}/config/client`;
|
|
} else {
|
|
return configPath`auth/${0}/config`;
|
|
}
|
|
}),
|
|
|
|
configPath: queryRecord(
|
|
'capabilities',
|
|
context => {
|
|
const { id, configPathTmpl } = context.getProperties('id', 'configPathTmpl');
|
|
return {
|
|
id: configPathTmpl(id),
|
|
};
|
|
},
|
|
'id',
|
|
'configPathTmpl'
|
|
),
|
|
|
|
deletePath: lazyCapabilities(apiPath`sys/auth/${'id'}`, 'id'),
|
|
canDisable: computed.alias('deletePath.canDelete'),
|
|
canEdit: computed.alias('configPath.canUpdate'),
|
|
});
|