@keycloak/keycloak-admin-ui 26.1.5 → 26.2.0

package/lib/PermissionConfigurationDetails-DPu0gttX.js

@@ -0,0 +1,702 @@
+import { jsx as e, jsxs as C, Fragment as z } from "react/jsx-runtime";
+import { u as M, a as ce, b as Y, b9 as le, ax as de, V as J, aq as pe, M as W, j as _, k as me, F as Q, Y as $, $ as ye, ba as V, bb as ue, A as X, B as F, l as K, bc as ge, bd as Pe, be as fe, bf as G, bg as he, bh as ve, bi as be, bj as Ce, bk as Se, bl as Te, bm as we, bn as xe, e as B, S as Z, n as L, bo as H, aY as ee, v as ie, I as se, J as te, K as R, O as oe, bp as ne, bq as ae, ak as Ae, at as ke, al as Ie, aw as Oe, a7 as De, ao as Ee, br as Fe, aa as Ve, ar as Ne, c as Ke, P as Re, d as Le, bs as Me, bt as qe, bu as U, bv as Be } from "./index-B5GgWXK6.js";
+import { useEffect as je, useState as w, useMemo as ze } from "react";
+import { useTranslation as q } from "react-i18next";
+import { useNavigate as He, Link as $e } from "react-router-dom";
+import { S as Ge } from "./ScopePicker-DxDYNCCh.js";
+const Ue = {
+  name: "",
+  description: "",
+  type: "group",
+  policies: [],
+  decisionStrategy: de.UNANIMOUS,
+  logic: le.POSITIVE
+}, j = {
+  aggregate: xe,
+  client: we,
+  user: Te,
+  "client-scope": Se,
+  group: G,
+  regex: Ce,
+  role: be,
+  time: ve,
+  js: he,
+  default: G
+}, Ye = (c) => c in j, Je = ({
+  permissionClientId: c,
+  providers: l,
+  policies: x,
+  toggleDialog: o,
+  onAssign: s
+}) => {
+  const { adminClient: n } = M(), { realmRepresentation: A } = ce(), { t: d } = q(), u = Y({
+    mode: "onChange",
+    defaultValues: Ue
+  }), { addAlert: k, addError: D } = J(), { handleSubmit: b, reset: f } = u, I = A?.adminPermissionsEnabled, g = pe({
+    control: u.control,
+    name: "type"
+  });
+  function E() {
+    return g && Ye(g) ? j[g] : j.default;
+  }
+  const S = E();
+  je(() => {
+    if (g) {
+      const { name: r, description: P, decisionStrategy: m, logic: T } = u.getValues();
+      f({
+        type: g,
+        name: r,
+        description: P,
+        decisionStrategy: m,
+        logic: T
+      });
+    }
+  }, [g, f, u]);
+  const a = async (r) => {
+    const { groups: P, roles: m, policies: T, clients: O, ...t } = r, y = {
+      ...t,
+      ...P && P.length > 0 && { groups: P },
+      ...m && m.length > 0 && { roles: m },
+      ...T && T.length > 0 && { policies: T },
+      ...O && O.length > 0 && { clients: O },
+      ...t.type === "group" && (!P || P.length === 0) && { groups: [] },
+      ...t.type === "client" && (!O || O.length === 0) && { clients: [] }
+    };
+    try {
+      const p = await n.clients.createPolicy(
+        { id: c, type: g },
+        y
+      );
+      s(p), o(), k(d("createPolicySuccess"), B.success);
+    } catch (p) {
+      D("policySaveError", p);
+    }
+  };
+  return /* @__PURE__ */ e(
+    W,
+    {
+      "aria-label": d("createPermissionPolicy"),
+      variant: _.medium,
+      header: /* @__PURE__ */ e(ge, { children: /* @__PURE__ */ e(Pe, { component: fe.h1, children: d("createPermissionPolicy") }) }),
+      isOpen: !0,
+      onClose: o,
+      children: /* @__PURE__ */ C(
+        me,
+        {
+          id: "createPermissionPolicy-form",
+          onSubmit: (r) => {
+            r.stopPropagation(), b(a)(r);
+          },
+          isHorizontal: !0,
+          children: [
+            /* @__PURE__ */ C(Q, { ...u, children: [
+              /* @__PURE__ */ e(
+                $,
+                {
+                  name: "name",
+                  label: d("name"),
+                  rules: { required: d("required") }
+                }
+              ),
+              /* @__PURE__ */ e($, { name: "description", label: d("description") }),
+              l && l.length > 0 && /* @__PURE__ */ e(
+                ye,
+                {
+                  name: "type",
+                  label: d("policyType"),
+                  labelIcon: d("policyTypeHelpText"),
+                  options: l.map((r) => ({
+                    key: r.type,
+                    value: V(r.type)
+                  })),
+                  controller: { defaultValue: "" }
+                }
+              ),
+              /* @__PURE__ */ e(
+                S,
+                {
+                  isPermissionClient: I,
+                  permissionClientId: c
+                }
+              ),
+              /* @__PURE__ */ e(ue, {})
+            ] }),
+            /* @__PURE__ */ e(X, { children: /* @__PURE__ */ C("div", { className: "pf-v5-u-mt-md", children: [
+              /* @__PURE__ */ e(
+                F,
+                {
+                  variant: K.primary,
+                  className: "pf-v5-u-mr-md",
+                  type: "submit",
+                  "data-testid": "save",
+                  isDisabled: x?.length === 0 && g === "aggregate",
+                  children: d("save")
+                }
+              ),
+              /* @__PURE__ */ e(F, { variant: "link", "data-testid": "cancel", onClick: o, children: d("cancel") })
+            ] }) })
+          ]
+        }
+      )
+    }
+  );
+}, We = ({
+  toggleDialog: c,
+  onAssign: l,
+  open: x,
+  permissionClientId: o
+}) => {
+  const { t: s } = q(), { adminClient: n } = M(), [A, d] = w([]), [u, k] = w(void 0), [D, b] = Z(), [f, I] = w([]), [g, E] = w([]);
+  L(
+    () => Promise.all([
+      n.clients.listPolicyProviders({
+        id: o
+      }),
+      n.clients.listPolicies({
+        id: o,
+        permission: "false"
+      })
+    ]),
+    ([a, r]) => {
+      const P = a.filter((m) => m.type !== "resource" && m.type !== "scope").map((m) => m.name).filter((m) => m !== void 0);
+      E(H(P)), I(r || []);
+    },
+    [o]
+  );
+  const S = u ? f.filter((a) => V(a.type) === u) : f;
+  return /* @__PURE__ */ e(
+    W,
+    {
+      variant: _.medium,
+      title: s("assignExistingPolicies"),
+      isOpen: x,
+      onClose: c,
+      actions: [
+        /* @__PURE__ */ C(z, { children: [
+          /* @__PURE__ */ e(
+            F,
+            {
+              id: "modal-assignExistingPolicies",
+              "data-testid": "confirm",
+              variant: K.primary,
+              onClick: () => {
+                const a = A.map((r) => ({ policy: r }));
+                l(a), c();
+              },
+              isDisabled: A.length === 0,
+              children: s("assign")
+            },
+            "assign"
+          ),
+          /* @__PURE__ */ e(
+            F,
+            {
+              id: "modal-cancelExistingPolicies",
+              "data-testid": "cancel",
+              variant: K.link,
+              onClick: () => {
+                d([]), c();
+              },
+              children: s("cancel")
+            },
+            "cancel"
+          )
+        ] })
+      ],
+      children: /* @__PURE__ */ e(
+        ee,
+        {
+          loader: S,
+          ariaLabelKey: s("chooseAPolicyType"),
+          searchPlaceholderKey: s("searchClientAuthorizationPolicy"),
+          isSearching: !0,
+          searchTypeComponent: /* @__PURE__ */ e(
+            se,
+            {
+              onSelect: (a, r) => {
+                k(r), b();
+              },
+              onOpenChange: b,
+              toggle: (a) => /* @__PURE__ */ e(
+                oe,
+                {
+                  ref: a,
+                  "data-testid": "filter-type-dropdown-existingPolicies",
+                  id: "toggle-id-10",
+                  onClick: b,
+                  icon: /* @__PURE__ */ e(ae, {}),
+                  statusIcon: /* @__PURE__ */ e(ne, {}),
+                  children: u || s("allTypes")
+                }
+              ),
+              isOpen: D,
+              children: /* @__PURE__ */ C(te, { children: [
+                /* @__PURE__ */ e(
+                  R,
+                  {
+                    "data-testid": "filter-type-dropdown-existingPolicies-all",
+                    onClick: () => k(void 0),
+                    children: s("allTypes")
+                  },
+                  "all"
+                ),
+                g.map((a) => /* @__PURE__ */ e(
+                  R,
+                  {
+                    "data-testid": `filter-type-dropdown-existingPolicies-${a}`,
+                    onClick: () => k(a),
+                    children: a
+                  },
+                  a
+                ))
+              ] })
+            }
+          ),
+          canSelectAll: !0,
+          onSelect: (a) => d(a),
+          columns: [
+            { name: "name", displayKey: s("name") },
+            {
+              name: "type",
+              displayKey: s("type"),
+              cellFormatters: [(a) => V(String(a || ""))]
+            },
+            { name: "description", displayKey: s("description") }
+          ],
+          emptyState: /* @__PURE__ */ e(
+            ie,
+            {
+              message: s("emptyAssignExistingPolicies"),
+              instructions: s("emptyAssignExistingPoliciesInstructions")
+            }
+          )
+        }
+      )
+    }
+  );
+}, _e = ({
+  permissionClientId: c,
+  providers: l,
+  policies: x,
+  resourceType: o
+}) => {
+  const { adminClient: s } = M(), { t: n } = q(), {
+    control: A,
+    getValues: d,
+    setValue: u,
+    trigger: k,
+    formState: { errors: D }
+  } = Ae(), b = d("policies"), [f, I] = w(!1), [g, E] = w(!1), [S, a] = w([]), [r, P] = w(void 0), [m, T] = Z();
+  L(
+    () => b && b.length > 0 ? Promise.all(
+      b.map(
+        (i) => s.clients.findOnePolicy({
+          id: c,
+          type: i.type,
+          policyId: i.id
+        })
+      )
+    ) : Promise.resolve([]),
+    (i) => {
+      const h = i.filter((v) => v);
+      a(h);
+    },
+    [x]
+  );
+  const O = H(
+    l ? l.filter((i) => i.type !== "resource" && i.type !== "scope").map((i) => i.name) : []
+  ), t = (i) => {
+    const h = i.map(({ policy: v }) => ({
+      id: v.id
+    }));
+    u("policies", [
+      ...d("policies") || [],
+      ...h
+    ]), k("policies"), a([
+      ...S,
+      ...i.map(({ policy: v }) => v)
+    ]);
+  }, y = (i) => {
+    const h = S.filter(
+      (v) => v.id !== i.id
+    );
+    a(h), u(
+      "policies",
+      h.map((v) => ({
+        id: v.id,
+        name: v.name,
+        type: v.type,
+        description: v.description
+      }))
+    );
+  }, p = r ? S.filter(
+    (i) => V(i.type) === r
+  ) : S;
+  return /* @__PURE__ */ C(
+    ke,
+    {
+      label: n("policies"),
+      labelIcon: /* @__PURE__ */ e(
+        De,
+        {
+          helpText: n("permissionPoliciesHelp"),
+          fieldLabelId: "policies"
+        }
+      ),
+      fieldId: "policies",
+      isRequired: !0,
+      children: [
+        /* @__PURE__ */ e(
+          Ie,
+          {
+            name: "policies",
+            control: A,
+            defaultValue: [],
+            rules: {
+              validate: (i) => !i || i.length === 0 ? !1 : i.every(({ id: h }) => h && h.trim().length > 0)
+            },
+            render: () => /* @__PURE__ */ C(z, { children: [
+              f && /* @__PURE__ */ e(
+                We,
+                {
+                  permissionClientId: c,
+                  open: f,
+                  toggleDialog: () => I(!f),
+                  onAssign: t
+                }
+              ),
+              g && /* @__PURE__ */ e(
+                Je,
+                {
+                  toggleDialog: () => E(!g),
+                  permissionClientId: c,
+                  providers: l,
+                  policies: x,
+                  resourceType: o,
+                  onAssign: (i) => {
+                    t([{ policy: i }]);
+                  }
+                }
+              ),
+              /* @__PURE__ */ e(
+                F,
+                {
+                  "data-testid": "select-assignedPolicy-button",
+                  variant: "secondary",
+                  onClick: () => {
+                    I(!0);
+                  },
+                  children: n("assignExistingPolicies")
+                }
+              ),
+              /* @__PURE__ */ e(
+                F,
+                {
+                  "data-testid": "select-createNewPolicy-button",
+                  className: "pf-v5-u-ml-md",
+                  variant: "secondary",
+                  onClick: () => {
+                    E(!0);
+                  },
+                  children: n("createNewPolicy")
+                }
+              )
+            ] })
+          }
+        ),
+        S.length > 0 && /* @__PURE__ */ e(
+          ee,
+          {
+            loader: p,
+            ariaLabelKey: n("policies"),
+            searchPlaceholderKey: n("searchClientAuthorizationPolicy"),
+            isSearching: !0,
+            searchTypeComponent: /* @__PURE__ */ e(
+              se,
+              {
+                onSelect: (i, h) => {
+                  P(h), T();
+                },
+                onOpenChange: T,
+                toggle: (i) => /* @__PURE__ */ e(
+                  oe,
+                  {
+                    ref: i,
+                    "data-testid": "filter-type-dropdown-existingPolicies",
+                    id: "toggle-id-10",
+                    onClick: T,
+                    icon: /* @__PURE__ */ e(ae, {}),
+                    statusIcon: /* @__PURE__ */ e(ne, {}),
+                    children: r ? V(r) : n("allTypes")
+                  }
+                ),
+                isOpen: m,
+                children: /* @__PURE__ */ C(te, { children: [
+                  /* @__PURE__ */ e(
+                    R,
+                    {
+                      "data-testid": "filter-type-dropdown-existingPolicies-all",
+                      onClick: () => P(void 0),
+                      children: n("allTypes")
+                    },
+                    "all"
+                  ),
+                  O.map((i) => /* @__PURE__ */ e(
+                    R,
+                    {
+                      "data-testid": `filter-type-dropdown-existingPolicies-${i}`,
+                      onClick: () => P(i),
+                      children: i
+                    },
+                    i
+                  ))
+                ] })
+              }
+            ),
+            actionResolver: (i) => [
+              {
+                title: n("unAssignPolicy"),
+                onClick: () => y(i.data)
+              }
+            ],
+            columns: [
+              { name: "name", displayKey: n("name") },
+              {
+                name: "type",
+                displayKey: n("type"),
+                cellFormatters: [(i) => V(String(i || ""))]
+              },
+              { name: "description", displayKey: n("description") }
+            ],
+            emptyState: /* @__PURE__ */ e(
+              ie,
+              {
+                message: n("emptyAssignExistingPolicies"),
+                instructions: n("emptyAssignExistingPoliciesInstructions")
+              }
+            )
+          }
+        ),
+        D.policies && /* @__PURE__ */ e(Oe, { message: n("requiredPolicies") })
+      ]
+    }
+  );
+};
+function ti() {
+  const { adminClient: c } = M(), { t: l } = q(), { realm: x, permissionClientId: o, permissionId: s, resourceType: n } = Ee(), A = He(), d = Y(), { handleSubmit: u, reset: k } = d, { addAlert: D, addError: b } = J(), [f, I] = w(), [g, E] = w(), [S, a] = w(), r = Fe({
+    clientId: o
+  }), P = ze(
+    () => r.filter(({ type: t }) => t === n).flatMap(({ scopes: t = [] }) => t).map((t) => t || ""),
+    [r, n]
+  );
+  L(
+    async () => {
+      if (!o)
+        return {};
+      const [t, y] = await Promise.all([
+        c.clients.listPolicyProviders({ id: o }),
+        c.clients.listPolicies({
+          id: o,
+          permission: "false"
+        })
+      ]);
+      return { providers: t, policies: y };
+    },
+    ({ providers: t, policies: y }) => {
+      const p = t?.filter(
+        (i) => i.type !== "resource" && i.type !== "scope"
+      );
+      E(
+        H(
+          p,
+          (i) => i.type
+        )
+      ), a(y || []);
+    },
+    [o]
+  ), L(
+    async () => {
+      if (!s)
+        return {};
+      const [t, y, p, i] = await Promise.all([
+        c.clients.findOnePermission({
+          id: o,
+          type: "scope",
+          permissionId: s
+        }),
+        c.clients.getAssociatedResources({
+          id: o,
+          permissionId: s
+        }),
+        c.clients.getAssociatedPolicies({
+          id: o,
+          permissionId: s
+        }),
+        c.clients.getAssociatedScopes({
+          id: o,
+          permissionId: s
+        })
+      ]);
+      if (!t)
+        throw new Error(l("notFound"));
+      return {
+        permission: t,
+        resources: y,
+        policies: p,
+        scopes: i
+      };
+    },
+    ({ permission: t, resources: y, policies: p, scopes: i }) => {
+      const h = y?.map((N) => N.name) || [], v = p?.map((N) => N.id) || [], re = i?.map((N) => N.name) || [];
+      k({
+        ...t,
+        resources: h,
+        policies: p,
+        scopes: i
+      }), I({
+        ...t,
+        resources: h,
+        policies: v,
+        scopes: re
+      });
+    },
+    [o, s]
+  );
+  const m = async (t) => {
+    try {
+      const y = {
+        ...t,
+        policies: t.policies?.map((p) => p.id),
+        scopes: t.scopes?.map((p) => p.name),
+        resourceType: n
+      };
+      if (s)
+        await c.clients.updatePermission(
+          { id: o, type: "scope", permissionId: s },
+          y
+        );
+      else {
+        const p = await c.clients.createPermission(
+          { id: o, type: "scope" },
+          y
+        );
+        I(p), A(
+          Be({
+            realm: x,
+            permissionClientId: o,
+            permissionId: p.id,
+            resourceType: n
+          })
+        );
+      }
+      D(
+        l(s ? "updatePermissionSuccess" : "createPermissionSuccess"),
+        B.success
+      );
+    } catch (y) {
+      b("permissionSaveError", y);
+    }
+  }, [T, O] = Ve({
+    titleKey: "deletePermission",
+    messageKey: l("deleteAdminPermissionConfirm", {
+      permission: f?.name
+    }),
+    continueButtonVariant: K.danger,
+    continueButtonLabel: "confirm",
+    onConfirm: async () => {
+      try {
+        await c.clients.delPermission({
+          id: o,
+          type: "scope",
+          permissionId: s
+        }), D(l("permissionDeletedSuccess"), B.success), A(
+          U({
+            realm: x,
+            permissionClientId: o,
+            tab: "permissions"
+          })
+        );
+      } catch (t) {
+        b("permissionDeletedError", t);
+      }
+    }
+  });
+  return f ? /* @__PURE__ */ C(z, { children: [
+    /* @__PURE__ */ e(O, {}),
+    /* @__PURE__ */ e(
+      Ke,
+      {
+        titleKey: s ? f?.name : l("createPermission"),
+        subKey: s ? f?.description : l("createPermissionOfType", { resourceType: n }),
+        dropdownItems: s ? [
+          /* @__PURE__ */ e(
+            R,
+            {
+              "data-testid": "delete-permission",
+              onClick: () => T(),
+              children: l("delete")
+            },
+            "delete"
+          )
+        ] : void 0
+      }
+    ),
+    /* @__PURE__ */ e(Re, { variant: "light", children: /* @__PURE__ */ C(Le, { isHorizontal: !0, onSubmit: u(m), role: "anyone", children: [
+      /* @__PURE__ */ C(Q, { ...d, children: [
+        /* @__PURE__ */ e(Me, { clientId: o }),
+        /* @__PURE__ */ e(
+          Ge,
+          {
+            clientId: o,
+            resourceTypeScopes: P ?? []
+          }
+        ),
+        /* @__PURE__ */ e(qe, { resourceType: n }),
+        /* @__PURE__ */ e(
+          _e,
+          {
+            permissionClientId: o,
+            providers: g,
+            policies: S,
+            resourceType: n
+          }
+        )
+      ] }),
+      /* @__PURE__ */ e(X, { children: /* @__PURE__ */ C("div", { className: "pf-v5-u-mt-md", children: [
+        /* @__PURE__ */ e(
+          F,
+          {
+            variant: K.primary,
+            className: "pf-v5-u-mr-md",
+            type: "submit",
+            "data-testid": "save",
+            children: l("save")
+          }
+        ),
+        /* @__PURE__ */ e(
+          F,
+          {
+            variant: "link",
+            "data-testid": "cancel",
+            component: (t) => /* @__PURE__ */ e(
+              $e,
+              {
+                ...t,
+                to: U({
+                  realm: x,
+                  permissionClientId: o,
+                  tab: "permissions"
+                })
+              }
+            ),
+            children: l("cancel")
+          }
+        )
+      ] }) })
+    ] }) })
+  ] }) : /* @__PURE__ */ e(Ne, {});
+}
+export {
+  ti as default
+};
+//# sourceMappingURL=PermissionConfigurationDetails-DPu0gttX.js.map