
* rename consent permission Signed-off-by: Jens Langhammer <jens@goauthentik.io> * the user version Signed-off-by: Jens Langhammer <jens@goauthentik.io> t Signed-off-by: Jens Langhammer <jens@goauthentik.io> * initial role Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start form Signed-off-by: Jens Langhammer <jens@goauthentik.io> * some minor table refactoring Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix user, add assign Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add roles ui Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix backend Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add assign API for roles Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start adding toggle buttons Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start view page Signed-off-by: Jens Langhammer <jens@goauthentik.io> * exclude add_ permission for per-object perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * small cleanup Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add permission list for roles Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make sidebar update Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix page header not re-rendering? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fixup Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add search Signed-off-by: Jens Langhammer <jens@goauthentik.io> * show first category in table groupBy except when its empty Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make model and object PK optional but required together Signed-off-by: Jens Langhammer <jens@goauthentik.io> * allow for setting global perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * exclude non-authentik permissions Signed-off-by: Jens Langhammer <jens@goauthentik.io> * exclude models which aren't allowed (base models etc) Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ensure all models have verbose_name set, exclude some more internal objects Signed-off-by: Jens Langhammer <jens@goauthentik.io> * lint fix Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix role perm assign Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add unasign for global perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add meta changes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * clear modal state after submit Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add roles to our group Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix duplicate url names Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make recursive group query more usable Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add name field to role itself and move group creation to signal Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start sync Signed-off-by: Jens Langhammer <jens@goauthentik.io> * move rbac stuff to separate django app Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix lint and such Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix go Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start API changes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add more API tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make admin interface not require superuser for now, improve error handling Signed-off-by: Jens Langhammer <jens@goauthentik.io> * replace some IsAdminUser where applicable Signed-off-by: Jens Langhammer <jens@goauthentik.io> * migrate flow inspector perms to actual permission Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix license not being a serializermodel Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add permission modal to models without view page Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add additional permissions to assign/unassign permissions Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add action to unassign user permissions Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add permissions tab to remaining view pages Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix flow inspector permission check Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix codecov config? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add more API tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ensure viewsets have an order set Signed-off-by: Jens Langhammer <jens@goauthentik.io> * hopefully the last api name change Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make perm modal less confusing Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start user view permission page Signed-off-by: Jens Langhammer <jens@goauthentik.io> * only make delete bulk form expandable if usedBy is set Signed-off-by: Jens Langhammer <jens@goauthentik.io> * expand permission tables Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add more things Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add user global permission table Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix lint Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests' url names Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add tests for assign perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add unassign tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * rebuild permissions Signed-off-by: Jens Langhammer <jens@goauthentik.io> * prevent assigning/unassigning permissions to internal service accounts Signed-off-by: Jens Langhammer <jens@goauthentik.io> * only enable default api browser in debug Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix role object permissions showing duplicate Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix role link on role object permissions table Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix object permission modal having duplicate close buttons Signed-off-by: Jens Langhammer <jens@goauthentik.io> * return error if user has no global perm and no object perms also improve error display on table Signed-off-by: Jens Langhammer <jens@goauthentik.io> * small optimisation Signed-off-by: Jens Langhammer <jens@goauthentik.io> * optimise even more Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update locale Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add system permission for non-object permissions Signed-off-by: Jens Langhammer <jens@goauthentik.io> * allow access to admin interface based on perm Signed-off-by: Jens Langhammer <jens@goauthentik.io> * clean Signed-off-by: Jens Langhammer <jens@goauthentik.io> * don't exclude base models Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>
285 lines
16 KiB
TypeScript
285 lines
16 KiB
TypeScript
import "@goauthentik/admin/flows/BoundStagesList";
|
|
import "@goauthentik/admin/flows/FlowDiagram";
|
|
import "@goauthentik/admin/flows/FlowForm";
|
|
import "@goauthentik/admin/policies/BoundPoliciesList";
|
|
import { DesignationToLabel } from "@goauthentik/app/admin/flows/utils";
|
|
import "@goauthentik/app/elements/rbac/ObjectPermissionsPage";
|
|
import { AndNext, DEFAULT_CONFIG } from "@goauthentik/common/api/config";
|
|
import "@goauthentik/components/events/ObjectChangelog";
|
|
import { AKElement } from "@goauthentik/elements/Base";
|
|
import "@goauthentik/elements/PageHeader";
|
|
import "@goauthentik/elements/Tabs";
|
|
import "@goauthentik/elements/buttons/SpinnerButton";
|
|
|
|
import { msg } from "@lit/localize";
|
|
import { CSSResult, TemplateResult, css, html } from "lit";
|
|
import { customElement, property } from "lit/decorators.js";
|
|
|
|
import PFButton from "@patternfly/patternfly/components/Button/button.css";
|
|
import PFCard from "@patternfly/patternfly/components/Card/card.css";
|
|
import PFContent from "@patternfly/patternfly/components/Content/content.css";
|
|
import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
|
|
import PFPage from "@patternfly/patternfly/components/Page/page.css";
|
|
import PFGrid from "@patternfly/patternfly/layouts/Grid/grid.css";
|
|
import PFBase from "@patternfly/patternfly/patternfly-base.css";
|
|
|
|
import {
|
|
Flow,
|
|
FlowsApi,
|
|
RbacPermissionsAssignedByUsersListModelEnum,
|
|
ResponseError,
|
|
} from "@goauthentik/api";
|
|
|
|
@customElement("ak-flow-view")
|
|
export class FlowViewPage extends AKElement {
|
|
@property()
|
|
set flowSlug(value: string) {
|
|
new FlowsApi(DEFAULT_CONFIG)
|
|
.flowsInstancesRetrieve({
|
|
slug: value,
|
|
})
|
|
.then((flow) => {
|
|
this.flow = flow;
|
|
});
|
|
}
|
|
|
|
@property({ attribute: false })
|
|
flow!: Flow;
|
|
|
|
static get styles(): CSSResult[] {
|
|
return [PFBase, PFPage, PFDescriptionList, PFButton, PFCard, PFContent, PFGrid].concat(css`
|
|
img.pf-icon {
|
|
max-height: 24px;
|
|
}
|
|
ak-tabs {
|
|
height: 100%;
|
|
}
|
|
`);
|
|
}
|
|
|
|
render(): TemplateResult {
|
|
if (!this.flow) {
|
|
return html``;
|
|
}
|
|
return html`<ak-page-header
|
|
icon="pf-icon pf-icon-process-automation"
|
|
header=${this.flow.name}
|
|
description=${this.flow.title}
|
|
>
|
|
</ak-page-header>
|
|
<ak-tabs>
|
|
<div
|
|
slot="page-overview"
|
|
data-tab-title="${msg("Flow Overview")}"
|
|
class="pf-c-page__main-section pf-m-no-padding-mobile"
|
|
>
|
|
<div class="pf-l-grid pf-m-gutter">
|
|
<div
|
|
class="pf-c-card pf-l-grid__item pf-m-12-col pf-m-2-col-on-xl pf-m-2-col-on-2xl"
|
|
>
|
|
<div class="pf-c-card__title">${msg("Flow Info")}</div>
|
|
<div class="pf-c-card__body">
|
|
<dl class="pf-c-description-list">
|
|
<div class="pf-c-description-list__group">
|
|
<dt class="pf-c-description-list__term">
|
|
<span class="pf-c-description-list__text"
|
|
>${msg("Name")}</span
|
|
>
|
|
</dt>
|
|
<dd class="pf-c-description-list__description">
|
|
<div class="pf-c-description-list__text">
|
|
${this.flow.name}
|
|
</div>
|
|
</dd>
|
|
<dt class="pf-c-description-list__term">
|
|
<span class="pf-c-description-list__text"
|
|
>${msg("Slug")}</span
|
|
>
|
|
</dt>
|
|
<dd class="pf-c-description-list__description">
|
|
<div class="pf-c-description-list__text">
|
|
<code>${this.flow.slug}</code>
|
|
</div>
|
|
</dd>
|
|
<dt class="pf-c-description-list__term">
|
|
<span class="pf-c-description-list__text"
|
|
>${msg("Designation")}</span
|
|
>
|
|
</dt>
|
|
<dd class="pf-c-description-list__description">
|
|
<div class="pf-c-description-list__text">
|
|
${DesignationToLabel(this.flow.designation)}
|
|
</div>
|
|
</dd>
|
|
<dt class="pf-c-description-list__term">
|
|
<span class="pf-c-description-list__text"
|
|
>${msg("Related actions")}</span
|
|
>
|
|
</dt>
|
|
<dd class="pf-c-description-list__description">
|
|
<div class="pf-c-description-list__text">
|
|
<ak-forms-modal>
|
|
<span slot="submit"> ${msg("Update")} </span>
|
|
<span slot="header">
|
|
${msg("Update Flow")}
|
|
</span>
|
|
<ak-flow-form
|
|
slot="form"
|
|
.instancePk=${this.flow.slug}
|
|
>
|
|
</ak-flow-form>
|
|
<button
|
|
slot="trigger"
|
|
class="pf-c-button pf-m-block pf-m-secondary"
|
|
>
|
|
${msg("Edit")}
|
|
</button>
|
|
</ak-forms-modal>
|
|
</div>
|
|
</dd>
|
|
<dt class="pf-c-description-list__term">
|
|
<span class="pf-c-description-list__text"
|
|
>${msg("Execute flow")}</span
|
|
>
|
|
</dt>
|
|
<dd class="pf-c-description-list__description">
|
|
<div class="pf-c-description-list__text">
|
|
<button
|
|
class="pf-c-button pf-m-block pf-m-primary"
|
|
@click=${() => {
|
|
const finalURL = `${
|
|
window.location.origin
|
|
}/if/flow/${this.flow.slug}/${AndNext(
|
|
`${window.location.pathname}#${window.location.hash}`,
|
|
)}`;
|
|
window.open(finalURL, "_blank");
|
|
}}
|
|
>
|
|
${msg("Normal")}
|
|
</button>
|
|
<button
|
|
class="pf-c-button pf-m-block pf-m-secondary"
|
|
@click=${() => {
|
|
new FlowsApi(DEFAULT_CONFIG)
|
|
.flowsInstancesExecuteRetrieve({
|
|
slug: this.flow.slug,
|
|
})
|
|
.then((link) => {
|
|
const finalURL = `${
|
|
link.link
|
|
}${AndNext(
|
|
`${window.location.pathname}#${window.location.hash}`,
|
|
)}`;
|
|
window.open(finalURL, "_blank");
|
|
});
|
|
}}
|
|
>
|
|
${msg("with current user")}
|
|
</button>
|
|
<button
|
|
class="pf-c-button pf-m-block pf-m-secondary"
|
|
@click=${() => {
|
|
new FlowsApi(DEFAULT_CONFIG)
|
|
.flowsInstancesExecuteRetrieve({
|
|
slug: this.flow.slug,
|
|
})
|
|
.then((link) => {
|
|
const finalURL = `${
|
|
link.link
|
|
}?${encodeURI(
|
|
`inspector&next=/#${window.location.hash}`,
|
|
)}`;
|
|
window.open(finalURL, "_blank");
|
|
})
|
|
.catch((exc: ResponseError) => {
|
|
// This request can return a HTTP 400 when a flow
|
|
// is not applicable.
|
|
window.open(
|
|
exc.response.url,
|
|
"_blank",
|
|
);
|
|
});
|
|
}}
|
|
>
|
|
${msg("with inspector")}
|
|
</button>
|
|
</div>
|
|
</dd>
|
|
<dt class="pf-c-description-list__term">
|
|
<span class="pf-c-description-list__text"
|
|
>${msg("Export flow")}</span
|
|
>
|
|
</dt>
|
|
<dd class="pf-c-description-list__description">
|
|
<div class="pf-c-description-list__text">
|
|
<a
|
|
class="pf-c-button pf-m-block pf-m-secondary"
|
|
href=${this.flow.exportUrl}
|
|
>
|
|
${msg("Export")}
|
|
</a>
|
|
</div>
|
|
</dd>
|
|
</div>
|
|
</dl>
|
|
</div>
|
|
</div>
|
|
<div
|
|
class="pf-c-card pf-l-grid__item pf-m-12-col pf-m-10-col-on-xl pf-m-10-col-on-2xl"
|
|
>
|
|
<div class="pf-c-card__title">${msg("Diagram")}</div>
|
|
<div class="pf-c-card__body">
|
|
<ak-flow-diagram flowSlug=${this.flow.slug}> </ak-flow-diagram>
|
|
</div>
|
|
</div>
|
|
<div
|
|
class="pf-c-card pf-l-grid__item pf-m-12-col pf-m-12-col-on-xl pf-m-12-col-on-2xl"
|
|
>
|
|
<div class="pf-c-card__title">${msg("Changelog")}</div>
|
|
<div class="pf-c-card__body">
|
|
<ak-object-changelog
|
|
targetModelPk=${this.flow.pk || ""}
|
|
targetModelApp="authentik_flows"
|
|
targetModelName="flow"
|
|
>
|
|
</ak-object-changelog>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div
|
|
slot="page-stage-bindings"
|
|
data-tab-title="${msg("Stage Bindings")}"
|
|
class="pf-c-page__main-section pf-m-no-padding-mobile"
|
|
>
|
|
<div class="pf-c-card">
|
|
<div class="pf-c-card__body">
|
|
<ak-bound-stages-list .target=${this.flow.pk}> </ak-bound-stages-list>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div
|
|
slot="page-policy-bindings"
|
|
data-tab-title="${msg("Policy / Group / User Bindings")}"
|
|
class="pf-c-page__main-section pf-m-no-padding-mobile"
|
|
>
|
|
<div class="pf-c-card">
|
|
<div class="pf-c-card__title">
|
|
${msg("These bindings control which users can access this flow.")}
|
|
</div>
|
|
<div class="pf-c-card__body">
|
|
<ak-bound-policies-list .target=${this.flow.policybindingmodelPtrId}>
|
|
</ak-bound-policies-list>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<ak-rbac-object-permission-page
|
|
slot="page-permissions"
|
|
data-tab-title="${msg("Permissions")}"
|
|
model=${RbacPermissionsAssignedByUsersListModelEnum.FlowsFlow}
|
|
objectPk=${this.flow.pk}
|
|
></ak-rbac-object-permission-page>
|
|
</ak-tabs>`;
|
|
}
|
|
}
|