From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 37D4C723B9 for ; Thu, 1 Jul 2021 14:42:23 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 35F7824C76 for ; Thu, 1 Jul 2021 14:42:23 +0200 (CEST) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [94.136.29.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id E9CC524C49 for ; Thu, 1 Jul 2021 14:42:21 +0200 (CEST) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 9A7B34033A for ; Thu, 1 Jul 2021 14:42:21 +0200 (CEST) From: Dominik Csapak To: pve-devel@lists.proxmox.com Date: Thu, 1 Jul 2021 14:25:02 +0200 Message-Id: <20210701122506.503289-4-d.csapak@proxmox.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20210701122506.503289-1-d.csapak@proxmox.com> References: <20210701122506.503289-1-d.csapak@proxmox.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL -0.898 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% ENA_SUBJ_ODD_CASE 3.2 Subject has odd case KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pve-devel] [PATCH manager 2/6] ui: dc: add AuthEditOpenId panel X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Jul 2021 12:42:23 -0000 for adding and editing openid realms, does not support tfa Signed-off-by: Dominik Csapak --- www/manager6/Makefile | 1 + www/manager6/Utils.js | 6 +++ www/manager6/dc/AuthEditOpenId.js | 77 +++++++++++++++++++++++++++++++ 3 files changed, 84 insertions(+) create mode 100644 www/manager6/dc/AuthEditOpenId.js diff --git a/www/manager6/Makefile b/www/manager6/Makefile index 3e3fb6eb..ecd6657e 100644 --- a/www/manager6/Makefile +++ b/www/manager6/Makefile @@ -120,6 +120,7 @@ JSSRC= \ dc/AuthEditBase.js \ dc/AuthEditAD.js \ dc/AuthEditLDAP.js \ + dc/AuthEditOpenId.js \ dc/AuthView.js \ dc/Backup.js \ dc/Cluster.js \ diff --git a/www/manager6/Utils.js b/www/manager6/Utils.js index d728c4be..e642e283 100644 --- a/www/manager6/Utils.js +++ b/www/manager6/Utils.js @@ -742,6 +742,12 @@ Ext.define('PVE.Utils', { add: true, tfa: true, }, + openid: { + name: gettext('OpenID Server'), + ipanel: 'pveAuthOpenIDPanel', + add: true, + tfa: false, + }, pam: { name: 'Linux PAM', ipanel: 'pveAuthBasePanel', diff --git a/www/manager6/dc/AuthEditOpenId.js b/www/manager6/dc/AuthEditOpenId.js new file mode 100644 index 00000000..f82122e2 --- /dev/null +++ b/www/manager6/dc/AuthEditOpenId.js @@ -0,0 +1,77 @@ +Ext.define('PVE.panel.OpenIDInputPanel', { + extend: 'PVE.panel.AuthBase', + xtype: 'pveAuthOpenIDPanel', + + initComponent: function() { + let me = this; + + if (me.type !== 'openid') { + throw 'invalid type'; + } + + me.columnT = [ + { + xtype: 'textfield', + name: 'issuer-url', + fieldLabel: gettext('Issuer URL'), + allowBlank: false, + }, + ]; + + me.column1 = [ + { + xtype: 'proxmoxtextfield', + fieldLabel: gettext('Client ID'), + name: 'client-id', + allowBlank: false, + }, + { + xtype: 'proxmoxtextfield', + fieldLabel: gettext('Client Key'), + deleteEmpty: !me.isCreate, + name: 'client-key', + }, + ]; + + me.column2 = [ + { + xtype: 'proxmoxcheckbox', + fieldLabel: gettext('Autocreate Users'), + name: 'autocreate', + value: 0, + deleteEmpty: !me.isCreate, + }, + ]; + + if (me.isCreate) { + me.column2.push({ + xtype: 'proxmoxKVComboBox', + name: 'username-claim', + value: '__default__', + deleteEmpty: !me.isCreate, + fieldLabel: gettext('Username Claim'), + comboItems: [ + ['__default__', Proxmox.Utils.defaultText], + ['subject', 'subject'], + ['username', 'username'], + ['email', 'email'], + ], + }); + } + + me.callParent(); + }, + onGetValues: function(values) { + let me = this; + + if (!values.verify) { + if (!me.isCreate) { + Proxmox.Utils.assemble_field_data(values, { 'delete': 'verify' }); + } + delete values.verify; + } + + return me.callParent([values]); + }, +}); + -- 2.30.2