@escalated-dev/escalated 0.6.0 → 0.7.1

package/src/pages/Admin/Settings/Sandbox.vue

@@ -0,0 +1,135 @@
+<script setup>
+import EscalatedLayout from '../../../components/EscalatedLayout.vue';
+</script>
+
+<template>
+    <EscalatedLayout title="Sandbox Environment">
+        <div class="mx-auto max-w-2xl space-y-6">
+            <!-- Info -->
+            <div class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6">
+                <h3 class="mb-4 text-sm font-semibold text-[var(--esc-panel-text)]">Sandbox Environment</h3>
+                <p class="text-sm text-[var(--esc-panel-text-tertiary)]">
+                    A sandbox environment allows you to test configuration changes, automations, and workflows without
+                    affecting your production data. Changes made in a sandbox can be promoted to production once
+                    validated.
+                </p>
+                <div
+                    class="mt-4 rounded-lg border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface-alt)] p-4"
+                >
+                    <h4 class="mb-2 text-sm font-medium text-[var(--esc-panel-text-secondary)]">Key Features</h4>
+                    <ul class="space-y-2 text-sm text-[var(--esc-panel-text-muted)]">
+                        <li class="flex items-start gap-2">
+                            <svg
+                                class="mt-0.5 h-4 w-4 shrink-0 text-[var(--esc-panel-text-muted)]"
+                                fill="none"
+                                stroke="currentColor"
+                                stroke-width="1.5"
+                                viewBox="0 0 24 24"
+                            >
+                                <path
+                                    stroke-linecap="round"
+                                    stroke-linejoin="round"
+                                    d="M9 12.75L11.25 15 15 9.75M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
+                                />
+                            </svg>
+                            Isolated copy of your helpdesk configuration
+                        </li>
+                        <li class="flex items-start gap-2">
+                            <svg
+                                class="mt-0.5 h-4 w-4 shrink-0 text-[var(--esc-panel-text-muted)]"
+                                fill="none"
+                                stroke="currentColor"
+                                stroke-width="1.5"
+                                viewBox="0 0 24 24"
+                            >
+                                <path
+                                    stroke-linecap="round"
+                                    stroke-linejoin="round"
+                                    d="M9 12.75L11.25 15 15 9.75M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
+                                />
+                            </svg>
+                            Test automations, triggers, and SLA policies safely
+                        </li>
+                        <li class="flex items-start gap-2">
+                            <svg
+                                class="mt-0.5 h-4 w-4 shrink-0 text-[var(--esc-panel-text-muted)]"
+                                fill="none"
+                                stroke="currentColor"
+                                stroke-width="1.5"
+                                viewBox="0 0 24 24"
+                            >
+                                <path
+                                    stroke-linecap="round"
+                                    stroke-linejoin="round"
+                                    d="M9 12.75L11.25 15 15 9.75M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
+                                />
+                            </svg>
+                            Promote validated changes to production
+                        </li>
+                        <li class="flex items-start gap-2">
+                            <svg
+                                class="mt-0.5 h-4 w-4 shrink-0 text-[var(--esc-panel-text-muted)]"
+                                fill="none"
+                                stroke="currentColor"
+                                stroke-width="1.5"
+                                viewBox="0 0 24 24"
+                            >
+                                <path
+                                    stroke-linecap="round"
+                                    stroke-linejoin="round"
+                                    d="M9 12.75L11.25 15 15 9.75M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
+                                />
+                            </svg>
+                            Sandboxes auto-expire after 30 days
+                        </li>
+                    </ul>
+                </div>
+            </div>
+
+            <!-- Status -->
+            <div class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6">
+                <h3 class="mb-4 text-sm font-semibold text-[var(--esc-panel-text)]">Sandbox Status</h3>
+                <div class="rounded-lg border border-dashed border-[var(--esc-panel-active)] px-6 py-8 text-center">
+                    <svg
+                        class="mx-auto mb-3 h-10 w-10 text-[var(--esc-panel-text-muted)]"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="1.5"
+                        viewBox="0 0 24 24"
+                    >
+                        <path
+                            stroke-linecap="round"
+                            stroke-linejoin="round"
+                            d="M21 7.5l-2.25-1.313M21 7.5v2.25m0-2.25l-2.25 1.313M3 7.5l2.25-1.313M3 7.5l2.25 1.313M3 7.5v2.25m9 3l2.25-1.313M12 12.75l-2.25-1.313M12 12.75V15m0 6.75l2.25-1.313M12 21.75V19.5m0 2.25l-2.25-1.313m0-16.875L12 2.25l2.25 1.313M21 14.25v2.25l-2.25 1.313m-13.5 0L3 16.5v-2.25"
+                        />
+                    </svg>
+                    <p class="text-sm text-[var(--esc-panel-text-muted)]">No sandbox active.</p>
+                    <p class="mt-1 text-xs text-[var(--esc-panel-text-muted)]">
+                        Create a sandbox to start testing changes safely.
+                    </p>
+                </div>
+            </div>
+
+            <!-- Create Button -->
+            <div class="flex justify-end">
+                <div class="group relative">
+                    <button
+                        type="button"
+                        disabled
+                        class="cursor-not-allowed rounded-lg bg-gradient-to-r from-[var(--esc-panel-accent)]/50 to-[var(--esc-panel-accent-secondary)]/50 px-5 py-2 text-sm font-medium text-white/50 shadow-lg shadow-[var(--esc-panel-bg)]/20"
+                    >
+                        Create Sandbox
+                    </button>
+                    <div
+                        class="pointer-events-none absolute bottom-full left-1/2 mb-2 -translate-x-1/2 rounded-lg bg-neutral-800 px-3 py-2 text-xs text-[var(--esc-panel-text-secondary)] opacity-0 shadow-lg transition-opacity group-hover:opacity-100"
+                    >
+                        Coming soon &mdash; requires infrastructure setup
+                        <div
+                            class="absolute left-1/2 top-full -translate-x-1/2 border-4 border-transparent border-t-neutral-800"
+                        ></div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </EscalatedLayout>
+</template>

package/src/pages/Admin/Settings/SsoSettings.vue

@@ -0,0 +1,218 @@
+<script setup>
+import EscalatedLayout from '../../../components/EscalatedLayout.vue';
+import { useForm } from '@inertiajs/vue3';
+
+const props = defineProps({ settings: Object });
+
+const form = useForm({
+    sso_provider: props.settings.sso_provider ?? 'none',
+    sso_entity_id: props.settings.sso_entity_id ?? '',
+    sso_url: props.settings.sso_url ?? '',
+    sso_certificate: props.settings.sso_certificate ?? '',
+    sso_attr_email: props.settings.sso_attr_email ?? 'email',
+    sso_attr_name: props.settings.sso_attr_name ?? 'name',
+    sso_attr_role: props.settings.sso_attr_role ?? 'role',
+    sso_jwt_secret: props.settings.sso_jwt_secret ?? '',
+    sso_jwt_algorithm: props.settings.sso_jwt_algorithm ?? 'HS256',
+});
+
+function submit() {
+    form.post(route('escalated.admin.settings.sso.update'));
+}
+</script>
+
+<template>
+    <EscalatedLayout title="SSO Settings">
+        <form class="mx-auto max-w-2xl space-y-6" @submit.prevent="submit">
+            <!-- Provider Selection -->
+            <div class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6">
+                <h3 class="mb-5 text-sm font-semibold text-[var(--esc-panel-text)]">Single Sign-On</h3>
+                <div class="space-y-5">
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >SSO Provider</label
+                        >
+                        <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">
+                            Choose how users authenticate with your identity provider
+                        </p>
+                        <select
+                            v-model="form.sso_provider"
+                            class="mt-2 w-48 rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        >
+                            <option value="none">None (disabled)</option>
+                            <option value="saml">SAML 2.0</option>
+                            <option value="jwt">JWT</option>
+                        </select>
+                    </div>
+                </div>
+            </div>
+
+            <!-- SAML Settings -->
+            <div
+                v-if="form.sso_provider === 'saml'"
+                class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6"
+            >
+                <h3 class="mb-5 text-sm font-semibold text-[var(--esc-panel-text)]">SAML Configuration</h3>
+                <div class="space-y-5">
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Entity ID</label
+                        >
+                        <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">
+                            The Entity ID (Issuer) from your Identity Provider
+                        </p>
+                        <input
+                            v-model="form.sso_entity_id"
+                            type="text"
+                            placeholder="https://idp.example.com/metadata"
+                            class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        />
+                        <div v-if="form.errors.sso_entity_id" class="mt-1 text-sm text-rose-400">
+                            {{ form.errors.sso_entity_id }}
+                        </div>
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]">SSO URL</label>
+                        <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">The Single Sign-On URL endpoint</p>
+                        <input
+                            v-model="form.sso_url"
+                            type="url"
+                            placeholder="https://idp.example.com/sso"
+                            class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        />
+                        <div v-if="form.errors.sso_url" class="mt-1 text-sm text-rose-400">
+                            {{ form.errors.sso_url }}
+                        </div>
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Certificate</label
+                        >
+                        <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">
+                            X.509 certificate from your Identity Provider (PEM format)
+                        </p>
+                        <textarea
+                            v-model="form.sso_certificate"
+                            rows="6"
+                            placeholder="-----BEGIN CERTIFICATE-----&#10;...&#10;-----END CERTIFICATE-----"
+                            class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 font-mono text-xs text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        ></textarea>
+                        <div v-if="form.errors.sso_certificate" class="mt-1 text-sm text-rose-400">
+                            {{ form.errors.sso_certificate }}
+                        </div>
+                    </div>
+                </div>
+            </div>
+
+            <!-- JWT Settings -->
+            <div
+                v-if="form.sso_provider === 'jwt'"
+                class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6"
+            >
+                <h3 class="mb-5 text-sm font-semibold text-[var(--esc-panel-text)]">JWT Configuration</h3>
+                <div class="space-y-5">
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Shared Secret</label
+                        >
+                        <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">
+                            Secret key used to sign and verify JWT tokens
+                        </p>
+                        <input
+                            v-model="form.sso_jwt_secret"
+                            type="password"
+                            class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        />
+                        <div v-if="form.errors.sso_jwt_secret" class="mt-1 text-sm text-rose-400">
+                            {{ form.errors.sso_jwt_secret }}
+                        </div>
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Algorithm</label
+                        >
+                        <select
+                            v-model="form.sso_jwt_algorithm"
+                            class="mt-2 w-48 rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        >
+                            <option value="HS256">HS256</option>
+                            <option value="HS384">HS384</option>
+                            <option value="HS512">HS512</option>
+                            <option value="RS256">RS256</option>
+                        </select>
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]">SSO URL</label>
+                        <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">
+                            Redirect URL where users authenticate and receive a JWT
+                        </p>
+                        <input
+                            v-model="form.sso_url"
+                            type="url"
+                            placeholder="https://auth.example.com/jwt-sso"
+                            class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        />
+                    </div>
+                </div>
+            </div>
+
+            <!-- Attribute Mapping -->
+            <div
+                v-if="form.sso_provider !== 'none'"
+                class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6"
+            >
+                <h3 class="mb-5 text-sm font-semibold text-[var(--esc-panel-text)]">Attribute Mapping</h3>
+                <p class="mb-4 text-xs text-[var(--esc-panel-text-muted)]">
+                    Map the attribute names from your identity provider to Escalated user fields
+                </p>
+                <div class="space-y-5">
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Email Attribute</label
+                        >
+                        <input
+                            v-model="form.sso_attr_email"
+                            type="text"
+                            placeholder="email"
+                            class="mt-2 w-full max-w-sm rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        />
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Name Attribute</label
+                        >
+                        <input
+                            v-model="form.sso_attr_name"
+                            type="text"
+                            placeholder="name"
+                            class="mt-2 w-full max-w-sm rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        />
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Role Attribute</label
+                        >
+                        <input
+                            v-model="form.sso_attr_role"
+                            type="text"
+                            placeholder="role"
+                            class="mt-2 w-full max-w-sm rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                        />
+                    </div>
+                </div>
+            </div>
+
+            <!-- Submit -->
+            <div class="flex items-center justify-end gap-3">
+                <span v-if="form.recentlySuccessful" class="text-sm text-emerald-400">Saved.</span>
+                <button
+                    type="submit"
+                    :disabled="form.processing"
+                    class="rounded-lg bg-gradient-to-r from-[var(--esc-panel-accent)] to-[var(--esc-panel-accent-secondary)] px-5 py-2 text-sm font-medium text-white shadow-lg shadow-[var(--esc-panel-bg)]/20 transition-all hover:from-[var(--esc-panel-accent-hover)] hover:to-[var(--esc-panel-accent-secondary-hover)] disabled:opacity-50"
+                >
+                    {{ form.processing ? 'Saving...' : 'Save SSO Settings' }}
+                </button>
+            </div>
+        </form>
+    </EscalatedLayout>
+</template>

package/src/pages/Admin/Settings/TwoFactor.vue

@@ -0,0 +1,110 @@
+<script setup>
+import EscalatedLayout from '../../../components/EscalatedLayout.vue';
+import TwoFactorSetup from '../../../components/TwoFactorSetup.vue';
+import { router, usePage } from '@inertiajs/vue3';
+import { ref, computed } from 'vue';
+
+defineProps({
+    enabled: { type: Boolean, default: false },
+    pending: { type: Boolean, default: false },
+});
+
+const page = usePage();
+const showSetup = ref(false);
+const setupData = computed(() => page.props.flash?.two_factor_setup);
+
+function startSetup() {
+    router.post(
+        route('escalated.admin.two-factor.setup'),
+        {},
+        {
+            preserveScroll: true,
+            onSuccess: () => {
+                showSetup.value = true;
+            },
+        },
+    );
+}
+
+function confirmCode(code) {
+    router.post(
+        route('escalated.admin.two-factor.confirm'),
+        { code },
+        {
+            preserveScroll: true,
+        },
+    );
+}
+
+function disable() {
+    if (confirm('Are you sure you want to disable two-factor authentication?')) {
+        router.post(
+            route('escalated.admin.two-factor.disable'),
+            {},
+            {
+                preserveScroll: true,
+            },
+        );
+    }
+}
+</script>
+
+<template>
+    <EscalatedLayout title="Two-Factor Authentication">
+        <div class="mx-auto max-w-2xl space-y-6">
+            <!-- Status -->
+            <div class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6">
+                <h3 class="mb-4 text-sm font-semibold text-[var(--esc-panel-text)]">Two-Factor Authentication</h3>
+                <p class="text-sm text-[var(--esc-panel-text-tertiary)]">
+                    Add an extra layer of security by requiring a time-based one-time password (TOTP) in addition to
+                    your password when signing in.
+                </p>
+                <div class="mt-4">
+                    <div v-if="enabled" class="flex items-center gap-3">
+                        <span
+                            class="inline-flex items-center rounded-full bg-emerald-500/10 px-3 py-1 text-xs font-medium text-emerald-400"
+                        >
+                            Enabled
+                        </span>
+                        <button
+                            type="button"
+                            class="rounded-lg border border-rose-500/30 px-4 py-2 text-sm text-rose-400 hover:bg-rose-500/10"
+                            @click="disable"
+                        >
+                            Disable 2FA
+                        </button>
+                    </div>
+                    <div v-else-if="!showSetup && !setupData">
+                        <span
+                            class="mb-3 inline-flex items-center rounded-full bg-neutral-700/50 px-3 py-1 text-xs font-medium text-[var(--esc-panel-text-tertiary)]"
+                        >
+                            Not Enabled
+                        </span>
+                        <div class="mt-3">
+                            <button
+                                type="button"
+                                class="rounded-lg bg-gradient-to-r from-[var(--esc-panel-accent)] to-[var(--esc-panel-accent-secondary)] px-5 py-2 text-sm font-medium text-white shadow-lg shadow-[var(--esc-panel-bg)]/20 transition-all hover:from-[var(--esc-panel-accent-hover)] hover:to-[var(--esc-panel-accent-secondary-hover)]"
+                                @click="startSetup"
+                            >
+                                Set Up Two-Factor Authentication
+                            </button>
+                        </div>
+                    </div>
+                </div>
+            </div>
+
+            <!-- Setup Wizard -->
+            <div
+                v-if="setupData && !enabled"
+                class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6"
+            >
+                <TwoFactorSetup
+                    :qr-uri="setupData.qr_uri"
+                    :recovery-codes="setupData.recovery_codes"
+                    @confirm="confirmCode"
+                    @cancel="showSetup = false"
+                />
+            </div>
+        </div>
+    </EscalatedLayout>
+</template>