Compare commits
13 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
1d5c00768c
|
|||
|
7f1c9ec9a8
|
|||
|
fe0a4d5991
|
|||
|
f06ff83dce
|
|||
|
251aa6cf97
|
|||
|
60003d64d5
|
|||
|
535dde13ff
|
|||
|
63d102296f
|
|||
|
77d203b2b0
|
|||
|
fcbf25e3ce
|
|||
|
084ec7bbc1
|
|||
|
6b3339a883
|
|||
|
8f1bbfef56
|
@@ -38,14 +38,18 @@ export default class MFAChallengePage extends Component {
|
|||||||
static get props() { return ['app_name'] }
|
static get props() { return ['app_name'] }
|
||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
|
|
||||||
loading = false
|
constructor() {
|
||||||
|
super()
|
||||||
|
|
||||||
verify_code = ''
|
this.loading = false
|
||||||
verify_success = false
|
|
||||||
|
|
||||||
error_message = ''
|
this.verify_code = ''
|
||||||
other_message = ''
|
this.verify_success = false
|
||||||
t = {}
|
|
||||||
|
this.error_message = ''
|
||||||
|
this.other_message = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.t = await T(
|
this.t = await T(
|
||||||
|
|||||||
@@ -28,12 +28,16 @@ export default class MFADisableComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return [] }
|
static get props() { return [] }
|
||||||
|
|
||||||
app_name = ''
|
constructor() {
|
||||||
step = 0
|
super()
|
||||||
loading = false
|
|
||||||
error_message = ''
|
this.app_name = ''
|
||||||
other_message = ''
|
this.step = 0
|
||||||
t = {}
|
this.loading = false
|
||||||
|
this.error_message = ''
|
||||||
|
this.other_message = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.app_name = session.get('app.name')
|
this.app_name = session.get('app.name')
|
||||||
|
|||||||
@@ -38,12 +38,16 @@ export default class MFARecoveryComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return ['app_name'] }
|
static get props() { return ['app_name'] }
|
||||||
|
|
||||||
verify_success = false
|
constructor() {
|
||||||
loading = false
|
super()
|
||||||
recovery_code = ''
|
|
||||||
error_message = ''
|
this.verify_success = false
|
||||||
other_message = ''
|
this.loading = false
|
||||||
t = {}
|
this.recovery_code = ''
|
||||||
|
this.error_message = ''
|
||||||
|
this.other_message = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.t = await T(
|
this.t = await T(
|
||||||
|
|||||||
@@ -61,19 +61,23 @@ export default class MFASetupPage extends Component {
|
|||||||
static get props() { return ['app_name'] }
|
static get props() { return ['app_name'] }
|
||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
|
|
||||||
loading = false
|
constructor() {
|
||||||
step = 0
|
super()
|
||||||
|
|
||||||
qr_data = ''
|
this.loading = false
|
||||||
otpauth_url = ''
|
this.step = 0
|
||||||
secret = ''
|
|
||||||
verify_code = ''
|
|
||||||
|
|
||||||
verify_success = false
|
this.qr_data = ''
|
||||||
|
this.otpauth_url = ''
|
||||||
|
this.secret = ''
|
||||||
|
this.verify_code = ''
|
||||||
|
|
||||||
error_message = ''
|
this.verify_success = false
|
||||||
other_message = ''
|
|
||||||
t = {}
|
this.error_message = ''
|
||||||
|
this.other_message = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.t = await T(
|
this.t = await T(
|
||||||
|
|||||||
@@ -25,7 +25,11 @@ export default class AuthPage extends Component {
|
|||||||
static get props() { return ['app_name', 'message', 'actions'] }
|
static get props() { return ['app_name', 'message', 'actions'] }
|
||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
|
|
||||||
loading = false
|
constructor() {
|
||||||
|
super()
|
||||||
|
|
||||||
|
this.loading = false
|
||||||
|
}
|
||||||
|
|
||||||
async action_click(index) {
|
async action_click(index) {
|
||||||
this.loading = true
|
this.loading = true
|
||||||
|
|||||||
@@ -78,23 +78,27 @@ export default class PasswordResetComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return ['app_name'] }
|
static get props() { return ['app_name'] }
|
||||||
|
|
||||||
step = 0
|
constructor() {
|
||||||
loading = false
|
super()
|
||||||
has_mfa = false
|
|
||||||
|
|
||||||
error_message = ''
|
this.step = 0
|
||||||
other_message = ''
|
this.loading = false
|
||||||
|
this.has_mfa = false
|
||||||
|
|
||||||
step_1_valid = false
|
this.error_message = ''
|
||||||
step_1_calc_time = ''
|
this.other_message = ''
|
||||||
step_1_problem = ''
|
|
||||||
|
|
||||||
step_2_valid = false
|
this.step_1_valid = false
|
||||||
|
this.step_1_calc_time = ''
|
||||||
|
this.step_1_problem = ''
|
||||||
|
|
||||||
password = ''
|
this.step_2_valid = false
|
||||||
confirm_password = ''
|
|
||||||
t = {}
|
this.password = ''
|
||||||
ready = false
|
this.confirm_password = ''
|
||||||
|
this.t = {}
|
||||||
|
this.ready = false
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.has_mfa = !!session.get('user.has_mfa')
|
this.has_mfa = !!session.get('user.has_mfa')
|
||||||
|
|||||||
@@ -63,18 +63,21 @@ export default class AuthLoginForm extends Component {
|
|||||||
] }
|
] }
|
||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
|
|
||||||
username = ''
|
constructor() {
|
||||||
password = ''
|
super()
|
||||||
button_text = ''
|
|
||||||
step_two = false
|
|
||||||
btn_disabled = true
|
|
||||||
loading = false
|
|
||||||
error_message = ''
|
|
||||||
other_message = ''
|
|
||||||
allow_back = true
|
|
||||||
auth_user = false
|
|
||||||
|
|
||||||
t = {}
|
this.username = ''
|
||||||
|
this.password = ''
|
||||||
|
this.button_text = ''
|
||||||
|
this.step_two = false
|
||||||
|
this.btn_disabled = true
|
||||||
|
this.loading = false
|
||||||
|
this.error_message = ''
|
||||||
|
this.other_message = ''
|
||||||
|
this.allow_back = true
|
||||||
|
this.auth_user = false
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
watch_username(new_username, old_username) {
|
watch_username(new_username, old_username) {
|
||||||
this.btn_disabled = !new_username
|
this.btn_disabled = !new_username
|
||||||
|
|||||||
@@ -98,19 +98,23 @@ export default class RegistrationFormComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return ['app_name'] }
|
static get props() { return ['app_name'] }
|
||||||
|
|
||||||
loading = false
|
constructor() {
|
||||||
step = 1
|
super()
|
||||||
other_message = ''
|
|
||||||
error_message = ''
|
|
||||||
message = ''
|
|
||||||
btn_disabled = true
|
|
||||||
button_text = ''
|
|
||||||
|
|
||||||
first_name = ''
|
this.loading = false
|
||||||
last_name = ''
|
this.step = 1
|
||||||
username = ''
|
this.other_message = ''
|
||||||
email = ''
|
this.error_message = ''
|
||||||
t = {}
|
this.message = ''
|
||||||
|
this.btn_disabled = true
|
||||||
|
this.button_text = ''
|
||||||
|
|
||||||
|
this.first_name = ''
|
||||||
|
this.last_name = ''
|
||||||
|
this.username = ''
|
||||||
|
this.email = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
// Batch-load translated phrases
|
// Batch-load translated phrases
|
||||||
|
|||||||
@@ -146,20 +146,24 @@ export default class FormComponent extends Component {
|
|||||||
return ['resource', 'form_id', 'initial_mode']
|
return ['resource', 'form_id', 'initial_mode']
|
||||||
}
|
}
|
||||||
|
|
||||||
definition = {}
|
constructor() {
|
||||||
data = {}
|
super()
|
||||||
uuid = ''
|
|
||||||
title = ''
|
|
||||||
error_message = ''
|
|
||||||
other_message = ''
|
|
||||||
|
|
||||||
access_msg = ''
|
this.definition = {}
|
||||||
can_access = false
|
this.data = {}
|
||||||
|
this.uuid = ''
|
||||||
|
this.title = ''
|
||||||
|
this.error_message = ''
|
||||||
|
this.other_message = ''
|
||||||
|
|
||||||
is_ready = false
|
this.access_msg = ''
|
||||||
mode = ''
|
this.can_access = false
|
||||||
id = ''
|
|
||||||
t = {}
|
this.is_ready = false
|
||||||
|
this.mode = ''
|
||||||
|
this.id = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
reset() {
|
reset() {
|
||||||
this.definition = {}
|
this.definition = {}
|
||||||
|
|||||||
@@ -65,13 +65,17 @@ export default class ListingComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return ['resource'] }
|
static get props() { return ['resource'] }
|
||||||
|
|
||||||
definition = {}
|
constructor() {
|
||||||
data = []
|
super()
|
||||||
resource_class = {}
|
|
||||||
|
|
||||||
access_msg = ''
|
this.definition = {}
|
||||||
can_access = false
|
this.data = []
|
||||||
t = {}
|
this.resource_class = {}
|
||||||
|
|
||||||
|
this.access_msg = ''
|
||||||
|
this.can_access = false
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.t = await T(
|
this.t = await T(
|
||||||
|
|||||||
@@ -232,35 +232,39 @@ export default class AppSetupComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return [] }
|
static get props() { return [] }
|
||||||
|
|
||||||
step = 0
|
constructor() {
|
||||||
btn_disabled = true
|
super()
|
||||||
btn_back = false
|
|
||||||
btn_hidden = false
|
|
||||||
btn_listing = false
|
|
||||||
|
|
||||||
name = ''
|
this.step = 0
|
||||||
identifier = ''
|
this.btn_disabled = true
|
||||||
type = '' // ldap | saml | oauth
|
this.btn_back = false
|
||||||
oauth_redirect_uri = ''
|
this.btn_hidden = false
|
||||||
|
this.btn_listing = false
|
||||||
|
|
||||||
saml_entity_id = ''
|
this.name = ''
|
||||||
saml_acs_url = ''
|
this.identifier = ''
|
||||||
saml_slo_url = ''
|
this.type = '' // ldap | saml | oauth
|
||||||
|
this.oauth_redirect_uri = ''
|
||||||
|
|
||||||
ldap_username = ''
|
this.saml_entity_id = ''
|
||||||
ldap_password = ''
|
this.saml_acs_url = ''
|
||||||
ldap_password_confirm = ''
|
this.saml_slo_url = ''
|
||||||
ldap_config = {}
|
|
||||||
|
|
||||||
error_message = ''
|
this.ldap_username = ''
|
||||||
|
this.ldap_password = ''
|
||||||
|
this.ldap_password_confirm = ''
|
||||||
|
this.ldap_config = {}
|
||||||
|
|
||||||
app = {}
|
this.error_message = ''
|
||||||
oauth_client = {}
|
|
||||||
saml_provider = {}
|
|
||||||
ldap_client = {}
|
|
||||||
|
|
||||||
app_name = ''
|
this.app = {}
|
||||||
host = ''
|
this.oauth_client = {}
|
||||||
|
this.saml_provider = {}
|
||||||
|
this.ldap_client = {}
|
||||||
|
|
||||||
|
this.app_name = ''
|
||||||
|
this.host = ''
|
||||||
|
}
|
||||||
|
|
||||||
make_url(path) {
|
make_url(path) {
|
||||||
return session.url(path)
|
return session.url(path)
|
||||||
|
|||||||
@@ -1,7 +1,6 @@
|
|||||||
import { Component } from '../../lib/vues6/vues6.js'
|
import { Component } from '../../lib/vues6/vues6.js'
|
||||||
import { event_bus } from '../service/EventBus.service.js'
|
import { event_bus } from '../service/EventBus.service.js'
|
||||||
import { session } from '../service/Session.service.js'
|
import { session } from '../service/Session.service.js'
|
||||||
import { message_service } from '../service/Message.service.js'
|
|
||||||
|
|
||||||
const template = `
|
const template = `
|
||||||
<nav class="navbar navbar-expand-lg navbar-light bg-light border-bottom">
|
<nav class="navbar navbar-expand-lg navbar-light bg-light border-bottom">
|
||||||
@@ -53,10 +52,10 @@ export default class NavBarComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return [] }
|
static get props() { return [] }
|
||||||
|
|
||||||
can = {}
|
|
||||||
|
|
||||||
constructor() {
|
constructor() {
|
||||||
super()
|
super()
|
||||||
|
|
||||||
|
this.can = {}
|
||||||
this.toggle_event = event_bus.event('sidebar.toggle')
|
this.toggle_event = event_bus.event('sidebar.toggle')
|
||||||
this.first_name = session.get('user.first_name')
|
this.first_name = session.get('user.first_name')
|
||||||
this.last_name = session.get('user.last_name')
|
this.last_name = session.get('user.last_name')
|
||||||
|
|||||||
@@ -23,9 +23,14 @@ export default class SideBarComponent extends Component {
|
|||||||
static get props() { return ['app_name'] }
|
static get props() { return ['app_name'] }
|
||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
|
|
||||||
actions = []
|
constructor() {
|
||||||
|
super()
|
||||||
|
|
||||||
possible_actions = [
|
this.actions = []
|
||||||
|
|
||||||
|
this.isCollapsed = false
|
||||||
|
|
||||||
|
this.possible_actions = [
|
||||||
{
|
{
|
||||||
text: 'Profile',
|
text: 'Profile',
|
||||||
action: 'redirect',
|
action: 'redirect',
|
||||||
@@ -87,8 +92,6 @@ export default class SideBarComponent extends Component {
|
|||||||
},
|
},
|
||||||
]
|
]
|
||||||
|
|
||||||
constructor() {
|
|
||||||
super()
|
|
||||||
event_bus.event('sidebar.toggle').subscribe(() => {
|
event_bus.event('sidebar.toggle').subscribe(() => {
|
||||||
this.toggle()
|
this.toggle()
|
||||||
})
|
})
|
||||||
@@ -120,8 +123,6 @@ export default class SideBarComponent extends Component {
|
|||||||
this.actions = new_actions
|
this.actions = new_actions
|
||||||
}
|
}
|
||||||
|
|
||||||
isCollapsed = false
|
|
||||||
|
|
||||||
toggle() {
|
toggle() {
|
||||||
this.isCollapsed = !this.isCollapsed
|
this.isCollapsed = !this.isCollapsed
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -68,8 +68,12 @@ export default class MessageContainerComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return [] }
|
static get props() { return [] }
|
||||||
|
|
||||||
messages = []
|
constructor() {
|
||||||
modals = []
|
super()
|
||||||
|
|
||||||
|
this.messages = []
|
||||||
|
this.modals = []
|
||||||
|
}
|
||||||
|
|
||||||
vue_on_create() {
|
vue_on_create() {
|
||||||
this.alert_event = event_bus.event('message.alert')
|
this.alert_event = event_bus.event('message.alert')
|
||||||
|
|||||||
@@ -195,31 +195,35 @@ export default class EditProfileComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return ['user_id'] }
|
static get props() { return ['user_id'] }
|
||||||
|
|
||||||
profile_first = ''
|
constructor() {
|
||||||
profile_last = ''
|
super()
|
||||||
profile_email = ''
|
|
||||||
profile_tagline = ''
|
|
||||||
last_reset = ''
|
|
||||||
mfa_enable_date = ''
|
|
||||||
|
|
||||||
has_mfa_recovery = false
|
this.profile_first = ''
|
||||||
mfa_recovery_date = ''
|
this.profile_last = ''
|
||||||
mfa_recovery_codes = 0
|
this.profile_email = ''
|
||||||
|
this.profile_tagline = ''
|
||||||
|
this.last_reset = ''
|
||||||
|
this.mfa_enable_date = ''
|
||||||
|
|
||||||
form_message = 'No changes.'
|
this.has_mfa_recovery = false
|
||||||
|
this.mfa_recovery_date = ''
|
||||||
|
this.mfa_recovery_codes = 0
|
||||||
|
|
||||||
has_mfa = false
|
this.form_message = 'No changes.'
|
||||||
ready = false
|
|
||||||
|
|
||||||
notify_gateway_url = ''
|
this.has_mfa = false
|
||||||
notify_app_key = ''
|
this.ready = false
|
||||||
notify_enabled = false
|
|
||||||
notify_created_on = ''
|
|
||||||
notify_loaded = false
|
|
||||||
|
|
||||||
app_passwords = []
|
this.notify_gateway_url = ''
|
||||||
app_name = ''
|
this.notify_app_key = ''
|
||||||
t = {}
|
this.notify_enabled = false
|
||||||
|
this.notify_created_on = ''
|
||||||
|
this.notify_loaded = false
|
||||||
|
|
||||||
|
this.app_passwords = []
|
||||||
|
this.app_name = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
on_key_up = ($event) => {}
|
on_key_up = ($event) => {}
|
||||||
|
|
||||||
|
|||||||
@@ -72,12 +72,16 @@ export default class AppPasswordFormComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get props() { return [] }
|
static get props() { return [] }
|
||||||
|
|
||||||
name = ''
|
constructor() {
|
||||||
valid = false
|
super()
|
||||||
uuid = ''
|
|
||||||
enable_form = true
|
this.name = ''
|
||||||
display_password = ''
|
this.valid = false
|
||||||
t = {}
|
this.uuid = ''
|
||||||
|
this.enable_form = true
|
||||||
|
this.display_password = ''
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.t = await T(
|
this.t = await T(
|
||||||
|
|||||||
@@ -29,8 +29,12 @@ export default class ProfilePhotoUploaderComponent extends Component {
|
|||||||
static get template() { return template }
|
static get template() { return template }
|
||||||
static get params() { return [] }
|
static get params() { return [] }
|
||||||
|
|
||||||
ready = false
|
constructor() {
|
||||||
t = {}
|
super()
|
||||||
|
|
||||||
|
this.ready = false
|
||||||
|
this.t = {}
|
||||||
|
}
|
||||||
|
|
||||||
async vue_on_create() {
|
async vue_on_create() {
|
||||||
this.t = await T(
|
this.t = await T(
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from './CRUDBase.js'
|
|||||||
import { session } from '../service/Session.service.js'
|
import { session } from '../service/Session.service.js'
|
||||||
|
|
||||||
class AppResource extends CRUDBase {
|
class AppResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/applications'
|
constructor() {
|
||||||
required_fields = ['name', 'identifier']
|
super()
|
||||||
permission_base = 'v1:applications'
|
|
||||||
|
|
||||||
item = 'Application'
|
this.endpoint = '/api/v1/applications'
|
||||||
plural = 'Applications'
|
this.required_fields = ['name', 'identifier']
|
||||||
|
this.permission_base = 'v1:applications'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'Application'
|
||||||
|
this.plural = 'Applications'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
An application is anything that can authenticate users against ${session.get('app.name')}. Applications can have any number of associated LDAP clients, SAML service providers, and OAuth2 clients.
|
An application is anything that can authenticate users against ${session.get('app.name')}. Applications can have any number of associated LDAP clients, SAML service providers, and OAuth2 clients.
|
||||||
`,
|
`,
|
||||||
@@ -60,7 +63,7 @@ class AppResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Name',
|
name: 'Name',
|
||||||
@@ -123,6 +126,7 @@ class AppResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const app = new AppResource()
|
const app = new AppResource()
|
||||||
|
|||||||
@@ -2,15 +2,17 @@ import APIParseError from './APIParseError.js'
|
|||||||
import { session } from '../service/Session.service.js'
|
import { session } from '../service/Session.service.js'
|
||||||
|
|
||||||
export default class CRUDBase {
|
export default class CRUDBase {
|
||||||
endpoint = '/api/v1'
|
constructor() {
|
||||||
required_fields = []
|
this.endpoint = '/api/v1'
|
||||||
permission_base = ''
|
this.required_fields = []
|
||||||
|
this.permission_base = ''
|
||||||
|
|
||||||
listing_definition = {}
|
this.listing_definition = {}
|
||||||
form_definition = {}
|
this.form_definition = {}
|
||||||
|
|
||||||
item = ''
|
this.item = ''
|
||||||
plural = ''
|
this.plural = ''
|
||||||
|
}
|
||||||
|
|
||||||
async can(action) {
|
async can(action) {
|
||||||
return session.check_permissions(`${this.permission_base}:${action}`)
|
return session.check_permissions(`${this.permission_base}:${action}`)
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from './CRUDBase.js'
|
|||||||
import { session } from '../service/Session.service.js'
|
import { session } from '../service/Session.service.js'
|
||||||
|
|
||||||
class SettingResource extends CRUDBase {
|
class SettingResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/settings'
|
constructor() {
|
||||||
required_fields = ['key', 'value']
|
super()
|
||||||
permission_base = 'v1:settings'
|
|
||||||
|
|
||||||
item = 'Setting'
|
this.endpoint = '/api/v1/settings'
|
||||||
plural = 'Settings'
|
this.required_fields = ['key', 'value']
|
||||||
|
this.permission_base = 'v1:settings'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'Setting'
|
||||||
|
this.plural = 'Settings'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
<p>These are advanced settings that allow you to tweak the way ${session.get('app.name')} behaves. Tweak them at your own risk.</p>
|
<p>These are advanced settings that allow you to tweak the way ${session.get('app.name')} behaves. Tweak them at your own risk.</p>
|
||||||
`,
|
`,
|
||||||
@@ -35,7 +38,7 @@ class SettingResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Setting Key',
|
name: 'Setting Key',
|
||||||
@@ -50,6 +53,7 @@ class SettingResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const setting = new SettingResource()
|
const setting = new SettingResource()
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from '../CRUDBase.js'
|
|||||||
import { session } from '../../service/Session.service.js'
|
import { session } from '../../service/Session.service.js'
|
||||||
|
|
||||||
class GroupResource extends CRUDBase {
|
class GroupResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/auth/groups'
|
constructor() {
|
||||||
required_fields = ['name']
|
super()
|
||||||
permission_base = 'v1:auth:groups'
|
|
||||||
|
|
||||||
item = 'Group'
|
this.endpoint = '/api/v1/auth/groups'
|
||||||
plural = 'Groups'
|
this.required_fields = ['name']
|
||||||
|
this.permission_base = 'v1:auth:groups'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'Group'
|
||||||
|
this.plural = 'Groups'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
In ${session.get('app.name')}, groups are simply a tool for organizing users and assigning permissions and access in bulk. After creating and assigning users to a group, you can manage permissions for that group, and its policies will be applied to all users in that group.
|
In ${session.get('app.name')}, groups are simply a tool for organizing users and assigning permissions and access in bulk. After creating and assigning users to a group, you can manage permissions for that group, and its policies will be applied to all users in that group.
|
||||||
`,
|
`,
|
||||||
@@ -50,7 +53,7 @@ class GroupResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Name',
|
name: 'Name',
|
||||||
@@ -71,6 +74,7 @@ class GroupResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const auth_group = new GroupResource()
|
const auth_group = new GroupResource()
|
||||||
|
|||||||
@@ -1,12 +1,17 @@
|
|||||||
import CRUDBase from '../CRUDBase.js'
|
import CRUDBase from '../CRUDBase.js'
|
||||||
|
|
||||||
class RoleResource extends CRUDBase {
|
class RoleResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/auth/roles'
|
|
||||||
required_fields = ['role', 'permissions']
|
|
||||||
permission_base = 'v1:auth:roles'
|
|
||||||
|
|
||||||
item = 'Role'
|
constructor() {
|
||||||
plural = 'Roles'
|
super()
|
||||||
|
|
||||||
|
this.endpoint = '/api/v1/auth/roles'
|
||||||
|
this.required_fields = ['role', 'permissions']
|
||||||
|
this.permission_base = 'v1:auth:roles'
|
||||||
|
|
||||||
|
this.item = 'Role'
|
||||||
|
this.plural = 'Roles'
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const auth_role = new RoleResource()
|
const auth_role = new RoleResource()
|
||||||
|
|||||||
@@ -1,12 +1,16 @@
|
|||||||
import CRUDBase from '../CRUDBase.js'
|
import CRUDBase from '../CRUDBase.js'
|
||||||
|
|
||||||
class TrapResource extends CRUDBase {
|
class TrapResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/auth/traps'
|
constructor() {
|
||||||
required_fields = ['name', 'trap', 'redirect_to']
|
super()
|
||||||
permission_base = 'v1:auth:traps'
|
|
||||||
|
|
||||||
item = 'Trap'
|
this.endpoint = '/api/v1/auth/traps'
|
||||||
plural = 'Traps'
|
this.required_fields = ['name', 'trap', 'redirect_to']
|
||||||
|
this.permission_base = 'v1:auth:traps'
|
||||||
|
|
||||||
|
this.item = 'Trap'
|
||||||
|
this.plural = 'Traps'
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const auth_trap = new TrapResource()
|
const auth_trap = new TrapResource()
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from '../CRUDBase.js'
|
|||||||
import { session } from '../../service/Session.service.js'
|
import { session } from '../../service/Session.service.js'
|
||||||
|
|
||||||
class UserResource extends CRUDBase {
|
class UserResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/auth/users'
|
constructor() {
|
||||||
required_fields = ['uid', 'first_name', 'last_name', 'email']
|
super()
|
||||||
permission_base = 'v1:auth:users'
|
|
||||||
|
|
||||||
item = 'User'
|
this.endpoint = '/api/v1/auth/users'
|
||||||
plural = 'Users'
|
this.required_fields = ['uid', 'first_name', 'last_name', 'email']
|
||||||
|
this.permission_base = 'v1:auth:users'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'User'
|
||||||
|
this.plural = 'Users'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
Users can be assigned permissions and, if granted, can manage their ${session.get('app.name')} accounts from the Profile page, as well as login to the external applications they've been given access to.
|
Users can be assigned permissions and, if granted, can manage their ${session.get('app.name')} accounts from the Profile page, as well as login to the external applications they've been given access to.
|
||||||
`,
|
`,
|
||||||
@@ -57,7 +60,7 @@ class UserResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'First Name',
|
name: 'First Name',
|
||||||
@@ -111,6 +114,7 @@ class UserResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const auth_user = new UserResource()
|
const auth_user = new UserResource()
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from '../CRUDBase.js'
|
|||||||
import { session } from '../../service/Session.service.js'
|
import { session } from '../../service/Session.service.js'
|
||||||
|
|
||||||
class PolicyResource extends CRUDBase {
|
class PolicyResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/iam/policy'
|
constructor() {
|
||||||
required_fields = ['entity_id', 'entity_type', 'target_id', 'target_type', 'access_type']
|
super()
|
||||||
permission_base = 'v1:iam:policy'
|
|
||||||
|
|
||||||
item = 'IAM Policy'
|
this.endpoint = '/api/v1/iam/policy'
|
||||||
plural = 'IAM Policies'
|
this.required_fields = ['entity_id', 'entity_type', 'target_id', 'target_type', 'access_type']
|
||||||
|
this.permission_base = 'v1:iam:policy'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'IAM Policy'
|
||||||
|
this.plural = 'IAM Policies'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
Identity & Access Management (IAM) policies give you fine grained control over which ${session.get('app.name')} users and groups are allowed to access which applications.
|
Identity & Access Management (IAM) policies give you fine grained control over which ${session.get('app.name')} users and groups are allowed to access which applications.
|
||||||
<br><br>
|
<br><br>
|
||||||
@@ -65,7 +68,7 @@ class PolicyResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Subject Type',
|
name: 'Subject Type',
|
||||||
@@ -73,8 +76,8 @@ class PolicyResource extends CRUDBase {
|
|||||||
required: true,
|
required: true,
|
||||||
type: 'select',
|
type: 'select',
|
||||||
options: [
|
options: [
|
||||||
{ display: 'User', value: 'user' },
|
{display: 'User', value: 'user'},
|
||||||
{ display: 'Group', value: 'group' },
|
{display: 'Group', value: 'group'},
|
||||||
],
|
],
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
@@ -107,8 +110,8 @@ class PolicyResource extends CRUDBase {
|
|||||||
required: true,
|
required: true,
|
||||||
type: 'select',
|
type: 'select',
|
||||||
options: [
|
options: [
|
||||||
{ display: '...is granted access to...', value: 'allow' },
|
{display: '...is granted access to...', value: 'allow'},
|
||||||
{ display: '...is denied access to...', value: 'deny' },
|
{display: '...is denied access to...', value: 'deny'},
|
||||||
],
|
],
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
@@ -117,8 +120,8 @@ class PolicyResource extends CRUDBase {
|
|||||||
required: true,
|
required: true,
|
||||||
type: 'select',
|
type: 'select',
|
||||||
options: [
|
options: [
|
||||||
{ display: 'Application', value: 'application' },
|
{display: 'Application', value: 'application'},
|
||||||
{ display: 'API Scope', value: 'api_scope' },
|
{display: 'API Scope', value: 'api_scope'},
|
||||||
],
|
],
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
@@ -155,6 +158,7 @@ class PolicyResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
},*/
|
},*/
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const iam_policy = new PolicyResource()
|
const iam_policy = new PolicyResource()
|
||||||
|
|||||||
@@ -2,19 +2,18 @@ import CRUDBase from '../CRUDBase.js'
|
|||||||
import { session } from '../../service/Session.service.js'
|
import { session } from '../../service/Session.service.js'
|
||||||
|
|
||||||
class ClientResource extends CRUDBase {
|
class ClientResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/ldap/clients'
|
constructor() {
|
||||||
required_fields = ['name', 'uid', 'password']
|
super()
|
||||||
permission_base = 'v1:ldap:clients'
|
|
||||||
|
|
||||||
item = 'LDAP Client'
|
this.endpoint = '/api/v1/ldap/clients'
|
||||||
plural = 'LDAP Clients'
|
this.required_fields = ['name', 'uid', 'password']
|
||||||
|
this.permission_base = 'v1:ldap:clients'
|
||||||
|
|
||||||
async server_config() {
|
this.item = 'LDAP Client'
|
||||||
const results = await axios.get('/api/v1/ldap/config')
|
this.plural = 'LDAP Clients'
|
||||||
if ( results && results.data && results.data.data ) return results.data.data
|
|
||||||
}
|
|
||||||
|
|
||||||
listing_definition = {
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
LDAP Clients are special user accounts that external applications can use to bind to ${session.get('app.name')}'s built-in LDAP server to allow these applications to authenticate users.
|
LDAP Clients are special user accounts that external applications can use to bind to ${session.get('app.name')}'s built-in LDAP server to allow these applications to authenticate users.
|
||||||
<br><br>
|
<br><br>
|
||||||
@@ -56,7 +55,7 @@ class ClientResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Provider Name',
|
name: 'Provider Name',
|
||||||
@@ -80,6 +79,12 @@ class ClientResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async server_config() {
|
||||||
|
const results = await axios.get('/api/v1/ldap/config')
|
||||||
|
if (results && results.data && results.data.data) return results.data.data
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const ldap_client = new ClientResource()
|
const ldap_client = new ClientResource()
|
||||||
|
|||||||
@@ -1,14 +1,17 @@
|
|||||||
import CRUDBase from '../CRUDBase.js'
|
import CRUDBase from '../CRUDBase.js'
|
||||||
|
|
||||||
class GroupResource extends CRUDBase {
|
class GroupResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/ldap/groups'
|
constructor() {
|
||||||
required_fields = ['name', 'role']
|
super()
|
||||||
permission_base = 'v1:ldap:groups'
|
|
||||||
|
|
||||||
item = 'LDAP Group'
|
this.endpoint = '/api/v1/ldap/groups'
|
||||||
plural = 'LDAP Groups'
|
this.required_fields = ['name', 'role']
|
||||||
|
this.permission_base = 'v1:ldap:groups'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'LDAP Group'
|
||||||
|
this.plural = 'LDAP Groups'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
columns: [
|
columns: [
|
||||||
{
|
{
|
||||||
name: 'Group Name',
|
name: 'Group Name',
|
||||||
@@ -50,7 +53,7 @@ class GroupResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
// back_action: {
|
// back_action: {
|
||||||
// text: 'Back',
|
// text: 'Back',
|
||||||
// action: 'back',
|
// action: 'back',
|
||||||
@@ -93,6 +96,7 @@ class GroupResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const ldap_group = new GroupResource()
|
const ldap_group = new GroupResource()
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from '../CRUDBase.js'
|
|||||||
import { session } from '../../service/Session.service.js';
|
import { session } from '../../service/Session.service.js';
|
||||||
|
|
||||||
class ClientResource extends CRUDBase {
|
class ClientResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/oauth/clients'
|
constructor() {
|
||||||
required_fields = ['name', 'redirect_url', 'api_scopes']
|
super()
|
||||||
permission_base = 'v1:oauth:clients'
|
|
||||||
|
|
||||||
item = 'OAuth2 Client'
|
this.endpoint = '/api/v1/oauth/clients'
|
||||||
plural = 'OAuth2 Clients'
|
this.required_fields = ['name', 'redirect_url', 'api_scopes']
|
||||||
|
this.permission_base = 'v1:oauth:clients'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'OAuth2 Client'
|
||||||
|
this.plural = 'OAuth2 Clients'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
OAuth2 clients are applications that support authentication over the OAuth2 protocol. This allows you to add a "Sign-In with XXX" button for ${session.get('app.name')} to the application in question. To do this, you need to create an OAuth2 client for that application, and provide the name, redirect URL, and API scopes.
|
OAuth2 clients are applications that support authentication over the OAuth2 protocol. This allows you to add a "Sign-In with XXX" button for ${session.get('app.name')} to the application in question. To do this, you need to create an OAuth2 client for that application, and provide the name, redirect URL, and API scopes.
|
||||||
<br><br>
|
<br><br>
|
||||||
@@ -58,7 +61,7 @@ class ClientResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Client Name',
|
name: 'Client Name',
|
||||||
@@ -101,6 +104,7 @@ class ClientResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const oauth_client = new ClientResource()
|
const oauth_client = new ClientResource()
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from '../CRUDBase.js'
|
|||||||
import { session } from '../../service/Session.service.js'
|
import { session } from '../../service/Session.service.js'
|
||||||
|
|
||||||
class ClientResource extends CRUDBase {
|
class ClientResource extends CRUDBase {
|
||||||
endpoint = '/openid/clients'
|
constructor() {
|
||||||
required_fields = ['client_name', 'grant_types', 'redirect_uri']
|
super()
|
||||||
permission_base = 'v1:openid:clients'
|
|
||||||
|
|
||||||
item = 'OpenID Connect Client'
|
this.endpoint = '/openid/clients'
|
||||||
plural = 'OpenID Connect Clients'
|
this.required_fields = ['client_name', 'grant_types', 'redirect_uri']
|
||||||
|
this.permission_base = 'v1:openid:clients'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'OpenID Connect Client'
|
||||||
|
this.plural = 'OpenID Connect Clients'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
OpenID Connect clients are applications that support authentication over the OpenID Connect protocol. This allows you to add a "Sign-In with XXX" button for ${session.get('app.name')} to the application in question. To do this, the application need only comply with the OpenID standards.
|
OpenID Connect clients are applications that support authentication over the OpenID Connect protocol. This allows you to add a "Sign-In with XXX" button for ${session.get('app.name')} to the application in question. To do this, the application need only comply with the OpenID standards.
|
||||||
`,
|
`,
|
||||||
@@ -49,7 +52,7 @@ class ClientResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Client Name',
|
name: 'Client Name',
|
||||||
@@ -70,8 +73,8 @@ class ClientResource extends CRUDBase {
|
|||||||
field: 'grant_types',
|
field: 'grant_types',
|
||||||
type: 'select.multiple',
|
type: 'select.multiple',
|
||||||
options: [
|
options: [
|
||||||
{ display: 'Refresh Token', value: 'refresh_token' },
|
{display: 'Refresh Token', value: 'refresh_token'},
|
||||||
{ display: 'Authorization Code', value: 'authorization_code' },
|
{display: 'Authorization Code', value: 'authorization_code'},
|
||||||
],
|
],
|
||||||
required: true,
|
required: true,
|
||||||
},
|
},
|
||||||
@@ -91,6 +94,7 @@ class ClientResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const openid_client = new ClientResource()
|
const openid_client = new ClientResource()
|
||||||
|
|||||||
@@ -1,12 +1,16 @@
|
|||||||
import CRUDBase from '../CRUDBase.js'
|
import CRUDBase from '../CRUDBase.js'
|
||||||
|
|
||||||
class ScopeResource extends CRUDBase {
|
class ScopeResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/reflect/scopes'
|
constructor() {
|
||||||
required_fields = ['scope']
|
super()
|
||||||
permission_base = 'v1:reflect:scopes'
|
|
||||||
|
|
||||||
item = 'API Scope'
|
this.endpoint = '/api/v1/reflect/scopes'
|
||||||
plural = 'API Scopes'
|
this.required_fields = ['scope']
|
||||||
|
this.permission_base = 'v1:reflect:scopes'
|
||||||
|
|
||||||
|
this.item = 'API Scope'
|
||||||
|
this.plural = 'API Scopes'
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const reflect_scope = new ScopeResource()
|
const reflect_scope = new ScopeResource()
|
||||||
|
|||||||
@@ -1,14 +1,16 @@
|
|||||||
import CRUDBase from '../CRUDBase.js'
|
import CRUDBase from '../CRUDBase.js'
|
||||||
|
|
||||||
class TokenResource extends CRUDBase {
|
class TokenResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/reflect/tokens'
|
constructor() {
|
||||||
required_fields = ['client_id']
|
super()
|
||||||
permission_base = 'v1:reflect:tokens'
|
this.endpoint = '/api/v1/reflect/tokens'
|
||||||
|
this.required_fields = ['client_id']
|
||||||
|
this.permission_base = 'v1:reflect:tokens'
|
||||||
|
|
||||||
item = 'API Token'
|
this.item = 'API Token'
|
||||||
plural = 'API Tokens'
|
this.plural = 'API Tokens'
|
||||||
|
|
||||||
listing_definition = {
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
This allows you to create bearer tokens manually to allow for easier testing of the API. Notably, this is meant as a measure for testing and development, not for long term use.
|
This allows you to create bearer tokens manually to allow for easier testing of the API. Notably, this is meant as a measure for testing and development, not for long term use.
|
||||||
<br><br>
|
<br><br>
|
||||||
@@ -54,7 +56,7 @@ class TokenResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Client',
|
name: 'Client',
|
||||||
@@ -83,6 +85,7 @@ class TokenResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const reflect_token = new TokenResource()
|
const reflect_token = new TokenResource()
|
||||||
|
|||||||
@@ -2,14 +2,17 @@ import CRUDBase from '../CRUDBase.js'
|
|||||||
import { session } from '../../service/Session.service.js'
|
import { session } from '../../service/Session.service.js'
|
||||||
|
|
||||||
class ProviderResource extends CRUDBase {
|
class ProviderResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/saml/providers'
|
constructor() {
|
||||||
required_fields = ['name', 'acs_url', 'entity_id']
|
super()
|
||||||
permission_base = 'v1:saml:providers'
|
|
||||||
|
|
||||||
item = 'SAML Service Provider'
|
this.endpoint = '/api/v1/saml/providers'
|
||||||
plural = 'SAML Service Providers'
|
this.required_fields = ['name', 'acs_url', 'entity_id']
|
||||||
|
this.permission_base = 'v1:saml:providers'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'SAML Service Provider'
|
||||||
|
this.plural = 'SAML Service Providers'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `SAML Service Providers are applications that support external authentication to a SAML Identity Provider. In this case, ${session.get('app.name')} is the identity provider, so these external applications can authenticate against it.
|
display: `SAML Service Providers are applications that support external authentication to a SAML Identity Provider. In this case, ${session.get('app.name')} is the identity provider, so these external applications can authenticate against it.
|
||||||
<br><br>
|
<br><br>
|
||||||
To do this, you need to know the SAML service provider's entity ID, assertion consumer service URL, and single-logout URL (if supported).`,
|
To do this, you need to know the SAML service provider's entity ID, assertion consumer service URL, and single-logout URL (if supported).`,
|
||||||
@@ -58,7 +61,7 @@ class ProviderResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Provider Name',
|
name: 'Provider Name',
|
||||||
@@ -89,6 +92,7 @@ class ProviderResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const saml_provider = new ProviderResource()
|
const saml_provider = new ProviderResource()
|
||||||
|
|||||||
@@ -1,14 +1,17 @@
|
|||||||
import CRUDBase from '../CRUDBase.js'
|
import CRUDBase from '../CRUDBase.js'
|
||||||
|
|
||||||
class AnnouncementResource extends CRUDBase {
|
class AnnouncementResource extends CRUDBase {
|
||||||
endpoint = '/api/v1/system/announcements'
|
constructor() {
|
||||||
required_fields = ['user_ids', 'group_ids', 'title', 'message', 'type']
|
super()
|
||||||
permission_base = 'v1:system:announcements'
|
|
||||||
|
|
||||||
item = 'System Announcement'
|
this.endpoint = '/api/v1/system/announcements'
|
||||||
plural = 'System Announcements'
|
this.required_fields = ['user_ids', 'group_ids', 'title', 'message', 'type']
|
||||||
|
this.permission_base = 'v1:system:announcements'
|
||||||
|
|
||||||
listing_definition = {
|
this.item = 'System Announcement'
|
||||||
|
this.plural = 'System Announcements'
|
||||||
|
|
||||||
|
this.listing_definition = {
|
||||||
display: `
|
display: `
|
||||||
System announcements are administrative messages that you want all or some of your users to see. These messages can be delivered via e-mail, as a message after login, or as a system banner announcement.
|
System announcements are administrative messages that you want all or some of your users to see. These messages can be delivered via e-mail, as a message after login, or as a system banner announcement.
|
||||||
`,
|
`,
|
||||||
@@ -42,7 +45,7 @@ class AnnouncementResource extends CRUDBase {
|
|||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
form_definition = {
|
this.form_definition = {
|
||||||
fields: [
|
fields: [
|
||||||
{
|
{
|
||||||
name: 'Title',
|
name: 'Title',
|
||||||
@@ -79,9 +82,9 @@ class AnnouncementResource extends CRUDBase {
|
|||||||
field: 'type',
|
field: 'type',
|
||||||
type: 'select',
|
type: 'select',
|
||||||
options: [
|
options: [
|
||||||
{ display: 'Login Intercept', value: 'login' },
|
{display: 'Login Intercept', value: 'login'},
|
||||||
{ display: 'E-Mail', value: 'email' },
|
{display: 'E-Mail', value: 'email'},
|
||||||
{ display: 'System Banner', value: 'banner' },
|
{display: 'System Banner', value: 'banner'},
|
||||||
],
|
],
|
||||||
},
|
},
|
||||||
],
|
],
|
||||||
@@ -92,6 +95,7 @@ class AnnouncementResource extends CRUDBase {
|
|||||||
},
|
},
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
const system_announcement = new AnnouncementResource()
|
const system_announcement = new AnnouncementResource()
|
||||||
|
|||||||
@@ -1,9 +1,9 @@
|
|||||||
class Event {
|
class Event {
|
||||||
firings = []
|
|
||||||
subscriptions = []
|
|
||||||
|
|
||||||
constructor(name) {
|
constructor(name) {
|
||||||
this.name = name
|
this.name = name
|
||||||
|
this.firings = []
|
||||||
|
this.subscriptions = []
|
||||||
}
|
}
|
||||||
|
|
||||||
subscribe(handler) {
|
subscribe(handler) {
|
||||||
@@ -22,7 +22,9 @@ class Event {
|
|||||||
}
|
}
|
||||||
|
|
||||||
class EventBusService {
|
class EventBusService {
|
||||||
_events = {}
|
constructor() {
|
||||||
|
this._events = {}
|
||||||
|
}
|
||||||
|
|
||||||
event(name) {
|
event(name) {
|
||||||
if ( !this._events[name] ) {
|
if ( !this._events[name] ) {
|
||||||
|
|||||||
@@ -2,7 +2,9 @@ import { event_bus } from './EventBus.service.js'
|
|||||||
import { auth_api } from './AuthApi.service.js'
|
import { auth_api } from './AuthApi.service.js'
|
||||||
|
|
||||||
class MessageService {
|
class MessageService {
|
||||||
listener_interval = 25000
|
constructor() {
|
||||||
|
this.listener_interval = 25000
|
||||||
|
}
|
||||||
|
|
||||||
alert({type, message, timeout = 0, on_dismiss = () => {} }) {
|
alert({type, message, timeout = 0, on_dismiss = () => {} }) {
|
||||||
event_bus.event('message.alert').fire({ type, message, timeout, on_dismiss })
|
event_bus.event('message.alert').fire({ type, message, timeout, on_dismiss })
|
||||||
|
|||||||
@@ -1,5 +1,7 @@
|
|||||||
class Session {
|
class Session {
|
||||||
data = {}
|
constructor() {
|
||||||
|
this.data = {}
|
||||||
|
}
|
||||||
|
|
||||||
init(data) {
|
init(data) {
|
||||||
this.data = data
|
this.data = data
|
||||||
|
|||||||
@@ -1,5 +1,7 @@
|
|||||||
class TranslateService {
|
class TranslateService {
|
||||||
_cache = {}
|
constructor() {
|
||||||
|
this._cache = {}
|
||||||
|
}
|
||||||
|
|
||||||
check_cache(...keys) {
|
check_cache(...keys) {
|
||||||
const obj = {}
|
const obj = {}
|
||||||
|
|||||||
@@ -1,5 +1,7 @@
|
|||||||
class UtilityService {
|
class UtilityService {
|
||||||
_debounce_timeouts = {}
|
constructor() {
|
||||||
|
this._debounce_timeouts = {}
|
||||||
|
}
|
||||||
|
|
||||||
uuid() {
|
uuid() {
|
||||||
return ([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g, c =>
|
return ([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g, c =>
|
||||||
|
|||||||
35
app/assets/error-log.js
Normal file
35
app/assets/error-log.js
Normal file
@@ -0,0 +1,35 @@
|
|||||||
|
window.COREID_ERROR_LOG_URL = window.COREID_ERROR_LOG_URL || '/api/v1/log-error'
|
||||||
|
|
||||||
|
async function logError(error) {
|
||||||
|
try {
|
||||||
|
await fetch(window.COREID_ERROR_LOG_URL, {
|
||||||
|
method: 'POST',
|
||||||
|
cache: 'no-cache',
|
||||||
|
headers: {
|
||||||
|
'Accept': 'application/json',
|
||||||
|
'Content-Type': 'application/json',
|
||||||
|
},
|
||||||
|
body: JSON.stringify({
|
||||||
|
full_url: window.location.href,
|
||||||
|
trace: [
|
||||||
|
error.name + ': ' + error.message,
|
||||||
|
error.stack,
|
||||||
|
].join('\n')
|
||||||
|
}),
|
||||||
|
})
|
||||||
|
} catch (e) {}
|
||||||
|
}
|
||||||
|
|
||||||
|
;(function() {
|
||||||
|
var old_onerror = window.onerror
|
||||||
|
|
||||||
|
window.onerror = function(msg, src, line, col, error) {
|
||||||
|
logError(error).then(function() {
|
||||||
|
if ( typeof old_onerror === 'function' ) {
|
||||||
|
try {
|
||||||
|
old_onerror(msg, src, line, col, error)
|
||||||
|
} catch(e) {}
|
||||||
|
}
|
||||||
|
})
|
||||||
|
}
|
||||||
|
})()
|
||||||
1
app/assets/lib/axios/axios.min.js
vendored
1
app/assets/lib/axios/axios.min.js
vendored
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
1
app/assets/lib/popper/popper-1.16.0.min.js
vendored
1
app/assets/lib/popper/popper-1.16.0.min.js
vendored
File diff suppressed because one or more lines are too long
@@ -18,6 +18,11 @@ class CoreIDAdapter {
|
|||||||
expiresAt = new Date(Date.now() + (expiresIn * 1000))
|
expiresAt = new Date(Date.now() + (expiresIn * 1000))
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if ( payload.uid ) {
|
||||||
|
payload.originalUid = payload.uid
|
||||||
|
payload.uid = payload.uid.toLowerCase()
|
||||||
|
}
|
||||||
|
|
||||||
await this.coll().updateOne(
|
await this.coll().updateOne(
|
||||||
{ _id },
|
{ _id },
|
||||||
{ $set: { payload, ...(expiresAt ? { expiresAt } : undefined) } },
|
{ $set: { payload, ...(expiresAt ? { expiresAt } : undefined) } },
|
||||||
@@ -34,6 +39,11 @@ class CoreIDAdapter {
|
|||||||
).limit(1).next()
|
).limit(1).next()
|
||||||
|
|
||||||
if (!result) return undefined
|
if (!result) return undefined
|
||||||
|
|
||||||
|
if ( result?.payload?.originalUid ) {
|
||||||
|
result.payload.uid = result.payload.originalUid
|
||||||
|
}
|
||||||
|
|
||||||
return result.payload
|
return result.payload
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -54,6 +64,11 @@ class CoreIDAdapter {
|
|||||||
).limit(1).next()
|
).limit(1).next()
|
||||||
|
|
||||||
if (!result) return undefined
|
if (!result) return undefined
|
||||||
|
|
||||||
|
if ( result?.payload?.originalUid ) {
|
||||||
|
result.payload.uid = result.payload.originalUid
|
||||||
|
}
|
||||||
|
|
||||||
return result.payload
|
return result.payload
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -29,6 +29,12 @@ class Home extends Controller {
|
|||||||
async tmpl(req, res) {
|
async tmpl(req, res) {
|
||||||
return res.page('tmpl', {...this.Vue.data(), ...this.Vue.session(req)})
|
return res.page('tmpl', {...this.Vue.data(), ...this.Vue.session(req)})
|
||||||
}
|
}
|
||||||
|
|
||||||
|
async log_front_end_error(req, res, next) {
|
||||||
|
const FrontEndError = this.models.get('FrontEndError')
|
||||||
|
await FrontEndError.log(req)
|
||||||
|
return res.api()
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
module.exports = Home
|
module.exports = Home
|
||||||
|
|||||||
@@ -119,14 +119,12 @@ class OpenIDController extends Controller {
|
|||||||
uid, prompt, params, session,
|
uid, prompt, params, session,
|
||||||
} = await this.openid_connect.provider.interactionDetails(req, res)
|
} = await this.openid_connect.provider.interactionDetails(req, res)
|
||||||
|
|
||||||
console.log({uid, prompt, params, session})
|
|
||||||
|
|
||||||
const name = prompt.name
|
const name = prompt.name
|
||||||
if ( typeof this[name] !== 'function' ) {
|
if ( typeof this[name] !== 'function' ) {
|
||||||
return this.fail(res, 'Sorry, something has gone wrong.')
|
return this.fail(res, 'Sorry, something has gone wrong.')
|
||||||
}
|
}
|
||||||
|
|
||||||
return this[name](req, res, { uid: uid, prompt, params, session })
|
return this[name](req, res, { uid: uid.toLowerCase(), prompt, params, session })
|
||||||
}
|
}
|
||||||
|
|
||||||
async consent(req, res, { uid, prompt, params, session }) {
|
async consent(req, res, { uid, prompt, params, session }) {
|
||||||
@@ -142,13 +140,13 @@ class OpenIDController extends Controller {
|
|||||||
const Policy = this.models.get('iam:Policy')
|
const Policy = this.models.get('iam:Policy')
|
||||||
const application = await Application.findOne({ openid_client_ids: params.client_id })
|
const application = await Application.findOne({ openid_client_ids: params.client_id })
|
||||||
if ( !application ) {
|
if ( !application ) {
|
||||||
this.output.warning('IAM Denial!')
|
this.output.warn('IAM Denial!')
|
||||||
return this.Vue.auth_message(res, {
|
return this.Vue.auth_message(res, {
|
||||||
message: req.T('saml.no_access').replace('APP_NAME', 'this application'),
|
message: req.T('saml.no_access').replace('APP_NAME', 'this application'),
|
||||||
next_destination: '/dash',
|
next_destination: '/dash',
|
||||||
})
|
})
|
||||||
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
||||||
this.output.warning('IAM Denial!')
|
this.output.warn('IAM Denial!')
|
||||||
return this.Vue.auth_message(res, {
|
return this.Vue.auth_message(res, {
|
||||||
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
||||||
next_destination: '/dash',
|
next_destination: '/dash',
|
||||||
@@ -172,7 +170,7 @@ class OpenIDController extends Controller {
|
|||||||
{
|
{
|
||||||
text: req.T('common.grant'),
|
text: req.T('common.grant'),
|
||||||
action: 'redirect',
|
action: 'redirect',
|
||||||
next: `/openid/interaction/${uid}/grant`,
|
next: `/openid/interaction/${uid.toLowerCase()}/grant`,
|
||||||
},
|
},
|
||||||
],
|
],
|
||||||
})
|
})
|
||||||
@@ -180,7 +178,7 @@ class OpenIDController extends Controller {
|
|||||||
}
|
}
|
||||||
|
|
||||||
async login(req, res, { uid, prompt, params, session }) {
|
async login(req, res, { uid, prompt, params, session }) {
|
||||||
return res.redirect(`/openid/interaction/${uid}/start-session`)
|
return res.redirect(`/openid/interaction/${uid.toLowerCase()}/start-session`)
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@@ -202,13 +200,13 @@ class OpenIDController extends Controller {
|
|||||||
const Policy = this.models.get('iam:Policy')
|
const Policy = this.models.get('iam:Policy')
|
||||||
const application = await Application.findOne({ openid_client_ids: params.client_id })
|
const application = await Application.findOne({ openid_client_ids: params.client_id })
|
||||||
if ( !application ) {
|
if ( !application ) {
|
||||||
this.output.warning('IAM Denial!')
|
this.output.warn('IAM Denial!')
|
||||||
return this.Vue.auth_message(res, {
|
return this.Vue.auth_message(res, {
|
||||||
message: req.T('saml.no_access').replace('APP_NAME', 'this application'),
|
message: req.T('saml.no_access').replace('APP_NAME', 'this application'),
|
||||||
next_destination: '/dash',
|
next_destination: '/dash',
|
||||||
})
|
})
|
||||||
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
||||||
this.output.warning('IAM Denial!')
|
this.output.warn('IAM Denial!')
|
||||||
return this.Vue.auth_message(res, {
|
return this.Vue.auth_message(res, {
|
||||||
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
||||||
next_destination: '/dash',
|
next_destination: '/dash',
|
||||||
@@ -238,13 +236,13 @@ class OpenIDController extends Controller {
|
|||||||
const Policy = this.models.get('iam:Policy')
|
const Policy = this.models.get('iam:Policy')
|
||||||
const application = await Application.findOne({ openid_client_ids: params.client_id })
|
const application = await Application.findOne({ openid_client_ids: params.client_id })
|
||||||
if ( !application ) {
|
if ( !application ) {
|
||||||
this.output.warning('IAM Denial!')
|
this.output.warn('IAM Denial!')
|
||||||
return this.Vue.auth_message(res, {
|
return this.Vue.auth_message(res, {
|
||||||
message: req.T('saml.no_access').replace('APP_NAME', 'this application'),
|
message: req.T('saml.no_access').replace('APP_NAME', 'this application'),
|
||||||
next_destination: '/dash',
|
next_destination: '/dash',
|
||||||
})
|
})
|
||||||
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
||||||
this.output.warning('IAM Denial!')
|
this.output.warn('IAM Denial!')
|
||||||
return this.Vue.auth_message(res, {
|
return this.Vue.auth_message(res, {
|
||||||
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
||||||
next_destination: '/dash',
|
next_destination: '/dash',
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ const Oauth2Controller = require('flitter-auth/controllers/Oauth2')
|
|||||||
*/
|
*/
|
||||||
class Oauth2 extends Oauth2Controller {
|
class Oauth2 extends Oauth2Controller {
|
||||||
static get services() {
|
static get services() {
|
||||||
return [...super.services, 'Vue', 'configs', 'models']
|
return [...super.services, 'Vue', 'configs', 'models', 'output']
|
||||||
}
|
}
|
||||||
|
|
||||||
async authorize_post(req, res, next) {
|
async authorize_post(req, res, next) {
|
||||||
@@ -18,6 +18,24 @@ class Oauth2 extends Oauth2Controller {
|
|||||||
const StarshipClient = this.models.get('oauth:Client')
|
const StarshipClient = this.models.get('oauth:Client')
|
||||||
const starship_client = await StarshipClient.findOne({ active: true, uuid: client.clientID })
|
const starship_client = await StarshipClient.findOne({ active: true, uuid: client.clientID })
|
||||||
|
|
||||||
|
// Make sure the user has IAM access before proceeding
|
||||||
|
const Application = this.models.get('Application')
|
||||||
|
const Policy = this.models.get('iam:Policy')
|
||||||
|
const application = await Application.findOne({ oauth_client_ids: starship_client.id })
|
||||||
|
if ( !application ) {
|
||||||
|
this.output.warn('IAM Denial!')
|
||||||
|
return this.Vue.auth_message(res, {
|
||||||
|
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
||||||
|
next_destination: '/dash',
|
||||||
|
})
|
||||||
|
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
||||||
|
this.output.warn('IAM Denial!')
|
||||||
|
return this.Vue.auth_message(res, {
|
||||||
|
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
||||||
|
next_destination: '/dash',
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
req.user.authorize(starship_client)
|
req.user.authorize(starship_client)
|
||||||
await req.user.save()
|
await req.user.save()
|
||||||
return super.authorize_post(req, res, next)
|
return super.authorize_post(req, res, next)
|
||||||
@@ -31,6 +49,24 @@ class Oauth2 extends Oauth2Controller {
|
|||||||
const StarshipClient = this.models.get('oauth:Client')
|
const StarshipClient = this.models.get('oauth:Client')
|
||||||
const starship_client = await StarshipClient.findOne({ active: true, uuid: client.clientID })
|
const starship_client = await StarshipClient.findOne({ active: true, uuid: client.clientID })
|
||||||
|
|
||||||
|
// Make sure the user has IAM access before proceeding
|
||||||
|
const Application = this.models.get('Application')
|
||||||
|
const Policy = this.models.get('iam:Policy')
|
||||||
|
const application = await Application.findOne({ oauth_client_ids: starship_client.id })
|
||||||
|
if ( !application ) {
|
||||||
|
this.output.warn('IAM Denial!')
|
||||||
|
return this.Vue.auth_message(res, {
|
||||||
|
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
||||||
|
next_destination: '/dash',
|
||||||
|
})
|
||||||
|
} else if ( !(await Policy.check_user_access(req.user, application.id)) ) {
|
||||||
|
this.output.warn('IAM Denial!')
|
||||||
|
return this.Vue.auth_message(res, {
|
||||||
|
message: req.T('saml.no_access').replace('APP_NAME', application.name),
|
||||||
|
next_destination: '/dash',
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
if ( req.user.has_authorized(starship_client) ) {
|
if ( req.user.has_authorized(starship_client) ) {
|
||||||
return this.Vue.invoke_action(res, {
|
return this.Vue.invoke_action(res, {
|
||||||
text: 'Grant Access',
|
text: 'Grant Access',
|
||||||
|
|||||||
29
app/models/FrontEndError.model.js
Normal file
29
app/models/FrontEndError.model.js
Normal file
@@ -0,0 +1,29 @@
|
|||||||
|
const { Model } = require('flitter-orm')
|
||||||
|
|
||||||
|
class FrontEndErrorModel extends Model {
|
||||||
|
static get schema() {
|
||||||
|
return {
|
||||||
|
user_agent: String,
|
||||||
|
logged_at: { type: Date, default: () => new Date },
|
||||||
|
user_id: String,
|
||||||
|
session_id: String,
|
||||||
|
full_url: String,
|
||||||
|
trace: String,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
static async log(request) {
|
||||||
|
const err = new this({
|
||||||
|
user_agent: request.get('user-agent'),
|
||||||
|
user_id: request?.user?.id,
|
||||||
|
session_id: request.sessionID,
|
||||||
|
full_url: request.body.full_url,
|
||||||
|
trace: request.body.trace,
|
||||||
|
})
|
||||||
|
|
||||||
|
await err.save()
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = exports = FrontEndErrorModel
|
||||||
@@ -8,6 +8,7 @@ class PermissionMiddleware extends Middleware {
|
|||||||
async test(req, res, next, { check }) {
|
async test(req, res, next, { check }) {
|
||||||
const Policy = this.models.get('iam:Policy')
|
const Policy = this.models.get('iam:Policy')
|
||||||
|
|
||||||
|
if ( !req.additional_api_log_data ) req.additional_api_log_data = {}
|
||||||
req.additional_api_log_data.permission_check = check
|
req.additional_api_log_data.permission_check = check
|
||||||
|
|
||||||
// If the request was authorized using an OAuth2 bearer token,
|
// If the request was authorized using an OAuth2 bearer token,
|
||||||
|
|||||||
@@ -59,6 +59,10 @@ const index = {
|
|||||||
'middleware::auth:GuestOnly',
|
'middleware::auth:GuestOnly',
|
||||||
'controller::api:v1:Password.request_reset',
|
'controller::api:v1:Password.request_reset',
|
||||||
],
|
],
|
||||||
|
|
||||||
|
'/api/v1/log-error': [
|
||||||
|
'controller::Home.log_front_end_error'
|
||||||
|
],
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -15,6 +15,7 @@ html(lang='en')
|
|||||||
.app-container
|
.app-container
|
||||||
block app
|
block app
|
||||||
block script
|
block script
|
||||||
|
script(src='/assets/error-log.js')
|
||||||
script(src='/assets/lib/axios/axios.min.js')
|
script(src='/assets/lib/axios/axios.min.js')
|
||||||
script(src='/assets/lib/jquery/jquery-3.4.1.slim.min.js')
|
script(src='/assets/lib/jquery/jquery-3.4.1.slim.min.js')
|
||||||
script(src='/assets/lib/popper/popper-1.16.0.min.js')
|
script(src='/assets/lib/popper/popper-1.16.0.min.js')
|
||||||
|
|||||||
@@ -31,6 +31,13 @@ const jobs_config = {
|
|||||||
// worker processes of the same type.
|
// worker processes of the same type.
|
||||||
// (e.g. you can have two "main" workers)
|
// (e.g. you can have two "main" workers)
|
||||||
},
|
},
|
||||||
|
|
||||||
|
connector: {
|
||||||
|
enabled: env('JOB_QUEUE_CONNECTOR', false),
|
||||||
|
mount: env('JOB_QUEUE_CONNECTOR_MOUNT', '/job_queue_api'),
|
||||||
|
secret: env('JOB_QUEUE_CONNECTOR_SECRET'),
|
||||||
|
},
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
module.exports = exports = jobs_config
|
module.exports = exports = jobs_config
|
||||||
|
|||||||
@@ -35,7 +35,12 @@ const server_config = {
|
|||||||
* The secret used to encrypt the session.
|
* The secret used to encrypt the session.
|
||||||
* This should be set in the environment.
|
* This should be set in the environment.
|
||||||
*/
|
*/
|
||||||
secret: env("SECRET", "changeme")
|
secret: env("SECRET", "changeme"),
|
||||||
|
|
||||||
|
/*
|
||||||
|
* The max age of a session in milliseconds
|
||||||
|
*/
|
||||||
|
max_age: env("SESSION_MAX_AGE", 1000 * 60 * 60 * 24 * 2), // default to 2 days
|
||||||
},
|
},
|
||||||
|
|
||||||
uploads: {
|
uploads: {
|
||||||
|
|||||||
@@ -33,3 +33,6 @@ SMTP_PORT="587"
|
|||||||
SMTP_USER="coreid@localhost.localdomain"
|
SMTP_USER="coreid@localhost.localdomain"
|
||||||
SMTP_DEFAULT_SENDER="coreid@localhost.localdomain"
|
SMTP_DEFAULT_SENDER="coreid@localhost.localdomain"
|
||||||
SMTP_PASS="something super secure"
|
SMTP_PASS="something super secure"
|
||||||
|
|
||||||
|
JOB_QUEUE_CONNECTOR=true
|
||||||
|
JOB_QUEUE_CONNECTOR_SECRET=
|
||||||
|
|||||||
@@ -25,7 +25,7 @@
|
|||||||
"flitter-forms": "^0.8.1",
|
"flitter-forms": "^0.8.1",
|
||||||
"flitter-gotify": "^0.1.0",
|
"flitter-gotify": "^0.1.0",
|
||||||
"flitter-i18n": "^0.1.1",
|
"flitter-i18n": "^0.1.1",
|
||||||
"flitter-jobs": "^0.1.2",
|
"flitter-jobs": "^0.3.0",
|
||||||
"flitter-less": "^0.5.3",
|
"flitter-less": "^0.5.3",
|
||||||
"flitter-orm": "^0.4.0",
|
"flitter-orm": "^0.4.0",
|
||||||
"flitter-redis": "^0.1.1",
|
"flitter-redis": "^0.1.1",
|
||||||
@@ -33,7 +33,7 @@
|
|||||||
"ioredis": "^4.17.1",
|
"ioredis": "^4.17.1",
|
||||||
"is-absolute-url": "^3.0.3",
|
"is-absolute-url": "^3.0.3",
|
||||||
"ldapjs": "^1.0.2",
|
"ldapjs": "^1.0.2",
|
||||||
"libflitter": "^0.56.1",
|
"libflitter": "^0.57.1",
|
||||||
"moment": "^2.24.0",
|
"moment": "^2.24.0",
|
||||||
"mongodb": "^3.5.9",
|
"mongodb": "^3.5.9",
|
||||||
"nodemailer": "^6.4.6",
|
"nodemailer": "^6.4.6",
|
||||||
|
|||||||
16
yarn.lock
16
yarn.lock
@@ -2148,10 +2148,10 @@ flitter-i18n@^0.1.1:
|
|||||||
ncp "^2.0.0"
|
ncp "^2.0.0"
|
||||||
pluralize "^8.0.0"
|
pluralize "^8.0.0"
|
||||||
|
|
||||||
flitter-jobs@^0.1.2:
|
flitter-jobs@^0.3.0:
|
||||||
version "0.1.2"
|
version "0.3.0"
|
||||||
resolved "https://registry.yarnpkg.com/flitter-jobs/-/flitter-jobs-0.1.2.tgz#5536bb12be728b61f6e0940b6c18760e4f1b59d6"
|
resolved "https://registry.yarnpkg.com/flitter-jobs/-/flitter-jobs-0.3.0.tgz#c10fd45e4ab3c41c32ad4d8540b9b76547c20fbd"
|
||||||
integrity sha512-bxJD3akDnoKPRyIXXy8ytlypGI8uj0Fjn2C8gIY2HFxZeFIBJo47MqQ9qZvVWFS28pS6aUY+0emOvTFkuG/2zA==
|
integrity sha512-uapjauWZCoZwc+3DuL0W1tY4LozSXTr3FqrKJEcL/Ri8diRYjZuT0+v+kiZBJ4YzThcjjXF+aYoFL09QlIG7Zw==
|
||||||
dependencies:
|
dependencies:
|
||||||
bullmq "^1.8.8"
|
bullmq "^1.8.8"
|
||||||
flitter-redis "^0.1.1"
|
flitter-redis "^0.1.1"
|
||||||
@@ -3235,10 +3235,10 @@ leven@^1.0.2:
|
|||||||
resolved "https://registry.yarnpkg.com/leven/-/leven-1.0.2.tgz#9144b6eebca5f1d0680169f1a6770dcea60b75c3"
|
resolved "https://registry.yarnpkg.com/leven/-/leven-1.0.2.tgz#9144b6eebca5f1d0680169f1a6770dcea60b75c3"
|
||||||
integrity sha1-kUS27ryl8dBoAWnxpncNzqYLdcM=
|
integrity sha1-kUS27ryl8dBoAWnxpncNzqYLdcM=
|
||||||
|
|
||||||
libflitter@^0.56.1:
|
libflitter@^0.57.1:
|
||||||
version "0.56.1"
|
version "0.57.1"
|
||||||
resolved "https://registry.yarnpkg.com/libflitter/-/libflitter-0.56.1.tgz#250166027b9cab727c9deb6b1fa1865428b1eafb"
|
resolved "https://registry.yarnpkg.com/libflitter/-/libflitter-0.57.1.tgz#e605333a5e38cadac1203e4be8ea685c5520472b"
|
||||||
integrity sha512-QikFtFRa9okKOjOio5ehpQ6hyacCoMbtOlqcXt4I7uU3lntBeP5qSbz1q3x1wUY/AdBc2k70+Eg8BcpGmBEs4Q==
|
integrity sha512-bEu02HZjcAp53A2xnE0hz/LVhkErvnqaKmlNOqvJJaGMjKClfVuqJlr9bFfWU84qXL9SaHWd06P3nxIVKTvFIw==
|
||||||
dependencies:
|
dependencies:
|
||||||
colors "^1.3.3"
|
colors "^1.3.3"
|
||||||
connect-mongodb-session "^2.2.0"
|
connect-mongodb-session "^2.2.0"
|
||||||
|
|||||||
Reference in New Issue
Block a user