conjur-asset-ui-beta 1.5.0

data/lib/conjur/webserver/home.rb

@@ -0,0 +1,42 @@
+require 'time'
+require 'rack/utils'
+require 'rack/mime'
+
+require 'conjur/webserver/renderer'
+
+module Conjur
+  module WebServer
+    class Home
+      def initialize(root)
+        @root = root
+      end
+
+      # From Rack::File
+      def call(env)
+        path = File.expand_path(INDEX, @root)
+        renderer = Renderer.new @root
+
+        page = File.read(path)
+        files = [path]
+
+        last_modified = files.map(&File.method(:mtime)).max.httpdate
+
+        return [304, {}, []] if env['HTTP_IF_MODIFIED_SINCE'] == last_modified
+
+        size = Rack::Utils.bytesize(page)
+
+        headers = {
+          "Last-Modified"  => last_modified,
+          "Content-Type"   => "text/html",
+          "Content-Length" => size.to_s
+        }
+
+        [200, headers, env["REQUEST_METHOD"] == "HEAD" ? [] : [page]]
+      end
+
+      private
+
+      INDEX = 'index.html'.freeze
+    end
+  end
+end

data/lib/conjur/webserver/login.rb

@@ -0,0 +1,57 @@
+
+module Conjur
+  module WebServer
+    class Login
+      attr_reader :sessionid
+      
+      def initialize(sessionid)
+        @sessionid = sessionid
+      end
+      
+      def call(env)
+        if sessionid = token_valid?(env)
+          require 'conjur/authn'
+          require 'base64'
+          token = Conjur::Authn.authenticate
+          api = Conjur::API.new_from_token token
+          userid = [ Conjur.configuration.account, "user", api.username ].join(':')
+
+          env["rack.session"][:sessionid] = sessionid
+          response = Rack::Response.new(env)
+          configuration = {
+            account: Conjur.configuration.account,
+            stack: Conjur.configuration.stack,
+            appliance_url: Conjur.configuration.appliance_url,
+            login: Conjur::Authn.get_credentials[0]
+          }
+          response.status = 302
+          response.set_cookie('conjur_configuration', value: JSON.pretty_generate(configuration), path: '/')
+          response.set_cookie('conjur_userid', value: userid, path: '/')
+          response['Location'] = "/ui"
+          response.finish
+        else
+          [ 403, {}, ["Authorization is missing or invalid"] ]
+        end
+      end
+      
+      protected
+      
+      def token_valid?(env)
+        token = extract_token(env)
+        if token == sessionid
+          sessionid
+        else
+          nil
+        end
+      end
+      
+      def extract_token(env)
+        require 'cgi'
+        require 'uri'
+        query = URI.parse(env['REQUEST_URI']).query
+        query && ( sessionid = CGI.parse(query)['sessionid'] ) && sessionid[0]
+      end
+    end
+  end
+end
+

data/lib/conjur/webserver/renderer.rb

@@ -0,0 +1,34 @@
+module Conjur
+  module WebServer
+    # a helper class to render HTML partials
+    class Renderer
+      def initialize root
+        @root = root
+        @files = []
+      end
+
+      attr_reader :files
+
+      def render template
+        ERB.new(template).result binding
+      end
+
+      private
+
+      def method_missing name, *a, &b
+        super if !a.empty? || block_given?
+
+        # try to load fragments
+        path = expand_path "_#{name}.html"
+        super unless File.exists? path
+
+        @files << path
+        File.read path
+      end
+
+      def expand_path filename
+        File.expand_path(filename, @root)
+      end
+    end
+  end
+end

data/lib/conjur/webserver/server.rb

@@ -0,0 +1,130 @@
+#
+# Copyright (C) 2013 Conjur Inc
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+
+module Conjur
+  module WebServer
+    # Launch a web server which serves local files and proxies to the remote Conjur API.
+    class Server
+      def start(root)
+        require 'rack'
+        require 'conjur/webserver/login'
+        require 'conjur/webserver/authorize'
+        require 'conjur/webserver/api_proxy'
+        require 'conjur/webserver/home'
+        require 'conjur/webserver/conjur_info'
+
+        # Pry is optional
+        begin
+          require 'pry'
+        rescue LoadError
+        end
+
+        sessionid = self.sessionid
+        cookie_options = {
+          secret: SecureRandom.hex(32),
+          expire_after: 24*60*60
+        }
+
+        api_stack = [
+          [Rack::Session::Cookie, cookie_options],
+          #[Conjur::WebServer::Authorize, sessionid],
+          [Conjur::WebServer::ConjurInfo]
+        ]
+
+        app = Rack::Builder.app do
+          map "/login" do
+            use Rack::Session::Cookie, cookie_options
+            run Conjur::WebServer::Login.new sessionid
+          end
+          map "/api" do
+            api_stack.each{|args| use *args}
+            run Conjur::WebServer::APIProxy.new
+          end
+          %w(js css fonts images maps).each do |path|
+            map "/#{path}" do
+              run Rack::File.new(File.join(root, path), 'Cache-Control' => 'max-age=0')
+            end
+          end
+          map "/ui" do
+            run Conjur::WebServer::Home.new(root)
+          end
+        end
+        options = {
+          app:  app,
+          Port: port,
+          Threads: '0:64',
+          Verbose: true
+        }
+
+        # this vivifies the env for correct url settings
+        # otherwise puma sets it to development and
+        # confusion ensues
+        # HR: it won't work anymore since API 4.10.2 (because it relies on sticky configuration feature which is removed)
+        #     instead we just explicitly set RACK_ENV to "production" on the command call  -- this is also bad, but... good enough for now, until we'll fix API configuration logic
+        Conjur.configuration.env
+
+        Rack::Server.start(options)
+      end
+
+      def open headless
+        require 'launchy'
+        url = "http://localhost:#{port}/login?sessionid=#{sessionid}"
+        # as launchy sometimes silently fails, we need human-friendly failover
+        if ENV['DONT_OPEN_IN_BROWSER'] or headless
+          puts "Running in headless mode."
+          puts "To reach this UI server via SSH tunnel, run the following command:"
+          puts "ssh -N -L #{port}:localhost:#{port} user@hostname"
+          puts "Then open your browser to the following URL:"
+          puts url
+        else
+          $stderr.puts "If your browser did not opened the UI automatically, point it to #{url}"
+          Launchy.open(url)
+        end
+      end
+
+      def set_port p
+        @port = p
+      end
+
+      protected
+
+      def port
+        @port ||= find_available_port
+      end
+
+      DEFAULT_PORT = 42_289
+
+      def find_available_port
+        begin
+          server = TCPServer.new('127.0.0.1', 0)
+          server.addr[1]
+        ensure
+          server.close if server
+        end
+      end
+
+      def sessionid
+        require 'securerandom'
+        @sessionid ||= SecureRandom.hex(32)
+      end
+    end
+  end
+end

data/public/js/views/roleGraph.js

@@ -0,0 +1,91 @@
+/** @jsx React.DOM */
+/* global conjur, React, d3, _ */
+
+(function(conjur, React, d3, _) {
+    // TODO move these somewhere common
+    function _translate(x,y){
+        return 'transate(' + x + ',' + y + ')';
+    }
+
+    this.RoleGraph = React.createClass({
+        /*
+         * React Lifecycle methods
+         */
+
+        getInitialState: function(){
+            return { ready: false };
+        },
+
+        componentDidMount: function(){
+            this.ctx = {};
+            this.el = this.getDOMNode();
+            this._computeState(this.props);
+        },
+
+        componentWillReceiveProps: function(nextProps){
+            this._computeState(nextProps);
+        },
+
+
+        componentDidUpdate: function(){
+            if(this.state.ready === false){
+                return;
+            }
+
+            if(this.sgv === undefined){
+                this._create();
+            }
+
+            this._update();
+        },
+
+        /*
+         * Internal Methods
+         */
+
+        /**
+         * Create the non-data bound graph components.
+         * @private
+         */
+        _create: function(){
+            var svg = this.ctx.svg = d3.select(this.el)
+                .append('svg')
+                .attr('class', 'd3-digraph') // XXX is this
+                .attr('width', this.state.fullWidth)
+                .attr('height', this.state.fullHeight)
+                .append('g')
+                .attr('class', 'd3-digraph__inner')
+                .attr('transform', _translate(this.state.margin.left, this.state.margin.top));
+        },
+
+        /**
+         * Bind graph components to this.state.data, which should be an object as returned by
+         * this.conjur.role.graph(...).
+         *
+         * @private
+         */
+        _update: function(){
+
+        },
+
+        /**
+         * Given props, we try to decide how to do our geometric shit.
+         * @param props
+         * @private
+         */
+        _computeState: function(props){
+
+        }
+
+
+
+    });
+
+}).bind(conjur.views)
+(
+    conjur,
+    React,
+    d3,
+    _
+);
+

metadata

@@ -0,0 +1,373 @@
+--- !ruby/object:Gem::Specification
+name: conjur-asset-ui-beta
+version: !ruby/object:Gem::Version
+  version: 1.5.0
+platform: ruby
+authors:
+- Jon Mason
+- Kevin Gilpin
+- Rafał Rzepecki
+- Hleb Rubanau
+- Mikalai Sevastsyanau
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-03-30 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: puma
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: conjur-api
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 4.10.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 4.10.2
+- !ruby/object:Gem::Dependency
+  name: launchy
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rack-streaming-proxy
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.0.1
+- !ruby/object:Gem::Dependency
+  name: conjur-cli
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: spork
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: ci_reporter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: 
+email:
+- jon@conjur.net
+- kgilpin@conjur.net
+- rafal@conjur.net
+- hleb@conjur.net
+- mikalai@conjur.net
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .git-hooks/pre_commit/trailing_whitespace.rb
+- .gitignore
+- .project
+- CHANGELOG.md
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- TODO.md
+- app/.csscomb.json
+- app/.jshintrc
+- app/build/css/bootstrap.css
+- app/build/fonts/glyphicons-halflings-regular.eot
+- app/build/fonts/glyphicons-halflings-regular.svg
+- app/build/fonts/glyphicons-halflings-regular.ttf
+- app/build/fonts/glyphicons-halflings-regular.woff
+- app/build/fonts/glyphicons-halflings-regular.woff2
+- app/build/images/conjur-logo.svg
+- app/build/images/icon-client-pc.svg
+- app/build/images/icon-environment.png
+- app/build/images/icon-person.svg
+- app/build/images/icon-policy.png
+- app/build/images/icon-resource.png
+- app/build/images/icon-service-dots.svg
+- app/build/images/icon-variable.png
+- app/build/index.html
+- app/build/js/app.js
+- app/build/js/pace.js
+- app/config/preprocessor.js
+- app/config/webpack.js
+- app/gulpfile.js
+- app/package.json
+- app/src/actions.js
+- app/src/app.js
+- app/src/clients/audit.js
+- app/src/clients/generic.js
+- app/src/clients/layer_members.js
+- app/src/clients/list.js
+- app/src/clients/members.js
+- app/src/clients/search.js
+- app/src/components/app/__tests__/app-test.js
+- app/src/components/app/app.js
+- app/src/components/audit/__tests__/table_header-test.js
+- app/src/components/audit/box.js
+- app/src/components/audit/constants.js
+- app/src/components/audit/entry.js
+- app/src/components/audit/fields_mixin.js
+- app/src/components/audit/humanize_event.js
+- app/src/components/audit/table.js
+- app/src/components/audit/table_header.js
+- app/src/components/audit/timestamp.js
+- app/src/components/chart/chart.js
+- app/src/components/chart/chart_helper_mixin.js
+- app/src/components/custom/list.js
+- app/src/components/custom/view.js
+- app/src/components/dashboard/activity.js
+- app/src/components/dashboard/dashboard.js
+- app/src/components/flash/flash.js
+- app/src/components/generic/__tests__/time-test.js
+- app/src/components/generic/annotations.js
+- app/src/components/generic/breadcrumbs.js
+- app/src/components/generic/foldable_audit_section.js
+- app/src/components/generic/list.js
+- app/src/components/generic/list_factory.js
+- app/src/components/generic/resource_link.js
+- app/src/components/generic/role_link.js
+- app/src/components/generic/tab_mixin.js
+- app/src/components/generic/time.js
+- app/src/components/group/list.js
+- app/src/components/group/view.js
+- app/src/components/host/activity.js
+- app/src/components/host/details.js
+- app/src/components/host/host_link.js
+- app/src/components/host/list.js
+- app/src/components/host/view.js
+- app/src/components/layer/list.js
+- app/src/components/layer/view.js
+- app/src/components/navbar/__tests__/navbar-test.js
+- app/src/components/navbar/nav_search_form.js
+- app/src/components/navbar/navbar.js
+- app/src/components/owned_resources/owned_resources.js
+- app/src/components/owned_resources/owned_resources_box.js
+- app/src/components/permissions/permissions.js
+- app/src/components/permissions/permissions_table.js
+- app/src/components/policy/list.js
+- app/src/components/policy/view.js
+- app/src/components/refresh/refresh.js
+- app/src/components/refresh/refresh.less
+- app/src/components/search/group.js
+- app/src/components/search/group_heading.js
+- app/src/components/search/group_title.js
+- app/src/components/search/result_item.js
+- app/src/components/search/search.js
+- app/src/components/user/activity.js
+- app/src/components/user/details.js
+- app/src/components/user/list.js
+- app/src/components/user/pubkeys.js
+- app/src/components/user/pubkeys.less
+- app/src/components/user/view.js
+- app/src/components/variable/activity.js
+- app/src/components/variable/details.js
+- app/src/components/variable/fetchers.js
+- app/src/components/variable/list.js
+- app/src/components/variable/updaters.js
+- app/src/components/variable/view.js
+- app/src/constants.js
+- app/src/images/conjur-logo.svg
+- app/src/images/icon-client-pc.svg
+- app/src/images/icon-environment.png
+- app/src/images/icon-person.svg
+- app/src/images/icon-policy.png
+- app/src/images/icon-resource.png
+- app/src/images/icon-service-dots.svg
+- app/src/images/icon-variable.png
+- app/src/pages/index.html
+- app/src/routes.js
+- app/src/stores/app_store.js
+- app/src/stores/audit_store.js
+- app/src/stores/group_store.js
+- app/src/stores/host_store.js
+- app/src/stores/layer_store.js
+- app/src/stores/policy_store.js
+- app/src/stores/resources_store.js
+- app/src/stores/route_store.js
+- app/src/stores/search_store.js
+- app/src/stores/user_store.js
+- app/src/stores/variable_store.js
+- app/src/styles/bootstrap.less
+- app/src/styles/styles.less
+- app/src/utils.js
+- app/src/vendor/pace.js
+- conjur-asset-ui.gemspec
+- features/navigation_bar.feature
+- features/step_definitions/custom_step.rb
+- features/support/env.rb
+- features/support/hooks.rb
+- features/support/world.rb
+- lib/conjur-asset-ui-version.rb
+- lib/conjur-asset-ui.rb
+- lib/conjur/command/ui.rb
+- lib/conjur/webserver/api_proxy.rb
+- lib/conjur/webserver/authorize.rb
+- lib/conjur/webserver/conjur_info.rb
+- lib/conjur/webserver/home.rb
+- lib/conjur/webserver/login.rb
+- lib/conjur/webserver/renderer.rb
+- lib/conjur/webserver/server.rb
+- public/js/views/roleGraph.js
+homepage: ''
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.1
+signing_key: 
+specification_version: 4
+summary: Conjur User Interface Plugin
+test_files:
+- features/navigation_bar.feature
+- features/step_definitions/custom_step.rb
+- features/support/env.rb
+- features/support/hooks.rb
+- features/support/world.rb