675 lines
21 KiB
TypeScript
675 lines
21 KiB
TypeScript
import {
|
|
DeesElement,
|
|
customElement,
|
|
html,
|
|
css,
|
|
cssManager,
|
|
property,
|
|
type TemplateResult,
|
|
} from '@design.estate/dees-element';
|
|
import type { ISgAuthProviderDetail } from '../interfaces.js';
|
|
|
|
declare global {
|
|
interface HTMLElementTagNameMap {
|
|
'sg-admin-provider-form-view': SgAdminProviderFormView;
|
|
}
|
|
}
|
|
|
|
interface IProviderFormData {
|
|
name: string;
|
|
displayName: string;
|
|
type: 'oidc' | 'ldap';
|
|
status: 'active' | 'disabled' | 'testing';
|
|
priority: number;
|
|
// OIDC fields
|
|
clientId?: string;
|
|
clientSecret?: string;
|
|
issuerUrl?: string;
|
|
authorizationUrl?: string;
|
|
tokenUrl?: string;
|
|
userInfoUrl?: string;
|
|
scopes?: string;
|
|
// LDAP fields
|
|
ldapUrl?: string;
|
|
bindDn?: string;
|
|
bindPassword?: string;
|
|
baseDn?: string;
|
|
userFilter?: string;
|
|
// Attribute mapping
|
|
usernameAttr?: string;
|
|
emailAttr?: string;
|
|
displayNameAttr?: string;
|
|
// Provisioning
|
|
autoCreateUsers?: boolean;
|
|
defaultRole?: string;
|
|
}
|
|
|
|
@customElement('sg-admin-provider-form-view')
|
|
export class SgAdminProviderFormView extends DeesElement {
|
|
public static demo = () => html`
|
|
<div style="padding: 24px; max-width: 800px; background: #09090b;">
|
|
<sg-admin-provider-form-view
|
|
.provider=${null}
|
|
></sg-admin-provider-form-view>
|
|
</div>
|
|
`;
|
|
|
|
public static demoGroups = ['Admin'];
|
|
|
|
@property({ type: Object })
|
|
public accessor provider: ISgAuthProviderDetail | null = null;
|
|
|
|
private formData: IProviderFormData = {
|
|
name: '',
|
|
displayName: '',
|
|
type: 'oidc',
|
|
status: 'testing',
|
|
priority: 10,
|
|
clientId: '',
|
|
clientSecret: '',
|
|
issuerUrl: '',
|
|
authorizationUrl: '',
|
|
tokenUrl: '',
|
|
userInfoUrl: '',
|
|
scopes: 'openid profile email',
|
|
ldapUrl: '',
|
|
bindDn: '',
|
|
bindPassword: '',
|
|
baseDn: '',
|
|
userFilter: '(uid={{username}})',
|
|
usernameAttr: 'preferred_username',
|
|
emailAttr: 'email',
|
|
displayNameAttr: 'name',
|
|
autoCreateUsers: true,
|
|
defaultRole: 'member',
|
|
};
|
|
|
|
async connectedCallback() {
|
|
await super.connectedCallback();
|
|
if (this.provider) {
|
|
this.formData = {
|
|
...this.formData,
|
|
name: this.provider.name,
|
|
displayName: this.provider.displayName,
|
|
type: this.provider.type,
|
|
status: this.provider.status,
|
|
priority: this.provider.priority,
|
|
};
|
|
}
|
|
}
|
|
|
|
public static styles = [
|
|
cssManager.defaultStyles,
|
|
css`
|
|
:host {
|
|
display: block;
|
|
color: ${cssManager.bdTheme('#111', '#fff')};
|
|
}
|
|
|
|
.container {
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 24px;
|
|
}
|
|
|
|
.header {
|
|
display: flex;
|
|
justify-content: space-between;
|
|
align-items: center;
|
|
}
|
|
|
|
.page-title {
|
|
font-size: 24px;
|
|
font-weight: 700;
|
|
letter-spacing: -0.02em;
|
|
}
|
|
|
|
.cancel-btn {
|
|
padding: 8px 16px;
|
|
background: transparent;
|
|
border: 1px solid ${cssManager.bdTheme('#ddd', '#333')};
|
|
font-size: 13px;
|
|
color: ${cssManager.bdTheme('#666', '#999')};
|
|
cursor: pointer;
|
|
transition: all 150ms ease;
|
|
}
|
|
|
|
.cancel-btn:hover {
|
|
border-color: ${cssManager.bdTheme('#999', '#666')};
|
|
color: ${cssManager.bdTheme('#111', '#fff')};
|
|
}
|
|
|
|
/* Section */
|
|
.section {
|
|
background: ${cssManager.bdTheme('#fff', '#111')};
|
|
border: 1px solid ${cssManager.bdTheme('#e5e5e5', '#333')};
|
|
padding: 24px;
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 16px;
|
|
}
|
|
|
|
.section-title {
|
|
font-size: 16px;
|
|
font-weight: 600;
|
|
margin-bottom: 4px;
|
|
}
|
|
|
|
.section-subtitle {
|
|
font-size: 13px;
|
|
color: ${cssManager.bdTheme('#888', '#777')};
|
|
margin-top: -12px;
|
|
}
|
|
|
|
/* Form elements */
|
|
.form-row {
|
|
display: grid;
|
|
grid-template-columns: 1fr 1fr;
|
|
gap: 16px;
|
|
}
|
|
|
|
.form-group {
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 6px;
|
|
}
|
|
|
|
.form-group.full {
|
|
grid-column: 1 / -1;
|
|
}
|
|
|
|
.form-label {
|
|
font-size: 13px;
|
|
font-weight: 600;
|
|
color: ${cssManager.bdTheme('#111', '#ddd')};
|
|
text-transform: uppercase;
|
|
letter-spacing: 0.04em;
|
|
}
|
|
|
|
.form-input {
|
|
padding: 10px 12px;
|
|
background: ${cssManager.bdTheme('#fff', '#0a0a0a')};
|
|
border: 1px solid ${cssManager.bdTheme('#ddd', '#333')};
|
|
font-size: 14px;
|
|
color: ${cssManager.bdTheme('#111', '#fff')};
|
|
outline: none;
|
|
font-family: inherit;
|
|
box-sizing: border-box;
|
|
}
|
|
|
|
.form-input:focus {
|
|
border-color: ${cssManager.bdTheme('#111', '#fff')};
|
|
}
|
|
|
|
.form-input.mono {
|
|
font-family: 'JetBrains Mono', monospace;
|
|
font-size: 13px;
|
|
}
|
|
|
|
.form-hint {
|
|
font-size: 12px;
|
|
color: ${cssManager.bdTheme('#aaa', '#666')};
|
|
}
|
|
|
|
.form-select {
|
|
padding: 10px 12px;
|
|
background: ${cssManager.bdTheme('#fff', '#0a0a0a')};
|
|
border: 1px solid ${cssManager.bdTheme('#ddd', '#333')};
|
|
font-size: 14px;
|
|
color: ${cssManager.bdTheme('#111', '#fff')};
|
|
outline: none;
|
|
font-family: inherit;
|
|
}
|
|
|
|
/* Type selector */
|
|
.type-selector {
|
|
display: flex;
|
|
gap: 0;
|
|
border: 1px solid ${cssManager.bdTheme('#e5e5e5', '#333')};
|
|
width: fit-content;
|
|
}
|
|
|
|
.type-btn {
|
|
padding: 10px 24px;
|
|
background: transparent;
|
|
border: none;
|
|
border-right: 1px solid ${cssManager.bdTheme('#e5e5e5', '#333')};
|
|
font-size: 14px;
|
|
font-weight: 500;
|
|
color: ${cssManager.bdTheme('#666', '#999')};
|
|
cursor: pointer;
|
|
transition: all 150ms ease;
|
|
}
|
|
|
|
.type-btn:last-child {
|
|
border-right: none;
|
|
}
|
|
|
|
.type-btn.active {
|
|
background: ${cssManager.bdTheme('#111', '#fff')};
|
|
color: ${cssManager.bdTheme('#fff', '#111')};
|
|
}
|
|
|
|
.type-btn:hover:not(.active) {
|
|
background: ${cssManager.bdTheme('#f5f5f5', '#1a1a1a')};
|
|
}
|
|
|
|
/* Toggle */
|
|
.toggle-row {
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: space-between;
|
|
padding: 4px 0;
|
|
}
|
|
|
|
.toggle-switch {
|
|
width: 44px;
|
|
height: 24px;
|
|
background: ${cssManager.bdTheme('#ddd', '#333')};
|
|
cursor: pointer;
|
|
position: relative;
|
|
transition: background 150ms ease;
|
|
flex-shrink: 0;
|
|
}
|
|
|
|
.toggle-switch.on {
|
|
background: #22c55e;
|
|
}
|
|
|
|
.toggle-switch::after {
|
|
content: '';
|
|
position: absolute;
|
|
width: 18px;
|
|
height: 18px;
|
|
background: #fff;
|
|
top: 3px;
|
|
left: 3px;
|
|
transition: transform 150ms ease;
|
|
}
|
|
|
|
.toggle-switch.on::after {
|
|
transform: translateX(20px);
|
|
}
|
|
|
|
/* Footer */
|
|
.form-footer {
|
|
display: flex;
|
|
gap: 8px;
|
|
}
|
|
|
|
.save-btn {
|
|
padding: 10px 24px;
|
|
background: ${cssManager.bdTheme('#111', '#fff')};
|
|
border: none;
|
|
font-size: 14px;
|
|
font-weight: 600;
|
|
color: ${cssManager.bdTheme('#fff', '#111')};
|
|
cursor: pointer;
|
|
transition: opacity 150ms ease;
|
|
}
|
|
|
|
.save-btn:hover {
|
|
opacity: 0.85;
|
|
}
|
|
|
|
.footer-cancel-btn {
|
|
padding: 10px 24px;
|
|
background: transparent;
|
|
border: 1px solid ${cssManager.bdTheme('#ddd', '#333')};
|
|
font-size: 14px;
|
|
color: ${cssManager.bdTheme('#666', '#999')};
|
|
cursor: pointer;
|
|
transition: all 150ms ease;
|
|
}
|
|
|
|
.footer-cancel-btn:hover {
|
|
border-color: ${cssManager.bdTheme('#999', '#666')};
|
|
color: ${cssManager.bdTheme('#111', '#fff')};
|
|
}
|
|
`,
|
|
];
|
|
|
|
public render(): TemplateResult {
|
|
const isNew = !this.provider;
|
|
|
|
return html`
|
|
<div class="container">
|
|
<div class="header">
|
|
<div class="page-title">${isNew ? 'Add Authentication Provider' : 'Edit Provider'}</div>
|
|
<button class="cancel-btn" @click=${() => this.emitEvent('cancel', {})}>Cancel</button>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<div class="section-title">Basic Information</div>
|
|
|
|
<div class="form-group">
|
|
<label class="form-label">Provider Type</label>
|
|
<div class="type-selector">
|
|
<button
|
|
class="type-btn ${this.formData.type === 'oidc' ? 'active' : ''}"
|
|
@click=${() => this.updateField('type', 'oidc')}
|
|
>OpenID Connect</button>
|
|
<button
|
|
class="type-btn ${this.formData.type === 'ldap' ? 'active' : ''}"
|
|
@click=${() => this.updateField('type', 'ldap')}
|
|
>LDAP</button>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-row">
|
|
<div class="form-group">
|
|
<label class="form-label">Internal Name</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.name}
|
|
@input=${(e: InputEvent) => this.updateField('name', (e.target as HTMLInputElement).value)}
|
|
placeholder="github-sso"
|
|
>
|
|
<span class="form-hint">Unique identifier (lowercase, no spaces)</span>
|
|
</div>
|
|
<div class="form-group">
|
|
<label class="form-label">Display Name</label>
|
|
<input
|
|
type="text"
|
|
class="form-input"
|
|
.value=${this.formData.displayName}
|
|
@input=${(e: InputEvent) => this.updateField('displayName', (e.target as HTMLInputElement).value)}
|
|
placeholder="GitHub SSO"
|
|
>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-row">
|
|
<div class="form-group">
|
|
<label class="form-label">Status</label>
|
|
<select
|
|
class="form-select"
|
|
@change=${(e: Event) => this.updateField('status', (e.target as HTMLSelectElement).value)}
|
|
>
|
|
<option value="testing" ?selected=${this.formData.status === 'testing'}>Testing</option>
|
|
<option value="active" ?selected=${this.formData.status === 'active'}>Active</option>
|
|
<option value="disabled" ?selected=${this.formData.status === 'disabled'}>Disabled</option>
|
|
</select>
|
|
</div>
|
|
<div class="form-group">
|
|
<label class="form-label">Priority</label>
|
|
<input
|
|
type="number"
|
|
class="form-input"
|
|
.value=${String(this.formData.priority)}
|
|
@input=${(e: InputEvent) => this.updateField('priority', parseInt((e.target as HTMLInputElement).value) || 0)}
|
|
min="0"
|
|
>
|
|
<span class="form-hint">Lower number = higher priority</span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
${this.formData.type === 'oidc' ? this.renderOidcFields() : this.renderLdapFields()}
|
|
|
|
${this.renderAttributeMapping()}
|
|
|
|
${this.renderProvisioning()}
|
|
|
|
<div class="form-footer">
|
|
<button class="save-btn" @click=${this.handleSave}>
|
|
${isNew ? 'Create Provider' : 'Save Changes'}
|
|
</button>
|
|
<button class="footer-cancel-btn" @click=${() => this.emitEvent('cancel', {})}>Cancel</button>
|
|
</div>
|
|
</div>
|
|
`;
|
|
}
|
|
|
|
private renderOidcFields(): TemplateResult {
|
|
return html`
|
|
<div class="section">
|
|
<div class="section-title">OpenID Connect Configuration</div>
|
|
<div class="section-subtitle">Configure your OIDC provider endpoints and credentials</div>
|
|
|
|
<div class="form-row">
|
|
<div class="form-group">
|
|
<label class="form-label">Client ID</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.clientId || ''}
|
|
@input=${(e: InputEvent) => this.updateField('clientId', (e.target as HTMLInputElement).value)}
|
|
placeholder="your-client-id"
|
|
>
|
|
</div>
|
|
<div class="form-group">
|
|
<label class="form-label">Client Secret</label>
|
|
<input
|
|
type="password"
|
|
class="form-input mono"
|
|
.value=${this.formData.clientSecret || ''}
|
|
@input=${(e: InputEvent) => this.updateField('clientSecret', (e.target as HTMLInputElement).value)}
|
|
placeholder="your-client-secret"
|
|
>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group full">
|
|
<label class="form-label">Issuer URL</label>
|
|
<input
|
|
type="url"
|
|
class="form-input mono"
|
|
.value=${this.formData.issuerUrl || ''}
|
|
@input=${(e: InputEvent) => this.updateField('issuerUrl', (e.target as HTMLInputElement).value)}
|
|
placeholder="https://accounts.google.com"
|
|
>
|
|
<span class="form-hint">The OIDC discovery endpoint base URL</span>
|
|
</div>
|
|
|
|
<div class="form-row">
|
|
<div class="form-group">
|
|
<label class="form-label">Authorization URL (optional)</label>
|
|
<input
|
|
type="url"
|
|
class="form-input mono"
|
|
.value=${this.formData.authorizationUrl || ''}
|
|
@input=${(e: InputEvent) => this.updateField('authorizationUrl', (e.target as HTMLInputElement).value)}
|
|
placeholder="Auto-discovered from issuer"
|
|
>
|
|
</div>
|
|
<div class="form-group">
|
|
<label class="form-label">Token URL (optional)</label>
|
|
<input
|
|
type="url"
|
|
class="form-input mono"
|
|
.value=${this.formData.tokenUrl || ''}
|
|
@input=${(e: InputEvent) => this.updateField('tokenUrl', (e.target as HTMLInputElement).value)}
|
|
placeholder="Auto-discovered from issuer"
|
|
>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-row">
|
|
<div class="form-group">
|
|
<label class="form-label">UserInfo URL (optional)</label>
|
|
<input
|
|
type="url"
|
|
class="form-input mono"
|
|
.value=${this.formData.userInfoUrl || ''}
|
|
@input=${(e: InputEvent) => this.updateField('userInfoUrl', (e.target as HTMLInputElement).value)}
|
|
placeholder="Auto-discovered from issuer"
|
|
>
|
|
</div>
|
|
<div class="form-group">
|
|
<label class="form-label">Scopes</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.scopes || ''}
|
|
@input=${(e: InputEvent) => this.updateField('scopes', (e.target as HTMLInputElement).value)}
|
|
placeholder="openid profile email"
|
|
>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
`;
|
|
}
|
|
|
|
private renderLdapFields(): TemplateResult {
|
|
return html`
|
|
<div class="section">
|
|
<div class="section-title">LDAP Configuration</div>
|
|
<div class="section-subtitle">Configure your LDAP/Active Directory server connection</div>
|
|
|
|
<div class="form-group full">
|
|
<label class="form-label">LDAP URL</label>
|
|
<input
|
|
type="url"
|
|
class="form-input mono"
|
|
.value=${this.formData.ldapUrl || ''}
|
|
@input=${(e: InputEvent) => this.updateField('ldapUrl', (e.target as HTMLInputElement).value)}
|
|
placeholder="ldaps://ldap.example.com:636"
|
|
>
|
|
</div>
|
|
|
|
<div class="form-row">
|
|
<div class="form-group">
|
|
<label class="form-label">Bind DN</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.bindDn || ''}
|
|
@input=${(e: InputEvent) => this.updateField('bindDn', (e.target as HTMLInputElement).value)}
|
|
placeholder="cn=admin,dc=example,dc=com"
|
|
>
|
|
</div>
|
|
<div class="form-group">
|
|
<label class="form-label">Bind Password</label>
|
|
<input
|
|
type="password"
|
|
class="form-input mono"
|
|
.value=${this.formData.bindPassword || ''}
|
|
@input=${(e: InputEvent) => this.updateField('bindPassword', (e.target as HTMLInputElement).value)}
|
|
placeholder="Bind password"
|
|
>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group full">
|
|
<label class="form-label">Base DN</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.baseDn || ''}
|
|
@input=${(e: InputEvent) => this.updateField('baseDn', (e.target as HTMLInputElement).value)}
|
|
placeholder="ou=users,dc=example,dc=com"
|
|
>
|
|
</div>
|
|
|
|
<div class="form-group full">
|
|
<label class="form-label">User Search Filter</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.userFilter || ''}
|
|
@input=${(e: InputEvent) => this.updateField('userFilter', (e.target as HTMLInputElement).value)}
|
|
placeholder="(uid={{username}})"
|
|
>
|
|
<span class="form-hint">Use {{username}} as placeholder for the login username</span>
|
|
</div>
|
|
</div>
|
|
`;
|
|
}
|
|
|
|
private renderAttributeMapping(): TemplateResult {
|
|
return html`
|
|
<div class="section">
|
|
<div class="section-title">Attribute Mapping</div>
|
|
<div class="section-subtitle">Map provider attributes to registry user fields</div>
|
|
|
|
<div class="form-row">
|
|
<div class="form-group">
|
|
<label class="form-label">Username Attribute</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.usernameAttr || ''}
|
|
@input=${(e: InputEvent) => this.updateField('usernameAttr', (e.target as HTMLInputElement).value)}
|
|
placeholder="preferred_username"
|
|
>
|
|
</div>
|
|
<div class="form-group">
|
|
<label class="form-label">Email Attribute</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.emailAttr || ''}
|
|
@input=${(e: InputEvent) => this.updateField('emailAttr', (e.target as HTMLInputElement).value)}
|
|
placeholder="email"
|
|
>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label class="form-label">Display Name Attribute</label>
|
|
<input
|
|
type="text"
|
|
class="form-input mono"
|
|
.value=${this.formData.displayNameAttr || ''}
|
|
@input=${(e: InputEvent) => this.updateField('displayNameAttr', (e.target as HTMLInputElement).value)}
|
|
placeholder="name"
|
|
>
|
|
</div>
|
|
</div>
|
|
`;
|
|
}
|
|
|
|
private renderProvisioning(): TemplateResult {
|
|
return html`
|
|
<div class="section">
|
|
<div class="section-title">Provisioning</div>
|
|
<div class="section-subtitle">Control automatic user creation and default roles</div>
|
|
|
|
<div class="toggle-row">
|
|
<div>
|
|
<div style="font-size: 14px; font-weight: 500; color: ${cssManager.bdTheme('#111', '#fff')}">Auto-create Users</div>
|
|
<div style="font-size: 12px; color: ${cssManager.bdTheme('#888', '#777')}">Automatically create accounts for new users who authenticate via this provider</div>
|
|
</div>
|
|
<div
|
|
class="toggle-switch ${this.formData.autoCreateUsers ? 'on' : ''}"
|
|
@click=${() => { this.formData.autoCreateUsers = !this.formData.autoCreateUsers; this.requestUpdate(); }}
|
|
></div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label class="form-label">Default Role</label>
|
|
<select
|
|
class="form-select"
|
|
@change=${(e: Event) => this.updateField('defaultRole', (e.target as HTMLSelectElement).value)}
|
|
>
|
|
<option value="member" ?selected=${this.formData.defaultRole === 'member'}>Member</option>
|
|
<option value="admin" ?selected=${this.formData.defaultRole === 'admin'}>Admin</option>
|
|
</select>
|
|
<span class="form-hint">Role assigned to newly provisioned users</span>
|
|
</div>
|
|
</div>
|
|
`;
|
|
}
|
|
|
|
private updateField(field: string, value: unknown) {
|
|
(this.formData as unknown as Record<string, unknown>)[field] = value;
|
|
this.requestUpdate();
|
|
}
|
|
|
|
private handleSave() {
|
|
this.dispatchEvent(
|
|
new CustomEvent('save', {
|
|
detail: { providerData: { ...this.formData } },
|
|
bubbles: true,
|
|
composed: true,
|
|
})
|
|
);
|
|
}
|
|
|
|
private emitEvent(name: string, detail: Record<string, unknown>) {
|
|
this.dispatchEvent(new CustomEvent(name, { detail, bubbles: true, composed: true }));
|
|
}
|
|
}
|