@spinnaker/core 2026.1.1 → 2026.2.0

package/src/apitoken/RevokeApiTokenButton.tsx

@@ -0,0 +1,79 @@
+// Copyright 2026 DoorDash, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+import React, { useState } from 'react';
+import { Modal } from 'react-bootstrap';
+
+import { ApiTokenService } from './ApiTokenService';
+
+export interface IRevokeApiTokenButtonProps {
+  tokenId: string;
+  tokenName: string;
+  onRevoked: () => void;
+}
+
+export function RevokeApiTokenButton({ tokenId, tokenName, onRevoked }: IRevokeApiTokenButtonProps) {
+  const [showModal, setShowModal] = useState(false);
+  const [revoking, setRevoking] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const handleRevoke = () => {
+    setRevoking(true);
+    setError(null);
+    ApiTokenService.revokeToken(tokenId)
+      .then(() => {
+        setShowModal(false);
+        onRevoked();
+      })
+      .catch(() => {
+        setRevoking(false);
+        setError('Failed to revoke token. Please try again.');
+      });
+  };
+
+  return (
+    <>
+      <button className="btn btn-default btn-xs" onClick={() => setShowModal(true)}>
+        Revoke
+      </button>
+
+      <Modal show={showModal} onHide={() => !revoking && setShowModal(false)} bsSize="small">
+        <Modal.Header closeButton={!revoking}>
+          <Modal.Title>Revoke token</Modal.Title>
+        </Modal.Header>
+        <Modal.Body>
+          {error && (
+            <div className="alert alert-danger" role="alert" style={{ marginBottom: 12 }}>
+              {error}
+            </div>
+          )}
+          <p>
+            Are you sure you want to revoke <strong>{tokenName}</strong>?
+          </p>
+          <p className="text-muted" style={{ fontSize: 13, marginBottom: 0 }}>
+            This cannot be undone. Any automation using this token will stop working immediately.
+          </p>
+        </Modal.Body>
+        <Modal.Footer>
+          <button className="btn btn-default" onClick={() => setShowModal(false)} disabled={revoking}>
+            Cancel
+          </button>
+          <button className="btn btn-danger" onClick={handleRevoke} disabled={revoking}>
+            {revoking ? 'Revoking…' : 'Revoke token'}
+          </button>
+        </Modal.Footer>
+      </Modal>
+    </>
+  );
+}

package/src/apitoken/apitoken.module.ts

@@ -0,0 +1,20 @@
+// Copyright 2026 DoorDash, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+import { module } from 'angular';
+
+import { APITOKEN_STATES } from './apitoken.states';
+
+export const APITOKEN_MODULE = 'spinnaker.core.apitoken';
+module(APITOKEN_MODULE, [APITOKEN_STATES]);

package/src/apitoken/apitoken.states.ts

@@ -0,0 +1,43 @@
+// Copyright 2026 DoorDash, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+import { module } from 'angular';
+
+import { ApiTokensPageContainer } from './ApiTokensPageContainer';
+import type { INestedState, StateConfigProvider } from '../navigation/state.provider';
+import { STATE_CONFIG_PROVIDER } from '../navigation/state.provider';
+
+export const APITOKEN_STATES = 'spinnaker.core.apitoken.states';
+module(APITOKEN_STATES, [STATE_CONFIG_PROVIDER]).config([
+  'stateConfigProvider',
+  (stateConfigProvider: StateConfigProvider) => {
+    const apiTokens: INestedState = {
+      name: 'apiTokens',
+      url: '/api-tokens',
+      views: {
+        'main@': {
+          component: ApiTokensPageContainer,
+          $type: 'react',
+        },
+      },
+      data: {
+        pageTitleMain: {
+          label: 'API Tokens',
+        },
+      },
+    };
+
+    stateConfigProvider.addToRootState(apiTokens);
+  },
+]);

package/src/apitoken/index.ts

@@ -0,0 +1,20 @@
+// Copyright 2026 DoorDash, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+export * from './ApiTokenService';
+export * from './ApiTokensPage';
+export * from './ApiTokensPageContainer';
+export * from './CreateApiTokenModal';
+export * from './RevokeApiTokenButton';
+export * from './apitoken.module';

package/src/application/application.initializers.spec.ts

@@ -0,0 +1,34 @@
+import {
+  applyApplicationInitializers,
+  registerApplicationInitializer,
+  resetApplicationInitializersForTests,
+} from './application.initializers';
+
+describe('application.initializers', () => {
+  beforeEach(() => resetApplicationInitializersForTests());
+
+  it('applies registered initializers once for the current context', () => {
+    const applicationState = {} as any;
+    const uiRouter = {} as any;
+    const initializer = jasmine.createSpy('initializer');
+
+    registerApplicationInitializer(initializer);
+    applyApplicationInitializers(applicationState, uiRouter);
+    applyApplicationInitializers(applicationState, uiRouter);
+
+    expect(initializer).toHaveBeenCalledTimes(1);
+    expect(initializer).toHaveBeenCalledWith(applicationState, uiRouter);
+  });
+
+  it('runs late registrations immediately after the context has been applied', () => {
+    const applicationState = {} as any;
+    const uiRouter = {} as any;
+    const initializer = jasmine.createSpy('initializer');
+
+    applyApplicationInitializers(applicationState, uiRouter);
+    registerApplicationInitializer(initializer);
+
+    expect(initializer).toHaveBeenCalledTimes(1);
+    expect(initializer).toHaveBeenCalledWith(applicationState, uiRouter);
+  });
+});

package/src/application/application.initializers.ts

@@ -0,0 +1,40 @@
+import type { UIRouter } from '@uirouter/core';
+import { module } from 'angular';
+
+import type { ApplicationStateProvider } from './application.state.provider';
+
+export type ApplicationInitializer = (applicationState: ApplicationStateProvider, uiRouter: UIRouter) => void;
+
+const initializers: ApplicationInitializer[] = [];
+let appliedContext: { applicationState: ApplicationStateProvider; uiRouter: UIRouter } | null = null;
+
+export function registerApplicationInitializer(initializer: ApplicationInitializer): void {
+  initializers.push(initializer);
+  if (appliedContext) {
+    initializer(appliedContext.applicationState, appliedContext.uiRouter);
+  }
+}
+
+export function applyApplicationInitializers(applicationState: ApplicationStateProvider, uiRouter: UIRouter): void {
+  if (appliedContext?.applicationState === applicationState && appliedContext?.uiRouter === uiRouter) {
+    return;
+  }
+
+  appliedContext = { applicationState, uiRouter };
+  initializers.forEach((initializer) => initializer(applicationState, uiRouter));
+}
+
+export function resetApplicationInitializersForTests(): void {
+  initializers.length = 0;
+  appliedContext = null;
+}
+
+export const APPLICATION_INITIALIZERS_MODULE = 'spinnaker.core.application.initializers';
+
+module(APPLICATION_INITIALIZERS_MODULE, []).run([
+  'applicationState',
+  '$uiRouter',
+  (applicationState: ApplicationStateProvider, uiRouter: UIRouter) => {
+    applyApplicationInitializers(applicationState, uiRouter);
+  },
+]);

package/src/application/application.module.ts

@@ -1,5 +1,6 @@
 import { module } from 'angular';
 
+import { APPLICATION_INITIALIZERS_MODULE } from './application.initializers';
 import { APPLICATION_STATE_PROVIDER } from './application.state.provider';
 import './applicationSearchResultType';
 import { APPLICATIONS_STATE_PROVIDER } from './applications.state.provider';
@@ -14,6 +15,7 @@ import './nav/defaultCategories';
 export const APPLICATION_MODULE = 'spinnaker.core.application';
 module(APPLICATION_MODULE, [
   APPLICATION_STATE_PROVIDER,
+  APPLICATION_INITIALIZERS_MODULE,
   APPLICATIONS_STATE_PROVIDER,
   CORE_APPLICATION_CONFIG_APPLICATIONCONFIG_CONTROLLER,
   CORE_APPLICATION_MODAL_CREATEAPPLICATION_MODAL_CONTROLLER,

package/src/application/index.ts

@@ -1,5 +1,11 @@
 export * from './ApplicationContext';
 export * from './ApplicationIcon';
+export type { ApplicationInitializer } from './application.initializers';
+export {
+  APPLICATION_INITIALIZERS_MODULE,
+  applyApplicationInitializers,
+  registerApplicationInitializer,
+} from './application.initializers';
 export * from './application.model';
 export * from './application.state.provider';
 export * from './applicationModel.builder';

package/src/authentication/AuthenticationInitializer.spec.ts

@@ -46,6 +46,22 @@ describe('authenticationProvider: application startup', function () {
       expect(AuthenticationService.getAuthenticatedUser().authenticated).toBe(true);
     });
 
+    it('threads canMintApiTokens from the auth response onto the authenticated user', function () {
+      $httpBackend.whenGET(SETTINGS.authEndpoint).respond(200, { username: 'joe!', canMintApiTokens: true });
+      $timeout.flush();
+      $httpBackend.flush();
+
+      expect(AuthenticationService.getAuthenticatedUser().canMintApiTokens).toBe(true);
+    });
+
+    it('defaults canMintApiTokens to false when the auth response omits it', function () {
+      $httpBackend.whenGET(SETTINGS.authEndpoint).respond(200, { username: 'joe!' });
+      $timeout.flush();
+      $httpBackend.flush();
+
+      expect(AuthenticationService.getAuthenticatedUser().canMintApiTokens).toBe(false);
+    });
+
     it('requests authentication from gate, then opens modal and redirects on 401', function () {
       $httpBackend.whenGET(SETTINGS.authEndpoint).respond(401, null, { 'X-AUTH-REDIRECT-URL': '/authUp' });
       $rootScope.$digest();

package/src/authentication/AuthenticationInitializer.ts

@@ -11,6 +11,7 @@ import { ModalInjector } from '../reactShims/modal.injector';
 interface IAuthResponse {
   username: string;
   roles?: string[];
+  canMintApiTokens?: boolean;
 }
 
 export class AuthenticationInitializer {
@@ -26,6 +27,7 @@ export class AuthenticationInitializer {
             name: response.data.username,
             authenticated: false,
             roles: response.data.roles,
+            canMintApiTokens: response.data.canMintApiTokens,
           });
           ModalInjector.modalStackService.dismissAll();
           this.visibilityWatch.unsubscribe();
@@ -65,6 +67,7 @@ export class AuthenticationInitializer {
             name: response.data.username,
             authenticated: false,
             roles: response.data.roles,
+            canMintApiTokens: response.data.canMintApiTokens,
           });
           $rootScope.authenticating = false;
         } else {
@@ -85,6 +88,7 @@ export class AuthenticationInitializer {
               name: response.data.username,
               authenticated: false,
               roles: response.data.roles,
+              canMintApiTokens: response.data.canMintApiTokens,
             });
             $rootScope.authenticating = false;
             this.userLoggedOut = false;

package/src/authentication/AuthenticationService.spec.ts

@@ -16,6 +16,24 @@ describe('AuthenticationService', function () {
       expect(user.authenticated).toBe(true);
     });
 
+    it('defaults canMintApiTokens to false', function () {
+      let user: IUser = AuthenticationService.getAuthenticatedUser();
+      expect(user.canMintApiTokens).toBe(false);
+
+      AuthenticationService.setAuthenticatedUser({ name: 'kato@example.com', authenticated: false });
+      user = AuthenticationService.getAuthenticatedUser();
+      expect(user.canMintApiTokens).toBe(false);
+    });
+
+    it('stores canMintApiTokens when provided', function () {
+      AuthenticationService.setAuthenticatedUser({
+        name: 'kato@example.com',
+        authenticated: false,
+        canMintApiTokens: true,
+      });
+      expect(AuthenticationService.getAuthenticatedUser().canMintApiTokens).toBe(true);
+    });
+
     it('disregards falsy values', function () {
       const user: IUser = AuthenticationService.getAuthenticatedUser();
 

package/src/authentication/AuthenticationService.ts

@@ -3,12 +3,14 @@ export interface IUser {
   authenticated: boolean;
   roles?: string[];
   lastAuthenticated?: number;
+  canMintApiTokens?: boolean;
 }
 
 const defaultUser: IUser = {
   name: '[anonymous]',
   roles: [],
   authenticated: false,
+  canMintApiTokens: false,
 };
 
 export class AuthenticationService {
@@ -26,6 +28,7 @@ export class AuthenticationService {
       this.user.authenticated = true;
       this.user.lastAuthenticated = new Date().getTime();
       this.user.roles = authenticatedUser.roles;
+      this.user.canMintApiTokens = authenticatedUser.canMintApiTokens ?? false;
     }
 
     this.authEvents.forEach((event: Function) => event());

package/src/authentication/userMenu/UserMenu.tsx

@@ -1,3 +1,4 @@
+import { UISref } from '@uirouter/react';
 import * as React from 'react';
 import { Dropdown } from 'react-bootstrap';
 
@@ -10,6 +11,7 @@ import './userMenu.less';
 export const UserMenu = () => {
   const authenticatedUser = AuthenticationService.getAuthenticatedUser();
   const showLogOutDropdown = authenticatedUser.authenticated;
+  const canMintApiTokens = authenticatedUser.canMintApiTokens ?? false;
 
   if (!SETTINGS.authEnabled) {
     return null;
@@ -23,9 +25,21 @@ export const UserMenu = () => {
           <span className="hidden-xs hidden-sm hidden-md">{authenticatedUser.name}</span>
         </Dropdown.Toggle>
         {showLogOutDropdown && (
-          <Dropdown.Menu>
-            <li className="sp-padding-xs" onClick={() => AuthenticationInitializer.logOut()}>
-              Log Out
+          <Dropdown.Menu pullRight>
+            {canMintApiTokens && (
+              <>
+                <li role="presentation">
+                  <UISref to="home.apiTokens">
+                    <a role="menuitem">API Tokens</a>
+                  </UISref>
+                </li>
+                <li role="presentation" className="divider" />
+              </>
+            )}
+            <li role="presentation">
+              <a role="menuitem" style={{ cursor: 'pointer' }} onClick={() => AuthenticationInitializer.logOut()}>
+                Log Out
+              </a>
             </li>
           </Dropdown.Menu>
         )}

package/src/config/settings.ts

@@ -13,7 +13,6 @@ export interface IProviderSettings {
 }
 
 export interface INotificationSettings {
-  bearychat: { enabled: boolean };
   email: { enabled: boolean };
   githubStatus: { enabled: boolean };
   googlechat: { enabled: boolean };

package/src/core.module.ts

@@ -26,6 +26,7 @@ import { RECENT_HISTORY_SERVICE } from './history/recentHistory.service';
 import './analytics/GoogleAnalyticsInitializer';
 import { UI_ROUTER_REACT_ERROR_BOUNDARY } from './presentation/SpinErrorBoundary';
 import { ANALYTICS_MODULE } from './analytics/angulartics.module';
+import { APITOKEN_MODULE } from './apitoken/apitoken.module';
 import { APPLICATION_BOOTSTRAP_MODULE } from './bootstrap';
 import { APPLICATION_MODULE } from './application/application.module';
 import { ARTIFACT_MODULE } from './artifact/artifact.module';
@@ -107,6 +108,7 @@ module(CORE_MODULE, [
   angularSpinner.name,
 
   ANALYTICS_MODULE,
+  APITOKEN_MODULE,
   APPLICATION_MODULE,
   APPLICATION_BOOTSTRAP_MODULE,
   ARTIFACT_MODULE,

package/src/index.ts

@@ -4,6 +4,7 @@ import './utils/failedToInstantiateModule';
 
 export * from './account';
 export * from './api';
+export * from './apitoken';
 export * from './application';
 export * from './artifact';
 export * from './authentication';

package/src/notification/notification.types.ts

@@ -5,7 +5,6 @@ import { SETTINGS } from '../config';
 import type { INotificationTypeConfig } from '../domain';
 import { Registry } from '../registry';
 
-import { bearyChatNotification } from './selector/types/bearychat/beary.notification';
 import { cdEventsNotification } from './selector/types/cdevents/cdevents.notification';
 import { emailNotification } from './selector/types/email/email.notification';
 import { githubstatusNotification } from './selector/types/githubstatus/githubstatus.notification';
@@ -16,7 +15,6 @@ import { slackNotification } from './selector/types/slack/slack.notification';
 import { smsNotification } from './selector/types/sms/sms.notification';
 
 [
-  bearyChatNotification,
   emailNotification,
   githubstatusNotification,
   googlechatNotification,

package/src/notification/selector/types/index.ts

@@ -1,4 +1,3 @@
-export * from './bearychat/BearychatNotificationType';
 export * from './email/EmailNotificationType';
 export * from './googlechat/GooglechatNotificationType';
 export * from './microsoftteams/MicrosoftTeamsNotificationType';

package/src/notification/selector/types/microsoftteams/MicrosoftTeamsNotificationType.tsx

@@ -14,7 +14,7 @@ export class MicrosoftTeamsNotificationType extends React.Component<INotificatio
           <TextInput
             inputClassName={'form-control input-sm'}
             {...props}
-            placeholder="URL starts with https://outlook.office.com/webhook/"
+            placeholder="URL starts with https://[region].webhook.office.com/webhookb2/"
           />
         )}
         required={true}

package/dist/notification/selector/types/bearychat/BearychatNotificationType.d.ts

@@ -1,5 +0,0 @@
-import React from 'react';
-import type { INotificationTypeCustomConfig } from '../../../../domain';
-export declare class BearychatNotificationType extends React.Component<INotificationTypeCustomConfig> {
-    render(): JSX.Element;
-}

package/dist/notification/selector/types/bearychat/beary.notification.d.ts

@@ -1,2 +0,0 @@
-import type { INotificationTypeConfig } from '../../../../domain';
-export declare const bearyChatNotification: INotificationTypeConfig;

package/src/notification/selector/types/bearychat/BearychatNotificationType.tsx

@@ -1,19 +0,0 @@
-import React from 'react';
-
-import type { INotificationTypeCustomConfig } from '../../../../domain';
-import { FormikFormField, TextInput, Validators } from '../../../../presentation';
-
-export class BearychatNotificationType extends React.Component<INotificationTypeCustomConfig> {
-  public render() {
-    const { fieldName } = this.props;
-    return (
-      <FormikFormField
-        label="Email Address"
-        name={fieldName ? `${fieldName}.address` : 'address'}
-        validate={Validators.emailValue('Please enter a valid email address')}
-        input={(props) => <TextInput inputClassName={'form-control input-sm'} {...props} />}
-        required={true}
-      />
-    );
-  }
-}

package/src/notification/selector/types/bearychat/beary.notification.ts

@@ -1,8 +0,0 @@
-import { BearychatNotificationType } from './BearychatNotificationType';
-import type { INotificationTypeConfig } from '../../../../domain';
-
-export const bearyChatNotification: INotificationTypeConfig = {
-  component: BearychatNotificationType,
-  key: 'bearychat',
-  label: 'Bearychat',
-};