mirror of
https://github.com/status-im/consul.git
synced 2025-01-13 07:14:37 +00:00
f21b17a1f2
* 6 new components for new login/logout flow, plus SSO support UI Components: 1. AuthDialog: Wraps/orchestrates AuthForm and AuthProfile 2. AuthForm: Authorization form shown when logged out. 3. AuthProfile: Simple presentational component to show the users 'Profile' 4. OidcSelect: A 'select' component for selecting an OIDC provider, dynamically uses either a single select menu or multiple buttons depending on the amount of providers Data Components: 1. JwtSource: Given an OIDC provider URL this component will request a token from the provider and fire an donchange event when it has been retrieved. Used by TokenSource. 2. TokenSource: Given a oidc provider name or a Consul SecretID, TokenSource will use whichever method/API requests required to retrieve Consul ACL Token, which is emitted to the onchange event handler. Very basic README documentation included here, which is likely to be refined somewhat. * CSS required for new auth/SSO UI components * Remaining app code required to tie the new auth/SSO work together * CSS code required to help tie the auth/SSO work together * Test code in order to get current tests passing with new auth/SSO flow ..plus extremely basics/skipped rendering tests for the new components * Treat the secret received from the server as the truth Previously we've always treated what the user typed as the truth, this breaks down when using SSO as the user doesn't type anything to retrieve a token. Therefore we change this so that we use the secret in the API response as the truth. * Make sure removing an dom tree from a buffer only removes its own tree
64 lines
2.3 KiB
JavaScript
64 lines
2.3 KiB
JavaScript
import Controller from '@ember/controller';
|
|
import { inject as service } from '@ember/service';
|
|
import { getOwner } from '@ember/application';
|
|
import { get } from '@ember/object';
|
|
import transitionable from 'consul-ui/utils/routing/transitionable';
|
|
|
|
export default Controller.extend({
|
|
router: service('router'),
|
|
http: service('repository/type/event-source'),
|
|
dataSource: service('data-source/service'),
|
|
client: service('client/http'),
|
|
store: service('store'),
|
|
feedback: service('feedback'),
|
|
actions: {
|
|
// TODO: We currently do this in the controller instead of the router
|
|
// as the nspace and dc variables aren't available directly on the Route
|
|
// look to see if we can move this up there so we can empty the Controller
|
|
// out again
|
|
reauthorize: function(e) {
|
|
// TODO: For the moment e isn't a real event
|
|
// it has data which is potentially the token
|
|
// and type which is the logout/authorize/use action
|
|
// used for the feedback service.
|
|
this.feedback.execute(
|
|
() => {
|
|
// TODO: Centralize this elsewhere
|
|
this.client.abort();
|
|
this.http.resetCache();
|
|
this.dataSource.resetCache();
|
|
this.store.init();
|
|
|
|
const params = {};
|
|
if (e.data) {
|
|
const token = e.data;
|
|
// TODO: Do I actually need to check to see if nspaces are enabled here?
|
|
if (typeof this.nspace !== 'undefined') {
|
|
const nspace = get(token, 'Namespace') || this.nspace.Name;
|
|
// you potentially have a new namespace
|
|
// if you do redirect to it
|
|
if (nspace !== this.nspace.Name) {
|
|
params.nspace = `~${nspace}`;
|
|
}
|
|
}
|
|
}
|
|
const routeName = this.router.currentRoute.name;
|
|
const route = getOwner(this).lookup(`route:${routeName}`);
|
|
// We use transitionable here as refresh doesn't work if you are on an error page
|
|
// which is highly likely to happen here (403s)
|
|
if (routeName !== this.router.currentRouteName) {
|
|
return route.transitionTo(...transitionable(this.router, params, getOwner(this)));
|
|
} else {
|
|
return route.refresh();
|
|
}
|
|
},
|
|
e.type,
|
|
function(type, e) {
|
|
return type;
|
|
},
|
|
{}
|
|
);
|
|
},
|
|
},
|
|
});
|