21af204683
* add namespace sidebar item * depend on ember-inflector directly * list-view and list-item components * fill out components and render empty namespaces page * list namespaces in access * add menu contextual component to list item * popup contextual component * full crud for namespaces * add namespaces service and picker component * split application and vault.cluster templates and controllers, add namespace query param, add namespace-picker to vault.namespace template * remove usage of href-to * remove ember-href-to from deps * add ember-responsive * start styling the picker and link to appropriate namespaces, use ember-responsive to render picker in different places based on the breakpoint * get query param working and save ns to authdata when authenticating, feed through ns in application adapter * move to observer on the controller for setting state on the service * set state in the beforeModel hook and clear the ember data model cache * nav to secrets on change and make error handling more resilient utilizing the method that atlas does to eagerly update URLs * add a list of sys endpoints in a helper * hide header elements if not in the root namespace * debounce namespace input on auth, fix 404 for auth method fetch, move auth method fetch to a task on the auth-form component and refretch on namespace change * fix display of supported engines and exclusion of sys and identity engines * don't fetch replication status if you're in a non-root namespace * hide seal sub-menu if not in the root namespace * don't autocomplete auth form inputs * always send some requests to the root namespace * use methodType and engineType instead of type in case there it is ns_ prefixed * use sys/internal/ui/namespaces to fetch the list in the dropdown * don't use model for namespace picker and always make the request to the token namespace * fix header handling for fetch calls * use namespace-reminder component on creation and edit forms throughout the application * add namespace-reminder to the console * add flat * add deepmerge for creating the tree in the menu * delayed rendering for animation timing * design and code feedback on the first round * white text in the namespace picker * fix namespace picker issues with root keys * separate path-to-tree * add tests for path-to-tree util * hide picker if you're in the root ns and you can't access other namespaces * show error message if you enter invalid characters for namespace path * return a different model if we dont have the namespaces feature and show upgrade page * if a token has a namespace_path, use that as the root user namespace and transition them there on login * use token namespace for user, but use specified namespace to log in * always renew tokens in the token namespace * fix edition-badge test
148 lines
4.6 KiB
JavaScript
148 lines
4.6 KiB
JavaScript
import Ember from 'ember';
|
|
import utils from 'vault/lib/key-utils';
|
|
import UnloadModelRoute from 'vault/mixins/unload-model-route';
|
|
|
|
export default Ember.Route.extend(UnloadModelRoute, {
|
|
capabilities(secret) {
|
|
const { backend } = this.paramsFor('vault.cluster.secrets.backend');
|
|
let backendModel = this.modelFor('vault.cluster.secrets.backend');
|
|
let backendType = backendModel.get('engineType');
|
|
let version = backendModel.get('options.version');
|
|
let path;
|
|
if (backendType === 'transit') {
|
|
path = backend + '/keys/' + secret;
|
|
} else if (backendType === 'ssh' || backendType === 'aws') {
|
|
path = backend + '/roles/' + secret;
|
|
} else if (version && version === 2) {
|
|
path = backend + '/data/' + secret;
|
|
} else {
|
|
path = backend + '/' + secret;
|
|
}
|
|
return this.store.findRecord('capabilities', path);
|
|
},
|
|
|
|
backendType() {
|
|
return this.modelFor('vault.cluster.secrets.backend').get('engineType');
|
|
},
|
|
|
|
templateName: 'vault/cluster/secrets/backend/secretEditLayout',
|
|
|
|
beforeModel() {
|
|
// currently there is no recursive delete for folders in vault, so there's no need to 'edit folders'
|
|
// perhaps in the future we could recurse _for_ users, but for now, just kick them
|
|
// back to the list
|
|
const { secret } = this.paramsFor(this.routeName);
|
|
const parentKey = utils.parentKeyForKey(secret);
|
|
const mode = this.routeName.split('.').pop();
|
|
if (mode === 'edit' && utils.keyIsFolder(secret)) {
|
|
if (parentKey) {
|
|
return this.transitionTo('vault.cluster.secrets.backend.list', parentKey);
|
|
} else {
|
|
return this.transitionTo('vault.cluster.secrets.backend.list-root');
|
|
}
|
|
}
|
|
},
|
|
|
|
modelType(backend, secret) {
|
|
let backendModel = this.modelFor('vault.cluster.secrets.backend', backend);
|
|
let type = backendModel.get('engineType');
|
|
let types = {
|
|
transit: 'transit-key',
|
|
ssh: 'role-ssh',
|
|
aws: 'role-aws',
|
|
pki: secret && secret.startsWith('cert/') ? 'pki-certificate' : 'role-pki',
|
|
cubbyhole: 'secret',
|
|
kv: backendModel.get('modelTypeForKV'),
|
|
generic: backendModel.get('modelTypeForKV'),
|
|
};
|
|
return types[type];
|
|
},
|
|
|
|
model(params) {
|
|
let { secret } = params;
|
|
const { backend } = this.paramsFor('vault.cluster.secrets.backend');
|
|
const modelType = this.modelType(backend, secret);
|
|
|
|
if (!secret) {
|
|
secret = '\u0020';
|
|
}
|
|
if (modelType === 'pki-certificate') {
|
|
secret = secret.replace('cert/', '');
|
|
}
|
|
return Ember.RSVP.hash({
|
|
secret: this.store.queryRecord(modelType, { id: secret, backend }),
|
|
capabilities: this.capabilities(secret),
|
|
});
|
|
},
|
|
|
|
setupController(controller, model) {
|
|
this._super(...arguments);
|
|
const { secret } = this.paramsFor(this.routeName);
|
|
const { backend } = this.paramsFor('vault.cluster.secrets.backend');
|
|
const preferAdvancedEdit =
|
|
this.controllerFor('vault.cluster.secrets.backend').get('preferAdvancedEdit') || false;
|
|
const backendType = this.backendType();
|
|
model.secret.setProperties({ backend });
|
|
controller.setProperties({
|
|
model: model.secret,
|
|
capabilities: model.capabilities,
|
|
baseKey: { id: secret },
|
|
// mode will be 'show', 'edit', 'create'
|
|
mode: this.routeName.split('.').pop().replace('-root', ''),
|
|
backend,
|
|
preferAdvancedEdit,
|
|
backendType,
|
|
});
|
|
},
|
|
|
|
resetController(controller) {
|
|
if (controller.reset && typeof controller.reset === 'function') {
|
|
controller.reset();
|
|
}
|
|
},
|
|
|
|
actions: {
|
|
error(error) {
|
|
const { secret } = this.paramsFor(this.routeName);
|
|
const { backend } = this.paramsFor('vault.cluster.secrets.backend');
|
|
Ember.set(error, 'keyId', backend + '/' + secret);
|
|
Ember.set(error, 'backend', backend);
|
|
return true;
|
|
},
|
|
|
|
refreshModel() {
|
|
this.refresh();
|
|
},
|
|
|
|
willTransition(transition) {
|
|
const mode = this.routeName.split('.').pop();
|
|
if (mode === 'show') {
|
|
return transition;
|
|
}
|
|
if (this.get('hasChanges')) {
|
|
if (
|
|
window.confirm(
|
|
'You have unsaved changes. Navigating away will discard these changes. Are you sure you want to discard your changes?'
|
|
)
|
|
) {
|
|
this.unloadModel();
|
|
this.set('hasChanges', false);
|
|
return transition;
|
|
} else {
|
|
transition.abort();
|
|
return false;
|
|
}
|
|
}
|
|
},
|
|
|
|
hasDataChanges(hasChanges) {
|
|
this.set('hasChanges', hasChanges);
|
|
},
|
|
|
|
toggleAdvancedEdit(bool) {
|
|
this.controller.set('preferAdvancedEdit', bool);
|
|
this.controllerFor('vault.cluster.secrets.backend').set('preferAdvancedEdit', bool);
|
|
},
|
|
},
|
|
});
|