asab_webui_shell 25.1.11 → 25.1.13

package/dist/modules/auth/api.js

@@ -5,13 +5,10 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.SeaCatAuthApi = exports.GoogleOAuth2Api = void 0;
-var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
 var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
-var _classCallCheck2 = _interopRequireDefault(require("@babel/runtime/helpers/classCallCheck"));
-var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/createClass"));
 var _axios = _interopRequireDefault(require("axios"));
 var _locationReplace = require("../../components/locationReplace");
-var SeaCatAuthApi = exports.SeaCatAuthApi = /*#__PURE__*/function () {
+class SeaCatAuthApi {
   /*
   SeaCat Auth Open ID Connect / OAuth2.0
   
@@ -24,8 +21,7 @@ var SeaCatAuthApi = exports.SeaCatAuthApi = /*#__PURE__*/function () {
   		...
   */
 
-  function SeaCatAuthApi(app) {
-    (0, _classCallCheck2["default"])(this, SeaCatAuthApi);
+  constructor(app) {
     this.App = app;
     var scope = this.App.Config.get('seacat.auth.scope');
     this.Scope = scope ? scope : "openid tenant userinfo:* batman";
@@ -35,104 +31,84 @@ var SeaCatAuthApi = exports.SeaCatAuthApi = /*#__PURE__*/function () {
   }
 
   // This method will cause a navigation from the app to the OAuth2 login screen
-  return (0, _createClass2["default"])(SeaCatAuthApi, [{
-    key: "login",
-    value: function () {
-      var _login = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee(redirect_uri, force_login_prompt) {
-        var currentTenant, scopeArray, tenantValue, loginScope, typedArray, randomIndex, stateIndex, redirectUri, state, params, oidcURL;
-        return _regenerator["default"].wrap(function _callee$(_context) {
-          while (1) switch (_context.prev = _context.next) {
-            case 0:
-              /*
-              	Adding tenant directly to scope (if available).
-              */
-              currentTenant = null;
-              if (this.App.Services.TenantService) {
-                currentTenant = this.App.Services.TenantService.getCurrentTenant();
-              }
-              scopeArray = this.Scope.split(" ");
-              tenantValue = scopeArray.find(function (str) {
-                return str.includes("tenant");
-              });
-              loginScope = currentTenant != null && tenantValue != undefined ? this.Scope.replace("".concat(tenantValue), "tenant:".concat(currentTenant)) : this.Scope; // Generate random state
-              typedArray = new Uint32Array(10);
-              crypto.getRandomValues(typedArray);
-              randomIndex = Math.floor(Math.random() * typedArray.length);
-              stateIndex = typedArray[randomIndex];
-              /*
-              	As per OAuth2 specs, the redirect_uri must *exactly* match one of the URIs pre-registered 
-              	at the authorization server, hence it cannot contain variable components (query, hash).
-              	Here we use the application's base URL as the redirect_uri and store the variable parts in the state.
-              */
-              redirectUri = new URL(redirect_uri);
-              state = redirectUri.search + redirectUri.hash;
-              localStorage.setItem("oauth2_state_".concat(stateIndex), state);
-              params = new URLSearchParams({
-                response_type: "code",
-                scope: loginScope,
-                client_id: this.ClientId,
-                redirect_uri: redirectUri.origin + redirectUri.pathname,
-                state: stateIndex
-              });
-              if (force_login_prompt === true) {
-                params.append("prompt", "login");
-              }
-              oidcURL = this.App.getServiceURL('openidconnect');
-              _context.next = 17;
-              return (0, _locationReplace.locationReplace)(oidcURL + "/authorize?" + params.toString());
-            case 17:
-            case "end":
-              return _context.stop();
-          }
-        }, _callee, this);
-      }));
-      function login(_x, _x2) {
-        return _login.apply(this, arguments);
+  login(redirect_uri, force_login_prompt) {
+    var _this = this;
+    return (0, _asyncToGenerator2.default)(function* () {
+      /*
+      	Adding tenant directly to scope (if available).
+      */
+      var currentTenant = null;
+      if (_this.App.Services.TenantService) {
+        currentTenant = _this.App.Services.TenantService.getCurrentTenant();
       }
-      return login;
-    }()
-  }, {
-    key: "logout",
-    value: function logout(access_token) {
-      return this.OidcAPI.get('/logout', {
-        headers: {
-          'Authorization': 'Bearer ' + access_token
-        }
-      });
-    }
-  }, {
-    key: "userinfo",
-    value: function userinfo(access_token) {
-      var userinfoPath = '/userinfo';
-      var headers = {};
-      // Add access bearer token to the Authorization headers
-      if (access_token != null) {
-        headers.Authorization = 'Bearer ' + access_token;
-      }
-      return this.OidcAPI.get(userinfoPath, {
-        headers: headers
-      });
-    }
-  }, {
-    key: "token_authorization_code",
-    value: function token_authorization_code(authorization_code, redirect_uri) {
+      var scopeArray = _this.Scope.split(" ");
+      var tenantValue = scopeArray.find(str => str.includes("tenant"));
+      var loginScope = currentTenant != null && tenantValue != undefined ? _this.Scope.replace("".concat(tenantValue), "tenant:".concat(currentTenant)) : _this.Scope;
+
+      // Generate random state
+      var typedArray = new Uint32Array(10);
+      crypto.getRandomValues(typedArray);
+      var randomIndex = Math.floor(Math.random() * typedArray.length);
+      var stateIndex = typedArray[randomIndex];
+
+      /*
+      	As per OAuth2 specs, the redirect_uri must *exactly* match one of the URIs pre-registered 
+      	at the authorization server, hence it cannot contain variable components (query, hash).
+      	Here we use the application's base URL as the redirect_uri and store the variable parts in the state.
+      */
       var redirectUri = new URL(redirect_uri);
-      var qs = new URLSearchParams({
-        grant_type: "authorization_code",
-        code: authorization_code,
-        client_id: this.ClientId,
-        /*
-        	As per OAuth2 specs, the redirect_uri must *exactly* match the one provided 
-        	at the authorization endpoint, hence the application base URL.
-        */
-        redirect_uri: redirectUri.origin + redirectUri.pathname
+      var state = redirectUri.search + redirectUri.hash;
+      localStorage.setItem("oauth2_state_".concat(stateIndex), state);
+      var params = new URLSearchParams({
+        response_type: "code",
+        scope: loginScope,
+        client_id: _this.ClientId,
+        redirect_uri: redirectUri.origin + redirectUri.pathname,
+        state: stateIndex
       });
-      return this.OidcAPI.post('/token', qs.toString());
+      if (force_login_prompt === true) {
+        params.append("prompt", "login");
+      }
+      var oidcURL = _this.App.getServiceURL('openidconnect');
+      yield (0, _locationReplace.locationReplace)(oidcURL + "/authorize?" + params.toString());
+    })();
+  }
+  logout(access_token) {
+    return this.OidcAPI.get('/logout', {
+      headers: {
+        'Authorization': 'Bearer ' + access_token
+      }
+    });
+  }
+  userinfo(access_token) {
+    var userinfoPath = '/userinfo';
+    var headers = {};
+    // Add access bearer token to the Authorization headers
+    if (access_token != null) {
+      headers.Authorization = 'Bearer ' + access_token;
     }
-  }]);
-}();
+    return this.OidcAPI.get(userinfoPath, {
+      headers: headers
+    });
+  }
+  token_authorization_code(authorization_code, redirect_uri) {
+    var redirectUri = new URL(redirect_uri);
+    var qs = new URLSearchParams({
+      grant_type: "authorization_code",
+      code: authorization_code,
+      client_id: this.ClientId,
+      /*
+      	As per OAuth2 specs, the redirect_uri must *exactly* match the one provided 
+      	at the authorization endpoint, hence the application base URL.
+      */
+      redirect_uri: redirectUri.origin + redirectUri.pathname
+    });
+    return this.OidcAPI.post('/token', qs.toString());
+  }
+}
+exports.SeaCatAuthApi = SeaCatAuthApi;
 ;
-var GoogleOAuth2Api = exports.GoogleOAuth2Api = /*#__PURE__*/function () {
+class GoogleOAuth2Api {
   /*
   Google OAuth2 API is configured at Google API Console > Credentials > OAuth 2.0 Client IDs
   
@@ -144,9 +120,8 @@ var GoogleOAuth2Api = exports.GoogleOAuth2Api = /*#__PURE__*/function () {
   		...
   */
 
-  function GoogleOAuth2Api(config) {
-    (0, _classCallCheck2["default"])(this, GoogleOAuth2Api);
-    this.Axios = _axios["default"].create({
+  constructor(config) {
+    this.Axios = _axios.default.create({
       timeout: 10000
     });
     var scope = config.get('google.oauth2.scope');
@@ -156,59 +131,38 @@ var GoogleOAuth2Api = exports.GoogleOAuth2Api = /*#__PURE__*/function () {
   }
 
   // This method will cause a navigation from the app to the OAuth2 login screen
-  return (0, _createClass2["default"])(GoogleOAuth2Api, [{
-    key: "login",
-    value: function () {
-      var _login2 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee2(redirect_uri) {
-        var params;
-        return _regenerator["default"].wrap(function _callee2$(_context2) {
-          while (1) switch (_context2.prev = _context2.next) {
-            case 0:
-              params = new URLSearchParams({
-                response_type: "code",
-                scope: this.Scope,
-                client_id: this.ClientId,
-                redirect_uri: redirect_uri
-              });
-              _context2.next = 3;
-              return (0, _locationReplace.locationReplace)("https://accounts.google.com/o/oauth2/auth" + "?" + params.toString());
-            case 3:
-            case "end":
-              return _context2.stop();
-          }
-        }, _callee2, this);
-      }));
-      function login(_x3) {
-        return _login2.apply(this, arguments);
-      }
-      return login;
-    }()
-  }, {
-    key: "logout",
-    value: function logout(access_token) {
-      // There is no Google logout API URL, to our best knowledge
-      return null;
-    }
-  }, {
-    key: "userinfo",
-    value: function userinfo(access_token) {
-      var qs = new URLSearchParams({
-        alt: "json",
-        access_token: access_token
-      });
-      return this.Axios.get('https://www.googleapis.com/oauth2/v1/userinfo?' + qs.toString());
-    }
-  }, {
-    key: "token_authorization_code",
-    value: function token_authorization_code(authorization_code, redirect_uri) {
-      var qs = new URLSearchParams({
-        grant_type: "authorization_code",
-        code: authorization_code,
-        client_id: this.ClientId,
-        client_secret: this.ClientSecret,
+  login(redirect_uri) {
+    var _this2 = this;
+    return (0, _asyncToGenerator2.default)(function* () {
+      var params = new URLSearchParams({
+        response_type: "code",
+        scope: _this2.Scope,
+        client_id: _this2.ClientId,
         redirect_uri: redirect_uri
       });
-      return this.Axios.post('https://oauth2.googleapis.com/token', qs.toString());
-    }
-  }]);
-}();
+      yield (0, _locationReplace.locationReplace)("https://accounts.google.com/o/oauth2/auth" + "?" + params.toString());
+    })();
+  }
+  logout(access_token) {
+    // There is no Google logout API URL, to our best knowledge
+    return null;
+  }
+  userinfo(access_token) {
+    var qs = new URLSearchParams({
+      alt: "json",
+      access_token: access_token
+    });
+    return this.Axios.get('https://www.googleapis.com/oauth2/v1/userinfo?' + qs.toString());
+  }
+  token_authorization_code(authorization_code, redirect_uri) {
+    var qs = new URLSearchParams({
+      grant_type: "authorization_code",
+      code: authorization_code,
+      client_id: this.ClientId,
+      client_secret: this.ClientSecret,
+      redirect_uri: redirect_uri
+    });
+    return this.Axios.post('https://oauth2.googleapis.com/token', qs.toString());
+  }
+}
+exports.GoogleOAuth2Api = GoogleOAuth2Api;

package/dist/modules/auth/components/SessionExpirationAlert.js

@@ -10,20 +10,21 @@ var _reactI18next = require("react-i18next");
 var _reactstrap = require("reactstrap");
 // Session expiration custom Alert component
 function SessionExpirationAlert(_ref) {
-  var alert = _ref.alert,
-    store = _ref.store;
-  var _useTranslation = (0, _reactI18next.useTranslation)(),
-    t = _useTranslation.t; // Use the hook inside the functional component
+  var {
+    alert,
+    store
+  } = _ref;
+  var {
+    t
+  } = (0, _reactI18next.useTranslation)(); // Use the hook inside the functional component
 
-  return /*#__PURE__*/_react["default"].createElement(_reactstrap.Alert, {
+  return /*#__PURE__*/_react.default.createElement(_reactstrap.Alert, {
     key: alert.key,
     color: alert.level,
     fade: true,
     isOpen: !alert.acked
-  }, /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, /*#__PURE__*/_react["default"].createElement("h5", null, t(alert.message)), /*#__PURE__*/_react["default"].createElement("div", {
-    onClick: function onClick() {
-      return window.location.reload();
-    },
+  }, /*#__PURE__*/_react.default.createElement(_react.default.Fragment, null, /*#__PURE__*/_react.default.createElement("h5", null, t(alert.message)), /*#__PURE__*/_react.default.createElement("div", {
+    onClick: () => window.location.reload(),
     className: "mt-2",
     style: {
       whiteSpace: 'pre-wrap',

package/dist/modules/auth/header.js

@@ -34,76 +34,78 @@ require("./header.scss");
 */
 
 function AuthHeaderInvitation(props) {
-  var resources = (0, _reactRedux.useSelector)(function (state) {
+  var resources = (0, _reactRedux.useSelector)(state => {
     var _state$auth;
     return (_state$auth = state.auth) === null || _state$auth === void 0 ? void 0 : _state$auth.resources;
   });
-  var tenant = (0, _reactRedux.useSelector)(function (state) {
+  var tenant = (0, _reactRedux.useSelector)(state => {
     var _state$tenant;
     return (_state$tenant = state.tenant) === null || _state$tenant === void 0 ? void 0 : _state$tenant.current;
   });
   var navigate = (0, _reactRouterDom.useNavigate)();
-  var _useTranslation = (0, _reactI18next.useTranslation)(),
-    t = _useTranslation.t;
+  var {
+    t
+  } = (0, _reactI18next.useTranslation)();
   if (!tenant || !(0, _asab_webui_components.isAuthorized)(['seacat:tenant:assign'])) {
     return null;
   }
   ;
-  return /*#__PURE__*/_react["default"].createElement(_reactstrap.Button, {
+  return /*#__PURE__*/_react.default.createElement(_reactstrap.Button, {
     outline: true,
-    onClick: function onClick(e) {
+    onClick: e => {
       e.preventDefault(), navigate('/auth/invite');
     },
     title: t('AuthHeader|Invite other users'),
     className: "invite-nav-button",
     color: "primary"
-  }, /*#__PURE__*/_react["default"].createElement("i", {
+  }, /*#__PURE__*/_react.default.createElement("i", {
     className: "bi bi-person-plus me-2"
   }), t('AuthHeader|Invite other users'));
 }
 function AuthHeaderDropdown(props) {
-  var _useTranslation2 = (0, _reactI18next.useTranslation)(),
-    t = _useTranslation2.t;
-  var userinfo = (0, _reactRedux.useSelector)(function (state) {
+  var {
+    t
+  } = (0, _reactI18next.useTranslation)();
+  var userinfo = (0, _reactRedux.useSelector)(state => {
     var _state$auth2;
     return (_state$auth2 = state.auth) === null || _state$auth2 === void 0 ? void 0 : _state$auth2.userinfo;
   });
   var isSuperuser = (0, _asab_webui_components.isAuthorized)(['authz:superuser']);
-  var logout = function logout() {
+  var logout = () => {
     props.AuthModule.logout();
   };
-  return /*#__PURE__*/_react["default"].createElement(_reactstrap.UncontrolledDropdown, {
+  return /*#__PURE__*/_react.default.createElement(_reactstrap.UncontrolledDropdown, {
     direction: "down"
-  }, /*#__PURE__*/_react["default"].createElement(_reactstrap.DropdownToggle, {
+  }, /*#__PURE__*/_react.default.createElement(_reactstrap.DropdownToggle, {
     nav: true,
     caret: true,
     title: isSuperuser ? t('AuthHeader|You have superuser privileges. Act responsibly.') : userinfo === null || userinfo === void 0 ? void 0 : userinfo.sub,
     className: isSuperuser ? 'text-warning' : ''
-  }, userinfo !== null && userinfo !== void 0 && userinfo.picture ? /*#__PURE__*/_react["default"].createElement("img", {
+  }, userinfo !== null && userinfo !== void 0 && userinfo.picture ? /*#__PURE__*/_react.default.createElement("img", {
     src: userinfo === null || userinfo === void 0 ? void 0 : userinfo.picture,
     className: "img-avatar",
     alt: userinfo === null || userinfo === void 0 ? void 0 : userinfo.username
-  }) : /*#__PURE__*/_react["default"].createElement("i", {
+  }) : /*#__PURE__*/_react.default.createElement("i", {
     alt: userinfo === null || userinfo === void 0 ? void 0 : userinfo.username,
     className: "pe-2 bi ".concat(isSuperuser ? 'bi-universal-access' : 'bi-person-gear')
-  }), /*#__PURE__*/_react["default"].createElement("span", null, (userinfo === null || userinfo === void 0 ? void 0 : userinfo.username) || (userinfo === null || userinfo === void 0 ? void 0 : userinfo.sub))), /*#__PURE__*/_react["default"].createElement(_reactstrap.DropdownMenu, {
+  }), /*#__PURE__*/_react.default.createElement("span", null, (userinfo === null || userinfo === void 0 ? void 0 : userinfo.username) || (userinfo === null || userinfo === void 0 ? void 0 : userinfo.sub))), /*#__PURE__*/_react.default.createElement(_reactstrap.DropdownMenu, {
     className: "shadow"
-  }, /*#__PURE__*/_react["default"].createElement(_reactstrap.DropdownItem, {
+  }, /*#__PURE__*/_react.default.createElement(_reactstrap.DropdownItem, {
     header: true
-  }, t('AuthHeader|My account')), /*#__PURE__*/_react["default"].createElement(_reactstrap.DropdownItem, {
+  }, t('AuthHeader|My account')), /*#__PURE__*/_react.default.createElement(_reactstrap.DropdownItem, {
     tag: _reactRouterDom.Link,
     to: "/auth/access-control"
-  }, t('AuthHeader|Access control')), /*#__PURE__*/_react["default"].createElement(_reactstrap.DropdownItem, {
+  }, t('AuthHeader|Access control')), /*#__PURE__*/_react.default.createElement(_reactstrap.DropdownItem, {
     tag: _reactRouterDom.Link,
     to: "/account"
-  }, t('AuthHeader|Account settings')), /*#__PURE__*/_react["default"].createElement(_reactstrap.DropdownItem, {
+  }, t('AuthHeader|Account settings')), /*#__PURE__*/_react.default.createElement(_reactstrap.DropdownItem, {
     tag: _reactRouterDom.Link,
     to: "/account/password"
-  }, t('AuthHeader|Change password')), /*#__PURE__*/_react["default"].createElement(_reactstrap.DropdownItem, {
-    onClick: function onClick() {
+  }, t('AuthHeader|Change password')), /*#__PURE__*/_react.default.createElement(_reactstrap.DropdownItem, {
+    onClick: () => {
       logout();
     }
-  }, /*#__PURE__*/_react["default"].createElement("span", {
+  }, /*#__PURE__*/_react.default.createElement("span", {
     className: "text-danger"
   }, t('AuthHeader|Log out')))));
 }