-
Notifications
You must be signed in to change notification settings - Fork 4.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
UI: Create starter Auth::Page component (#27478)
* move OktaNumberChallenge and AuthForm to AuthPage component * return from didReceiveAttrs if component is being torn down * update auth form test * change passed task to an auth action * update auth form unit test * fix return * update jsdoc for auth form * add docs * add comments, last little cleanup, pass API error to okta number challenge * separate tests and move Auth::Page specific logic out of auth form integration test * fix test typos * fix page tests
- Loading branch information
1 parent
d4da61f
commit 2482674
Showing
13 changed files
with
709 additions
and
572 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| {{! | ||
| Copyright (c) HashiCorp, Inc. | ||
| SPDX-License-Identifier: BUSL-1.1 | ||
| ~}} | ||
|
|
||
| {{#if this.waitingForOktaNumberChallenge}} | ||
| <OktaNumberChallenge | ||
| @correctAnswer={{this.oktaNumberChallengeAnswer}} | ||
| @hasError={{this.authError}} | ||
| @onReturnToLogin={{this.onCancel}} | ||
| /> | ||
| {{else}} | ||
| <AuthForm | ||
| @wrappedToken={{@wrappedToken}} | ||
| @cluster={{@cluster}} | ||
| @namespace={{@namespace}} | ||
| @selectedAuth={{@selectedAuth}} | ||
| @error={{this.authError}} | ||
| @performAuth={{this.performAuth}} | ||
| @authIsRunning={{this.authenticate.isRunning}} | ||
| @delayIsIdle={{this.delayAuthMessageReminder.isIdle}} | ||
| /> | ||
| {{/if}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,108 @@ | ||
| /** | ||
| * Copyright (c) HashiCorp, Inc. | ||
| * SPDX-License-Identifier: BUSL-1.1 | ||
| */ | ||
|
|
||
| import Component from '@glimmer/component'; | ||
| import Ember from 'ember'; | ||
| import { service } from '@ember/service'; | ||
| import { task, timeout } from 'ember-concurrency'; | ||
| import { waitFor } from '@ember/test-waiters'; | ||
| import { tracked } from '@glimmer/tracking'; | ||
| import { action } from '@ember/object'; | ||
|
|
||
| /** | ||
| * @module AuthPage | ||
| * The Auth::Page wraps OktaNumberChallenge and AuthForm to manage the login flow and is responsible for calling the authenticate method | ||
| * | ||
| * @example | ||
| * <Auth::Page @wrappedToken={{this.wrappedToken}} @cluster={{this.model}} @namespace={{this.namespaceQueryParam}} @selectedAuth={{this.authMethod}} @onSuccess={{action "onAuthResponse"}} /> | ||
| * | ||
| * @param {string} wrappedToken - Query param value of a wrapped token that can be used to login when added directly to the URL via the "wrapped_token" query param | ||
| * @param {object} cluster - The route model which is the ember data cluster model. contains information such as cluster id, name and boolean for if the cluster is in standby | ||
| * @param {string} namespace- Namespace query param, passed to AuthForm and set by typing in namespace input or URL | ||
| * @param {string} selectedAuth - The auth method selected in the dropdown, passed to auth service's authenticate method | ||
| * @param {function} onSuccess - Callback that fires the "onAuthResponse" action in the auth controller and handles transitioning after success | ||
| */ | ||
|
|
||
| export default class AuthPageComponent extends Component { | ||
| @service auth; | ||
|
|
||
| @tracked authError = null; | ||
| @tracked oktaNumberChallengeAnswer = ''; | ||
| @tracked waitingForOktaNumberChallenge = false; | ||
| @action | ||
| performAuth(backendType, data) { | ||
| this.authenticate.unlinked().perform(backendType, data); | ||
| } | ||
| @task | ||
| @waitFor | ||
| *delayAuthMessageReminder() { | ||
| if (Ember.testing) { | ||
| yield timeout(0); | ||
| } else { | ||
| yield timeout(5000); | ||
| } | ||
| } | ||
| @task | ||
| @waitFor | ||
| *authenticate(backendType, data) { | ||
| const { | ||
| selectedAuth, | ||
| cluster: { id: clusterId }, | ||
| } = this.args; | ||
| try { | ||
| if (backendType === 'okta') { | ||
| this.pollForOktaNumberChallenge.perform(data.nonce, data.path); | ||
| } else { | ||
| this.delayAuthMessageReminder.perform(); | ||
| } | ||
| const authResponse = yield this.auth.authenticate({ | ||
| clusterId, | ||
| backend: backendType, | ||
| data, | ||
| selectedAuth, | ||
| }); | ||
|
|
||
| this.args.onSuccess(authResponse, backendType, data); | ||
| } catch (e) { | ||
| if (!this.auth.mfaError) { | ||
| this.authError = `Authentication failed: ${this.auth.handleError(e)}`; | ||
| } | ||
| } | ||
| } | ||
|
|
||
| @task | ||
| @waitFor | ||
| *pollForOktaNumberChallenge(nonce, mount) { | ||
| // yield for 1s to wait to see if there is a login error before polling | ||
| yield timeout(1000); | ||
| if (this.authError) return; | ||
|
|
||
| this.waitingForOktaNumberChallenge = true; | ||
| // keep polling /auth/okta/verify/:nonce API every 1s until response returns with correct_number | ||
| let response = null; | ||
| while (response === null) { | ||
| // disable polling for tests otherwise promises reject and acceptance tests fail | ||
| if (Ember.testing) return; | ||
|
|
||
| yield timeout(1000); | ||
| response = yield this.auth.getOktaNumberChallengeAnswer(nonce, mount); | ||
| } | ||
| // display correct number so user can select on personal MFA device | ||
| this.oktaNumberChallengeAnswer = response; | ||
| } | ||
|
|
||
| @action | ||
| onCancel() { | ||
| // reset variables and stop polling tasks if canceling login | ||
| this.authError = null; | ||
| this.oktaNumberChallengeAnswer = null; | ||
| this.waitingForOktaNumberChallenge = false; | ||
| this.authenticate.cancelAll(); | ||
| this.pollForOktaNumberChallenge.cancelAll(); | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.