mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-10-30 02:02:43 +00:00
91d88c3de1
* add open api params * support pki name constraints * fix conditional * revert helptextwsubtext * fix typo * add name constraints to sign intermediate form * add changelog * update test
81 lines
2.5 KiB
TypeScript
81 lines
2.5 KiB
TypeScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
import Component from '@glimmer/component';
|
|
import { action } from '@ember/object';
|
|
import { service } from '@ember/service';
|
|
import { waitFor } from '@ember/test-waiters';
|
|
import { tracked } from '@glimmer/tracking';
|
|
import { task } from 'ember-concurrency';
|
|
import errorMessage from 'vault/utils/error-message';
|
|
import type PkiCertificateSignIntermediate from 'vault/models/pki/certificate/sign-intermediate';
|
|
import type FlashMessageService from 'vault/services/flash-messages';
|
|
import type { ValidationMap } from 'vault/vault/app-types';
|
|
|
|
interface Args {
|
|
onCancel: CallableFunction;
|
|
model: PkiCertificateSignIntermediate;
|
|
}
|
|
|
|
export default class PkiSignIntermediateFormComponent extends Component<Args> {
|
|
@service declare readonly flashMessages: FlashMessageService;
|
|
@tracked errorBanner = '';
|
|
@tracked inlineFormAlert = '';
|
|
@tracked modelValidations: ValidationMap | null = null;
|
|
|
|
@action cancel() {
|
|
this.args.model.unloadRecord();
|
|
this.args.onCancel();
|
|
}
|
|
@task
|
|
@waitFor
|
|
*save(event: Event) {
|
|
event.preventDefault();
|
|
const { isValid, state, invalidFormMessage } = this.args.model.validate();
|
|
this.modelValidations = isValid ? null : state;
|
|
this.inlineFormAlert = invalidFormMessage;
|
|
if (!isValid) return;
|
|
try {
|
|
yield this.args.model.save();
|
|
this.flashMessages.success('Successfully signed CSR.');
|
|
window?.scrollTo(0, 0);
|
|
} catch (e) {
|
|
this.errorBanner = errorMessage(e);
|
|
this.inlineFormAlert = 'There was a problem signing the CSR.';
|
|
}
|
|
}
|
|
|
|
get groups() {
|
|
return {
|
|
'Name constraints': [
|
|
'permittedDnsDomains',
|
|
'permittedEmailAddresses',
|
|
'permittedIpRanges',
|
|
'permittedUriDomains',
|
|
'excludedDnsDomains',
|
|
'excludedEmailAddresses',
|
|
'excludedIpRanges',
|
|
'excludedUriDomains',
|
|
],
|
|
'Signing options': ['usePss', 'skid', 'signatureBits'],
|
|
'Subject Alternative Name (SAN) Options': ['altNames', 'ipSans', 'uriSans', 'otherSans'],
|
|
'Additional subject fields': [
|
|
'ou',
|
|
'organization',
|
|
'country',
|
|
'locality',
|
|
'province',
|
|
'streetAddress',
|
|
'postalCode',
|
|
'subjectSerialNumber', // this is different from the UUID serial number generated by vault (in show fields below)
|
|
],
|
|
};
|
|
}
|
|
|
|
get showFields() {
|
|
return ['serialNumber', 'certificate', 'issuingCa', 'caChain'];
|
|
}
|
|
}
|