opal-security 3.2.3 → 3.2.4

package/README.md

@@ -22,7 +22,7 @@ $ npm install -g opal-security
 $ opal COMMAND
 running command...
 $ opal (--version)
-opal-security/3.2.3 darwin-arm64 node-v18.20.4
+opal-security/3.2.4 darwin-arm64 node-v18.20.4
 $ opal --help [COMMAND]
 USAGE
   $ opal COMMAND
@@ -106,7 +106,7 @@ EXAMPLES
   $ opal aws:identity
 ```
 
-_See code: [src/commands/aws/identity.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/aws/identity.ts)_
+_See code: [src/commands/aws/identity.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/aws/identity.ts)_
 
 ## `opal clear-auth-provider`
 
@@ -126,7 +126,7 @@ EXAMPLES
   $ opal clear-auth-provider
 ```
 
-_See code: [src/commands/clear-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/clear-auth-provider.ts)_
+_See code: [src/commands/clear-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/clear-auth-provider.ts)_
 
 ## `opal curl-example`
 
@@ -143,7 +143,7 @@ DESCRIPTION
   Prints out an example cURL command containing the parameters the CLI uses to query the Opal server.
 ```
 
-_See code: [src/commands/curl-example.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/curl-example.ts)_
+_See code: [src/commands/curl-example.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/curl-example.ts)_
 
 ## `opal groups get`
 
@@ -164,7 +164,7 @@ EXAMPLES
   $ opal groups:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4
 ```
 
-_See code: [src/commands/groups/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/groups/get.ts)_
+_See code: [src/commands/groups/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/groups/get.ts)_
 
 ## `opal help [COMMANDS]`
 
@@ -214,7 +214,7 @@ EXAMPLES
   $ opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --profileName "custom-profile"
 ```
 
-_See code: [src/commands/iam-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/iam-roles/start.ts)_
+_See code: [src/commands/iam-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/iam-roles/start.ts)_
 
 ## `opal kube-roles start`
 
@@ -245,7 +245,7 @@ EXAMPLES
   $ opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId "arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role"
 ```
 
-_See code: [src/commands/kube-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/kube-roles/start.ts)_
+_See code: [src/commands/kube-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/kube-roles/start.ts)_
 
 ## `opal login`
 
@@ -266,7 +266,7 @@ EXAMPLES
   $ opal login
 ```
 
-_See code: [src/commands/login.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/login.ts)_
 
 ## `opal logout`
 
@@ -286,7 +286,7 @@ EXAMPLES
   $ opal logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/logout.ts)_
 
 ## `opal postgres-instances start`
 
@@ -324,7 +324,7 @@ EXAMPLES
   $ opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId fullaccess --action view
 ```
 
-_See code: [src/commands/postgres-instances/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/postgres-instances/start.ts)_
+_See code: [src/commands/postgres-instances/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/postgres-instances/start.ts)_
 
 ## `opal request create`
 
@@ -350,7 +350,7 @@ DESCRIPTION
   Creates an Opal access request via an interactive form
 ```
 
-_See code: [src/commands/request/create.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/request/create.ts)_
+_See code: [src/commands/request/create.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/request/create.ts)_
 
 ## `opal request get`
 
@@ -374,7 +374,7 @@ EXAMPLES
   $ opal request get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4 --verbose
 ```
 
-_See code: [src/commands/request/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/request/get.ts)_
+_See code: [src/commands/request/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/request/get.ts)_
 
 ## `opal request list`
 
@@ -406,7 +406,7 @@ EXAMPLES
   $ opal request list --n 5 --pending --verbose
 ```
 
-_See code: [src/commands/request/list.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/request/list.ts)_
+_See code: [src/commands/request/list.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/request/list.ts)_
 
 ## `opal request ls`
 
@@ -457,7 +457,7 @@ EXAMPLES
   $ opal resources:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4
 ```
 
-_See code: [src/commands/resources/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/resources/get.ts)_
+_See code: [src/commands/resources/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/resources/get.ts)_
 
 ## `opal set-auth-provider`
 
@@ -483,7 +483,7 @@ EXAMPLES
   $ opal set-auth-provider --clientID 1234asdf --issuerUrl https://auth.example.com
 ```
 
-_See code: [src/commands/set-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/set-auth-provider.ts)_
+_See code: [src/commands/set-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/set-auth-provider.ts)_
 
 ## `opal set-custom-header`
 
@@ -504,7 +504,7 @@ EXAMPLES
   $ opal set-custom-header --header 'cf-access-token: $TOKEN'
 ```
 
-_See code: [src/commands/set-custom-header.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/set-custom-header.ts)_
+_See code: [src/commands/set-custom-header.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/set-custom-header.ts)_
 
 ## `opal set-token`
 
@@ -524,7 +524,7 @@ EXAMPLES
   $ opal set-token
 ```
 
-_See code: [src/commands/set-token.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/set-token.ts)_
+_See code: [src/commands/set-token.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/set-token.ts)_
 
 ## `opal set-url [URL]`
 
@@ -548,7 +548,7 @@ EXAMPLES
   $ opal set-url
 ```
 
-_See code: [src/commands/set-url.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/set-url.ts)_
+_See code: [src/commands/set-url.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/set-url.ts)_
 
 ## `opal ssh copyFrom`
 
@@ -579,7 +579,7 @@ EXAMPLES
   $ opal ssh:copyFrom --src instance/dir --dest my/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyFrom.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/ssh/copyFrom.ts)_
+_See code: [src/commands/ssh/copyFrom.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/ssh/copyFrom.ts)_
 
 ## `opal ssh copyTo`
 
@@ -610,7 +610,7 @@ EXAMPLES
   $ opal ssh:copyTo --src my/dir --dest instance/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyTo.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/ssh/copyTo.ts)_
+_See code: [src/commands/ssh/copyTo.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/ssh/copyTo.ts)_
 
 ## `opal ssh start`
 
@@ -637,7 +637,7 @@ EXAMPLES
   $ opal ssh:start --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/ssh/start.ts)_
+_See code: [src/commands/ssh/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/ssh/start.ts)_
 
 ## `opal version`
 
@@ -674,5 +674,5 @@ DESCRIPTION
   Describes current url set, organization name, and logged in user if applicable.
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.3/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/opalsecurity/opal-cli/blob/v3.2.4/src/commands/whoami.ts)_
 <!-- commandsstop -->

package/lib/lib/request/prompts/asset-prompt.js

@@ -11,71 +11,55 @@ async function chooseOktaAzureRoles(cmd, client, app, requestMap) {
     const rolePrompt = new AutoComplete({
         name: "Roles",
         message: `Select a role for ${app.name}:`,
-        hint: _1.multiSelectInstructions,
+        hint: _1.selectInstructions,
         limit: 15,
-        multiple: true,
-        async choices(input) {
+        choices: associatedItems,
+        async suggest(input) {
             if (!input)
                 return associatedItems;
             const filteredChoices = await (0, api_1.queryAssociatedItems)(cmd, client, app.id, input);
             return filteredChoices || associatedItems;
         },
-        validate: (answer) => {
-            if (answer.length !== 1) {
-                return "Only one role is allowed to be requested for on Okta or Azure apps.";
-            }
-            return true;
-        },
     });
-    const Roles = await rolePrompt.run();
+    const selectedRole = await rolePrompt.run();
     const entry = requestMap[app.id];
-    for (const role of Roles) {
-        if (!(role.id in entry.assets)) {
-            entry.assets[role.id] = {
-                assetId: role.id,
-                assetName: role.name,
-                type: (0, types_1.entityTypeFromString)(role.type),
-                roles: {},
-            };
-        }
+    if (!(selectedRole.id in entry.assets)) {
+        entry.assets[selectedRole.id] = {
+            assetId: selectedRole.id,
+            assetName: selectedRole.name,
+            type: (0, types_1.entityTypeFromString)(selectedRole.type),
+            roles: {},
+        };
     }
 }
 async function chooseAssets(cmd, client, appId, requestMap) {
     const initial = (await (0, api_1.queryRequestableAssets)(cmd, client, appId, "")) || [];
     const assetPrompt = new AutoComplete({
         name: "Assets",
-        message: "Select one or more assets:",
-        hint: _1.multiSelectInstructions,
+        message: "Select an asset to request:",
+        hint: _1.selectInstructions,
         limit: 15,
-        multiple: true,
-        async choices(input) {
+        async suggest(input, choices) {
             if (!input) {
                 return initial;
             }
             const filteredChoices = await (0, api_1.queryRequestableAssets)(cmd, client, appId, input);
             return filteredChoices || initial;
         },
-        validate: (answer) => {
-            if (answer.length < 1) {
-                return "You must select at least one item.";
-            }
-            return true;
-        },
+        choices: initial,
     });
-    const Assets = await assetPrompt.run();
+    const selectedAsset = await assetPrompt.run();
     const entry = requestMap[appId];
-    for (const asset of Assets) {
-        if (entry === undefined) {
-            throw new Error(`Error formatting app ${appId} in request`);
-        }
-        if (!(asset.id in entry.assets)) {
-            entry.assets[asset.id] = {
-                assetId: asset.id,
-                assetName: asset.name,
-                type: asset.type,
-                roles: {},
-            };
-        }
-        await (0, _1.chooseRoles)(cmd, client, appId, asset.id, requestMap);
+    if (entry === undefined) {
+        throw new Error(`Error formatting app ${appId} in request`);
+    }
+    if (!(selectedAsset.id in entry.assets)) {
+        entry.assets[selectedAsset.id] = {
+            assetId: selectedAsset.id,
+            assetName: selectedAsset.name,
+            type: selectedAsset.type,
+            roles: {},
+        };
     }
+    await (0, _1.chooseRoles)(cmd, client, appId, selectedAsset.id, requestMap);
 }

package/lib/lib/request/prompts/index.d.ts

@@ -5,4 +5,3 @@ export { promptForReason } from "./reason-prompt";
 export { promptForDuration } from "./duration-prompt";
 export { doneSelectingAssets, promptRequestSubmission, } from "./validate-prompt";
 export declare const selectInstructions: string;
-export declare const multiSelectInstructions: string;

package/lib/lib/request/prompts/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.multiSelectInstructions = exports.selectInstructions = exports.promptRequestSubmission = exports.doneSelectingAssets = exports.promptForDuration = exports.promptForReason = exports.chooseRoles = exports.chooseAssets = exports.chooseOktaAzureRoles = exports.selectRequestableItems = void 0;
+exports.selectInstructions = exports.promptRequestSubmission = exports.doneSelectingAssets = exports.promptForDuration = exports.promptForReason = exports.chooseRoles = exports.chooseAssets = exports.chooseOktaAzureRoles = exports.selectRequestableItems = void 0;
 const chalk_1 = require("chalk");
 var apps_prompt_1 = require("./apps-prompt");
 Object.defineProperty(exports, "selectRequestableItems", { enumerable: true, get: function () { return apps_prompt_1.selectRequestableItems; } });
@@ -17,4 +17,3 @@ var validate_prompt_1 = require("./validate-prompt");
 Object.defineProperty(exports, "doneSelectingAssets", { enumerable: true, get: function () { return validate_prompt_1.doneSelectingAssets; } });
 Object.defineProperty(exports, "promptRequestSubmission", { enumerable: true, get: function () { return validate_prompt_1.promptRequestSubmission; } });
 exports.selectInstructions = chalk_1.default.dim("[↑↓] Navigate · [Enter] Select · Type to filter");
-exports.multiSelectInstructions = chalk_1.default.dim("[↑↓] Navigate · [Space] Select · [Enter] Confirm · Type to filter");

package/lib/lib/request/prompts/role-prompt.js

@@ -19,26 +19,17 @@ async function chooseRoles(cmd, client, appId, assetId, requestMap) {
     }
     const rolePrompt = new AutoComplete({
         name: "Roles",
-        message: `Select one or more roles for ${assetEntry.assetName}:`,
-        hint: _1.multiSelectInstructions,
+        message: `Select a role for ${assetEntry.assetName}:`,
+        hint: _1.selectInstructions,
         limit: 15,
-        multiple: true,
         choices: assetRoles,
-        validate: (answer) => {
-            if (answer.length < 1) {
-                return "You must select at least one item.";
-            }
-            return true;
-        },
     });
-    const roles = await rolePrompt.run();
+    const selectedRole = await rolePrompt.run();
     if (!assetEntry.roles) {
         assetEntry.roles = {};
     }
-    for (const role of roles) {
-        assetEntry.roles[role.id] = {
-            roleId: role.id,
-            roleName: role.name,
-        };
-    }
+    assetEntry.roles[selectedRole.id] = {
+        roleId: selectedRole.id,
+        roleName: selectedRole.name,
+    };
 }

package/oclif.manifest.json

@@ -1047,5 +1047,5 @@
       ]
     }
   },
-  "version": "3.2.3"
+  "version": "3.2.4"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "opal-security",
   "description": "Opal allows you to centrally manage access to all of your sensitive systems.",
-  "version": "3.2.3",
+  "version": "3.2.4",
   "author": "Stephen Cobbe",
   "bin": {
     "opal": "./bin/run"