enterprise: initial enterprise (#5721)

* initial

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add user type

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add external users

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add ui, add more logic, add public JWT validation key

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* revert to not use install_id as session jwt signing key

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* switch to PKI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add more licensing stuff

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add install ID to form

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix bugs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start adding tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fixes

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use x5c correctly

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* license checks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use production CA

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more UI stuff

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rename to summary

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update locale, improve ui

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add direct button

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update link

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* format and such

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove old attributes from ldap

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove is_enterprise_licensed

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix admin interface styling issue

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* Update authentik/core/models.py

Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>

* fix default case

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>

web/src/elements/cards/AggregateCard.ts

@@ -19,6 +19,9 @@ export class AggregateCard extends AKElement {
     @property()
     headerLink?: string;
 
+    @property()
+    subtext?: string;
+
     @property({ type: Boolean })
     isCenter = true;
 
@@ -79,6 +82,7 @@ export class AggregateCard extends AKElement {
             </div>
             <div class="pf-c-card__body ${this.isCenter ? "center-value" : ""}">
                 ${this.renderInner()}
+                ${this.subtext ? html`<p class="subtext">${this.subtext}</p>` : html``}
             </div>
         </div>`;
     }

web/src/elements/enterprise/EnterpriseStatusBanner.ts

@@ -0,0 +1,52 @@
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
+import { AKElement } from "@goauthentik/elements/Base";
+
+import { msg } from "@lit/localize";
+import { CSSResult, TemplateResult, html } from "lit";
+import { customElement, property, state } from "lit/decorators.js";
+
+import PFBanner from "@patternfly/patternfly/components/Banner/banner.css";
+
+import { EnterpriseApi, LicenseSummary } from "@goauthentik/api";
+
+@customElement("ak-enterprise-status")
+export class EnterpriseStatusBanner extends AKElement {
+    @state()
+    summary?: LicenseSummary;
+
+    @property()
+    interface: "admin" | "user" | "" = "";
+
+    static get styles(): CSSResult[] {
+        return [PFBanner];
+    }
+
+    firstUpdated(): void {
+        new EnterpriseApi(DEFAULT_CONFIG).enterpriseLicenseSummaryRetrieve().then((b) => {
+            this.summary = b;
+        });
+    }
+
+    renderBanner(): TemplateResult {
+        return html`<div class="pf-c-banner ${this.summary?.readOnly ? "pf-m-red" : "pf-m-orange"}">
+            ${msg("Warning: The current user count has exceeded the configured licenses.")}
+            <a href="/if/admin/#/enterprise/licenses"> ${msg("Click here for more info.")} </a>
+        </div>`;
+    }
+
+    render(): TemplateResult {
+        switch (this.interface.toLowerCase()) {
+            case "admin":
+                if (this.summary?.showAdminWarning || this.summary?.readOnly) {
+                    return this.renderBanner();
+                }
+                break;
+            case "user":
+                if (this.summary?.showUserWarning || this.summary?.readOnly) {
+                    return this.renderBanner();
+                }
+                break;
+        }
+        return html``;
+    }
+}

web/src/elements/table/TablePage.ts

@@ -28,6 +28,16 @@ export abstract class TablePage<T> extends Table<T> {
         return html``;
     }
 
+    // Optionally render section above the table
+    renderSectionBefore(): TemplateResult {
+        return html``;
+    }
+
+    // Optionally render section below the table
+    renderSectionAfter(): TemplateResult {
+        return html``;
+    }
+
     renderEmpty(inner?: TemplateResult): TemplateResult {
         return super.renderEmpty(html`
             ${inner
@@ -75,6 +85,7 @@ export abstract class TablePage<T> extends Table<T> {
                 description=${ifDefined(this.pageDescription())}
             >
             </ak-page-header>
+            ${this.renderSectionBefore()}
             <section class="pf-c-page__main-section pf-m-no-padding-mobile">
                 <div class="pf-c-sidebar pf-m-gutter">
                     <div class="pf-c-sidebar__main">
@@ -85,6 +96,7 @@ export abstract class TablePage<T> extends Table<T> {
                         ${this.renderSidebarAfter()}
                     </div>
                 </div>
-            </section>`;
+            </section>
+            ${this.renderSectionAfter()}`;
     }
 }