web: add initial user view page with consent

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

web/src/elements/user/UserConsentList.ts

@@ -0,0 +1,55 @@
+import { gettext } from "django";
+import { customElement, html, property, TemplateResult } from "lit-element";
+import { AKResponse } from "../../api/Client";
+import { Table, TableColumn } from "../table/Table";
+
+import "../forms/DeleteForm";
+import { PAGE_SIZE } from "../../constants";
+import { CoreApi, UserConsent } from "authentik-api";
+import { DEFAULT_CONFIG } from "../../api/Config";
+
+@customElement("ak-user-consent-list")
+export class UserConsentList extends Table<UserConsent> {
+    @property()
+    userId?: string;
+
+    apiEndpoint(page: number): Promise<AKResponse<UserConsent>> {
+        return new CoreApi(DEFAULT_CONFIG).coreUserConsentList({
+            user: this.userId,
+            ordering: "expires",
+            page: page,
+            pageSize: PAGE_SIZE,
+        });
+    }
+
+    order = "-expires";
+
+    columns(): TableColumn[] {
+        return [
+            new TableColumn("Application", "application"),
+            new TableColumn("Expires", "expires"),
+            new TableColumn(""),
+        ];
+    }
+
+    row(item: UserConsent): TemplateResult[] {
+        return [
+            html`${item.application.name}`,
+            html`${item.expires?.toLocaleString()}`,
+            html`
+            <ak-forms-delete
+                .obj=${item}
+                objectLabel=${gettext("Consent")}
+                .delete=${() => {
+                    return new CoreApi(DEFAULT_CONFIG).coreUserConsentDelete({
+                        id: item.pk || 0,
+                    });
+                }}>
+                <button slot="trigger" class="pf-c-button pf-m-danger">
+                    ${gettext("Delete Consent")}
+                </button>
+            </ak-forms-delete>`,
+        ];
+    }
+
+}

web/src/interfaces/AdminInterface.ts

@@ -51,7 +51,7 @@ export const SIDEBAR_ITEMS: SidebarItem[] = [
         return me().then(u => u.isSuperuser||false);
     }),
     new SidebarItem("Identity & Cryptography").children(
-        new SidebarItem("User", "/identity/users"),
+        new SidebarItem("User", "/identity/users").activeWhen(`^/identity/users/(?<id>${ID_REGEX})$`),
         new SidebarItem("Groups", "/identity/groups"),
         new SidebarItem("Certificates", "/crypto/certificates"),
         new SidebarItem("Tokens", "/core/tokens"),

web/src/pages/applications/ApplicationViewPage.ts

@@ -78,9 +78,9 @@ export class ApplicationViewPage extends LitElement {
                         <div class="pf-c-card pf-c-card-aggregate pf-l-gallery__item pf-m-4-col" style="grid-column-end: span 3;grid-row-end: span 2;">
                             <div class="pf-c-card__title">${gettext("Logins over the last 24 hours")}</div>
                             <div class="pf-c-card__body">
-                                ${this.application ? html`
+                                ${this.application && html`
                                     <ak-charts-application-authorize applicationSlug=${this.application.slug}>
-                                    </ak-charts-application-authorize>`: ""}
+                                    </ak-charts-application-authorize>`}
                             </div>
                         </div>
                         <div class="pf-c-card pf-c-card-aggregate pf-l-gallery__item pf-m-2-col">

web/src/pages/users/UserListPage.ts

@@ -52,10 +52,10 @@ export class UserListPage extends TablePage<User> {
 
     row(item: User): TemplateResult[] {
         return [
-            html`<div>
+            html`<a href="#/identity/users/${item.pk}">
                 <div>${item.username}</div>
                 <small>${item.name}</small>
-            </div>`,
+            </a>`,
             html`${item.isActive ? "Yes" : "No"}`,
             html`${item.lastLogin?.toLocaleString()}`,
             html`

web/src/pages/users/UserViewPage.ts

@@ -0,0 +1,96 @@
+import { gettext } from "django";
+import { CSSResult, customElement, html, property, TemplateResult } from "lit-element";
+
+import PFPage from "@patternfly/patternfly/components/Page/page.css";
+import PFContent from "@patternfly/patternfly/components/Content/content.css";
+import PFGallery from "@patternfly/patternfly/layouts/Gallery/gallery.css";
+import PFCard from "@patternfly/patternfly/components/Card/card.css";
+import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
+import PFSizing from "@patternfly/patternfly/utilities/Sizing/sizing.css";
+import PFFlex from "@patternfly/patternfly/utilities/Flex/flex.css";
+import PFDisplay from "@patternfly/patternfly/utilities/Display/display.css";
+import AKGlobal from "../../authentik.css";
+import PFBase from "@patternfly/patternfly/patternfly-base.css";
+
+import "../../elements/buttons/ModalButton";
+import "../../elements/buttons/SpinnerButton";
+import "../../elements/CodeMirror";
+import "../../elements/Tabs";
+import "../../elements/events/ObjectChangelog";
+import "../../elements/user/UserConsentList";
+import { Page } from "../../elements/Page";
+import { CoreApi, User } from "authentik-api";
+import { DEFAULT_CONFIG } from "../../api/Config";
+
+@customElement("ak-user-view")
+export class UserViewPage extends Page {
+    pageTitle(): string {
+        return gettext(`User ${this.user?.username || ""}`);
+    }
+    pageDescription(): string | undefined {
+        return;
+    }
+    pageIcon(): string {
+        return "pf-icon pf-icon-integration";
+    }
+
+    @property({ type: Number })
+    set userId(id: number) {
+        new CoreApi(DEFAULT_CONFIG).coreUsersRead({
+            id: id,
+        }).then((user) => {
+            this.user = user;
+        });
+    }
+
+    @property({ attribute: false })
+    user?: User;
+
+    static get styles(): CSSResult[] {
+        return [PFBase, PFPage, PFFlex, PFDisplay, PFGallery, PFContent, PFCard, PFDescriptionList, PFSizing, AKGlobal];
+    }
+
+    constructor() {
+        super();
+        this.addEventListener("ak-refresh", () => {
+            if (!this.user?.pk) return;
+            this.userId = this.user?.pk;
+        });
+    }
+
+    renderContent(): TemplateResult {
+        if (!this.user) {
+            return html``;
+        }
+        return html`<ak-tabs>
+                <section slot="page-1" data-tab-title="${gettext("Overview")}" class="pf-c-page__main-section pf-m-no-padding-mobile">
+                    <div class="pf-l-gallery pf-m-gutter">
+                        <div class="pf-c-card pf-c-card-aggregate pf-l-gallery__item pf-m-4-col" style="grid-column-end: span 3;grid-row-end: span 2;">
+                            <div class="pf-c-card__title">${gettext("Logins over the last 24 hours")}</div>
+                            <div class="pf-c-card__body">
+                            </div>
+                        </div>
+                    </div>
+                </section>
+                <section slot="page-2" data-tab-title="${gettext("Changelog")}" class="pf-c-page__main-section pf-m-no-padding-mobile">
+                    <div class="pf-c-card">
+                        <div class="pf-c-card__body">
+                            <ak-object-changelog
+                                targetModelPk=${this.user.pk || ""}
+                                targetModelApp="authentik_core"
+                                targetModelName="user">
+                            </ak-object-changelog>
+                        </div>
+                    </div>
+                </section>
+                <section slot="page-3" data-tab-title="${gettext("Explicit Consent")}" class="pf-c-page__main-section pf-m-no-padding-mobile">
+                    <div class="pf-c-card">
+                        <div class="pf-c-card__body">
+                            <ak-user-consent-list .userId="${(this.user.pk || 0).toString()}">
+                            </ak-user-consent-list>
+                        </div>
+                    </div>
+                </section>
+            </ak-tabs>`;
+    }
+}

web/src/routes.ts

@@ -11,6 +11,7 @@ import "./pages/events/RuleListPage";
 import "./pages/events/TransportListPage";
 import "./pages/flows/FlowListPage";
 import "./pages/flows/FlowViewPage";
+import "./pages/generic/SiteShell";
 import "./pages/groups/GroupListPage";
 import "./pages/LibraryPage";
 import "./pages/outposts/OutpostListPage";
@@ -21,14 +22,14 @@ import "./pages/providers/ProviderListPage";
 import "./pages/providers/ProviderViewPage";
 import "./pages/sources/SourcesListPage";
 import "./pages/sources/SourceViewPage";
-import "./pages/stages/StageListPage";
 import "./pages/stages/InvitationListPage";
 import "./pages/stages/PromptListPage";
+import "./pages/stages/StageListPage";
 import "./pages/system-tasks/SystemTaskListPage";
 import "./pages/tokens/TokenListPage";
 import "./pages/users/UserListPage";
+import "./pages/users/UserViewPage";
 import "./pages/users/UserSettingsPage";
-import "./pages/generic/SiteShell";
 
 export const ROUTES: Route[] = [
     // Prevent infinite Shell loops
@@ -49,10 +50,14 @@ export const ROUTES: Route[] = [
     new Route(new RegExp(`^/core/sources/(?<slug>${SLUG_REGEX})$`)).then((args) => {
         return html`<ak-source-view .args=${args}></ak-source-view>`;
     }),
+    new Route(new RegExp("^/core/property-mappings$"), html`<ak-property-mapping-list></ak-property-mapping-list>`),
+    new Route(new RegExp("^/core/tokens$"), html`<ak-token-list></ak-token-list>`),
     new Route(new RegExp("^/policy/policies$"), html`<ak-policy-list></ak-policy-list>`),
     new Route(new RegExp("^/identity/groups$"), html`<ak-group-list></ak-group-list>`),
     new Route(new RegExp("^/identity/users$"), html`<ak-user-list></ak-user-list>`),
-    new Route(new RegExp("^/core/tokens$"), html`<ak-token-list></ak-token-list>`),
+    new Route(new RegExp(`^/identity/users/(?<id>${ID_REGEX})$`)).then((args) => {
+        return html`<ak-user-view .userId=${parseInt(args.id, 10)}></ak-user-view>`;
+    }),
     new Route(new RegExp("^/flow/stages/invitations$"), html`<ak-stage-invitation-list></ak-stage-invitation-list>`),
     new Route(new RegExp("^/flow/stages/prompts$"), html`<ak-stage-prompt-list></ak-stage-prompt-list>`),
     new Route(new RegExp("^/flow/stages$"), html`<ak-stage-list></ak-stage-list>`),
@@ -66,7 +71,6 @@ export const ROUTES: Route[] = [
     }),
     new Route(new RegExp("^/events/transports$"), html`<ak-event-transport-list></ak-event-transport-list>`),
     new Route(new RegExp("^/events/rules$"), html`<ak-event-rule-list></ak-event-rule-list>`),
-    new Route(new RegExp("^/core/property-mappings$"), html`<ak-property-mapping-list></ak-property-mapping-list>`),
     new Route(new RegExp("^/outpost/outposts$"), html`<ak-outpost-list></ak-outpost-list>`),
     new Route(new RegExp("^/outpost/service-connections$"), html`<ak-outpost-service-connection-list></ak-outpost-service-connection-list>`),
     new Route(new RegExp("^/crypto/certificates$"), html`<ak-crypto-certificatekeypair-list></ak-crypto-certificatekeypair-list>`),