@cobaltcore-dev/aurora 0.17.1 → 0.19.0

package/dist/server/index.js

@@ -34673,10 +34673,20 @@ var objectRouter = {
         throw mappedError;
       }
     }, "emitMappedError");
-    const response = await s3.send(new import_client_s33.GetObjectCommand({
-      Bucket: containerName,
-      Key: objectKey
-    })).catch(emitMappedError);
+    const response = await s3.send(
+      new import_client_s33.GetObjectCommand({
+        Bucket: containerName,
+        Key: objectKey
+      }),
+      // AWS SDK v3's per-call cancellation option — the equivalent of passing
+      // `{ signal }` to a raw fetch() (see 0010_abort_signal_propagation.md).
+      // ctx.req.signal is aborted automatically when the client disconnects
+      // (tab closed, navigated away) or explicitly via the cancel button,
+      // which calls AbortController.abort() on the frontend.
+      {
+        abortSignal: ctx.req.signal
+      }
+    ).catch(emitMappedError);
     const body = response.Body;
     if (!body) {
       emitMappedError(new import_server13.TRPCError({
@@ -34695,8 +34705,13 @@ var objectRouter = {
     });
     let isFirst = true;
     let downloaded = 0;
+    let aborted = false;
     try {
       for await (const value of body) {
+        if (ctx.req.signal?.aborted) {
+          aborted = true;
+          break;
+        }
         downloaded += value.byteLength;
         const progress = downloadProgressMap2.get(scopedDownloadId);
         progress.downloaded = downloaded;
@@ -34716,7 +34731,9 @@ var objectRouter = {
         };
         isFirst = false;
       }
-      downloadProgressEmitter2.emit(`progress:${scopedDownloadId}:complete`);
+      if (!aborted) {
+        downloadProgressEmitter2.emit(`progress:${scopedDownloadId}:complete`);
+      }
     } catch (error) {
       emitMappedError(error);
     } finally {
@@ -37559,24 +37576,31 @@ var CertificateAuthorityAdditionalAttributeSchema = import_zod25.z.object({
   key: import_zod25.z.array(import_zod25.z.number().int()),
   value: import_zod25.z.string()
 });
+var stringOrStringArray = import_zod25.z.union([
+  import_zod25.z.array(import_zod25.z.string()),
+  import_zod25.z.string().transform((s) => [
+    s
+  ])
+]);
 var CertificateAuthoritySubjectSchema = import_zod25.z.object({
   additional_attribute: import_zod25.z.array(CertificateAuthorityAdditionalAttributeSchema).optional(),
-  /** Typically domain name */
-  common_name: import_zod25.z.string(),
-  /** Country codes (ISO 3166-1 alpha-2). */
-  country: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Locality/city names. */
-  locality: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Organization names. */
-  organization: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Organizational unit names. */
-  organizational_unit: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Postal/ZIP codes. */
-  postal_code: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** State or province names. */
-  province: import_zod25.z.array(import_zod25.z.string()).optional(),
-  serial_number: import_zod25.z.string().optional(),
-  street_address: import_zod25.z.array(import_zod25.z.string()).optional()
+  named_attributes: import_zod25.z.object({
+    cn: import_zod25.z.string(),
+    /** Country codes (ISO 3166-1 alpha-2). */
+    c: stringOrStringArray.optional(),
+    /** Locality/city names. */
+    l: stringOrStringArray.optional(),
+    /** Organization names. */
+    o: stringOrStringArray.optional(),
+    /** Organizational unit names. */
+    ou: stringOrStringArray.optional(),
+    /** Postal/ZIP codes. */
+    postal_code: stringOrStringArray.optional(),
+    /** State or province names. */
+    st: stringOrStringArray.optional(),
+    serial_number: import_zod25.z.string().optional(),
+    street: stringOrStringArray.optional()
+  })
 });
 var CertificateAuthorityStateSchema = import_zod25.z.enum([
   "CREATING",
@@ -37594,6 +37618,8 @@ var CertificateAuthoritySchema = import_zod25.z.object({
     subject: CertificateAuthoritySubjectSchema
   }).optional(),
   csr: import_zod25.z.string().optional(),
+  /** Human-readable subject string, e.g. "CN=demo-ca.test.sci". */
+  display_subject: import_zod25.z.string().optional(),
   id: import_zod25.z.string(),
   /**
   * Required on import certificate operation.
@@ -37622,7 +37648,11 @@ var CertificateAuthoritiesListInputSchema = projectScopedInputSchema.extend({
 });
 var CertificateAuthorityCreateSchema = import_zod25.z.object({
   configuration: import_zod25.z.object({
-    subject: CertificateAuthoritySubjectSchema
+    subject: import_zod25.z.object({
+      named_attributes: import_zod25.z.object({
+        cn: import_zod25.z.string().trim().min(1)
+      })
+    })
   })
 });
 var CertificateAuthorityIdInputSchema = projectScopedInputSchema.extend({
@@ -37662,7 +37692,7 @@ var CertificatesListSchema = import_zod25.z.object({
 });
 
 // src/server/Services/routers/pcaRouter.ts
-var PCA_BASE_URL = "certificate-authorities";
+var PCA_BASE_URL = "v1/certificate-authorities";
 var pcaRouter = {
   list: projectScopedProcedure.input(CertificateAuthoritiesListInputSchema).query(async ({ input, ctx }) => {
     return withErrorHandling3(async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cobaltcore-dev/aurora",
-  "version": "0.17.1",
+  "version": "0.19.0",
   "private": false,
   "description": "Aurora OpenStack dashboard — server and client library",
   "license": "Apache-2.0",
@@ -51,6 +51,7 @@
     "@headlessui/react": "^2.2.2",
     "@lingui/core": "^5.9.5",
     "@lingui/react": "^5.9.5",
+    "@peculiar/x509": "^2.0.0",
     "@tanstack/react-form": "^1.28.5",
     "@tanstack/react-query": "^5.95.2",
     "@tanstack/react-router": "^1.168.4",
@@ -65,6 +66,7 @@
     "node-fetch": "^3.3.2",
     "react-error-boundary": "^6.1.0",
     "react-icons": "^5.6.0",
+    "reflect-metadata": "^0.2.2",
     "tailwind-merge": "^3.2.0",
     "zod": "^4.0.0"
   },
@@ -106,8 +108,8 @@
     "vite-plugin-svgr": "^5.0.0",
     "vite-tsconfig-paths": "^6.1.1",
     "vitest": "^4.1.2",
-    "@cobaltcore-dev/policy-engine": "2.0.0",
     "@cobaltcore-dev/aurora-config": "0.0.1",
+    "@cobaltcore-dev/policy-engine": "2.0.0",
     "@cobaltcore-dev/signal-openstack": "1.0.0"
   },
   "scripts": {

package/dist/client/AuthProvider-BQSJk5R4.mjs

@@ -1,63 +0,0 @@
-import { jsx as e } from "react/jsx-runtime";
-import t, { useCallback as n, useEffect as r, useRef as i, useState as a } from "react";
-//#region src/client/store/AuthProvider.tsx
-var o = /*#__PURE__*/ t.createContext(null);
-function s({ children: s, router: c }) {
-	let [l, u] = t.useState(null), [d, f] = t.useState(void 0), [p, m] = t.useState(void 0), [h, g] = a(!1), [_, v] = a(void 0), y = i(null), b = !!l, x = n(() => {
-		y.current &&= (clearTimeout(y.current), null);
-	}, []), S = n(() => {
-		g(!1), c.navigate({
-			to: "/",
-			search: _ ? { redirect: _ } : void 0
-		});
-	}, [c, _]), C = n(async (e = "manual") => {
-		if (x(), u(null), f(void 0), m(e), e === "expired") {
-			let e = window.location.pathname + window.location.search;
-			e && e.startsWith("/") && v(e), g(!0);
-		} else c.invalidate();
-	}, [c, x]), w = n(async (e, t) => {
-		u(e), m(void 0), g(!1), v(void 0), f(t ? new Date(t) : void 0);
-	}, []);
-	return r(() => {
-		if (x(), l && d) {
-			let e = d.getTime() - Date.now();
-			if (e <= 0) {
-				C("expired");
-				return;
-			}
-			y.current = setTimeout(() => {
-				C("expired");
-			}, e);
-		}
-		return () => {
-			x();
-		};
-	}, [
-		l,
-		d,
-		C,
-		x
-	]), /*#__PURE__*/ e(o.Provider, {
-		value: {
-			isAuthenticated: b,
-			user: l,
-			login: w,
-			logout: C,
-			expiresAt: d,
-			logoutReason: p,
-			showInactivityModal: h,
-			closeInactivityModal: S,
-			redirectAfterModal: _
-		},
-		children: s
-	});
-}
-function c() {
-	let e = t.useContext(o);
-	if (!e) throw Error("useAuth must be used within an AuthProvider");
-	return e;
-}
-//#endregion
-export { c as n, s as t };
-
-//# sourceMappingURL=AuthProvider-BQSJk5R4.mjs.map

package/dist/client/AuthProvider-BQSJk5R4.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthProvider-BQSJk5R4.mjs","names":["React","useEffect","useRef","useCallback","useState","AuthContext","createContext","AuthProvider","children","router","user","setUser","expiresAt","setExpiresAt","undefined","logoutReason","setLogoutReason","showInactivityModal","setShowInactivityModal","redirectAfterModal","setRedirectAfterModal","logoutTimerRef","isAuthenticated","clearLogoutTimer","current","clearTimeout","closeInactivityModal","navigate","to","search","redirect","logout","reason","currentPath","window","location","pathname","startsWith","invalidate","login","expires_at","expiration","Date","timeUntilExpiry","getTime","now","setTimeout","Provider","value","useAuth","context","useContext","Error"],"sources":["../../src/client/store/AuthProvider.tsx"],"sourcesContent":["import React, { useEffect, useRef, useCallback, useState } from \"react\"\nimport { TokenData } from \"../../server/Authentication/types/models\"\n\nexport type User = TokenData[\"user\"] | null\n\nexport interface AuthContext {\n  isAuthenticated: boolean\n  login: (user: User, expires_at?: string) => Promise<void>\n  logout: (reason?: \"inactive\" | \"expired\" | \"manual\") => Promise<void>\n  user?: User\n  expiresAt?: Date\n  logoutReason?: \"inactive\" | \"expired\" | \"manual\"\n  showInactivityModal: boolean\n  closeInactivityModal: () => void\n  redirectAfterModal?: string\n}\n\ninterface RouterNavigation {\n  navigate: (options: { to: string; search?: Record<string, unknown> }) => void\n  invalidate: () => void\n}\n\nconst AuthContext = React.createContext<AuthContext | null>(null)\n\nexport function AuthProvider({ children, router }: { children: React.ReactNode; router: RouterNavigation }) {\n  const [user, setUser] = React.useState<User | null>(null)\n  const [expiresAt, setExpiresAt] = React.useState<Date | undefined>(undefined)\n  const [logoutReason, setLogoutReason] = React.useState<\"inactive\" | \"expired\" | \"manual\" | undefined>(undefined)\n  const [showInactivityModal, setShowInactivityModal] = useState(false)\n  const [redirectAfterModal, setRedirectAfterModal] = useState<string | undefined>(undefined)\n\n  const logoutTimerRef = useRef<NodeJS.Timeout | null>(null)\n\n  const isAuthenticated = !!user\n\n  const clearLogoutTimer = useCallback(() => {\n    if (logoutTimerRef.current) {\n      clearTimeout(logoutTimerRef.current)\n      logoutTimerRef.current = null\n    }\n  }, [])\n\n  const closeInactivityModal = useCallback(() => {\n    setShowInactivityModal(false)\n\n    router.navigate({\n      to: \"/\",\n      search: redirectAfterModal ? { redirect: redirectAfterModal } : undefined,\n    })\n  }, [router, redirectAfterModal])\n\n  const logout = useCallback(\n    async (reason: \"inactive\" | \"expired\" | \"manual\" = \"manual\") => {\n      clearLogoutTimer()\n\n      setUser(null)\n      setExpiresAt(undefined)\n      setLogoutReason(reason)\n\n      // For expired: Show modal instead of direct navigation\n      if (reason === \"expired\") {\n        const currentPath = window.location.pathname + window.location.search\n        if (currentPath && currentPath.startsWith(\"/\")) {\n          setRedirectAfterModal(currentPath)\n        }\n\n        setShowInactivityModal(true)\n      } else {\n        // Manual logout: direct navigation\n        router.invalidate()\n      }\n    },\n    [router, clearLogoutTimer]\n  )\n\n  const login = useCallback(async (user: User, expires_at?: string) => {\n    setUser(user)\n    setLogoutReason(undefined)\n    setShowInactivityModal(false)\n    setRedirectAfterModal(undefined)\n\n    if (expires_at) {\n      const expiration = new Date(expires_at)\n      setExpiresAt(expiration)\n    } else {\n      setExpiresAt(undefined)\n    }\n  }, [])\n\n  useEffect(() => {\n    clearLogoutTimer()\n\n    if (user && expiresAt) {\n      const timeUntilExpiry = expiresAt.getTime() - Date.now()\n\n      if (timeUntilExpiry <= 0) {\n        logout(\"expired\")\n        return\n      }\n\n      logoutTimerRef.current = setTimeout(() => {\n        logout(\"expired\")\n      }, timeUntilExpiry)\n    }\n\n    return () => {\n      clearLogoutTimer()\n    }\n  }, [user, expiresAt, logout, clearLogoutTimer])\n\n  return (\n    <AuthContext.Provider\n      value={{\n        isAuthenticated,\n        user,\n        login,\n        logout,\n        expiresAt,\n        logoutReason,\n        showInactivityModal,\n        closeInactivityModal,\n        redirectAfterModal,\n      }}\n    >\n      {children}\n    </AuthContext.Provider>\n  )\n}\n\nexport function useAuth() {\n  const context = React.useContext(AuthContext)\n  if (!context) {\n    throw new Error(\"useAuth must be used within an AuthProvider\")\n  }\n  return context\n}\n"],"mappings":";;;AAsBA,IAAMK,IAAcL,gBAAMM,cAAkC,IAAA;AAE5D,SAAgBC,EAAa,EAAEC,aAAUC,aAAiE;CACxG,IAAM,CAACC,GAAMC,KAAWX,EAAMI,SAAsB,IAAA,GAC9C,CAACQ,GAAWC,KAAgBb,EAAMI,SAA2BU,KAAAA,CAAAA,GAC7D,CAACC,GAAcC,KAAmBhB,EAAMI,SAAwDU,KAAAA,CAAAA,GAChG,CAACG,GAAqBC,KAA0Bd,EAAS,EAAA,GACzD,CAACe,GAAoBC,KAAyBhB,EAA6BU,KAAAA,CAAAA,GAE3EO,IAAiBnB,EAA8B,IAAA,GAE/CoB,IAAkB,CAAC,CAACZ,GAEpBa,IAAmBpB,QAAY;EACnC,AAEEkB,EAAeG,aADfC,aAAaJ,EAAeG,OAAO,GACV;CAE7B,GAAG,CAAA,CAAE,GAECE,IAAuBvB,QAAY;EAGvCM,AAFAS,EAAuB,EAAA,GAEvBT,EAAOkB,SAAS;GACdC,IAAI;GACJC,QAAQV,IAAqB,EAAEW,UAAUX,EAAmB,IAAIL,KAAAA;EAClE,CAAA;CACF,GAAG,CAACL,GAAQU,CAAAA,CAAmB,GAEzBY,IAAS5B,EACb,OAAO6B,IAA4C,aAAQ;EAQzD,IAPAT,EAAAA,GAEAZ,EAAQ,IAAA,GACRE,EAAaC,KAAAA,CAAAA,GACbE,EAAgBgB,CAAAA,GAGZA,MAAW,WAAW;GACxB,IAAMC,IAAcC,OAAOC,SAASC,WAAWF,OAAOC,SAASN;GAK/DX,AAJIe,KAAeA,EAAYI,WAAW,GAAA,KACxCjB,EAAsBa,CAAAA,GAGxBf,EAAuB,EAAA;EACzB,OAEET,EAAO6B,WAAU;CAErB,GACA,CAAC7B,GAAQc,CAAAA,CAAiB,GAGtBgB,IAAQpC,EAAY,OAAOO,GAAY8B,MAAAA;EAM3C,AALA7B,EAAQD,CAAAA,GACRM,EAAgBF,KAAAA,CAAAA,GAChBI,EAAuB,EAAA,GACvBE,EAAsBN,KAAAA,CAAAA,GAIpBD,EAFE2B,IAEWC,IADUC,KAAKF,CACfC,IAEA3B,KAAAA,CAAAA;CAEjB,GAAG,CAAA,CAAE;CAuBL,OArBAb,QAAU;EAGR,IAFAsB,EAAAA,GAEIb,KAAQE,GAAW;GACrB,IAAM+B,IAAkB/B,EAAUgC,QAAO,IAAKF,KAAKG,IAAG;GAEtD,IAAIF,KAAmB,GAAG;IACxBZ,EAAO,SAAA;IACP;GACF;GAEAV,EAAeG,UAAUsB,iBAAW;IAClCf,EAAO,SAAA;GACT,GAAGY,CAAAA;EACL;EAEA,aAAO;GACLpB,EAAAA;EACF;CACF,GAAG;EAACb;EAAME;EAAWmB;EAAQR;EAAiB,GAG5C,gBAAClB,EAAY0C,UAAQ;EACnBC,OAAO;GACL1B;GACAZ;GACA6B;GACAR;GACAnB;GACAG;GACAE;GACAS;GACAP;EACF;EAECX;;AAGP;AAEA,SAAgByC,IAAAA;CACd,IAAMC,IAAUlD,EAAMmD,WAAW9C,CAAAA;CACjC,IAAI,CAAC6C,GACH,MAAUE,MAAM,6CAAA;CAElB,OAAOF;AACT"}