open-vault/ui/app/adapters/secret-v2.js
Matthew Irish c4cf16c3e3
UI - fix encoding for user-entered paths (#6294)
* directly depend on route-recognizer

* add path encode helper using route-recognizer normalizer methods

* encode user-entered paths/ids for places we're not using the built-in ember data buildUrl method

* encode secret link params

* decode params from the url, and encode for linked-block and navigate-input components

* add escape-string-regexp

* use list-controller mixin and escape the string when contructing new Regex objects

* encode paths in the console service

* add acceptance tests for kv secrets

* make encoding in linked-block an attribute, and use it on secret lists

* egp endpoints are enterprise-only, so include 'enterprise' text in the test

* fix routing test and exclude single quote from encoding tests

* encode cli string before tokenizing

* encode auth_path for use with urlFor

* add test for single quote via UI input instead of web cli
2019-03-01 10:08:30 -06:00

57 lines
1.5 KiB
JavaScript

/* eslint-disable */
import { isEmpty } from '@ember/utils';
import ApplicationAdapter from './application';
import { encodePath } from 'vault/utils/path-encoding-helpers';
export default ApplicationAdapter.extend({
namespace: 'v1',
_url(backend, id) {
let url = `${this.buildURL()}/${encodePath(backend)}/metadata/`;
if (!isEmpty(id)) {
url = url + encodePath(id);
}
return url;
},
// we override query here because the query object has a bunch of client-side
// concerns and we only want to send "list" to the server
query(store, type, query) {
let { backend, id } = query;
return this.ajax(this._url(backend, id), 'GET', { data: { list: true } }).then(resp => {
resp.id = id;
resp.backend = backend;
return resp;
});
},
urlForQueryRecord(query) {
let { id, backend } = query;
return this._url(backend, id);
},
queryRecord(store, type, query) {
let { backend, id } = query;
return this.ajax(this._url(backend, id), 'GET').then(resp => {
resp.id = id;
resp.backend = backend;
return resp;
});
},
detailURL(snapshot) {
let backend = snapshot.belongsTo('engine', { id: true }) || snapshot.attr('engineId');
let { id } = snapshot;
return this._url(backend, id);
},
urlForUpdateRecord(store, type, snapshot) {
return this.detailURL(snapshot);
},
urlForCreateRecord(modelName, snapshot) {
return this.detailURL(snapshot);
},
urlForDeleteRecord(store, type, snapshot) {
return this.detailURL(snapshot);
},
});