mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 07:01:09 +02:00
31051ef1e4
* change entity_id to camel casing, remove "backends" key from stored auth data * fix tokenExpirationEpoch returning NaN, use authSuccess in auth service tests * camel case mfa_requirement references * refactor auth service * implement api service for token method * implement api service in standard auth methods * add lookupSelf request to persistAuthData method in auht service instead of calling in components * implement api service in oidc-jwt component * implement api service in okta component * implement api service in saml component * use api service for wrapped_token query param * remaining test updates, enterprise tests and stabilize auth helpers * upate renew() to use new persistAuthData method, add a test * revert as this will be addressed upstream * rename supported-login-methods to auth-form-helpers and delete old supported-auth-backends helper, update tests * cleanup normalize after testing mfa validation for each auth method * update type declarations, set displayName in each method component * stabilize redirect tests by waiting for login before asserting url * stabilize tests * modernize typescript syntax, move error const to util * use mirage instead of vault server to resolve test race conditions * fix file import
97 lines
3.0 KiB
JavaScript
97 lines
3.0 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
import AdapterError from '@ember-data/adapter/error';
|
|
import { set } from '@ember/object';
|
|
import ApplicationAdapter from './application';
|
|
import { encodePath } from 'vault/utils/path-encoding-helpers';
|
|
|
|
export default ApplicationAdapter.extend({
|
|
url(path) {
|
|
const url = `${this.buildURL()}/auth`;
|
|
return path ? url + '/' + encodePath(path) : url;
|
|
},
|
|
|
|
// used in updateRecord
|
|
pathForType() {
|
|
return 'mounts/auth';
|
|
},
|
|
|
|
findAll(store, type, sinceToken, snapshotRecordArray) {
|
|
const isUnauthenticated = snapshotRecordArray?.adapterOptions?.unauthenticated;
|
|
// sys/internal/ui/mounts returns the actual value of the system TTL
|
|
// instead of '0' which just indicates the mount is using system defaults
|
|
if (isUnauthenticated) {
|
|
const url = `/${this.urlPrefix()}/internal/ui/mounts`;
|
|
return this.ajax(url, 'GET', {
|
|
unauthenticated: true,
|
|
})
|
|
.then((result) => {
|
|
return {
|
|
data: result.data.auth,
|
|
};
|
|
})
|
|
.catch(() => {
|
|
return { data: {} };
|
|
});
|
|
}
|
|
// if authenticated, findAll will use GET sys/auth instead
|
|
return this.ajax(this.url(), 'GET').catch((e) => {
|
|
if (e instanceof AdapterError) {
|
|
set(e, 'policyPath', 'sys/auth');
|
|
}
|
|
throw e;
|
|
});
|
|
},
|
|
|
|
// findAll makes a network request and supplements the ember-data store with what the API returns.
|
|
// after upgrading to ember-data 5.3.2 the store was becoming cluttered with outdated records, so
|
|
// use query to refresh the store with each request. this is ideal for list views
|
|
query() {
|
|
const url = `/${this.urlPrefix()}/internal/ui/mounts`;
|
|
return this.ajax(url, 'GET')
|
|
.then((result) => {
|
|
return {
|
|
data: result.data.auth,
|
|
};
|
|
})
|
|
.catch((e) => {
|
|
if (e instanceof AdapterError) {
|
|
set(e, 'policyPath', 'sys/internal/ui/mounts');
|
|
}
|
|
throw e;
|
|
});
|
|
},
|
|
|
|
createRecord(store, type, snapshot) {
|
|
const serializer = store.serializerFor(type.modelName);
|
|
const data = serializer.serialize(snapshot);
|
|
const path = snapshot.attr('path');
|
|
|
|
return this.ajax(this.url(path), 'POST', { data }).then(() => {
|
|
// ember data doesn't like 204s if it's not a DELETE
|
|
data.config.id = path; // config relationship needs an id so use path for now
|
|
return {
|
|
data: { ...data, path: path + '/', id: path },
|
|
};
|
|
});
|
|
},
|
|
|
|
urlForDeleteRecord(id, modelName, snapshot) {
|
|
return this.url(snapshot.id);
|
|
},
|
|
|
|
tune(path, data) {
|
|
const url = `${this.buildURL()}/${this.pathForType()}/${encodePath(path)}tune`;
|
|
return this.ajax(url, 'POST', { data });
|
|
},
|
|
|
|
resetPassword(backend, username, password) {
|
|
// For userpass auth types only
|
|
const url = `/v1/auth/${encodePath(backend)}/users/${encodePath(username)}/password`;
|
|
return this.ajax(url, 'POST', { data: { password } });
|
|
},
|
|
});
|