@keycloak/keycloak-admin-ui 26.2.1 → 26.2.3

package/lib/PermissionConfigurationDetails-0hvEwSNW.js

@@ -0,0 +1,704 @@
+import { jsx as e, jsxs as T, Fragment as j } from "react/jsx-runtime";
+import { u as q, a as ce, b as Y, b9 as le, ax as de, V as J, aq as pe, M as _, j as Q, k as me, F as W, Y as $, $ as ue, ba as R, bb as ye, A as X, B as F, l as V, bc as ge, bd as Pe, be as fe, bf as G, bg as he, bh as be, bi as ve, bj as Ce, bk as Te, bl as Se, bm as we, bn as xe, e as z, Q as Z, n as L, bo as H, aY as ee, bp as Ae, q as ie, I as se, J as te, K, O as oe, bq as ne, br as ae, ak as ke, at as Ie, al as Oe, aw as De, a7 as Ee, ao as Fe, bs as Ne, aa as Ve, ar as Ke, c as Re, P as Le, d as qe, bt as Me, bu as ze, bv as U, bw as Be } from "./index-Bd4uRM2j.js";
+import { useEffect as je, useState as x, useMemo as He } from "react";
+import { useTranslation as M } from "react-i18next";
+import { useNavigate as $e, Link as Ge } from "react-router-dom";
+import { S as Ue } from "./ScopePicker-Cbywl8IC.js";
+const Ye = {
+  name: "",
+  description: "",
+  type: "group",
+  policies: [],
+  decisionStrategy: de.UNANIMOUS,
+  logic: le.POSITIVE
+}, B = {
+  aggregate: xe,
+  client: we,
+  user: Se,
+  "client-scope": Te,
+  group: G,
+  regex: Ce,
+  role: ve,
+  time: be,
+  js: he,
+  default: G
+}, Je = (a) => a in B, _e = ({
+  permissionClientId: a,
+  providers: l,
+  policies: w,
+  toggleDialog: t,
+  onAssign: n
+}) => {
+  const { adminClient: o } = q(), { realmRepresentation: A } = ce(), { t: d } = M(), y = Y({
+    mode: "onChange",
+    defaultValues: Ye
+  }), { addAlert: k, addError: E } = J(), { handleSubmit: C, reset: b } = y, I = A?.adminPermissionsEnabled, P = pe({
+    control: y.control,
+    name: "type"
+  });
+  function r() {
+    return P && Je(P) ? B[P] : B.default;
+  }
+  const m = r();
+  je(() => {
+    if (P) {
+      const { name: c, description: v, decisionStrategy: O, logic: S } = y.getValues();
+      b({
+        type: P,
+        name: c,
+        description: v,
+        decisionStrategy: O,
+        logic: S
+      });
+    }
+  }, [P, b, y]);
+  const u = async (c) => {
+    const { groups: v, roles: O, policies: S, clients: D, ...s } = c, g = {
+      ...s,
+      ...v && v.length > 0 && { groups: v },
+      ...O && O.length > 0 && { roles: O },
+      ...S && S.length > 0 && { policies: S },
+      ...D && D.length > 0 && { clients: D },
+      ...s.type === "group" && (!v || v.length === 0) && { groups: [] },
+      ...s.type === "client" && (!D || D.length === 0) && { clients: [] }
+    };
+    try {
+      const p = await o.clients.createPolicy(
+        { id: a, type: P },
+        g
+      );
+      n(p), t(), k(d("createPolicySuccess"), z.success);
+    } catch (p) {
+      E("policySaveError", p);
+    }
+  };
+  return /* @__PURE__ */ e(
+    _,
+    {
+      "aria-label": d("createPermissionPolicy"),
+      variant: Q.medium,
+      header: /* @__PURE__ */ e(ge, { children: /* @__PURE__ */ e(Pe, { component: fe.h1, children: d("createPermissionPolicy") }) }),
+      isOpen: !0,
+      onClose: t,
+      children: /* @__PURE__ */ T(
+        me,
+        {
+          id: "createPermissionPolicy-form",
+          onSubmit: (c) => {
+            c.stopPropagation(), C(u)(c);
+          },
+          isHorizontal: !0,
+          children: [
+            /* @__PURE__ */ T(W, { ...y, children: [
+              /* @__PURE__ */ e(
+                $,
+                {
+                  name: "name",
+                  label: d("name"),
+                  rules: { required: d("required") }
+                }
+              ),
+              /* @__PURE__ */ e($, { name: "description", label: d("description") }),
+              l && l.length > 0 && /* @__PURE__ */ e(
+                ue,
+                {
+                  name: "type",
+                  label: d("policyType"),
+                  labelIcon: d("policyTypeHelpText"),
+                  options: l.map((c) => ({
+                    key: c.type,
+                    value: R(c.type)
+                  })),
+                  controller: { defaultValue: "" }
+                }
+              ),
+              /* @__PURE__ */ e(
+                m,
+                {
+                  isPermissionClient: I,
+                  permissionClientId: a
+                }
+              ),
+              /* @__PURE__ */ e(ye, {})
+            ] }),
+            /* @__PURE__ */ e(X, { children: /* @__PURE__ */ T("div", { className: "pf-v5-u-mt-md", children: [
+              /* @__PURE__ */ e(
+                F,
+                {
+                  variant: V.primary,
+                  className: "pf-v5-u-mr-md",
+                  type: "submit",
+                  "data-testid": "save",
+                  isDisabled: w?.length === 0 && P === "aggregate",
+                  children: d("save")
+                }
+              ),
+              /* @__PURE__ */ e(F, { variant: "link", "data-testid": "cancel", onClick: t, children: d("cancel") })
+            ] }) })
+          ]
+        }
+      )
+    }
+  );
+}, Qe = ({
+  toggleDialog: a,
+  onAssign: l,
+  open: w,
+  permissionClientId: t
+}) => {
+  const { t: n } = M(), { adminClient: o } = q(), [A, d] = x([]), [y, k] = x(void 0), [E, C] = Z(), [b, I] = x([]);
+  L(
+    () => o.clients.listPolicyProviders({
+      id: t
+    }),
+    (r) => {
+      const m = r.filter((u) => u.type !== "resource" && u.type !== "scope").map((u) => u.name).filter((u) => u !== void 0);
+      I(H(m));
+    },
+    [t]
+  );
+  const P = async (r, m, u) => {
+    const c = {
+      id: t,
+      permission: "false",
+      first: r,
+      max: m
+    };
+    return u && (c.name = u), y && (c.type = y), await o.clients.listPolicies(c) || [];
+  };
+  return /* @__PURE__ */ e(
+    _,
+    {
+      variant: Q.medium,
+      title: n("assignExistingPolicies"),
+      isOpen: w,
+      onClose: a,
+      actions: [
+        /* @__PURE__ */ T(j, { children: [
+          /* @__PURE__ */ e(
+            F,
+            {
+              id: "modal-assignExistingPolicies",
+              "data-testid": "confirm",
+              variant: V.primary,
+              onClick: () => {
+                const r = A.map((m) => ({ policy: m }));
+                l(r), a();
+              },
+              isDisabled: A.length === 0,
+              children: n("assign")
+            },
+            "assign"
+          ),
+          /* @__PURE__ */ e(
+            F,
+            {
+              id: "modal-cancelExistingPolicies",
+              "data-testid": "cancel",
+              variant: V.link,
+              onClick: () => {
+                d([]), a();
+              },
+              children: n("cancel")
+            },
+            "cancel"
+          )
+        ] })
+      ],
+      children: /* @__PURE__ */ e(
+        ee,
+        {
+          loader: P,
+          ariaLabelKey: n("chooseAPolicyType"),
+          searchPlaceholderKey: n("searchClientAuthorizationPolicy"),
+          isSearching: !0,
+          searchTypeComponent: /* @__PURE__ */ e(
+            se,
+            {
+              onSelect: (r, m) => {
+                k(m), C();
+              },
+              onOpenChange: C,
+              toggle: (r) => /* @__PURE__ */ e(
+                oe,
+                {
+                  ref: r,
+                  "data-testid": "filter-type-dropdown-existingPolicies",
+                  id: "toggle-id-10",
+                  onClick: C,
+                  icon: /* @__PURE__ */ e(ae, {}),
+                  statusIcon: /* @__PURE__ */ e(ne, {}),
+                  children: y || n("allTypes")
+                }
+              ),
+              isOpen: E,
+              children: /* @__PURE__ */ T(te, { children: [
+                /* @__PURE__ */ e(
+                  K,
+                  {
+                    "data-testid": "filter-type-dropdown-existingPolicies-all",
+                    onClick: () => k(void 0),
+                    children: n("allTypes")
+                  },
+                  "all"
+                ),
+                b.map((r) => /* @__PURE__ */ e(
+                  K,
+                  {
+                    "data-testid": `filter-type-dropdown-existingPolicies-${r}`,
+                    onClick: () => k(r),
+                    children: r
+                  },
+                  r
+                ))
+              ] })
+            }
+          ),
+          canSelectAll: !0,
+          onSelect: (r) => d(r),
+          columns: [
+            { name: "name" },
+            {
+              name: "type",
+              cellFormatters: [Ae()]
+            },
+            { name: "description" }
+          ],
+          emptyState: /* @__PURE__ */ e(
+            ie,
+            {
+              message: n("emptyAssignExistingPolicies"),
+              instructions: n("emptyAssignExistingPoliciesInstructions")
+            }
+          )
+        },
+        y
+      )
+    }
+  );
+}, We = ({
+  permissionClientId: a,
+  providers: l,
+  policies: w,
+  resourceType: t
+}) => {
+  const { adminClient: n } = q(), { t: o } = M(), {
+    control: A,
+    getValues: d,
+    setValue: y,
+    trigger: k,
+    formState: { errors: E }
+  } = ke(), C = d("policies"), [b, I] = x(!1), [P, r] = x(!1), [m, u] = x([]), [c, v] = x(void 0), [O, S] = Z();
+  L(
+    () => C && C.length > 0 ? Promise.all(
+      C.map(
+        (i) => n.clients.findOnePolicy({
+          id: a,
+          type: i.type,
+          policyId: i.id
+        })
+      )
+    ) : Promise.resolve([]),
+    (i) => {
+      const f = i.filter((h) => h);
+      u(f);
+    },
+    [w]
+  );
+  const D = H(
+    l ? l.filter((i) => i.type !== "resource" && i.type !== "scope").map((i) => i.name) : []
+  ), s = (i) => {
+    const f = i.map(({ policy: h }) => ({
+      id: h.id
+    }));
+    y("policies", [
+      ...d("policies") || [],
+      ...f
+    ]), k("policies"), u([
+      ...m,
+      ...i.map(({ policy: h }) => h)
+    ]);
+  }, g = (i) => {
+    const f = m.filter(
+      (h) => h.id !== i.id
+    );
+    u(f), y(
+      "policies",
+      f.map((h) => ({
+        id: h.id,
+        name: h.name,
+        type: h.type,
+        description: h.description
+      }))
+    );
+  }, p = c ? m.filter(
+    (i) => R(i.type) === c
+  ) : m;
+  return /* @__PURE__ */ T(
+    Ie,
+    {
+      label: o("policies"),
+      labelIcon: /* @__PURE__ */ e(
+        Ee,
+        {
+          helpText: o("permissionPoliciesHelp"),
+          fieldLabelId: "policies"
+        }
+      ),
+      fieldId: "policies",
+      isRequired: !0,
+      children: [
+        /* @__PURE__ */ e(
+          Oe,
+          {
+            name: "policies",
+            control: A,
+            defaultValue: [],
+            rules: {
+              validate: (i) => !i || i.length === 0 ? !1 : i.every(({ id: f }) => f && f.trim().length > 0)
+            },
+            render: () => /* @__PURE__ */ T(j, { children: [
+              b && /* @__PURE__ */ e(
+                Qe,
+                {
+                  permissionClientId: a,
+                  open: b,
+                  toggleDialog: () => I(!b),
+                  onAssign: s
+                }
+              ),
+              P && /* @__PURE__ */ e(
+                _e,
+                {
+                  toggleDialog: () => r(!P),
+                  permissionClientId: a,
+                  providers: l,
+                  policies: w,
+                  resourceType: t,
+                  onAssign: (i) => {
+                    s([{ policy: i }]);
+                  }
+                }
+              ),
+              /* @__PURE__ */ e(
+                F,
+                {
+                  "data-testid": "select-assignedPolicy-button",
+                  variant: "secondary",
+                  onClick: () => {
+                    I(!0);
+                  },
+                  children: o("assignExistingPolicies")
+                }
+              ),
+              /* @__PURE__ */ e(
+                F,
+                {
+                  "data-testid": "select-createNewPolicy-button",
+                  className: "pf-v5-u-ml-md",
+                  variant: "secondary",
+                  onClick: () => {
+                    r(!0);
+                  },
+                  children: o("createNewPolicy")
+                }
+              )
+            ] })
+          }
+        ),
+        m.length > 0 && /* @__PURE__ */ e(
+          ee,
+          {
+            loader: p,
+            ariaLabelKey: o("policies"),
+            searchPlaceholderKey: o("searchClientAuthorizationPolicy"),
+            isSearching: !0,
+            searchTypeComponent: /* @__PURE__ */ e(
+              se,
+              {
+                onSelect: (i, f) => {
+                  v(f), S();
+                },
+                onOpenChange: S,
+                toggle: (i) => /* @__PURE__ */ e(
+                  oe,
+                  {
+                    ref: i,
+                    "data-testid": "filter-type-dropdown-existingPolicies",
+                    id: "toggle-id-10",
+                    onClick: S,
+                    icon: /* @__PURE__ */ e(ae, {}),
+                    statusIcon: /* @__PURE__ */ e(ne, {}),
+                    children: c ? R(c) : o("allTypes")
+                  }
+                ),
+                isOpen: O,
+                children: /* @__PURE__ */ T(te, { children: [
+                  /* @__PURE__ */ e(
+                    K,
+                    {
+                      "data-testid": "filter-type-dropdown-existingPolicies-all",
+                      onClick: () => v(void 0),
+                      children: o("allTypes")
+                    },
+                    "all"
+                  ),
+                  D.map((i) => /* @__PURE__ */ e(
+                    K,
+                    {
+                      "data-testid": `filter-type-dropdown-existingPolicies-${i}`,
+                      onClick: () => v(i),
+                      children: i
+                    },
+                    i
+                  ))
+                ] })
+              }
+            ),
+            actionResolver: (i) => [
+              {
+                title: o("unAssignPolicy"),
+                onClick: () => g(i.data)
+              }
+            ],
+            columns: [
+              { name: "name", displayKey: o("name") },
+              {
+                name: "type",
+                displayKey: o("type"),
+                cellFormatters: [(i) => R(String(i || ""))]
+              },
+              { name: "description", displayKey: o("description") }
+            ],
+            emptyState: /* @__PURE__ */ e(
+              ie,
+              {
+                message: o("emptyAssignExistingPolicies"),
+                instructions: o("emptyAssignExistingPoliciesInstructions")
+              }
+            )
+          }
+        ),
+        E.policies && /* @__PURE__ */ e(De, { message: o("requiredPolicies") })
+      ]
+    }
+  );
+};
+function oi() {
+  const { adminClient: a } = q(), { t: l } = M(), { realm: w, permissionClientId: t, permissionId: n, resourceType: o } = Fe(), A = $e(), d = Y(), { handleSubmit: y, reset: k } = d, { addAlert: E, addError: C } = J(), [b, I] = x(), [P, r] = x(), [m, u] = x(), c = Ne({
+    clientId: t
+  }), v = He(
+    () => c.filter(({ type: s }) => s === o).flatMap(({ scopes: s = [] }) => s).map((s) => s || ""),
+    [c, o]
+  );
+  L(
+    async () => {
+      if (!t)
+        return {};
+      const [s, g] = await Promise.all([
+        a.clients.listPolicyProviders({ id: t }),
+        a.clients.listPolicies({
+          id: t,
+          permission: "false"
+        })
+      ]);
+      return { providers: s, policies: g };
+    },
+    ({ providers: s, policies: g }) => {
+      const p = s?.filter(
+        (i) => i.type !== "resource" && i.type !== "scope"
+      );
+      r(
+        H(
+          p,
+          (i) => i.type
+        )
+      ), u(g || []);
+    },
+    [t]
+  ), L(
+    async () => {
+      if (!n)
+        return {};
+      const [s, g, p, i] = await Promise.all([
+        a.clients.findOnePermission({
+          id: t,
+          type: "scope",
+          permissionId: n
+        }),
+        a.clients.getAssociatedResources({
+          id: t,
+          permissionId: n
+        }),
+        a.clients.getAssociatedPolicies({
+          id: t,
+          permissionId: n
+        }),
+        a.clients.getAssociatedScopes({
+          id: t,
+          permissionId: n
+        })
+      ]);
+      if (!s)
+        throw new Error(l("notFound"));
+      return {
+        permission: s,
+        resources: g,
+        policies: p,
+        scopes: i
+      };
+    },
+    ({ permission: s, resources: g, policies: p, scopes: i }) => {
+      const f = g?.map((N) => N.name) || [], h = p?.map((N) => N.id) || [], re = i?.map((N) => N.name) || [];
+      k({
+        ...s,
+        resources: f,
+        policies: p,
+        scopes: i
+      }), I({
+        ...s,
+        resources: f,
+        policies: h,
+        scopes: re
+      });
+    },
+    [t, n]
+  );
+  const O = async (s) => {
+    try {
+      const g = {
+        ...s,
+        policies: s.policies?.map((p) => p.id),
+        scopes: s.scopes?.map((p) => p.name),
+        resourceType: o
+      };
+      if (n)
+        await a.clients.updatePermission(
+          { id: t, type: "scope", permissionId: n },
+          g
+        );
+      else {
+        const p = await a.clients.createPermission(
+          { id: t, type: "scope" },
+          g
+        );
+        I(p), A(
+          Be({
+            realm: w,
+            permissionClientId: t,
+            permissionId: p.id,
+            resourceType: o
+          })
+        );
+      }
+      E(
+        l(n ? "updatePermissionSuccess" : "createPermissionSuccess"),
+        z.success
+      );
+    } catch (g) {
+      C("permissionSaveError", g);
+    }
+  }, [S, D] = Ve({
+    titleKey: "deletePermission",
+    messageKey: l("deleteAdminPermissionConfirm", {
+      permission: b?.name
+    }),
+    continueButtonVariant: V.danger,
+    continueButtonLabel: "confirm",
+    onConfirm: async () => {
+      try {
+        await a.clients.delPermission({
+          id: t,
+          type: "scope",
+          permissionId: n
+        }), E(l("permissionDeletedSuccess"), z.success), A(
+          U({
+            realm: w,
+            permissionClientId: t,
+            tab: "permissions"
+          })
+        );
+      } catch (s) {
+        C("permissionDeletedError", s);
+      }
+    }
+  });
+  return b ? /* @__PURE__ */ T(j, { children: [
+    /* @__PURE__ */ e(D, {}),
+    /* @__PURE__ */ e(
+      Re,
+      {
+        titleKey: n ? b?.name : l("createPermission"),
+        subKey: n ? b?.description : l("createPermissionOfType", { resourceType: o }),
+        dropdownItems: n ? [
+          /* @__PURE__ */ e(
+            K,
+            {
+              "data-testid": "delete-permission",
+              onClick: () => S(),
+              children: l("delete")
+            },
+            "delete"
+          )
+        ] : void 0
+      }
+    ),
+    /* @__PURE__ */ e(Le, { variant: "light", children: /* @__PURE__ */ T(qe, { isHorizontal: !0, onSubmit: y(O), role: "anyone", children: [
+      /* @__PURE__ */ T(W, { ...d, children: [
+        /* @__PURE__ */ e(Me, { clientId: t }),
+        /* @__PURE__ */ e(
+          Ue,
+          {
+            clientId: t,
+            resourceTypeScopes: v ?? []
+          }
+        ),
+        /* @__PURE__ */ e(ze, { resourceType: o }),
+        /* @__PURE__ */ e(
+          We,
+          {
+            permissionClientId: t,
+            providers: P,
+            policies: m,
+            resourceType: o
+          }
+        )
+      ] }),
+      /* @__PURE__ */ e(X, { children: /* @__PURE__ */ T("div", { className: "pf-v5-u-mt-md", children: [
+        /* @__PURE__ */ e(
+          F,
+          {
+            variant: V.primary,
+            className: "pf-v5-u-mr-md",
+            type: "submit",
+            "data-testid": "save",
+            children: l("save")
+          }
+        ),
+        /* @__PURE__ */ e(
+          F,
+          {
+            variant: "link",
+            "data-testid": "cancel",
+            component: (s) => /* @__PURE__ */ e(
+              Ge,
+              {
+                ...s,
+                to: U({
+                  realm: w,
+                  permissionClientId: t,
+                  tab: "permissions"
+                })
+              }
+            ),
+            children: l("cancel")
+          }
+        )
+      ] }) })
+    ] }) })
+  ] }) : /* @__PURE__ */ e(Ke, {});
+}
+export {
+  oi as default
+};
+//# sourceMappingURL=PermissionConfigurationDetails-0hvEwSNW.js.map