sources/oauth: allow overriding of all scopes

closes #3747

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer
2022-10-16 21:21:43 +02:00
parent 10cfccd999
commit 96a30af0eb
15 changed files with 23971 additions and 22998 deletions

View File

@ -306,17 +306,14 @@ export class OAuthSourceForm extends ModelForm<OAuthSource, string> {
>
<textarea class="pf-c-form-control"></textarea>
</ak-form-element-horizontal>
<ak-form-element-horizontal
label=${t`Additional Scope`}
name="additionalScopes"
>
<ak-form-element-horizontal label=${t`Scopes`} name="additionalScopes">
<input
type="text"
value="${first(this.instance?.additionalScopes, "")}"
class="pf-c-form-control"
/>
<p class="pf-c-form__helper-text">
${t`Additional scopes to be passed to the OAuth Provider, separated by space.`}
${t`Additional scopes to be passed to the OAuth Provider, separated by space. To replace existing scopes, prefix with *.`}
</p>
</ak-form-element-horizontal>
</div>

File diff suppressed because it is too large Load Diff

View File

@ -262,8 +262,8 @@ msgid "Addition User DN"
msgstr "Addition User DN"
#: src/admin/sources/oauth/OAuthSourceForm.ts
msgid "Additional Scope"
msgstr "Additional Scope"
#~ msgid "Additional Scope"
#~ msgstr "Additional Scope"
#: src/admin/applications/wizard/InitialApplicationWizardPage.ts
msgid "Additional UI settings"
@ -278,8 +278,12 @@ msgid "Additional scope mappings, which are passed to the proxy."
msgstr "Additional scope mappings, which are passed to the proxy."
#: src/admin/sources/oauth/OAuthSourceForm.ts
msgid "Additional scopes to be passed to the OAuth Provider, separated by space."
msgstr "Additional scopes to be passed to the OAuth Provider, separated by space."
#~ msgid "Additional scopes to be passed to the OAuth Provider, separated by space."
#~ msgstr "Additional scopes to be passed to the OAuth Provider, separated by space."
#: src/admin/sources/oauth/OAuthSourceForm.ts
msgid "Additional scopes to be passed to the OAuth Provider, separated by space. To replace existing scopes, prefix with *."
msgstr "Additional scopes to be passed to the OAuth Provider, separated by space. To replace existing scopes, prefix with *."
#: src/admin/blueprints/BlueprintForm.ts
#: src/admin/sources/ldap/LDAPSourceForm.ts
@ -1081,6 +1085,7 @@ msgstr "Client type"
msgid "Close"
msgstr "Close"
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/stages/authenticator_sms/AuthenticatorSMSStage.ts
#: src/flow/stages/authenticator_totp/AuthenticatorTOTPStage.ts
#: src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts
@ -1195,6 +1200,7 @@ msgstr "Confirmed"
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Connect"
msgstr "Connect"
@ -1278,6 +1284,7 @@ msgid "Context"
msgstr "Context"
#: src/admin/stages/authenticator_validate/AuthenticatorValidateStageForm.ts
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/stages/authenticator_sms/AuthenticatorSMSStage.ts
#: src/flow/stages/authenticator_sms/AuthenticatorSMSStage.ts
#: src/flow/stages/authenticator_static/AuthenticatorStaticStage.ts
@ -1757,6 +1764,10 @@ msgstr "Device classes"
msgid "Device classes which can be used to authenticate."
msgstr "Device classes which can be used to authenticate."
#: src/admin/tenants/TenantForm.ts
msgid "Device code flow"
msgstr "Device code flow"
#:
#~ msgid "Device name"
#~ msgstr "Device name"
@ -1826,6 +1837,7 @@ msgstr "Disabled blueprints are never applied."
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Disconnect"
msgstr "Disconnect"
@ -2058,6 +2070,10 @@ msgstr "Enrollment"
msgid "Enrollment flow"
msgstr "Enrollment flow"
#: src/flow/providers/oauth2/DeviceCode.ts
msgid "Enter the code shown on your device."
msgstr "Enter the code shown on your device."
#: src/admin/providers/saml/SAMLProviderViewPage.ts
msgid "EntityID/Issuer"
msgstr "EntityID/Issuer"
@ -2305,6 +2321,7 @@ msgstr "Failed to delete {0}: {1}"
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Failed to disconnected source: {exc}"
msgstr "Failed to disconnected source: {exc}"
@ -2799,6 +2816,10 @@ msgstr "If no explicit redirect URIs are specified, the first successfully used
#~ "If password change date is more than x days in the past, invalidate the user's password\n"
#~ "and show a notice."
#: src/admin/tenants/TenantForm.ts
msgid "If set, the OAuth Device Code profile can be used, and the selected flow will be used to enter the code."
msgstr "If set, the OAuth Device Code profile can be used, and the selected flow will be used to enter the code."
#: src/admin/tenants/TenantForm.ts
msgid "If set, users are able to configure details of their profile."
msgstr "If set, users are able to configure details of their profile."
@ -3152,6 +3173,8 @@ msgstr "Load servers"
#: src/flow/FlowExecutor.ts
#: src/flow/FlowExecutor.ts
#: src/flow/FlowInspector.ts
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/providers/oauth2/DeviceCodeFinish.ts
#: src/flow/stages/FlowErrorStage.ts
#: src/flow/stages/access_denied/AccessDeniedStage.ts
#: src/flow/stages/authenticator_duo/AuthenticatorDuoStage.ts
@ -3228,6 +3251,7 @@ msgstr "Loading"
#: src/admin/stages/authenticator_duo/AuthenticatorDuoStageForm.ts
#: src/admin/stages/authenticator_duo/DuoDeviceImportForm.ts
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
#: src/admin/stages/authenticator_static/AuthenticatorStaticStageForm.ts
#: src/admin/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts
#: src/admin/stages/authenticator_validate/AuthenticatorValidateStageForm.ts
@ -3248,6 +3272,7 @@ msgstr "Loading"
#: src/admin/tenants/TenantForm.ts
#: src/admin/tenants/TenantForm.ts
#: src/admin/tenants/TenantForm.ts
#: src/admin/tenants/TenantForm.ts
#: src/admin/tokens/TokenForm.ts
#: src/admin/users/UserForm.ts
#: src/admin/users/UserResetEmailForm.ts
@ -3367,6 +3392,10 @@ msgstr "Manual configuration"
msgid "Manually configure SAML"
msgstr "Manually configure SAML"
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
msgid "Mapping"
msgstr "Mapping"
#: src/admin/stages/user_write/UserWriteStageForm.ts
msgid "Mark newly created users as inactive."
msgstr "Mark newly created users as inactive."
@ -3471,6 +3500,10 @@ msgstr "Model updated"
msgid "Modern applications, APIs and Single-page applications."
msgstr "Modern applications, APIs and Single-page applications."
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
msgid "Modify the payload sent to the custom provider."
msgstr "Modify the payload sent to the custom provider."
#:
#~ msgid "Monitor"
#~ msgstr "Monitor"
@ -3897,8 +3930,8 @@ msgid "OIDC well-known configuration URL. Can be used to automatically configure
msgstr "OIDC well-known configuration URL. Can be used to automatically configure the URLs above."
#: src/admin/admin-overview/cards/SystemStatusCard.ts
msgid "OK"
msgstr "OK"
#~ msgid "OK"
#~ msgstr "OK"
#: src/admin/events/EventInfo.ts
#: src/admin/events/EventInfo.ts
@ -4211,6 +4244,7 @@ msgstr "Plan history"
msgid "Please enter the code you received via SMS"
msgstr "Please enter the code you received via SMS"
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts
msgid "Please enter your Code"
msgstr "Please enter your Code"
@ -4864,6 +4898,7 @@ msgstr "Scope which the client can specify to access these properties."
#: src/admin/providers/oauth2/OAuth2ProviderForm.ts
#: src/admin/providers/proxy/ProxyProviderForm.ts
#: src/admin/sources/oauth/OAuthSourceForm.ts
#: src/elements/oauth/UserRefreshList.ts
msgid "Scopes"
msgstr "Scopes"
@ -5589,6 +5624,7 @@ msgstr "Successfully deleted {0} {1}"
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Successfully disconnected source"
msgstr "Successfully disconnected source"
@ -5831,7 +5867,7 @@ msgstr "System"
msgid "System Tasks"
msgstr "System Tasks"
#: src/admin/admin-overview/AdminOverviewPage.ts
#: src/admin/admin-overview/cards/SystemStatusCard.ts
msgid "System status"
msgstr "System status"
@ -6701,6 +6737,7 @@ msgstr "User mappings can only be checked if a user is already logged in when tr
#: src/admin/sources/oauth/OAuthSourceForm.ts
#: src/admin/sources/plex/PlexSourceForm.ts
#: src/admin/sources/saml/SAMLSourceForm.ts
msgid "User matching mode"
msgstr "User matching mode"
@ -6882,7 +6919,7 @@ msgstr "Verification Certificate"
msgid "Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity."
msgstr "Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity."
#: src/admin/admin-overview/AdminOverviewPage.ts
#: src/admin/admin-overview/cards/VersionStatusCard.ts
msgid "Version"
msgstr "Version"
@ -7083,7 +7120,7 @@ msgstr "Whoops!"
msgid "Windows"
msgstr "Windows"
#: src/admin/admin-overview/AdminOverviewPage.ts
#: src/admin/admin-overview/cards/WorkerStatusCard.ts
msgid "Workers"
msgstr "Workers"
@ -7127,6 +7164,10 @@ msgstr "Yes"
msgid "Yes ({0})"
msgstr "Yes ({0})"
#: src/flow/providers/oauth2/DeviceCodeFinish.ts
msgid "You can close this tab now."
msgstr "You can close this tab now."
#: src/admin/outposts/OutpostForm.ts
msgid "You can only select providers that match the type of the outpost."
msgstr "You can only select providers that match the type of the outpost."
@ -7139,6 +7180,10 @@ msgstr "You're about to be redirect to the following URL."
msgid "You're currently impersonating {0}. Click to stop."
msgstr "You're currently impersonating {0}. Click to stop."
#: src/flow/providers/oauth2/DeviceCodeFinish.ts
msgid "You've successfully authenticated your device."
msgstr "You've successfully authenticated your device."
#: src/admin/providers/proxy/ProxyProviderForm.ts
msgid "app1 running on app1.example.com"
msgstr "app1 running on app1.example.com"

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

View File

@ -258,8 +258,8 @@ msgid "Addition User DN"
msgstr ""
#: src/admin/sources/oauth/OAuthSourceForm.ts
msgid "Additional Scope"
msgstr ""
#~ msgid "Additional Scope"
#~ msgstr ""
#: src/admin/applications/wizard/InitialApplicationWizardPage.ts
msgid "Additional UI settings"
@ -274,7 +274,11 @@ msgid "Additional scope mappings, which are passed to the proxy."
msgstr ""
#: src/admin/sources/oauth/OAuthSourceForm.ts
msgid "Additional scopes to be passed to the OAuth Provider, separated by space."
#~ msgid "Additional scopes to be passed to the OAuth Provider, separated by space."
#~ msgstr ""
#: src/admin/sources/oauth/OAuthSourceForm.ts
msgid "Additional scopes to be passed to the OAuth Provider, separated by space. To replace existing scopes, prefix with *."
msgstr ""
#: src/admin/blueprints/BlueprintForm.ts
@ -1069,6 +1073,7 @@ msgstr ""
msgid "Close"
msgstr ""
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/stages/authenticator_sms/AuthenticatorSMSStage.ts
#: src/flow/stages/authenticator_totp/AuthenticatorTOTPStage.ts
#: src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts
@ -1183,6 +1188,7 @@ msgstr ""
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Connect"
msgstr ""
@ -1266,6 +1272,7 @@ msgid "Context"
msgstr ""
#: src/admin/stages/authenticator_validate/AuthenticatorValidateStageForm.ts
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/stages/authenticator_sms/AuthenticatorSMSStage.ts
#: src/flow/stages/authenticator_sms/AuthenticatorSMSStage.ts
#: src/flow/stages/authenticator_static/AuthenticatorStaticStage.ts
@ -1743,6 +1750,10 @@ msgstr ""
msgid "Device classes which can be used to authenticate."
msgstr ""
#: src/admin/tenants/TenantForm.ts
msgid "Device code flow"
msgstr ""
#:
#~ msgid "Device name"
#~ msgstr ""
@ -1812,6 +1823,7 @@ msgstr ""
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Disconnect"
msgstr ""
@ -2044,6 +2056,10 @@ msgstr ""
msgid "Enrollment flow"
msgstr ""
#: src/flow/providers/oauth2/DeviceCode.ts
msgid "Enter the code shown on your device."
msgstr ""
#: src/admin/providers/saml/SAMLProviderViewPage.ts
msgid "EntityID/Issuer"
msgstr ""
@ -2291,6 +2307,7 @@ msgstr ""
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Failed to disconnected source: {exc}"
msgstr ""
@ -2783,6 +2800,10 @@ msgstr ""
#~ "and show a notice."
#~ msgstr ""
#: src/admin/tenants/TenantForm.ts
msgid "If set, the OAuth Device Code profile can be used, and the selected flow will be used to enter the code."
msgstr ""
#: src/admin/tenants/TenantForm.ts
msgid "If set, users are able to configure details of their profile."
msgstr ""
@ -3134,6 +3155,8 @@ msgstr ""
#: src/flow/FlowExecutor.ts
#: src/flow/FlowExecutor.ts
#: src/flow/FlowInspector.ts
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/providers/oauth2/DeviceCodeFinish.ts
#: src/flow/stages/FlowErrorStage.ts
#: src/flow/stages/access_denied/AccessDeniedStage.ts
#: src/flow/stages/authenticator_duo/AuthenticatorDuoStage.ts
@ -3210,6 +3233,7 @@ msgstr ""
#: src/admin/stages/authenticator_duo/AuthenticatorDuoStageForm.ts
#: src/admin/stages/authenticator_duo/DuoDeviceImportForm.ts
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
#: src/admin/stages/authenticator_static/AuthenticatorStaticStageForm.ts
#: src/admin/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts
#: src/admin/stages/authenticator_validate/AuthenticatorValidateStageForm.ts
@ -3230,6 +3254,7 @@ msgstr ""
#: src/admin/tenants/TenantForm.ts
#: src/admin/tenants/TenantForm.ts
#: src/admin/tenants/TenantForm.ts
#: src/admin/tenants/TenantForm.ts
#: src/admin/tokens/TokenForm.ts
#: src/admin/users/UserForm.ts
#: src/admin/users/UserResetEmailForm.ts
@ -3349,6 +3374,10 @@ msgstr ""
msgid "Manually configure SAML"
msgstr ""
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
msgid "Mapping"
msgstr ""
#: src/admin/stages/user_write/UserWriteStageForm.ts
msgid "Mark newly created users as inactive."
msgstr ""
@ -3453,6 +3482,10 @@ msgstr ""
msgid "Modern applications, APIs and Single-page applications."
msgstr ""
#: src/admin/stages/authenticator_sms/AuthenticatorSMSStageForm.ts
msgid "Modify the payload sent to the custom provider."
msgstr ""
#:
#~ msgid "Monitor"
#~ msgstr ""
@ -3879,8 +3912,8 @@ msgid "OIDC well-known configuration URL. Can be used to automatically configure
msgstr ""
#: src/admin/admin-overview/cards/SystemStatusCard.ts
msgid "OK"
msgstr ""
#~ msgid "OK"
#~ msgstr ""
#: src/admin/events/EventInfo.ts
#: src/admin/events/EventInfo.ts
@ -4193,6 +4226,7 @@ msgstr ""
msgid "Please enter the code you received via SMS"
msgstr ""
#: src/flow/providers/oauth2/DeviceCode.ts
#: src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts
msgid "Please enter your Code"
msgstr ""
@ -4844,6 +4878,7 @@ msgstr ""
#: src/admin/providers/oauth2/OAuth2ProviderForm.ts
#: src/admin/providers/proxy/ProxyProviderForm.ts
#: src/admin/sources/oauth/OAuthSourceForm.ts
#: src/elements/oauth/UserRefreshList.ts
msgid "Scopes"
msgstr ""
@ -5569,6 +5604,7 @@ msgstr ""
#: src/user/user-settings/sources/SourceSettingsOAuth.ts
#: src/user/user-settings/sources/SourceSettingsPlex.ts
#: src/user/user-settings/sources/SourceSettingsSAML.ts
msgid "Successfully disconnected source"
msgstr ""
@ -5811,7 +5847,7 @@ msgstr ""
msgid "System Tasks"
msgstr ""
#: src/admin/admin-overview/AdminOverviewPage.ts
#: src/admin/admin-overview/cards/SystemStatusCard.ts
msgid "System status"
msgstr ""
@ -6671,6 +6707,7 @@ msgstr ""
#: src/admin/sources/oauth/OAuthSourceForm.ts
#: src/admin/sources/plex/PlexSourceForm.ts
#: src/admin/sources/saml/SAMLSourceForm.ts
msgid "User matching mode"
msgstr ""
@ -6852,7 +6889,7 @@ msgstr ""
msgid "Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity."
msgstr ""
#: src/admin/admin-overview/AdminOverviewPage.ts
#: src/admin/admin-overview/cards/VersionStatusCard.ts
msgid "Version"
msgstr ""
@ -7049,7 +7086,7 @@ msgstr ""
msgid "Windows"
msgstr ""
#: src/admin/admin-overview/AdminOverviewPage.ts
#: src/admin/admin-overview/cards/WorkerStatusCard.ts
msgid "Workers"
msgstr ""
@ -7091,6 +7128,10 @@ msgstr ""
msgid "Yes ({0})"
msgstr ""
#: src/flow/providers/oauth2/DeviceCodeFinish.ts
msgid "You can close this tab now."
msgstr ""
#: src/admin/outposts/OutpostForm.ts
msgid "You can only select providers that match the type of the outpost."
msgstr ""
@ -7103,6 +7144,10 @@ msgstr ""
msgid "You're currently impersonating {0}. Click to stop."
msgstr ""
#: src/flow/providers/oauth2/DeviceCodeFinish.ts
msgid "You've successfully authenticated your device."
msgstr ""
#: src/admin/providers/proxy/ProxyProviderForm.ts
msgid "app1 running on app1.example.com"
msgstr ""

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff