mirror of
https://github.com/fosrl/pangolin.git
synced 2026-04-26 07:52:24 +00:00
724 lines
31 KiB
TypeScript
724 lines
31 KiB
TypeScript
"use client";
|
|
|
|
import { useEffect, useState } from "react";
|
|
import { ListRolesResponse } from "@server/routers/role";
|
|
import { useToast } from "@app/hooks/useToast";
|
|
import { useOrgContext } from "@app/hooks/useOrgContext";
|
|
import { useResourceContext } from "@app/hooks/useResourceContext";
|
|
import { AxiosResponse } from "axios";
|
|
import { formatAxiosError } from "@app/lib/utils";
|
|
import {
|
|
GetResourceAuthInfoResponse,
|
|
GetResourceWhitelistResponse,
|
|
ListResourceRolesResponse,
|
|
ListResourceUsersResponse
|
|
} from "@server/routers/resource";
|
|
import { Button } from "@app/components/ui/button";
|
|
import { set, z } from "zod";
|
|
import { Tag } from "emblor";
|
|
import { useForm } from "react-hook-form";
|
|
import { zodResolver } from "@hookform/resolvers/zod";
|
|
import {
|
|
Form,
|
|
FormControl,
|
|
FormDescription,
|
|
FormField,
|
|
FormItem,
|
|
FormLabel,
|
|
FormMessage
|
|
} from "@app/components/ui/form";
|
|
import { TagInput } from "emblor";
|
|
import SettingsSectionTitle from "@app/components/SettingsSectionTitle";
|
|
import { ListUsersResponse } from "@server/routers/user";
|
|
import { Switch } from "@app/components/ui/switch";
|
|
import { Label } from "@app/components/ui/label";
|
|
import { Binary, Key, ShieldCheck } from "lucide-react";
|
|
import SetResourcePasswordForm from "./components/SetResourcePasswordForm";
|
|
import { Separator } from "@app/components/ui/separator";
|
|
import SetResourcePincodeForm from "./components/SetResourcePincodeForm";
|
|
import { createApiClient } from "@app/api";
|
|
import { useEnvContext } from "@app/hooks/useEnvContext";
|
|
|
|
const UsersRolesFormSchema = z.object({
|
|
roles: z.array(
|
|
z.object({
|
|
id: z.string(),
|
|
text: z.string()
|
|
})
|
|
),
|
|
users: z.array(
|
|
z.object({
|
|
id: z.string(),
|
|
text: z.string()
|
|
})
|
|
)
|
|
});
|
|
|
|
const whitelistSchema = z.object({
|
|
emails: z.array(
|
|
z.object({
|
|
id: z.string(),
|
|
text: z.string()
|
|
})
|
|
)
|
|
});
|
|
|
|
export default function ResourceAuthenticationPage() {
|
|
const { toast } = useToast();
|
|
const { org } = useOrgContext();
|
|
const { resource, updateResource, authInfo, updateAuthInfo } =
|
|
useResourceContext();
|
|
|
|
const { env } = useEnvContext();
|
|
|
|
const api = createApiClient({ env });
|
|
|
|
const [pageLoading, setPageLoading] = useState(true);
|
|
|
|
const [allRoles, setAllRoles] = useState<{ id: string; text: string }[]>(
|
|
[]
|
|
);
|
|
const [allUsers, setAllUsers] = useState<{ id: string; text: string }[]>(
|
|
[]
|
|
);
|
|
const [activeRolesTagIndex, setActiveRolesTagIndex] = useState<
|
|
number | null
|
|
>(null);
|
|
const [activeUsersTagIndex, setActiveUsersTagIndex] = useState<
|
|
number | null
|
|
>(null);
|
|
|
|
const [activeEmailTagIndex, setActiveEmailTagIndex] = useState<
|
|
number | null
|
|
>(null);
|
|
|
|
const [ssoEnabled, setSsoEnabled] = useState(resource.sso);
|
|
// const [blockAccess, setBlockAccess] = useState(resource.blockAccess);
|
|
const [whitelistEnabled, setWhitelistEnabled] = useState(
|
|
resource.emailWhitelistEnabled
|
|
);
|
|
|
|
const [loadingSaveUsersRoles, setLoadingSaveUsersRoles] = useState(false);
|
|
const [loadingSaveWhitelist, setLoadingSaveWhitelist] = useState(false);
|
|
|
|
const [loadingRemoveResourcePassword, setLoadingRemoveResourcePassword] =
|
|
useState(false);
|
|
const [loadingRemoveResourcePincode, setLoadingRemoveResourcePincode] =
|
|
useState(false);
|
|
|
|
const [isSetPasswordOpen, setIsSetPasswordOpen] = useState(false);
|
|
const [isSetPincodeOpen, setIsSetPincodeOpen] = useState(false);
|
|
|
|
const usersRolesForm = useForm<z.infer<typeof UsersRolesFormSchema>>({
|
|
resolver: zodResolver(UsersRolesFormSchema),
|
|
defaultValues: { roles: [], users: [] }
|
|
});
|
|
|
|
const whitelistForm = useForm<z.infer<typeof whitelistSchema>>({
|
|
resolver: zodResolver(whitelistSchema),
|
|
defaultValues: { emails: [] }
|
|
});
|
|
|
|
useEffect(() => {
|
|
const fetchData = async () => {
|
|
try {
|
|
const [
|
|
rolesResponse,
|
|
resourceRolesResponse,
|
|
usersResponse,
|
|
resourceUsersResponse,
|
|
whitelist
|
|
] = await Promise.all([
|
|
api.get<AxiosResponse<ListRolesResponse>>(
|
|
`/org/${org?.org.orgId}/roles`
|
|
),
|
|
api.get<AxiosResponse<ListResourceRolesResponse>>(
|
|
`/resource/${resource.resourceId}/roles`
|
|
),
|
|
api.get<AxiosResponse<ListUsersResponse>>(
|
|
`/org/${org?.org.orgId}/users`
|
|
),
|
|
api.get<AxiosResponse<ListResourceUsersResponse>>(
|
|
`/resource/${resource.resourceId}/users`
|
|
),
|
|
api.get<AxiosResponse<GetResourceWhitelistResponse>>(
|
|
`/resource/${resource.resourceId}/whitelist`
|
|
)
|
|
]);
|
|
|
|
setAllRoles(
|
|
rolesResponse.data.data.roles
|
|
.map((role) => ({
|
|
id: role.roleId.toString(),
|
|
text: role.name
|
|
}))
|
|
.filter((role) => role.text !== "Admin")
|
|
);
|
|
|
|
usersRolesForm.setValue(
|
|
"roles",
|
|
resourceRolesResponse.data.data.roles
|
|
.map((i) => ({
|
|
id: i.roleId.toString(),
|
|
text: i.name
|
|
}))
|
|
.filter((role) => role.text !== "Admin")
|
|
);
|
|
|
|
setAllUsers(
|
|
usersResponse.data.data.users.map((user) => ({
|
|
id: user.id.toString(),
|
|
text: user.email
|
|
}))
|
|
);
|
|
|
|
usersRolesForm.setValue(
|
|
"users",
|
|
resourceUsersResponse.data.data.users.map((i) => ({
|
|
id: i.userId.toString(),
|
|
text: i.email
|
|
}))
|
|
);
|
|
|
|
whitelistForm.setValue(
|
|
"emails",
|
|
whitelist.data.data.whitelist.map((w) => ({
|
|
id: w.email,
|
|
text: w.email
|
|
}))
|
|
);
|
|
|
|
setPageLoading(false);
|
|
} catch (e) {
|
|
console.error(e);
|
|
toast({
|
|
variant: "destructive",
|
|
title: "Failed to fetch data",
|
|
description: formatAxiosError(
|
|
e,
|
|
"An error occurred while fetching the data"
|
|
)
|
|
});
|
|
}
|
|
};
|
|
|
|
fetchData();
|
|
}, []);
|
|
|
|
async function saveWhitelist() {
|
|
setLoadingSaveWhitelist(true);
|
|
try {
|
|
await api.post(`/resource/${resource.resourceId}`, {
|
|
emailWhitelistEnabled: whitelistEnabled
|
|
});
|
|
|
|
if (whitelistEnabled) {
|
|
await api.post(`/resource/${resource.resourceId}/whitelist`, {
|
|
emails: whitelistForm.getValues().emails.map((i) => i.text)
|
|
});
|
|
}
|
|
|
|
updateResource({
|
|
emailWhitelistEnabled: whitelistEnabled
|
|
});
|
|
|
|
toast({
|
|
title: "Saved successfully",
|
|
description: "Whitelist settings have been saved"
|
|
});
|
|
} catch (e) {
|
|
console.error(e);
|
|
toast({
|
|
variant: "destructive",
|
|
title: "Failed to save whitelist",
|
|
description: formatAxiosError(
|
|
e,
|
|
"An error occurred while saving the whitelist"
|
|
)
|
|
});
|
|
} finally {
|
|
setLoadingSaveWhitelist(false);
|
|
}
|
|
}
|
|
|
|
async function onSubmitUsersRoles(
|
|
data: z.infer<typeof UsersRolesFormSchema>
|
|
) {
|
|
try {
|
|
setLoadingSaveUsersRoles(true);
|
|
|
|
const jobs = [
|
|
api.post(`/resource/${resource.resourceId}/roles`, {
|
|
roleIds: data.roles.map((i) => parseInt(i.id))
|
|
}),
|
|
api.post(`/resource/${resource.resourceId}/users`, {
|
|
userIds: data.users.map((i) => i.id)
|
|
}),
|
|
api.post(`/resource/${resource.resourceId}`, {
|
|
sso: ssoEnabled
|
|
})
|
|
];
|
|
|
|
await Promise.all(jobs);
|
|
|
|
updateResource({
|
|
sso: ssoEnabled
|
|
});
|
|
|
|
updateAuthInfo({
|
|
sso: ssoEnabled
|
|
});
|
|
|
|
toast({
|
|
title: "Saved successfully",
|
|
description: "Authentication settings have been saved"
|
|
});
|
|
} catch (e) {
|
|
console.error(e);
|
|
toast({
|
|
variant: "destructive",
|
|
title: "Failed to set roles",
|
|
description: formatAxiosError(
|
|
e,
|
|
"An error occurred while setting the roles"
|
|
)
|
|
});
|
|
} finally {
|
|
setLoadingSaveUsersRoles(false);
|
|
}
|
|
}
|
|
|
|
function removeResourcePassword() {
|
|
setLoadingRemoveResourcePassword(true);
|
|
|
|
api.post(`/resource/${resource.resourceId}/password`, {
|
|
password: null
|
|
})
|
|
.then(() => {
|
|
toast({
|
|
title: "Resource password removed",
|
|
description:
|
|
"The resource password has been removed successfully"
|
|
});
|
|
|
|
updateAuthInfo({
|
|
password: false
|
|
});
|
|
})
|
|
.catch((e) => {
|
|
toast({
|
|
variant: "destructive",
|
|
title: "Error removing resource password",
|
|
description: formatAxiosError(
|
|
e,
|
|
"An error occurred while removing the resource password"
|
|
)
|
|
});
|
|
})
|
|
.finally(() => setLoadingRemoveResourcePassword(false));
|
|
}
|
|
|
|
function removeResourcePincode() {
|
|
setLoadingRemoveResourcePincode(true);
|
|
|
|
api.post(`/resource/${resource.resourceId}/pincode`, {
|
|
pincode: null
|
|
})
|
|
.then(() => {
|
|
toast({
|
|
title: "Resource pincode removed",
|
|
description:
|
|
"The resource password has been removed successfully"
|
|
});
|
|
|
|
updateAuthInfo({
|
|
pincode: false
|
|
});
|
|
})
|
|
.catch((e) => {
|
|
toast({
|
|
variant: "destructive",
|
|
title: "Error removing resource pincode",
|
|
description: formatAxiosError(
|
|
e,
|
|
"An error occurred while removing the resource pincode"
|
|
)
|
|
});
|
|
})
|
|
.finally(() => setLoadingRemoveResourcePincode(false));
|
|
}
|
|
|
|
if (pageLoading) {
|
|
return <></>;
|
|
}
|
|
|
|
return (
|
|
<>
|
|
{isSetPasswordOpen && (
|
|
<SetResourcePasswordForm
|
|
open={isSetPasswordOpen}
|
|
setOpen={setIsSetPasswordOpen}
|
|
resourceId={resource.resourceId}
|
|
onSetPassword={() => {
|
|
setIsSetPasswordOpen(false);
|
|
updateAuthInfo({
|
|
password: true
|
|
});
|
|
}}
|
|
/>
|
|
)}
|
|
|
|
{isSetPincodeOpen && (
|
|
<SetResourcePincodeForm
|
|
open={isSetPincodeOpen}
|
|
setOpen={setIsSetPincodeOpen}
|
|
resourceId={resource.resourceId}
|
|
onSetPincode={() => {
|
|
setIsSetPincodeOpen(false);
|
|
updateAuthInfo({
|
|
pincode: true
|
|
});
|
|
}}
|
|
/>
|
|
)}
|
|
|
|
<div className="space-y-12 lg:max-w-2xl">
|
|
<section className="space-y-8">
|
|
<SettingsSectionTitle
|
|
title="Users & Roles"
|
|
description="Configure which users and roles can visit this resource"
|
|
size="1xl"
|
|
/>
|
|
|
|
<div>
|
|
<div className="flex items-center space-x-2 mb-2">
|
|
<Switch
|
|
id="sso-toggle"
|
|
defaultChecked={resource.sso}
|
|
onCheckedChange={(val) => setSsoEnabled(val)}
|
|
/>
|
|
<Label htmlFor="sso-toggle">
|
|
Allow Unified Login
|
|
</Label>
|
|
</div>
|
|
<span className="text-muted-foreground text-sm">
|
|
Existing users will only have to login once for all
|
|
resources that have this enabled.
|
|
</span>
|
|
</div>
|
|
|
|
<Form {...usersRolesForm}>
|
|
<form
|
|
onSubmit={usersRolesForm.handleSubmit(
|
|
onSubmitUsersRoles
|
|
)}
|
|
className="space-y-4"
|
|
>
|
|
<FormField
|
|
control={usersRolesForm.control}
|
|
name="roles"
|
|
render={({ field }) => (
|
|
<FormItem className="flex flex-col items-start">
|
|
<FormLabel>Roles</FormLabel>
|
|
<FormControl>
|
|
{/* @ts-ignore */}
|
|
<TagInput
|
|
{...field}
|
|
activeTagIndex={
|
|
activeRolesTagIndex
|
|
}
|
|
setActiveTagIndex={
|
|
setActiveRolesTagIndex
|
|
}
|
|
placeholder="Enter a role"
|
|
tags={
|
|
usersRolesForm.getValues()
|
|
.roles
|
|
}
|
|
setTags={(newRoles) => {
|
|
usersRolesForm.setValue(
|
|
"roles",
|
|
newRoles as [
|
|
Tag,
|
|
...Tag[]
|
|
]
|
|
);
|
|
}}
|
|
enableAutocomplete={true}
|
|
autocompleteOptions={allRoles}
|
|
allowDuplicates={false}
|
|
restrictTagsToAutocompleteOptions={
|
|
true
|
|
}
|
|
sortTags={true}
|
|
styleClasses={{
|
|
tag: {
|
|
body: "bg-muted hover:bg-accent text-foreground py-2 px-3 rounded-full"
|
|
},
|
|
input: "text-base md:text-sm border-none bg-transparent text-inherit placeholder:text-inherit shadow-none",
|
|
inlineTagsContainer:
|
|
"bg-transparent p-2"
|
|
}}
|
|
/>
|
|
</FormControl>
|
|
<FormDescription>
|
|
These roles will be able to access
|
|
this resource. Admins can always
|
|
access this resource.
|
|
</FormDescription>
|
|
<FormMessage />
|
|
</FormItem>
|
|
)}
|
|
/>
|
|
<FormField
|
|
control={usersRolesForm.control}
|
|
name="users"
|
|
render={({ field }) => (
|
|
<FormItem className="flex flex-col items-start">
|
|
<FormLabel>Users</FormLabel>
|
|
<FormControl>
|
|
{/* @ts-ignore */}
|
|
<TagInput
|
|
{...field}
|
|
activeTagIndex={
|
|
activeUsersTagIndex
|
|
}
|
|
setActiveTagIndex={
|
|
setActiveUsersTagIndex
|
|
}
|
|
placeholder="Enter a user"
|
|
tags={
|
|
usersRolesForm.getValues()
|
|
.users
|
|
}
|
|
setTags={(newUsers) => {
|
|
usersRolesForm.setValue(
|
|
"users",
|
|
newUsers as [
|
|
Tag,
|
|
...Tag[]
|
|
]
|
|
);
|
|
}}
|
|
enableAutocomplete={true}
|
|
autocompleteOptions={allUsers}
|
|
allowDuplicates={false}
|
|
restrictTagsToAutocompleteOptions={
|
|
true
|
|
}
|
|
sortTags={true}
|
|
styleClasses={{
|
|
tag: {
|
|
body: "bg-muted hover:bg-accent text-foreground py-2 px-3 rounded-full"
|
|
},
|
|
input: "text-base md:text-sm border-none bg-transparent text-inherit placeholder:text-inherit shadow-none",
|
|
inlineTagsContainer:
|
|
"bg-transparent p-2"
|
|
}}
|
|
/>
|
|
</FormControl>
|
|
<FormDescription>
|
|
Users added here will be able to
|
|
access this resource. A user will
|
|
always have access to a resource if
|
|
they have a role that has access to
|
|
it.
|
|
</FormDescription>
|
|
<FormMessage />
|
|
</FormItem>
|
|
)}
|
|
/>
|
|
<Button
|
|
type="submit"
|
|
loading={loadingSaveUsersRoles}
|
|
disabled={loadingSaveUsersRoles}
|
|
>
|
|
Save Users & Roles
|
|
</Button>
|
|
</form>
|
|
</Form>
|
|
</section>
|
|
|
|
<Separator />
|
|
|
|
<section className="space-y-8">
|
|
<SettingsSectionTitle
|
|
title="Authentication Methods"
|
|
description="Allow access to the resource via additional auth methods"
|
|
size="1xl"
|
|
/>
|
|
|
|
<div className="flex flex-col space-y-4">
|
|
<div className="flex items-center justify-between space-x-4">
|
|
<div
|
|
className={`flex items-center text-${!authInfo.password ? "red" : "green"}-500 space-x-2`}
|
|
>
|
|
<Key />
|
|
<span>
|
|
Password Protection{" "}
|
|
{authInfo?.password
|
|
? "Enabled"
|
|
: "Disabled"}
|
|
</span>
|
|
</div>
|
|
{authInfo?.password ? (
|
|
<Button
|
|
variant="gray"
|
|
type="button"
|
|
loading={loadingRemoveResourcePassword}
|
|
disabled={loadingRemoveResourcePassword}
|
|
onClick={removeResourcePassword}
|
|
>
|
|
Remove Password
|
|
</Button>
|
|
) : (
|
|
<Button
|
|
variant="gray"
|
|
type="button"
|
|
onClick={() => setIsSetPasswordOpen(true)}
|
|
>
|
|
Add Password
|
|
</Button>
|
|
)}
|
|
</div>
|
|
|
|
<div className="flex items-center justify-between space-x-4">
|
|
<div
|
|
className={`flex items-center text-${!authInfo.pincode ? "red" : "green"}-500 space-x-2`}
|
|
>
|
|
<Binary />
|
|
<span>
|
|
PIN Code Protection{" "}
|
|
{authInfo?.pincode ? "Enabled" : "Disabled"}
|
|
</span>
|
|
</div>
|
|
{authInfo?.pincode ? (
|
|
<Button
|
|
variant="gray"
|
|
type="button"
|
|
loading={loadingRemoveResourcePincode}
|
|
disabled={loadingRemoveResourcePincode}
|
|
onClick={removeResourcePincode}
|
|
>
|
|
Remove PIN Code
|
|
</Button>
|
|
) : (
|
|
<Button
|
|
variant="gray"
|
|
type="button"
|
|
onClick={() => setIsSetPincodeOpen(true)}
|
|
>
|
|
Add PIN Code
|
|
</Button>
|
|
)}
|
|
</div>
|
|
</div>
|
|
|
|
{env.EMAIL_ENABLED === "true" && (
|
|
<>
|
|
<Separator />
|
|
<div>
|
|
<div className="flex items-center space-x-2 mb-2">
|
|
<Switch
|
|
id="whitelist-toggle"
|
|
defaultChecked={
|
|
resource.emailWhitelistEnabled
|
|
}
|
|
onCheckedChange={(val) =>
|
|
setWhitelistEnabled(val)
|
|
}
|
|
/>
|
|
<Label htmlFor="whitelist-toggle">
|
|
Email Whitelist
|
|
</Label>
|
|
</div>
|
|
<span className="text-muted-foreground text-sm">
|
|
Enable resource whitelist to require
|
|
email-based authentication (one-time
|
|
passwords) for resource access.
|
|
</span>
|
|
</div>
|
|
|
|
{whitelistEnabled && (
|
|
<Form {...whitelistForm}>
|
|
<form className="space-y-4">
|
|
<FormField
|
|
control={whitelistForm.control}
|
|
name="emails"
|
|
render={({ field }) => (
|
|
<FormItem className="flex flex-col items-start">
|
|
<FormLabel>
|
|
Whitelisted Emails
|
|
</FormLabel>
|
|
<FormControl>
|
|
{/* @ts-ignore */}
|
|
<TagInput
|
|
{...field}
|
|
activeTagIndex={
|
|
activeEmailTagIndex
|
|
}
|
|
validateTag={(
|
|
tag
|
|
) => {
|
|
return z
|
|
.string()
|
|
.email()
|
|
.safeParse(
|
|
tag
|
|
).success;
|
|
}}
|
|
setActiveTagIndex={
|
|
setActiveEmailTagIndex
|
|
}
|
|
placeholder="Enter an email"
|
|
tags={
|
|
whitelistForm.getValues()
|
|
.emails
|
|
}
|
|
setTags={(
|
|
newRoles
|
|
) => {
|
|
whitelistForm.setValue(
|
|
"emails",
|
|
newRoles as [
|
|
Tag,
|
|
...Tag[]
|
|
]
|
|
);
|
|
}}
|
|
allowDuplicates={
|
|
false
|
|
}
|
|
sortTags={true}
|
|
styleClasses={{
|
|
tag: {
|
|
body: "bg-muted hover:bg-accent text-foreground py-2 px-3 rounded-full"
|
|
},
|
|
input: "text-base md:text-sm border-none bg-transparent text-inherit placeholder:text-inherit shadow-none",
|
|
inlineTagsContainer:
|
|
"bg-transparent p-2"
|
|
}}
|
|
/>
|
|
</FormControl>
|
|
</FormItem>
|
|
)}
|
|
/>
|
|
</form>
|
|
</Form>
|
|
)}
|
|
|
|
<Button
|
|
loading={loadingSaveWhitelist}
|
|
disabled={loadingSaveWhitelist}
|
|
onClick={saveWhitelist}
|
|
>
|
|
Save Whitelist
|
|
</Button>
|
|
</>
|
|
)}
|
|
</section>
|
|
</div>
|
|
</>
|
|
);
|
|
}
|