vault/ui/app/adapters/application.js
Matthew Irish 50c7797984
UI - jwt auth (#6188)
* fix default rendering of svg and allow plugins access to mount tune form

* add auth-jwt component

* add callback route, and allow it to be navigated to on load

* add jwt as a supported auth method

* use auth-jwt component and implement intial oidc flow

* allow wrapping un-authed requests

* pass redirect_url and properly redirect with the wrapped token

* popup for login

* center popup window and move to localStorage events for cross window communication because of IE11

* access window via a getter on the auth-form component

* show OIDC provider name on the button

* fetch default role on render of the auth-jwt component

* simplify auth-form template

* style callback page

* refetch auth_url when path changes for auth-jwt component

* fix glimmer error on alias metadata, and add back popup-metadata component

* fix link in metadata page

* add logo-edition component and remove use of partial for logo svg

* render oidc callback template on the loading page if we're going there

* add docs icon and change timeout on the auth form

* move OIDC auth specific things to auth-jwt component

* start to add branded buttons for OIDC providers

* add google button

* finish branded buttons

* update glyph for error messages

* update tests for auth screen not showing tabs, add adapter tests and new auth jwt tests

* start auth-jwt tests

* simplify auth-jwt

* remove negative top margin on AlertInline

* only preventDefault if there's an event

* fill out tests

* sort out some naming

* feedback on templates and styles

* clear error when starting OIDC auth and call for new auth_url

* also allow 'oidc' as the auth method type

* handle namespaces with OIDC auth

* review feedback

* use new getters in popup-metadata
2019-02-14 09:39:19 -06:00

122 lines
3.5 KiB
JavaScript

import { inject as service } from '@ember/service';
import { assign } from '@ember/polyfills';
import { set } from '@ember/object';
import RSVP from 'rsvp';
import DS from 'ember-data';
import fetch from 'fetch';
import config from '../config/environment';
const { APP } = config;
const { POLLING_URLS, NAMESPACE_ROOT_URLS } = APP;
export default DS.RESTAdapter.extend({
auth: service(),
namespaceService: service('namespace'),
controlGroup: service(),
flashMessages: service(),
namespace: 'v1/sys',
shouldReloadAll() {
return true;
},
shouldReloadRecord() {
return true;
},
shouldBackgroundReloadRecord() {
return false;
},
addHeaders(url, options) {
let token = options.clientToken || this.get('auth.currentToken');
let headers = {};
if (token && !options.unauthenticated) {
headers['X-Vault-Token'] = token;
}
if (options.wrapTTL) {
headers['X-Vault-Wrap-TTL'] = options.wrapTTL;
}
let namespace =
typeof options.namespace === 'undefined' ? this.get('namespaceService.path') : options.namespace;
if (namespace && !NAMESPACE_ROOT_URLS.some(str => url.includes(str))) {
headers['X-Vault-Namespace'] = namespace;
}
options.headers = assign(options.headers || {}, headers);
},
_preRequest(url, options) {
this.addHeaders(url, options);
const isPolling = POLLING_URLS.some(str => url.includes(str));
if (!isPolling) {
this.auth.setLastFetch(Date.now());
}
options.timeout = 60000;
return options;
},
ajax(intendedUrl, method, passedOptions = {}) {
let url = intendedUrl;
let type = method;
let options = passedOptions;
let controlGroup = this.get('controlGroup');
let controlGroupToken = controlGroup.tokenForUrl(url);
// if we have a control group token that matches the intendedUrl,
// then we want to unwrap it and return the unwrapped response as
// if it were the initial request
// To do this, we rewrite the function args
if (controlGroupToken) {
url = '/v1/sys/wrapping/unwrap';
type = 'POST';
options = {
clientToken: controlGroupToken.token,
data: {
token: controlGroupToken.token,
},
};
}
let opts = this._preRequest(url, options);
return this._super(url, type, opts).then((...args) => {
if (controlGroupToken) {
controlGroup.deleteControlGroupToken(controlGroupToken.accessor);
}
const [resp] = args;
if (resp && resp.warnings) {
let flash = this.get('flashMessages');
resp.warnings.forEach(message => {
flash.info(message);
});
}
return controlGroup.checkForControlGroup(args, resp, options.wrapTTL);
});
},
// for use on endpoints that don't return JSON responses
rawRequest(url, type, options = {}) {
let opts = this._preRequest(url, options);
return fetch(url, {
method: type || 'GET',
headers: opts.headers || {},
}).then(response => {
if (response.status >= 200 && response.status < 300) {
return RSVP.resolve(response);
} else {
return RSVP.reject();
}
});
},
handleResponse(status, headers, payload, requestData) {
const returnVal = this._super(...arguments);
// ember data errors don't have the status code, so we add it here
if (returnVal instanceof DS.AdapterError) {
set(returnVal, 'httpStatus', status);
set(returnVal, 'path', requestData.url);
}
return returnVal;
},
});