masks-server 0.7.0

data/app/views/masks/server/actor_mailer/recovery_requested.text.erb

@@ -0,0 +1,7 @@
+<%= render layout: "message" do %>
+<%= t(".lede", nickname: @actor.identifier, tenant: @tenant_name) %>
+<% end %>
+<% if @url %>
+
+<%= @url %>
+<% end %>

data/app/views/masks/server/application/_flashes.html.erb

@@ -0,0 +1,8 @@
+<% if flashed?(local_assigns[:organization]) %>
+  <% if flash[:alert].present? %>
+    <div class="note note-bad" role="alert"><%= flash[:alert] %></div>
+  <% end %>
+  <% if flash[:notice].present? %>
+    <div class="note note-plain" role="status"><%= flash[:notice] %></div>
+  <% end %>
+<% end %>

data/app/views/masks/server/application/_person.html.erb

@@ -0,0 +1,27 @@
+<% sign_out = local_assigns.fetch(:sign_out, false) %>
+<% details = actor.display_details %>
+
+<div class="person">
+  <%= avatar_tag actor, size: 44, class: "person-avatar" %>
+
+  <div class="person-who">
+    <span class="person-name"><%= actor.display_name %></span>
+
+    <% if details.any? || actor.email_unconfirmed? %>
+      <span class="person-sub">
+        <%= details.join(" · ") %>
+        <% if actor.email_unconfirmed? %>
+          <span class="person-note"><%= t("application.person.unconfirmed") %></span>
+        <% end %>
+      </span>
+    <% end %>
+
+    <% if actor.manages? %>
+      <span class="person-role"><%= t("application.person.manager") %></span>
+    <% end %>
+  </div>
+
+  <% if sign_out %>
+    <%= button_to t("application.person.sign_out"), logout_path, class: "textlink", form_class: "signout" %>
+  <% end %>
+</div>

data/app/views/masks/server/authorize/error.html.erb

@@ -0,0 +1,12 @@
+<% content_for :title, t(".page_title") %>
+<% content_for :surface, "terminus" %>
+
+<div id="authorize-error" class="flow" data-error="<%= @error_code %>">
+  <span class="state state-bad"><%= t(".stopped") %></span>
+
+  <h1 class="prompt-title"><%= t(".heading") %></h1>
+
+  <p class="said"><%= @error_code %> — <%= @error_description %></p>
+
+  <p class="prompt-lede"><%= t(".contact") %></p>
+</div>

data/app/views/masks/server/device_verifications/approved.html.erb

@@ -0,0 +1,8 @@
+<% content_for :title, t(".page_title") %>
+<% content_for :surface, "terminus" %>
+
+<span class="state"><%= t(".signed_in") %></span>
+
+<h1 class="prompt-title"><%= t(".title", name: @client.name) %></h1>
+
+<p class="prompt-lede"><%= t(".lede", name: @client.name) %></p>

data/app/views/masks/server/device_verifications/show.html.erb

@@ -0,0 +1,23 @@
+<% content_for :title, t(".page_title") %>
+
+<div class="prompt-head">
+  <h1 class="prompt-title"><%= t(".title") %></h1>
+  <p class="prompt-lede"><%= t(".lede") %></p>
+</div>
+
+<% if @refused == Masks::Server::DeviceVerificationsController::DECLINED %>
+  <div class="note note-warn" role="alert"><%= t(".declined") %></div>
+<% elsif @refused.present? %>
+  <div class="note note-bad" role="alert"><%= t(".unknown") %></div>
+<% end %>
+
+<%= form_with url: device_verification_path, method: :post, id: "device", class: "flow" do |form| %>
+  <label class="field">
+    <span class="field-label"><%= t(".code") %></span>
+    <%= form.text_field :user_code, value: params[:user_code],
+          autocomplete: "one-time-code", autocapitalize: "characters", autocorrect: "off",
+          spellcheck: "false", autofocus: true, class: "control" %>
+  </label>
+
+  <button type="submit" class="action"><%= t("logins.shared.continue") %></button>
+<% end %>

data/app/views/masks/server/handshakes/refused.html.erb

@@ -0,0 +1,20 @@
+<% content_for :title, t(".page_title") %>
+<% content_for :surface, "terminus" %>
+
+<span class="state state-bad"><%= t(".stopped") %></span>
+
+<h1 class="prompt-title"><%= t(".title") %></h1>
+
+<% if current_actor %>
+  <%= render "masks/server/application/person", actor: current_actor, sign_out: true %>
+<% end %>
+
+<p class="said"><%= @description %></p>
+
+<% if @manage %>
+  <p class="prompt-lede"><%= t(".settle") %></p>
+
+  <a class="action" href="<%= @manage %>"><%= t(".open_manage") %></a>
+<% else %>
+  <p class="prompt-lede"><%= t(".contact") %></p>
+<% end %>

data/app/views/masks/server/handshakes/show.html.erb

@@ -0,0 +1,141 @@
+<% content_for :title, t(@existing ? ".page_title_again" : ".page_title") %>
+<% content_for :surface, "grant" %>
+
+<% content_for :scripts do %>
+  <%= vite_javascript_tag "handshake" %>
+<% end %>
+
+<% hot, rest = ranked_scopes(@scopes) %>
+<% tenant = Masks::Server::Current.tenant&.name.to_s %>
+
+<div class="auth-pair">
+  <span class="auth-mark auth-mark-client" aria-hidden="true"><%= @handshake.name.to_s.first&.upcase %></span>
+  <span class="auth-wire"></span>
+  <%= tenant_mark(Masks::Server::Current.tenant) %>
+</div>
+
+<div class="prompt-head">
+  <h1 class="prompt-title"><%= t(@existing ? ".title_again" : ".title") %></h1>
+  <p class="prompt-lede">
+    <%= t(@existing ? ".lede_again_html" : ".lede_html", name: @handshake.name, tenant: tenant) %>
+  </p>
+</div>
+
+<%= render "masks/server/application/person", actor: current_actor, sign_out: true %>
+
+<div class="slab">
+  <% if @existing %>
+    <% who = @existing.approved_by_id == current_actor.id ? t(".you") : @existing.approved_by&.identifier || t(".someone") %>
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".replaces") %></span>
+      <span class="ledger-value handshake-warn">
+        <%= t(".replaced", name: @existing.name, who: who, date: l(@existing.approved_at.to_date, format: :long)) %>
+      </span>
+    </div>
+  <% end %>
+
+  <div class="ledger-row">
+    <span class="ledger-label"><%= t(".may_ask") %></span>
+    <ul class="grant-scopes">
+      <% hot.each do |scope, description| %>
+        <li class="grant-scope grant-scope-hot">
+          <span><%= description %></span>
+          <span class="chip-key"><%= scope %></span>
+        </li>
+      <% end %>
+
+      <% if hot.any? && rest.any? %>
+        <li class="grant-scope-split"></li>
+      <% end %>
+
+      <% rest.each do |scope, description| %>
+        <li class="grant-scope">
+          <span><%= description %></span>
+          <span class="chip-key"><%= scope %></span>
+        </li>
+      <% end %>
+    </ul>
+
+    <% if @handshake.scopes.include?(Masks::Server::Scopes::MANAGE) %>
+      <div class="note note-warn" role="alert"><%= t(".manage_warning", name: @handshake.name) %></div>
+    <% end %>
+
+    <% if @beneath.present? %>
+      <details class="disclosure">
+        <summary class="textlink"><%= t(".beneath", count: @beneath.size) %></summary>
+        <ul class="grant-scopes">
+          <% @beneath.each do |scope, description| %>
+            <li class="grant-scope">
+              <span><%= description %></span>
+              <span class="chip-key"><%= scope %></span>
+            </li>
+          <% end %>
+        </ul>
+      </details>
+    <% end %>
+  </div>
+
+  <% if @granting.present? %>
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".claims") %></span>
+      <span class="ledger-value"><%= t(".claimed", namespaces: @granting.to_sentence, name: @handshake.name) %></span>
+    </div>
+  <% end %>
+</div>
+
+<details class="disclosure handshake-more">
+  <summary class="textlink"><%= t(".details") %></summary>
+
+  <div class="slab">
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".client") %></span>
+      <span class="ledger-value"><%= t(".credentials.#{@handshake.credentials}") %></span>
+    </div>
+
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".signs_in_at") %></span>
+      <span class="ledger-value aside-mono"><%= @handshake.resource %></span>
+    </div>
+
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".origin") %></span>
+      <span class="ledger-value aside-mono"><%= @handshake.origin %></span>
+    </div>
+
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".redirect_uris") %></span>
+      <% @handshake.redirect_uris.each do |uri| %>
+        <span class="ledger-value aside-mono"><%= uri %></span>
+      <% end %>
+    </div>
+
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".returns") %></span>
+      <span class="ledger-value aside-mono"><%= @handshake.return_to %></span>
+    </div>
+
+    <div class="ledger-row ledger-row-tight">
+      <span class="ledger-label"><%= t(".auth_method") %></span>
+      <span class="ledger-value aside-mono"><%= @handshake.auth_method %></span>
+    </div>
+
+    <% if @handshake.backchannel_logout_uri %>
+      <div class="ledger-row ledger-row-tight">
+        <span class="ledger-label"><%= t(".backchannel") %></span>
+        <span class="ledger-value aside-mono"><%= @handshake.backchannel_logout_uri %></span>
+      </div>
+    <% end %>
+  </div>
+</details>
+
+<%= form_with url: handshake_path, method: :post do |form| %>
+  <%= hidden_field_tag :hid, @hid %>
+  <%= hidden_field_tag :shown, @shown %>
+  <% approve = @existing ? "replace" : "register" %>
+  <div class="action-row">
+    <button type="submit" name="approve" value="yes" class="action action-grow action-countdown"
+            data-countdown="<%= Masks::Server::HandshakesController::WAIT.to_i %>"
+            data-waiting="<%= t(".#{approve}_in", seconds: "%{seconds}") %>"><%= t(".#{approve}") %></button>
+    <button type="submit" name="deny" value="yes" class="action action-quiet action-fit"><%= t(".cancel") %></button>
+  </div>
+<% end %>

data/app/views/masks/server/links/expired.html.erb

@@ -0,0 +1,10 @@
+<% content_for :title, t(".titles.#{@kind}") %>
+<% content_for :surface, "terminus" %>
+
+<span class="state"><%= t(".state") %></span>
+
+<h1 class="prompt-title"><%= t(".titles.#{@kind}") %>.</h1>
+
+<p class="prompt-lede"><%= t(".lede") %></p>
+
+<%= link_to t(".sign_in"), login_path, class: "action action-quiet action-fit" %>

data/app/views/masks/server/links/verified.html.erb

@@ -0,0 +1,8 @@
+<% content_for :title, t(".page_title") %>
+<% content_for :surface, "terminus" %>
+
+<span class="state state-done"><%= t(".state") %></span>
+
+<h1 class="prompt-title"><%= t(".title", email: @actor.email) %></h1>
+
+<%= link_to t(".account"), root_path, class: "action action-fit" %>

data/app/views/masks/server/logins/_accept_invitation.html.erb

@@ -0,0 +1,31 @@
+<% invitation = login.state("invitation").invitation %>
+
+<%= render "masks/server/logins/head", title: t(".title"),
+      lede: (t(".invited_by", nickname: invitation.opened_by.identifier) if invitation.opened_by) %>
+
+<%= form_with url: login_path, method: :post, id: "accept-invitation", class: "flow" do |form| %>
+  <%= hidden_field_tag :rid, login.rid %>
+  <%= form.hidden_field :event, value: "accept-invitation" %>
+
+  <label class="field">
+    <span class="field-label"><%= t("logins.shared.account") %></span>
+    <input type="text" value="<%= invitation.actor.identifier %>" readonly
+           autocomplete="username" class="control" />
+  </label>
+
+  <% if invitation.actor.email.present? %>
+    <label class="field">
+      <span class="field-label"><%= t("logins.shared.email") %></span>
+      <input type="email" value="<%= invitation.actor.email %>" readonly class="control" />
+    </label>
+  <% end %>
+
+  <label class="field">
+    <span class="field-label"><%= t("logins.shared.password") %></span>
+    <%= form.password_field :password, autocomplete: "new-password", class: "control" %>
+    <%= render "masks/server/logins/hint", login: login, field: "password",
+                              hint: t(".hint", minimum: login.policy.password_minimum) %>
+  </label>
+
+  <button type="submit" class="action"><%= t("logins.shared.continue") %></button>
+<% end %>

data/app/views/masks/server/logins/_add_phone.html.erb

@@ -0,0 +1,14 @@
+<%= render "masks/server/logins/confirm_head", login: login, title: t(".title"), lede: t(".lede") %>
+
+<%= form_with url: login_path, method: :post, id: "add-phone", class: "flow" do |form| %>
+  <%= hidden_field_tag :rid, login.rid %>
+  <%= form.hidden_field :event, value: "confirm:add-phone" %>
+
+  <label class="field">
+    <span class="field-label"><%= t("logins.shared.phone") %></span>
+    <%= form.telephone_field :phone, autocomplete: "tel", placeholder: "+15551234567", class: "control" %>
+    <span class="field-hint"><%= t(".hint") %></span>
+  </label>
+
+  <button type="submit" class="action"><%= t("logins.shared.continue") %></button>
+<% end %>

data/app/views/masks/server/logins/_awaiting_approval.html.erb

@@ -0,0 +1,7 @@
+<%= render "masks/server/logins/confirm_head", login: login, title: t(".title"), lede: t(".lede") %>
+
+<%= form_with url: login_path, method: :post, class: "flow" do |form| %>
+  <%= hidden_field_tag :rid, login.rid %>
+  <%= form.hidden_field :event, value: "confirm:check" %>
+  <button type="submit" class="action action-quiet"><%= t(".check") %></button>
+<% end %>

data/app/views/masks/server/logins/_backup_code.html.erb

@@ -0,0 +1,23 @@
+<%= render "masks/server/logins/head", title: t(".title") %>
+
+<%= render "masks/server/logins/identified", login: login %>
+
+<%= form_with url: login_path, method: :post, id: "backup-code", class: "flow" do |form| %>
+  <%= hidden_field_tag :rid, login.rid %>
+  <%= form.hidden_field :event, value: "backup" %>
+
+  <label class="field">
+    <span class="field-label"><%= t(".code") %></span>
+    <%= form.text_field :backup_code, autocomplete: "one-time-code",
+          spellcheck: "false", autocapitalize: "off", class: "control control-mono" %>
+    <span class="field-hint"><%= t(".hint") %></span>
+  </label>
+
+  <button type="submit" class="action"><%= t("logins.shared.continue") %></button>
+<% end %>
+
+<%= form_with url: login_path, method: :post, id: "use-authenticator", class: "flow" do |form| %>
+  <%= hidden_field_tag :rid, login.rid %>
+  <%= form.hidden_field :event, value: "use-authenticator" %>
+  <button type="submit" class="action action-plain"><%= t(".use_authenticator") %></button>
+<% end %>

data/app/views/masks/server/logins/_choose_organization.html.erb

@@ -0,0 +1,21 @@
+<% client = login.client&.name %>
+
+<%= render "masks/server/logins/head",
+           title: client ? t(".title_to", client: client) : t(".title"),
+           lede: t(".lede") %>
+
+<%= render "masks/server/application/person", actor: login.actor, sign_out: true if login.actor %>
+
+<div class="providers">
+  <% (login.as_json["organizations"] || []).each do |organization| %>
+    <%= form_with url: login_path, method: :post, class: "contents" do |form| %>
+      <%= hidden_field_tag :rid, login.rid %>
+      <%= form.hidden_field :event, value: "organization" %>
+      <%= form.hidden_field :organization, value: organization["key"] %>
+
+      <button type="submit" class="action action-quiet">
+        <%= t(".as", organization: organization["name"], role: organization["role"]) %>
+      </button>
+    <% end %>
+  <% end %>
+</div>

data/app/views/masks/server/logins/_code_form.html.erb

@@ -0,0 +1,12 @@
+<%= form_with url: login_path, method: :post, id: event.tr(":", "-"), class: "flow" do |form| %>
+  <%= hidden_field_tag :rid, login.rid %>
+  <%= form.hidden_field :event, value: event %>
+
+  <label class="field">
+    <span class="field-label"><%= t("logins.shared.code") %></span>
+    <%= form.text_field :code, inputmode: "numeric", pattern: "[0-9]*", autocomplete: "one-time-code",
+          maxlength: 6, spellcheck: "false", class: "control control-code" %>
+  </label>
+
+  <button type="submit" class="action"><%= t("logins.shared.continue") %></button>
+<% end %>

data/app/views/masks/server/logins/_confirm_email.html.erb

@@ -0,0 +1,19 @@
+<% confirmation = login.as_json["confirmation"] %>
+<% linked = confirmation["mode"] == "link" %>
+
+<%= render "masks/server/logins/confirm_head", login: login, title: t(".title"),
+      lede: t(linked ? ".lede_link" : ".lede", email: confirmation["email"]) %>
+
+<% if !confirmation["mails"] %>
+  <p class="note note-warn" role="alert"><%= t(".no_mailer") %></p>
+<% elsif linked %>
+  <%= form_with url: login_path, method: :post, class: "flow" do |form| %>
+    <%= hidden_field_tag :rid, login.rid %>
+    <%= form.hidden_field :event, value: "confirm:check" %>
+    <button type="submit" class="action"><%= t("logins.shared.continue") %></button>
+  <% end %>
+<% else %>
+  <%= render "masks/server/logins/code_form", login: login, event: "confirm:email" %>
+<% end %>
+
+<%= render "masks/server/logins/resend", login: login if confirmation["mails"] %>

data/app/views/masks/server/logins/_confirm_head.html.erb

@@ -0,0 +1,12 @@
+<% if login.signing_up %>
+  <%= render "masks/server/logins/signup_head", login: login, mark: login.actor&.identifier.to_s %>
+
+  <div class="prompt-head">
+    <h2 class="prompt-title"><%= title %></h2>
+    <% if local_assigns[:lede].present? %><p class="prompt-lede"><%= lede %></p><% end %>
+  </div>
+<% else %>
+  <%= render "masks/server/logins/head", title: title, lede: local_assigns[:lede] %>
+
+  <%= render "masks/server/logins/identified", login: login %>
+<% end %>

data/app/views/masks/server/logins/_confirm_phone.html.erb

@@ -0,0 +1,16 @@
+<% confirmation = login.as_json["confirmation"] %>
+
+<%= render "masks/server/logins/confirm_head", login: login, title: t(".title"), lede: t(".lede", phone: confirmation["phone"]) %>
+
+<% if confirmation["texts"] %>
+  <%= render "masks/server/logins/code_form", login: login, event: "confirm:phone" %>
+  <%= render "masks/server/logins/resend", login: login %>
+<% else %>
+  <p class="note note-warn" role="alert"><%= t(".no_texts") %></p>
+<% end %>
+
+<%= form_with url: login_path, method: :post, class: "flow" do |form| %>
+  <%= hidden_field_tag :rid, login.rid %>
+  <%= form.hidden_field :event, value: "confirm:change-phone" %>
+  <button type="submit" class="action action-plain"><%= t(".change_phone") %></button>
+<% end %>

data/app/views/masks/server/logins/_consent.html.erb

@@ -0,0 +1,109 @@
+<% state = login.state("consent") %>
+<% client = login.client_json || {} %>
+<% hot, rest = ranked_scopes(Masks::Server::ResourceMetadata.describe(state.audience, state.scopes)) %>
+
+<div class="auth-pair">
+  <% if client["logo"] %>
+    <%= image_tag client["logo"], alt: "", class: "auth-mark auth-mark-client auth-mark-logo", referrerpolicy: "no-referrer" %>
+  <% else %>
+    <span class="auth-mark auth-mark-client" aria-hidden="true"><%= client["name"].to_s.strip.first&.upcase %></span>
+  <% end %>
+  <span class="auth-wire"></span>
+  <%= tenant_mark(Masks::Server::Current.tenant) %>
+</div>
+
+<%= render "masks/server/logins/head", title: t(".title", client: login.client&.name) %>
+
+<%= render "masks/server/application/person", actor: login.actor, sign_out: true if login.actor %>
+
+<div class="slab">
+  <div class="ledger-row">
+    <span class="ledger-label"><%= t(".access") %></span>
+
+    <% if hot.empty? && rest.empty? %>
+      <p class="empty"><%= t(".no_access") %></p>
+    <% end %>
+
+    <ul class="grant-scopes">
+      <% hot.each do |scope, description| %>
+        <li class="grant-scope grant-scope-hot">
+          <span><%= description %></span>
+          <span class="chip-key"><%= scope %></span>
+        </li>
+      <% end %>
+
+      <% if hot.any? && rest.any? %>
+        <li class="grant-scope-split"></li>
+      <% end %>
+
+      <% rest.each do |scope, description| %>
+        <li class="grant-scope">
+          <span><%= description %></span>
+          <span class="chip-key"><%= scope %></span>
+        </li>
+      <% end %>
+    </ul>
+  </div>
+
+  <% if state.audience.any? %>
+    <div class="ledger-row">
+      <span class="ledger-label"><%= t(".audience") %></span>
+      <% state.audience.each do |resource| %>
+        <span class="ledger-value aside-mono"><%= resource %></span>
+      <% end %>
+    </div>
+  <% end %>
+
+  <% if (details = state.details&.described).present? %>
+    <div class="ledger-row">
+      <span class="ledger-label"><%= t(".details") %></span>
+      <ul class="grant-scopes">
+        <% details.each do |detail| %>
+          <li class="grant-scope grant-scope-hot grant-detail">
+            <span><%= detail["label"] %></span>
+            <span class="chip-key"><%= detail["type"] %></span>
+            <% if detail["fields"].any? %>
+              <dl class="grant-fields">
+                <% detail["fields"].each do |name, value| %>
+                  <dt><%= name %></dt>
+                  <dd class="aside-mono"><%= value %></dd>
+                <% end %>
+              </dl>
+            <% end %>
+          </li>
+        <% end %>
+      </ul>
+    </div>
+  <% end %>
+
+  <% if client["returnsTo"] %>
+    <div class="ledger-row">
+      <span class="ledger-label"><%= t(".returns_to") %></span>
+      <span class="ledger-value aside-mono"><%= client["returnsTo"] %></span>
+    </div>
+  <% end %>
+</div>
+
+<% links = { "site" => t(".site", client: client["name"]), "terms" => t(".terms"), "privacy" => t(".privacy") }.select { |key, _| client[key] } %>
+<% if links.any? %>
+  <p class="aside client-links">
+    <% links.each do |key, label| %>
+      <%= link_to label, client[key], class: "textlink", rel: "noopener noreferrer", target: "_blank" %>
+    <% end %>
+  </p>
+<% end %>
+
+<div class="action-row">
+  <%= form_with url: login_path, method: :post, id: "consent", class: "action-grow" do |form| %>
+    <%= hidden_field_tag :rid, login.rid %>
+    <%= form.hidden_field :event, value: "consent" %>
+    <%= form.hidden_field :approve, value: "yes" %>
+    <button type="submit" class="action"><%= t(".allow") %></button>
+  <% end %>
+
+  <%= form_with url: login_path, method: :post, id: "decline" do |form| %>
+    <%= hidden_field_tag :rid, login.rid %>
+    <%= form.hidden_field :event, value: "decline" %>
+    <button type="submit" class="action action-quiet action-fit"><%= t(".deny") %></button>
+  <% end %>
+</div>

data/app/views/masks/server/logins/_email_code.html.erb

@@ -0,0 +1,7 @@
+<%= render "masks/server/logins/head", title: t(".title"), lede: t(".lede", identifier: login.identifier) %>
+
+<%= render "masks/server/logins/identified", login: login %>
+
+<%= render "masks/server/logins/code_form", login: login, event: "email-code:verify" %>
+
+<%= render "masks/server/logins/resend", login: login, event: "email-code:send", label: t(".send_again") %>