-
Notifications
You must be signed in to change notification settings - Fork 5.2k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- adding oauth support to MinIO browser (#8400) by @kanagaraj - supports multi-line get/set/del for all config fields - add support for comments, allow toggle - add extensive validation of config before saving - support MinIO browser to support proper claims, using STS tokens - env support for all config parameters, legacy envs are also supported with all documentation now pointing to latest ENVs - preserve accessKey/secretKey from FS mode setups - add history support implements three APIs - ClearHistory - RestoreHistory - ListHistory - add help command support for each config parameters - all the bug fixes after migration to KV, and other bug fixes encountered during testing.
- Loading branch information
1 parent
f01d53b
commit c242957
Showing
185 changed files
with
8,186 additions
and
3,552 deletions.
There are no files selected for viewing
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,170 @@ | ||
| /* | ||
| * MinIO Cloud Storage (C) 2019 MinIO, Inc. | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"); | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * http://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| */ | ||
|
|
||
| import React from "react" | ||
| import { connect } from "react-redux" | ||
| import logo from "../../img/logo.svg" | ||
| import Alert from "../alert/Alert" | ||
| import * as actionsAlert from "../alert/actions" | ||
| import InputGroup from "./InputGroup" | ||
| import web from "../web" | ||
| import { Redirect } from "react-router-dom" | ||
| import qs from "query-string" | ||
| import { getRandomString } from "../utils" | ||
| import storage from "local-storage-fallback" | ||
| import jwtDecode from "jwt-decode" | ||
|
|
||
| export class OpenIDLogin extends React.Component { | ||
| constructor(props) { | ||
| super(props) | ||
| this.state = { | ||
| clientID: "", | ||
| discoveryDoc: {} | ||
| } | ||
| this.clientIDChange = this.clientIDChange.bind(this) | ||
| this.handleSubmit = this.handleSubmit.bind(this) | ||
| } | ||
|
|
||
| clientIDChange(e) { | ||
| this.setState({ | ||
| clientID: e.target.value | ||
| }) | ||
| } | ||
|
|
||
| handleSubmit(event) { | ||
| event.preventDefault() | ||
| const { showAlert } = this.props | ||
| let message = "" | ||
| if (this.state.clientID === "") { | ||
| message = "Client ID cannot be empty" | ||
| } | ||
| if (message) { | ||
| showAlert("danger", message) | ||
| return | ||
| } | ||
|
|
||
| if (this.state.discoveryDoc && this.state.discoveryDoc.authorization_endpoint) { | ||
| const redirectURI = window.location.href.split("#")[0] | ||
| var params = new URLSearchParams() | ||
| params.set("response_type", "id_token") | ||
| params.set("scope", "openid") | ||
| params.set("client_id", this.state.clientID) | ||
| params.set("redirect_uri", redirectURI) | ||
|
|
||
| // Store nonce in localstorage to check again after the redirect | ||
| const nonce = getRandomString(16) | ||
| params.set("nonce", nonce) | ||
| storage.setItem("openIDKey", nonce) | ||
|
|
||
| const authURL = `${ | ||
| this.state.discoveryDoc.authorization_endpoint | ||
| }?${params.toString()}` | ||
| window.location = authURL | ||
| } | ||
| } | ||
|
|
||
| componentWillMount() { | ||
| const { clearAlert } = this.props | ||
| // Clear out any stale message in the alert of previous page | ||
| clearAlert() | ||
| document.body.classList.add("is-guest") | ||
|
|
||
| web.GetDiscoveryDoc().then(({ DiscoveryDoc }) => { | ||
| this.setState({ | ||
| discoveryDoc: DiscoveryDoc | ||
| }) | ||
| }) | ||
| } | ||
|
|
||
| componentDidMount() { | ||
| const values = qs.parse(this.props.location.hash) | ||
| if (values.error) { | ||
| this.props.showAlert("danger", values.error_description) | ||
| return | ||
| } | ||
|
|
||
| if (values.id_token) { | ||
| // Check nonce on the token to prevent replay attacks | ||
| const tokenJSON = jwtDecode(values.id_token) | ||
| if (storage.getItem("openIDKey") !== tokenJSON.nonce) { | ||
| this.props.showAlert("danger", "Invalid auth token") | ||
| return | ||
| } | ||
|
|
||
| web.LoginSTS({ token: values.id_token }).then(() => { | ||
| storage.removeItem("openIDKey") | ||
| this.forceUpdate() | ||
| return | ||
| }) | ||
| } | ||
| } | ||
|
|
||
| componentWillUnmount() { | ||
| document.body.classList.remove("is-guest") | ||
| } | ||
|
|
||
| render() { | ||
| const { clearAlert, alert } = this.props | ||
| if (web.LoggedIn()) { | ||
| return <Redirect to={"/"} /> | ||
| } | ||
| let alertBox = <Alert {...alert} onDismiss={clearAlert} /> | ||
| // Make sure you don't show a fading out alert box on the initial web-page load. | ||
| if (!alert.message) alertBox = "" | ||
| return ( | ||
| <div className="login"> | ||
| {alertBox} | ||
| <div className="l-wrap"> | ||
| <form onSubmit={this.handleSubmit}> | ||
| <InputGroup | ||
| value={this.state.clientID} | ||
| onChange={this.clientIDChange} | ||
| className="ig-dark" | ||
| label="Client ID" | ||
| id="clientID" | ||
| name="clientID" | ||
| type="text" | ||
| spellCheck="false" | ||
| required="required" | ||
| /> | ||
| <button className="lw-btn" type="submit"> | ||
| <i className="fas fa-sign-in-alt" /> | ||
| </button> | ||
| </form> | ||
| </div> | ||
| <div className="l-footer"> | ||
| <a className="lf-logo" href=""> | ||
| <img src={logo} alt="" /> | ||
| </a> | ||
| <div className="lf-server">{window.location.host}</div> | ||
| </div> | ||
| </div> | ||
| ) | ||
| } | ||
| } | ||
|
|
||
| const mapDispatchToProps = dispatch => { | ||
| return { | ||
| showAlert: (type, message) => | ||
| dispatch(actionsAlert.set({ type: type, message: message })), | ||
| clearAlert: () => dispatch(actionsAlert.clear()) | ||
| } | ||
| } | ||
|
|
||
| export default connect( | ||
| state => state, | ||
| mapDispatchToProps | ||
| )(OpenIDLogin) |
Oops, something went wrong.