chef-server-webui 0.8.2

data/app/controllers/databag_items.rb

@@ -0,0 +1,102 @@
+#
+# Author:: Nuo Yan (<nuo@opscode.com>)
+# Copyright:: Copyright (c) 2008 Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'chef' / 'data_bag_item'
+
+class ChefServerWebui::DatabagItems < ChefServerWebui::Application
+  
+  provides :html, :json
+  before :login_required 
+  
+  def edit
+    begin
+      @databag_item = Chef::DataBagItem.load(params[:databag_id], params[:id])
+      @default_data = @databag_item
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @_message = { :error => "Could not load the databag item" }   
+    end 
+    render
+  end 
+  
+  def update
+    begin
+      @databag_item = Chef::DataBagItem.new
+      @databag_item.data_bag params[:databag_id] 
+      @databag_item.raw_data = JSON.parse(params[:json_data])
+      raise ArgumentError, "Updating id is not allowed" unless @databag_item.raw_data['id'] == params[:id] #to be consistent with other objects, changing id is not allowed.
+      @databag_item.save
+      redirect(slice_url(:databag_databag_items, :databag_id => params[:databag_id], :id => @databag_item.name), :message => { :notice => "Updated Databag Item #{@databag_item.name}" })
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @_message = { :error => "Could not update the databag item" }
+      @databag_item = Chef::DataBagItem.load(params[:databag_id], params[:id])
+      @default_data = @databag_item
+      render :edit 
+    end         
+  end 
+  
+  def new
+    @default_data = {'id'=>''}
+    render
+  end 
+  
+  def create
+    begin   
+      @databag_name = params[:databag_id] 
+      @databag_item = Chef::DataBagItem.new
+      @databag_item.data_bag @databag_name
+      @databag_item.raw_data = JSON.parse(params[:json_data])
+      @databag_item.create
+      redirect(slice_url(:databag_databag_items, :databag_id => @databag_name), :message => { :notice => "Databag item created successfully" })
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @_message = { :error => "Could not create databag item" } 
+      render :new
+    end
+  end
+  
+  def index
+    render
+  end
+
+  def show
+    begin
+      @databag_name = params[:databag_id]
+      @databag_item_name = params[:id]
+      r = Chef::REST.new(Chef::Config[:chef_server_url])
+      @databag_item = r.get_rest("data/#{params[:databag_id]}/#{params[:id]}")
+      display @databag_item
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      redirect(slice_url(:databag_databag_items), {:message => { :error => "Could not show the databag item" }, :permanent => true})
+    end 
+  end
+  
+  def destroy(databag_id=params[:databag_id], item_id=params[:id])
+    begin
+      @databag_item = Chef::DataBagItem.new
+      @databag_item.destroy(databag_id, item_id)
+      redirect(slice_url(:databag_databag_items), {:message => { :notice => "Databag item deleted successfully" }, :permanent => true})
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      redirect(slice_url(:databag_databag_items), {:message => { :error => "Could not delete databag item" }, :permanent => true})
+    end 
+  end 
+  
+end

data/app/controllers/databags.rb

@@ -0,0 +1,83 @@
+#
+# Author:: Nuo Yan (<nuo@opscode.com>)
+# Copyright:: Copyright (c) 2008 Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'chef' / 'data_bag'
+
+class ChefServerWebui::Databags < ChefServerWebui::Application
+  
+  provides :html, :json
+  before :login_required 
+  
+  def new
+    @databag = Chef::DataBag.new
+    render
+  end 
+  
+  def create
+    begin
+      @databag = Chef::DataBag.new
+      @databag.name params[:name]
+      @databag.create
+      redirect(slice_url(:databags), :message => { :notice => "Created Databag #{@databag.name}" })
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @_message = { :error => "Could not create databag" } 
+      render :new
+    end 
+  end
+  
+  def index
+    @databags = begin
+                  Chef::REST.new(Chef::Config[:chef_server_url]).get_rest("data")
+                rescue => e
+                  Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+                  @_message = { :error => "Could not list databags" } 
+                  {}
+                end
+    render
+  end
+
+  def show
+    begin
+      @databag_name = params[:id]
+      r = Chef::REST.new(Chef::Config[:chef_server_url])
+      @databag = r.get_rest("data/#{params[:id]}")
+      raise NotFound unless @databag
+      display @databag
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @databags = Chef::DataBag.list
+      @_message =  { :error => "Could not load databag"}    
+      render :index
+    end 
+  end
+  
+  def destroy
+    begin
+      r = Chef::REST.new(Chef::Config[:chef_server_url])
+      r.delete_rest("data/#{params[:id]}")
+      redirect(absolute_slice_url(:databags), {:message => { :notice => "Data bag #{params[:id]} deleted successfully" }, :permanent => true})
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @databags = Chef::DataBag.list
+      @_message =  { :error => "Could not delete databag"}
+      render :index
+    end 
+  end
+  
+end

data/app/controllers/exceptions.rb

@@ -0,0 +1,19 @@
+#
+# Author:: Adam Jacob (<adam@opscode.com>)
+# Author:: Christopher Brown (<cb@opscode.com>)
+# Copyright:: Copyright (c) 2008 Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+

data/app/controllers/main.rb

@@ -0,0 +1,7 @@
+class ChefServerWebui::Main < ChefServerWebui::Application
+  
+  def index
+    render
+  end
+  
+end

data/app/controllers/nodes.rb

@@ -0,0 +1,138 @@
+#
+# Author:: Adam Jacob (<adam@opscode.com>)
+# Author:: Christopher Brown (<cb@opscode.com>)
+# Author:: Nuo Yan (<nuo@opscode.com>)
+# Copyright:: Copyright (c) 2008 Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'chef' / 'node'
+
+class ChefServerWebui::Nodes < ChefServerWebui::Application
+  
+  provides :html
+  
+  before :login_required
+  before :authorized_node, :only => [ :update, :destroy ]
+  
+  def index
+    @node_list =  begin
+                    Chef::Node.list 
+                  rescue => e
+                    Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+                    @_message = {:error => "Could not list nodes"}
+                    {}
+                  end 
+    render
+  end
+
+  def show
+    @node = begin      
+              Chef::Node.load(params[:id])
+            rescue => e
+              Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+              @_message = {:error => "Could not load node #{params[:id]}"}
+              Chef::Node.new
+            end 
+    render
+  end
+
+  def new
+    begin
+      @node = Chef::Node.new
+      @available_recipes = get_available_recipes 
+      @available_roles = Chef::Role.list.keys.sort
+      @run_list = @node.run_list
+      render
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @node_list = Chef::Node.list()
+      @_message = {:error => "Could not load available recipes, roles, or the run list"}
+      render :index
+    end 
+  end
+
+  def edit
+    begin
+      @node = Chef::Node.load(params[:id])
+      @available_recipes = get_available_recipes 
+      @available_roles = Chef::Role.list.keys.sort
+      @run_list = @node.run_list
+      render
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @node = Chef::Node.new
+      @available_recipes = []
+      @available_roles = []
+      @run_list = []
+      @_message = {:error => "Could not load node #{params[:id]}"}
+      render
+    end 
+  end
+
+  def create
+    begin      
+      @node = Chef::Node.new
+      @node.name params[:name]
+      @node.attribute = JSON.parse(params[:attributes])
+      @node.run_list.reset!(params[:for_node] ? params[:for_node] : [])
+      raise ArgumentError, "Node name cannot be blank" if (params[:name].nil? || params[:name].length==0)
+      @node.create
+      redirect(slice_url(:nodes), :message => { :notice => "Created Node #{@node.name}" })
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @node.attribute = JSON.parse(params[:attributes])
+      @available_recipes = get_available_recipes 
+      @available_roles = Chef::Role.list.keys.sort
+      @node.run_list params[:for_node]
+      @run_list = @node.run_list
+      @_message = { :error => "Exception raised creating node, #{e.message.length <= 150 ? e.message : "please check logs for details"}" }
+      render :new
+    end
+  end
+
+  def update
+    begin
+      @node = Chef::Node.load(params[:id])
+      @node.run_list.reset!(params[:for_node] ? params[:for_node] : [])
+      @node.attribute = JSON.parse(params[:attributes])
+      @node.save
+      @_message = { :notice => "Updated Node" }
+      render :show
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @available_recipes = get_available_recipes 
+      @available_roles = Chef::Role.list.keys.sort
+      @run_list = Chef::RunList.new
+      @run_list.reset!(params[:for_node])
+      @_message = { :error => "Exception raised updating node, #{e.message.length <= 150 ? e.message : "please check logs for details"}" }
+      render :edit
+    end
+  end
+
+  def destroy
+    begin
+      @node = Chef::Node.load(params[:id])
+      @node.destroy
+      redirect(absolute_slice_url(:nodes), {:message => { :notice => "Node #{params[:id]} deleted successfully" }, :permanent => true})
+    rescue => e
+      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
+      @node_list = Chef::Node.list()
+      @_message = {:error => "Could not delete the node"}
+      render :index
+    end 
+  end
+  
+end

data/app/controllers/openid_consumer.rb

@@ -0,0 +1,154 @@
+#
+# Author:: Adam Jacob (<adam@opscode.com>)
+# Author:: Christopher Brown (<cb@opscode.com>)
+# Author:: Nuo Yan (<nuo@opscode.com>)
+# Copyright:: Copyright (c) 2008 Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'pathname'
+require 'openid'
+require (Chef::Config[:openid_cstore_couchdb] ?   'openid-store-couchdb' : 'openid/store/filesystem')
+
+class ChefServerWebui::OpenidConsumer < ChefServerWebui::Application
+
+  provides :html
+
+  def index
+    if request.xhr?
+      render :layout => false
+    else
+      render :layout => 'login'
+    end
+  end
+
+  def start
+    oid = params[:openid_identifier]
+    begin
+      oidreq = consumer.begin(oid)
+    rescue OpenID::OpenIDError => e
+      raise BadRequest, "Discovery failed for #{oid}: #{e}"
+    end
+
+    return_to = absolute_slice_url(:openid_consumer_complete)
+    realm = absolute_slice_url(:openid_consumer)
+
+    if oidreq.send_redirect?(realm, return_to, params[:immediate])
+      return redirect(oidreq.redirect_url(realm, return_to, params[:immediate]))
+    else
+      @form_text = oidreq.form_markup(realm, return_to, params[:immediate], {'id' => 'openid_form'})
+      render
+    end
+  end
+
+  def login
+    if session[:user] 
+      redirect(slice_url(:nodes), :message => { :warning => "You've already logged in with user #{session[:user]}"  })
+    else
+      oid = params[:openid_identifier]
+      raise(Unauthorized, "Sorry, #{oid} is not an authorized OpenID.") unless is_authorized_openid_identifier?(oid, Chef::Config[:authorized_openid_identifiers])
+      raise(Unauthorized, "Sorry, #{oid} is not an authorized OpenID Provider.") unless is_authorized_openid_provider?(oid, Chef::Config[:authorized_openid_providers])
+      start
+    end
+  end
+
+  def complete
+    # FIXME - url_for some action is not necessarily the current URL.
+    current_url = absolute_slice_url(:openid_consumer_complete)
+    parameters = params.reject{|k,v| k == "controller" || k == "action"}
+    oidresp = consumer.complete(parameters, current_url)
+    case oidresp.status
+      when OpenID::Consumer::FAILURE
+        raise BadRequest, "Verification failed: #{oidresp.message}" + (oidresp.display_identifier ? " for identifier '#{oidresp.display_identifier}'" : "")
+      when OpenID::Consumer::SUCCESS
+        #session[:openid] = oidresp.identity_url
+        # The "if" condition no longer seems need to/can be reached, so I took it out. [nuo] 
+        #
+        # if oidresp.display_identifier =~ /openid\/server\/node\/(.+)$/
+        #   reg_name = $1
+        #   reg = Chef::OpenIDRegistration.load(reg_name)
+        #   Chef::Log.error("#{reg_name} is an admin #{reg.admin}")
+        #   session[:level] = reg.admin ? :admin : :node
+        #   session[:node_name] = $1
+        #else
+        users = Chef::WebUIUser.list
+        #TODO: This is expensive. Should think of a better way [nuo]
+        # Go through each user object and check if the current OpenID associates with the user
+        users.each do |u, url|
+          user = Chef::WebUIUser.load(u)
+          if user.openid == oidresp.identity_url
+            session[:user] = user.name
+            session[:level] = :admin              
+            break
+          end
+        end        
+        if session[:user].nil?
+          redirect(slice_url(:openid_consumer),  :message => { :error => "No user is associated with this OpenID." })
+          return "No user is associated with this OpenID."
+        end 
+        #end
+        redirect_back_or_default(absolute_slice_url(:nodes))
+        return "Verification of #{oidresp.display_identifier} succeeded."
+      when OpenID::Consumer::SETUP_NEEDED
+        return "Immediate request failed - Setup Needed"
+      when OpenID::Consumer::CANCEL
+        return "OpenID transaction cancelled."
+      else
+    end
+    redirect absolute_slice_url(:openid_consumer)
+  end
+
+  def logout
+    cleanup_session
+    redirect slice_url(:top)
+  end
+
+  private
+  def is_authorized_openid_provider?(openid, authorized_providers)
+    Chef::Log.debug("checking for valid openid provider: openid: #{openid}, authorized providers: #{authorized_providers}")
+    if authorized_providers and openid
+      if authorized_providers.length > 0
+        authorized_providers.detect { |p| Chef::Log.debug("openid: #{openid} (#{openid.class}), p: #{p} (#{p.class})"); openid.match(p) }
+      else
+        true
+      end
+    else
+      true
+    end
+  end
+   
+  def is_authorized_openid_identifier?(openid, authorized_identifiers)
+    Chef::Log.debug("checking for valid openid identifier: openid: #{openid}, authorized openids: #{authorized_identifiers}")
+    if authorized_identifiers and openid
+      if authorized_identifiers.length > 0 
+        authorized_identifiers.detect { |p| Chef::Log.debug("openid: #{openid} (#{openid.class}), p: #{p} (#{p.class})"); openid == p } 
+      else
+        true
+      end
+    else
+      true
+    end
+  end
+
+  def consumer
+    @consumer ||= OpenID::Consumer.new(session,
+                                       if Chef::Config[:openid_cstore_couchdb]
+                                         OpenID::Store::CouchDB.new(Chef::Config[:couchdb_url])
+                                       else
+                                         OpenID::Store::Filesystem.new(Chef::Config[:openid_cstore_path])
+                                       end)
+  end
+
+end