web/admin: allow admins to create tokens

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-25 21:22:24 +02:00
parent 0ccec96490
commit 78578c6c9d
8 changed files with 236 additions and 16 deletions
--- a/web/src/pages/tokens/TokenForm.ts
+++ b/web/src/pages/tokens/TokenForm.ts
@ -0,0 +1,120 @@
+import { CoreApi, IntentEnum, Token } from "@goauthentik/api";
+import { t } from "@lingui/macro";
+import { customElement } from "lit-element";
+import { html, TemplateResult } from "lit-html";
+import { DEFAULT_CONFIG } from "../../api/Config";
+import "../../elements/forms/HorizontalFormElement";
+import "../../elements/forms/FormGroup";
+import { first } from "../../utils";
+import { ModelForm } from "../../elements/forms/ModelForm";
+import { until } from "lit-html/directives/until";
+
+@customElement("ak-token-form")
+export class TokenForm extends ModelForm<Token, string> {
+    loadInstance(pk: string): Promise<Token> {
+        return new CoreApi(DEFAULT_CONFIG).coreTokensRetrieve({
+            identifier: pk,
+        });
+    }
+
+    getSuccessMessage(): string {
+        if (this.instance) {
+            return t`Successfully updated token.`;
+        } else {
+            return t`Successfully created token.`;
+        }
+    }
+
+    send = (data: Token): Promise<Token> => {
+        if (this.instance?.identifier) {
+            return new CoreApi(DEFAULT_CONFIG).coreTokensUpdate({
+                identifier: this.instance.identifier,
+                tokenRequest: data,
+            });
+        } else {
+            return new CoreApi(DEFAULT_CONFIG).coreTokensCreate({
+                tokenRequest: data,
+            });
+        }
+    };
+
+    renderForm(): TemplateResult {
+        return html`<form class="pf-c-form pf-m-horizontal">
+            <ak-form-element-horizontal label=${t`Identifier`} name="identifier" ?required=${true}>
+                <input
+                    type="text"
+                    value="${first(this.instance?.identifier, "")}"
+                    class="pf-c-form-control"
+                    required
+                />
+                <p class="pf-c-form__helper-text">
+                    ${t`Unique identifier the token is referenced by.`}
+                </p>
+            </ak-form-element-horizontal>
+            <ak-form-element-horizontal label=${t`User`} ?required=${true} name="user">
+                <select class="pf-c-form-control">
+                    ${until(
+                        new CoreApi(DEFAULT_CONFIG)
+                            .coreUsersList({
+                                ordering: "username",
+                            })
+                            .then((users) => {
+                                return users.results.map((user) => {
+                                    return html`<option
+                                        value=${user.pk}
+                                        ?selected=${this.instance?.user === user}
+                                    >
+                                        ${user.username}
+                                    </option>`;
+                                });
+                            }),
+                        html`<option>${t`Loading...`}</option>`,
+                    )}
+                </select>
+            </ak-form-element-horizontal>
+            <ak-form-element-horizontal label=${t`Intent`} ?required=${true} name="intent">
+                <select class="pf-c-form-control">
+                    <option
+                        value=${IntentEnum.Api}
+                        ?selected=${this.instance?.intent === IntentEnum.Api}
+                    >
+                        ${t`API Token (can be used to access the API programmatically)`}
+                    </option>
+                    <option
+                        value=${IntentEnum.AppPassword}
+                        ?selected=${this.instance?.intent === IntentEnum.AppPassword}
+                    >
+                        ${t`App password (can be used to login using a flow executor)`}
+                    </option>
+                </select>
+            </ak-form-element-horizontal>
+            <ak-form-element-horizontal label=${t`Description`} name="description">
+                <input
+                    type="text"
+                    value="${first(this.instance?.description, "")}"
+                    class="pf-c-form-control"
+                />
+            </ak-form-element-horizontal>
+            <ak-form-element-horizontal name="expiring">
+                <div class="pf-c-check">
+                    <input
+                        type="checkbox"
+                        class="pf-c-check__input"
+                        ?checked=${first(this.instance?.expiring, true)}
+                    />
+                    <label class="pf-c-check__label"> ${t`Expiring?`} </label>
+                </div>
+                <p class="pf-c-form__helper-text">
+                    ${t`If this is selected, the token will expire. Upon expiration, the token will be rotated.`}
+                </p>
+            </ak-form-element-horizontal>
+            <ak-form-element-horizontal label=${t`Expires on`} name="expires">
+                <input
+                    type="datetime-local"
+                    .valueAsNumber="${first(this.instance?.expires, new Date()).getTime()}"
+                    class="pf-c-form-control"
+                />
+            </ak-form-element-horizontal>
+        </form>`;
+    }
+}