mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 07:01:09 +02:00
d2116025be
* Add map between model types and helpUrls, update tests * replace modelProto.getHelpUrl with new helper util * Remove all useOpenApi and getHelpUrl instances from models * Add missing auth config model type
100 lines
2.4 KiB
JavaScript
100 lines
2.4 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
import { attr } from '@ember-data/model';
|
|
import { computed } from '@ember/object';
|
|
import AuthConfig from '../auth-config';
|
|
import fieldToAttrs from 'vault/utils/field-to-attrs';
|
|
import { combineFieldGroups } from 'vault/utils/openapi-to-attrs';
|
|
|
|
export default AuthConfig.extend({
|
|
oidcDiscoveryUrl: attr('string', {
|
|
label: 'OIDC discovery URL',
|
|
helpText:
|
|
'The OIDC discovery URL, without any .well-known component (base path). Cannot be used with jwt_validation_pubkeys',
|
|
}),
|
|
|
|
oidcClientId: attr('string', {
|
|
label: 'OIDC client ID',
|
|
}),
|
|
|
|
oidcClientSecret: attr('string', {
|
|
label: 'OIDC client secret',
|
|
}),
|
|
|
|
oidcDiscoveryCaPem: attr('string', {
|
|
label: 'OIDC discovery CA PEM',
|
|
editType: 'file',
|
|
helpText:
|
|
'The CA certificate or chain of certificates, in PEM format, to use to validate connections to the OIDC Discovery URL. If not set, system certificates are used',
|
|
}),
|
|
|
|
jwksCaPem: attr('string', {
|
|
label: 'JWKS CA PEM',
|
|
editType: 'file',
|
|
}),
|
|
|
|
jwksUrl: attr('string', {
|
|
label: 'JWKS URL',
|
|
}),
|
|
|
|
jwksPairs: attr({
|
|
label: 'JWKS pairs',
|
|
// This attribute is not shown in the UI
|
|
}),
|
|
|
|
oidcResponseMode: attr('string', {
|
|
label: 'OIDC response mode',
|
|
}),
|
|
|
|
oidcResponseTypes: attr('string', {
|
|
label: 'OIDC response types',
|
|
}),
|
|
|
|
jwtValidationPubkeys: attr({
|
|
label: 'JWT validation public keys',
|
|
editType: 'stringArray',
|
|
}),
|
|
|
|
jwtSupportedAlgs: attr({
|
|
label: 'JWT supported algorithms',
|
|
}),
|
|
|
|
boundIssuer: attr('string', {
|
|
helpText: 'The value against which to match the iss claim in a JWT',
|
|
}),
|
|
|
|
fieldGroups: computed('constructor.modelName', 'newFields', function () {
|
|
const type = this.constructor.modelName.split('/')[1].toUpperCase();
|
|
let groups = [
|
|
{
|
|
default: [
|
|
'oidcDiscoveryUrl',
|
|
'defaultRole',
|
|
'jwksCaPem',
|
|
'jwksUrl',
|
|
'oidcResponseMode',
|
|
'oidcResponseTypes',
|
|
],
|
|
},
|
|
{
|
|
[`${type} Options`]: [
|
|
'oidcClientId',
|
|
'oidcClientSecret',
|
|
'oidcDiscoveryCaPem',
|
|
'jwtValidationPubkeys',
|
|
'jwtSupportedAlgs',
|
|
'boundIssuer',
|
|
],
|
|
},
|
|
];
|
|
|
|
if (this.newFields) {
|
|
groups = combineFieldGroups(groups, this.newFields, []);
|
|
}
|
|
return fieldToAttrs(this, groups);
|
|
}),
|
|
});
|