feat: generate tokens backed by GitHub releases as 2FA (#10)

GoogleCloudPlatform · Dec 20, 2019 · fee686f · fee686f
1 parent bf7d837
commit fee686f
Show file tree

Hide file tree

Showing 12 changed files with 866 additions and 21 deletions.
diff --git a/.gitignore b/.gitignore
@@ -8,3 +8,5 @@ code-workspace
 html/documentation.html
 .vscode
 config
+.coverage
+
diff --git a/html/manage-tokens.html b/html/manage-tokens.html
@@ -172,9 +172,8 @@ <h4>created tokens:</h4>
                 return;
             }
 
-            let table = tableize(state.tokens,['prefix','package','created','expires','actions'],(row,k,td)=>{
+            let table = tableize(state.tokens,['prefix','package','created','expires', 'releaseAs2FA', 'actions'],(row,k,td)=>{
               switch(k){
-
                 case "expires":
                   if(row.expiration){
                     td.innerText = new Date(row.expiration).toJSON();
@@ -194,6 +193,9 @@ <h4>created tokens:</h4>
                 case "prefix":
                   td.innerText = ""+row[k]+'...'
                   break;
+                case "releaseAs2FA":
+                  td.innerText = row[k] ? 'true' : 'false'
+                  break;
                 case "actions":
                   let link = document.createElement('a')
                   link.setAttribute('class','token-delete')

diff --git a/html/token-settings.html b/html/token-settings.html
@@ -23,6 +23,15 @@ <h3> 24 hour publish token </h3>
                 <button>Create 24 hour token</button>
             </form>
         </div>
+        <div>
+            <h3>GitHub release backed token</h3>
+            <div>a publication will only be permitted if a corresponding release is found on GitHub.</div>
+            <form id="release-token" action="/_/token">
+                <input type="hidden" value="release" name="type"/>
+                <input class="ott" type="hidden" name="ott" value=""/>
+                <button>Create release-backed publication token</button>
+            </form>
+        </div>
         <div>
             <h3>Package specific publish token.</h3>
             <div>package tokens do not timeout, but can only publish a single package. Use these for build automation etc.</div>