scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-10-30 02:02:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Glimmerize Saml Auth (#24100)

Browse Source 
* glimmerize saml

* update roleName

* remove constructor
This commit is contained in:
Angel Garbarino
2023-11-14 09:55:09 -07:00
committed by GitHub
parent 92682f33ce
commit 70d0e7c69c
2 changed files with 73 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ui/app/templates/components/auth-saml.hbs → ui/app/components/auth-saml.hbs
View File

@@ -4,14 +4,14 @@
~}}
{{#if this.canLoginSaml}}
<form id="auth-form" onsubmit={{action "startSAMLAuth" @onSubmit (hash role=this.roleName)}}>
<form id="auth-form" {{on "submit" (fn this.startSAMLAuth @onSubmit (hash role=@roleName))}}>
<div class="field">
<label for="role" class="is-label">Role</label>
<div class="control">
<input
value={{@roleName}}
placeholder="Default"
oninput={{action "setRole" value="target.value"}}
{{on "input" this.setRole}}
autocomplete="off"
spellcheck="false"
name="role"
@@ -25,7 +25,7 @@
@sizeSmall={{true}}
@paddingTop={{true}}
@type="info"
@message="Leave blank to sign in with the default role if one is configured"
@message="Leave blank to sign in with the default role if one is configured."
/>
</div>
<div data-test-yield-content>

148
ui/app/components/auth-saml.js
View File

@@ -4,9 +4,11 @@
*/
import { inject as service } from '@ember/service';
import Component from './outer-html';
import { task, timeout, waitForEvent } from 'ember-concurrency';
import { computed } from '@ember/object';
import Component from '@glimmer/component';
import { tracked } from '@glimmer/tracking';
import { action } from '@ember/object';
import errorMessage from 'vault/utils/error-message';
const WAIT_TIME = 500;
@@ -17,58 +19,47 @@ const ERROR_MISSING_PARAMS =
'The callback from the provider did not supply all of the required parameters. Please click Sign In to try again. If the problem persists, you may want to contact your administrator.';
export { ERROR_WINDOW_CLOSED, ERROR_MISSING_PARAMS };
export default Component.extend({
store: service(),
featureFlagService: service('featureFlag'),
export default class AuthSaml extends Component {
@service store;
@service featureFlag;
selectedAuthPath: null,
selectedAuthType: null,
roleName: null,
errorMessage: null,
onRoleName() {},
onLoading() {},
onError() {},
onNamespace() {},
didReceiveAttrs() {
this._super();
this.set('errorMessage', null);
},
@tracked errorMessage;
getWindow() {
return this.window || window;
},
}
canLoginSaml: computed('getWindow', function () {
get canLoginSaml() {
return this.getWindow().isSecureContext;
}),
}
async fetchRole(roleName) {
const path = this.selectedAuthPath || this.selectedAuthType;
const path = this.args.selectedAuthPath || this.args.selectedAuthType;
const id = JSON.stringify([path, roleName]);
return this.store.findRecord('role-saml', id, {
adapterOptions: { namespace: this.namespace },
adapterOptions: { namespace: this.args.namespace },
});
},
}
cancelLogin(samlWindow, errorMessage) {
this.closeWindow(samlWindow);
this.handleSAMLError(errorMessage);
this.exchangeSAMLTokenPollID.cancelAll();
},
}
closeWindow(samlWindow) {
this.watchPopup.cancelAll();
this.watchCurrent.cancelAll();
samlWindow.close();
},
}
handleSAMLError(err) {
this.onLoading(false);
this.onError(err);
},
this.args.onLoading(false);
this.args.onError(err);
}
watchPopup: task(function* (samlWindow) {
@task
*watchPopup(samlWindow) {
while (true) {
yield timeout(WAIT_TIME);
if (!samlWindow || samlWindow.closed) {
@@ -76,24 +67,26 @@ export default Component.extend({
return this.handleSAMLError(ERROR_WINDOW_CLOSED);
}
}
}),
}
watchCurrent: task(function* (samlWindow) {
@task
*watchCurrent(samlWindow) {
// when user is about to change pages, close the popup window
yield waitForEvent(this.getWindow(), 'beforeunload');
samlWindow?.close();
}),
}
exchangeSAMLTokenPollID: task(function* (samlWindow, role) {
this.onLoading(true);
@task
*exchangeSAMLTokenPollID(samlWindow, role) {
this.args.onLoading(true);
// start watching the popup window and the current one
this.watchPopup.perform(samlWindow);
this.watchCurrent.perform(samlWindow);
const path = this.selectedAuthPath || this.selectedAuthType;
const path = this.args.selectedAuthPath || this.args.selectedAuthType;
const adapter = this.store.adapterFor('auth-method');
this.onNamespace(this.namespace);
this.args.onNamespace(this.args.namespace);
// Wait up to 3 minutes for the token to become available
let resp;
@@ -105,7 +98,7 @@ export default Component.extend({
continue;
}
// We've obtained the Vault token for the authentication flow, now log in.
yield this.onSubmit(null, null, resp.auth.client_token);
yield this.args.onSubmit(null, null, resp.auth.client_token);
this.closeWindow(samlWindow);
return;
} catch (e) {
@@ -117,46 +110,45 @@ export default Component.extend({
}
}
this.cancelLogin(samlWindow, ERROR_TIMEOUT);
}),
}
actions: {
setRole(roleName) {
this.onRoleName(roleName);
},
/* Saml auth flow on login button click:
* 1. find role-saml record which returns role info
* 2. open popup at url defined returned from role
* 3. watch popup window for close (and cancel polling if it closes)
* 4. poll vault for 200 token response
* 5. close popup, stop polling, and trigger onSubmit with token data
*/
async startSAMLAuth(callback, data, e) {
this.onError(null);
this.onLoading(true);
if (e && e.preventDefault) {
e.preventDefault();
}
const roleName = data.role;
let role;
try {
role = await this.fetchRole(roleName);
} catch (error) {
this.handleSAMLError(error);
return;
}
@action
setRole(event) {
this.args.onRoleName(event.target.value);
}
/* Saml auth flow on login button click:
* 1. find role-saml record which returns role info
* 2. open popup at url defined returned from role
* 3. watch popup window for close (and cancel polling if it closes)
* 4. poll vault for 200 token response
* 5. close popup, stop polling, and trigger onSubmit with token data
*/
@action async startSAMLAuth(callback, data, e) {
this.args.onError(null);
this.args.onLoading(true);
if (e && e.preventDefault) {
e.preventDefault();
}
const roleName = data.role;
let role;
try {
role = await this.fetchRole(roleName);
} catch (error) {
this.handleSAMLError(error);
return;
}
const win = this.getWindow();
const POPUP_WIDTH = 500;
const POPUP_HEIGHT = 600;
const left = win.screen.width / 2 - POPUP_WIDTH / 2;
const top = win.screen.height / 2 - POPUP_HEIGHT / 2;
const samlWindow = win.open(
role.ssoServiceURL,
'vaultSAMLWindow',
`width=${POPUP_WIDTH},height=${POPUP_HEIGHT},resizable,scrollbars=yes,top=${top},left=${left}`
);
const win = this.getWindow();
const POPUP_WIDTH = 500;
const POPUP_HEIGHT = 600;
const left = win.screen.width / 2 - POPUP_WIDTH / 2;
const top = win.screen.height / 2 - POPUP_HEIGHT / 2;
const samlWindow = win.open(
role.ssoServiceURL,
'vaultSAMLWindow',
`width=${POPUP_WIDTH},height=${POPUP_HEIGHT},resizable,scrollbars=yes,top=${top},left=${left}`
);
this.exchangeSAMLTokenPollID.perform(samlWindow, role);
},
},
});
this.exchangeSAMLTokenPollID.perform(samlWindow, role);
}
}