mirror of
https://github.com/kemko/nomad.git
synced 2026-01-07 19:05:42 +03:00
* Rename pages to include roles * Models and adapters * [ui] Any policy checks in the UI now check for roles' policies as well as token policies (#18346) * combinedPolicies as a concept * Classic decorator on role adapter * We added a new request for roles, so the test based on a specific order of requests got fickle fast * Mirage roles cluster scaffolded * Acceptance test for roles and policies on the login page * Update mirage mock for nodes fetch to account for role policies / empty token.policies * Roles-derived policies checks * [ui] Access Control with Roles and Tokens (#18413) * top level policies routes moved into access control * A few more routes and name cleanup * Delog and test fixes to account for new url prefix and document titles * Overview page * Tokens and Roles routes * Tokens helios table * Add a role * Hacky role page and deletion * New policy keyboard shortcut and roles breadcrumb nav * If you leave New Role but havent made any changes, remove the newly-created record from store * Roles index list and general role route crud * Roles index actually links to roles now * Helios button styles for new roles and policies * Handle when you try to create a new role without having any policies * Token editing generally * Create Token functionality * Cant delete self-token but management token editing and deleting is fine * Upgrading helios caused codemirror to explode, shimmed * Policies table fix * without bang-element condition, modifier would refire over and over * Token TTL or Time setting * time will take you on * Mirage hooks for create and list roles * Ensure policy names only use allow characters in mirage mocks * Mirage mocked roles and policies in the default cluster * log and lintfix * chromedriver to 2.1.2 * unused unit tests removed * Nice profile dropdown * With the HDS accordion, rename our internal component scss ref * design revisions after discussion * Tooltip on deleted-policy tokens * Two-step button peripheral isDeleting gcode removed * Never to null on token save * copywrite headers added and empty routefiles removed * acceptance test fixes for policies endpoint * Route for updating a token * Policies testfixes * Ember on-click-outside modifier upgraded with general ember-modifier upgrade * Test adjustments to account for new profile header dropdown * Test adjustments for tokens via policy pages * Removed an unused route * Access Control index page tests * a11y tests * Tokens index acceptance tests generally * Lintfix * Token edit page tests * Token editing tests * New token expiration tests * Roles Index tests * Role editing policies tests * A complete set of Access Control Roles tests * Policies test * Be more specific about which row to check for expiration time * Nil check on expirationTime equality * Management tokens shouldnt show No Roles/Policies, give them their own designation * Route guard on selftoken, conditional columns, and afterModel at parent to prevent orphaned policies on tokens/roles from stopping a new save * Policy unloading on delete and other todos plus autofocus conditionally re-enabled * Invalid policies non-links now a concept for Roles index * HDS style links to make job.variables.alert links look like links again * Mirage finding looks weird so making model async in hash even though redundant * Drop rsvp * RSVP wasnt the problem, cached lookups were * remove old todo comments * de-log
163 lines
3.9 KiB
JavaScript
163 lines
3.9 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
/* eslint-disable ember/no-controller-access-in-routes */
|
|
import { inject as service } from '@ember/service';
|
|
import { later, next } from '@ember/runloop';
|
|
import Route from '@ember/routing/route';
|
|
import { AbortError } from '@ember-data/adapter/error';
|
|
import RSVP from 'rsvp';
|
|
import { action } from '@ember/object';
|
|
import classic from 'ember-classic-decorator';
|
|
|
|
@classic
|
|
export default class ApplicationRoute extends Route {
|
|
@service config;
|
|
@service system;
|
|
@service store;
|
|
@service token;
|
|
@service router;
|
|
|
|
queryParams = {
|
|
region: {
|
|
refreshModel: true,
|
|
},
|
|
};
|
|
|
|
resetController(controller, isExiting) {
|
|
if (isExiting) {
|
|
controller.set('error', null);
|
|
}
|
|
}
|
|
|
|
async beforeModel(transition) {
|
|
let promises;
|
|
|
|
// service:router#transitionTo can cause this to rerun because of refreshModel on
|
|
// the region query parameter, this skips rerunning the detection/loading queries.
|
|
if (transition.queryParamsOnly) {
|
|
promises = Promise.resolve(true);
|
|
} else {
|
|
let exchangeOneTimeToken;
|
|
|
|
if (transition.to.queryParams.ott) {
|
|
exchangeOneTimeToken = this.get('token').exchangeOneTimeToken(
|
|
transition.to.queryParams.ott
|
|
);
|
|
} else {
|
|
exchangeOneTimeToken = Promise.resolve(true);
|
|
}
|
|
|
|
try {
|
|
await exchangeOneTimeToken;
|
|
} catch (e) {
|
|
this.controllerFor('application').set('error', e);
|
|
}
|
|
|
|
const fetchSelfTokenAndPolicies = await this.get(
|
|
'token.fetchSelfTokenAndPolicies'
|
|
)
|
|
.perform()
|
|
.catch();
|
|
|
|
const fetchLicense = this.get('system.fetchLicense').perform().catch();
|
|
|
|
const checkFuzzySearchPresence = this.get(
|
|
'system.checkFuzzySearchPresence'
|
|
)
|
|
.perform()
|
|
.catch();
|
|
|
|
promises = await RSVP.all([
|
|
this.get('system.regions'),
|
|
this.get('system.defaultRegion'),
|
|
fetchLicense,
|
|
fetchSelfTokenAndPolicies,
|
|
checkFuzzySearchPresence,
|
|
]);
|
|
}
|
|
|
|
if (!this.get('system.shouldShowRegions')) return promises;
|
|
|
|
const queryParam = transition.to.queryParams.region;
|
|
const defaultRegion = this.get('system.defaultRegion.region');
|
|
const currentRegion = this.get('system.activeRegion') || defaultRegion;
|
|
|
|
// Only reset the store if the region actually changed
|
|
if (
|
|
(queryParam && queryParam !== currentRegion) ||
|
|
(!queryParam && currentRegion !== defaultRegion)
|
|
) {
|
|
this.store.unloadAll();
|
|
}
|
|
|
|
this.set('system.activeRegion', queryParam || defaultRegion);
|
|
|
|
return promises;
|
|
}
|
|
|
|
// Model is being used as a way to propagate the region and
|
|
// one time token query parameters for use in setupController.
|
|
model(
|
|
{ region },
|
|
{
|
|
to: {
|
|
queryParams: { ott },
|
|
},
|
|
}
|
|
) {
|
|
return {
|
|
region,
|
|
hasOneTimeToken: ott,
|
|
};
|
|
}
|
|
|
|
setupController(controller, { region, hasOneTimeToken }) {
|
|
if (region === this.get('system.defaultRegion.region')) {
|
|
next(() => {
|
|
controller.set('region', null);
|
|
});
|
|
}
|
|
|
|
super.setupController(...arguments);
|
|
|
|
if (hasOneTimeToken) {
|
|
// Hack to force clear the OTT query parameter
|
|
later(() => {
|
|
controller.set('oneTimeToken', '');
|
|
}, 500);
|
|
}
|
|
}
|
|
|
|
@action
|
|
didTransition() {
|
|
if (!this.get('config.isTest')) {
|
|
window.scrollTo(0, 0);
|
|
}
|
|
}
|
|
|
|
@action
|
|
willTransition() {
|
|
this.controllerFor('application').set('error', null);
|
|
}
|
|
|
|
@action
|
|
error(error) {
|
|
if (!(error instanceof AbortError)) {
|
|
if (
|
|
error.errors?.any(
|
|
(e) =>
|
|
e.detail === 'ACL token expired' ||
|
|
e.detail === 'ACL token not found'
|
|
)
|
|
) {
|
|
this.router.transitionTo('settings.tokens');
|
|
} else {
|
|
this.controllerFor('application').set('error', error);
|
|
}
|
|
}
|
|
}
|
|
}
|