web/admin: add webui for tenants

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

web/src/interfaces/AdminInterface.ts

@@ -40,6 +40,9 @@ export class AdminInterface extends Interface {
                 <ak-sidebar-item path="/core/providers" .activeWhen=${[`^/core/providers/(?<id>${ID_REGEX})$`]}>
                     <span slot="label">${t`Providers`}</span>
                 </ak-sidebar-item>
+                <ak-sidebar-item path="/core/tenants">
+                    <span slot="label">${t`Tenants`}</span>
+                </ak-sidebar-item>
             </ak-sidebar-item>
             <ak-sidebar-item
                 .condition=${superUserCondition}>

web/src/pages/tenants/TenantForm.ts

@@ -0,0 +1,158 @@
+import { CoreApi, FlowsApi, FlowsInstancesListDesignationEnum, Tenant } from "authentik-api";
+import { t } from "@lingui/macro";
+import { customElement } from "lit-element";
+import { html, TemplateResult } from "lit-html";
+import { DEFAULT_CONFIG } from "../../api/Config";
+import "../../elements/forms/HorizontalFormElement";
+import { first } from "../../utils";
+import { ModelForm } from "../../elements/forms/ModelForm";
+import { until } from "lit-html/directives/until";
+
+@customElement("ak-tenant-form")
+export class TenantForm extends ModelForm<Tenant, string> {
+
+    loadInstance(pk: string): Promise<Tenant> {
+        return new CoreApi(DEFAULT_CONFIG).coreTenantsRetrieve({
+            tenantUuid: pk
+        });
+    }
+
+    getSuccessMessage(): string {
+        if (this.instance) {
+            return t`Successfully updated tenant.`;
+        } else {
+            return t`Successfully created tenant.`;
+        }
+    }
+
+    send = (data: Tenant): Promise<Tenant> => {
+        if (this.instance?.tenantUuid) {
+            return new CoreApi(DEFAULT_CONFIG).coreTenantsUpdate({
+                tenantUuid: this.instance.tenantUuid,
+                tenantRequest: data
+            });
+        } else {
+            return new CoreApi(DEFAULT_CONFIG).coreTenantsCreate({
+                tenantRequest: data
+            });
+        }
+    };
+
+    renderForm(): TemplateResult {
+        return html`<form class="pf-c-form pf-m-horizontal">
+            <ak-form-element-horizontal
+                label=${t`Domain`}
+                ?required=${true}
+                name="name">
+                <input type="text" value="${first(this.instance?.domain, window.location.host)}" class="pf-c-form-control" required>
+            </ak-form-element-horizontal>
+            <ak-form-element-horizontal name="isSuperuser">
+                <div class="pf-c-check">
+                    <input type="checkbox" class="pf-c-check__input" ?checked=${first(this.instance?._default, false)}>
+                    <label class="pf-c-check__label">
+                        ${t`Default`}
+                    </label>
+                </div>
+                <p class="pf-c-form__helper-text">${t`Use this tenant for each domain that doesn't have a dedicated tenant.`}</p>
+            </ak-form-element-horizontal>
+
+            <ak-form-group .expanded=${true}>
+                <span slot="header">
+                    ${t`Branding settings`}
+                </span>
+                <div slot="body" class="pf-c-form">
+                    <ak-form-element-horizontal
+                        label=${t`Title`}
+                        ?required=${true}
+                        name="brandingTitle">
+                        <input type="text" value="${first(this.instance?.brandingTitle, "authentik")}" class="pf-c-form-control" required>
+                        <p class="pf-c-form__helper-text">${t`Branding shown in page title and several other places.`}</p>
+                    </ak-form-element-horizontal>
+                    <ak-form-element-horizontal
+                        label=${t`Logo`}
+                        ?required=${true}
+                        name="brandingLogo">
+                        <input type="text" value="${first(this.instance?.brandingLogo, "/static/dist/assets/icons/icon_left_brand.svg")}" class="pf-c-form-control" required>
+                        <p class="pf-c-form__helper-text">${t`Icon shown in sidebar/header and flow executor.`}</p>
+                    </ak-form-element-horizontal>
+                </div>
+            </ak-form-group>
+            <ak-form-group>
+                <span slot="header">
+                    ${t`Default flows`}
+                </span>
+                <div slot="body" class="pf-c-form">
+                    <ak-form-element-horizontal
+                        label=${t`Authentication flow`}
+                        name="flowAuthentication">
+                        <select class="pf-c-form-control">
+                            <option value="" ?selected=${this.instance?.flowAuthentication === undefined}>---------</option>
+                            ${until(new FlowsApi(DEFAULT_CONFIG).flowsInstancesList({
+                                ordering: "pk",
+                                designation: FlowsInstancesListDesignationEnum.Authentication,
+                            }).then(flows => {
+                                return flows.results.map(flow => {
+                                    let selected = this.instance?.flowAuthentication === flow.pk;
+                                    return html`<option value=${flow.pk} ?selected=${selected}>${flow.name} (${flow.slug})</option>`;
+                                });
+                            }), html`<option>${t`Loading...`}</option>`)}
+                        </select>
+                        <p class="pf-c-form__helper-text">${t`Flow used to authenticate users. If left empty, the first applicable flow sorted by the slug is used.`}</p>
+                    </ak-form-element-horizontal>
+                    <ak-form-element-horizontal
+                        label=${t`Invalidation flow`}
+                        name="flowInvalidation">
+                        <select class="pf-c-form-control">
+                            <option value="" ?selected=${this.instance?.flowInvalidation === undefined}>---------</option>
+                            ${until(new FlowsApi(DEFAULT_CONFIG).flowsInstancesList({
+                                ordering: "pk",
+                                designation: FlowsInstancesListDesignationEnum.Invalidation,
+                            }).then(flows => {
+                                return flows.results.map(flow => {
+                                    let selected = this.instance?.flowInvalidation === flow.pk;
+                                    return html`<option value=${flow.pk} ?selected=${selected}>${flow.name} (${flow.slug})</option>`;
+                                });
+                            }), html`<option>${t`Loading...`}</option>`)}
+                        </select>
+                        <p class="pf-c-form__helper-text">${t`Flow used to logout. If left empty, the first applicable flow sorted by the slug is used.`}</p>
+                    </ak-form-element-horizontal>
+                    <ak-form-element-horizontal
+                        label=${t`Recovery flow`}
+                        name="flowRecovery">
+                        <select class="pf-c-form-control">
+                            <option value="" ?selected=${this.instance?.flowRecovery === undefined}>---------</option>
+                            ${until(new FlowsApi(DEFAULT_CONFIG).flowsInstancesList({
+                                ordering: "pk",
+                                designation: FlowsInstancesListDesignationEnum.Recovery,
+                            }).then(flows => {
+                                return flows.results.map(flow => {
+                                    let selected = this.instance?.flowRecovery === flow.pk;
+                                    return html`<option value=${flow.pk} ?selected=${selected}>${flow.name} (${flow.slug})</option>`;
+                                });
+                            }), html`<option>${t`Loading...`}</option>`)}
+                        </select>
+                        <p class="pf-c-form__helper-text">${t`Recovery flow. If left empty, the first applicable flow sorted by the slug is used.`}</p>
+                    </ak-form-element-horizontal>
+                    <ak-form-element-horizontal
+                        label=${t`Unenrollment flow`}
+                        name="flowUnenrollment">
+                        <select class="pf-c-form-control">
+                            <option value="" ?selected=${this.instance?.flowUnenrollment === undefined}>---------</option>
+                            ${until(new FlowsApi(DEFAULT_CONFIG).flowsInstancesList({
+                                ordering: "pk",
+                                designation: FlowsInstancesListDesignationEnum.Recovery,
+                            }).then(flows => {
+                                return flows.results.map(flow => {
+                                    let selected = this.instance?.flowUnenrollment === flow.pk;
+                                    return html`<option value=${flow.pk} ?selected=${selected}>${flow.name} (${flow.slug})</option>`;
+                                });
+                            }), html`<option>${t`Loading...`}</option>`)}
+                        </select>
+                        <p class="pf-c-form__helper-text">${t`If set, users are able to unenroll themselves using this flow. If no flow is set, option is not shown.`}</p>
+                    </ak-form-element-horizontal>
+                </div>
+            </ak-form-group>
+        </form>`;
+    }
+
+}

web/src/pages/tenants/TenantListPage.ts

@@ -0,0 +1,101 @@
+import { t } from "@lingui/macro";
+import { customElement, html, property, TemplateResult } from "lit-element";
+import { AKResponse } from "../../api/Client";
+import { TablePage } from "../../elements/table/TablePage";
+
+import "../../elements/forms/DeleteForm";
+import "../../elements/buttons/SpinnerButton";
+import { TableColumn } from "../../elements/table/Table";
+import { PAGE_SIZE } from "../../constants";
+import { CoreApi, Tenant } from "authentik-api";
+import { DEFAULT_CONFIG } from "../../api/Config";
+import "../../elements/forms/ModalForm";
+import "./TenantForm";
+
+@customElement("ak-tenant-list")
+export class TenantListPage extends TablePage<Tenant> {
+    searchEnabled(): boolean {
+        return true;
+    }
+    pageTitle(): string {
+        return t`Tenants`;
+    }
+    pageDescription(): string {
+        return t`Configure visual settings and defaults for different domains.`;
+    }
+    pageIcon(): string {
+        return "pf-icon pf-icon-tenant";
+    }
+
+    @property()
+    order = "domain";
+
+    apiEndpoint(page: number): Promise<AKResponse<Tenant>> {
+        return new CoreApi(DEFAULT_CONFIG).coreTenantsList({
+            ordering: this.order,
+            page: page,
+            pageSize: PAGE_SIZE,
+            search: this.search || "",
+        });
+    }
+
+    columns(): TableColumn[] {
+        return [
+            new TableColumn(t`Domain`, "domain"),
+            new TableColumn(t`Default?`, "default"),
+            new TableColumn(""),
+        ];
+    }
+
+    row(item: Tenant): TemplateResult[] {
+        return [
+            html`${item.domain}`,
+            html`${item._default ? t`Yes` : t`No`}`,
+            html`
+            <ak-forms-modal>
+                <span slot="submit">
+                    ${t`Update`}
+                </span>
+                <span slot="header">
+                    ${t`Update Tenant`}
+                </span>
+                <ak-tenant-form slot="form" .instancePk=${item.tenantUuid}>
+                </ak-tenant-form>
+                <button slot="trigger" class="pf-c-button pf-m-secondary">
+                    ${t`Edit`}
+                </button>
+            </ak-forms-modal>
+            <ak-forms-delete
+                .obj=${item}
+                objectLabel=${t`Tenant`}
+                .delete=${() => {
+                    return new CoreApi(DEFAULT_CONFIG).coreTenantsDestroy({
+                        tenantUuid: item.tenantUuid
+                    });
+                }}>
+                <button slot="trigger" class="pf-c-button pf-m-danger">
+                    ${t`Delete`}
+                </button>
+            </ak-forms-delete>`,
+        ];
+    }
+
+    renderToolbar(): TemplateResult {
+        return html`
+        <ak-forms-modal>
+            <span slot="submit">
+                ${t`Create`}
+            </span>
+            <span slot="header">
+                ${t`Create Tenant`}
+            </span>
+            <ak-tenant-form slot="form">
+            </ak-tenant-form>
+            <button slot="trigger" class="pf-c-button pf-m-primary">
+                ${t`Create`}
+            </button>
+        </ak-forms-modal>
+        ${super.renderToolbar()}
+        `;
+    }
+}

web/src/pages/user-settings/UserDetailsPage.ts

@@ -10,13 +10,12 @@ import { CoreApi, User } from "authentik-api";
 import { me } from "../../api/Users";
 import { FlowURLManager } from "../../api/legacy";
 import { ifDefined } from "lit-html/directives/if-defined";
-import { DEFAULT_CONFIG } from "../../api/Config";
+import { DEFAULT_CONFIG, tenant } from "../../api/Config";
 import "../../elements/forms/FormElement";
 import "../../elements/EmptyState";
 import "../../elements/forms/Form";
 import "../../elements/forms/HorizontalFormElement";
 import { until } from "lit-html/directives/until";
-import { tenant } from "authentik-api/dist/src/api/Config";
 
 @customElement("ak-user-details")
 export class UserDetailsPage extends LitElement {

web/src/routes.ts

@@ -25,10 +25,11 @@ import "./pages/stages/invitation/InvitationListPage";
 import "./pages/stages/prompt/PromptListPage";
 import "./pages/stages/StageListPage";
 import "./pages/system-tasks/SystemTaskListPage";
+import "./pages/tenants/TenantListPage";
 import "./pages/tokens/TokenListPage";
+import "./pages/user-settings/UserSettingsPage";
 import "./pages/users/UserListPage";
 import "./pages/users/UserViewPage";
-import "./pages/user-settings/UserSettingsPage";
 
 export const ROUTES: Route[] = [
     // Prevent infinite Shell loops
@@ -51,6 +52,7 @@ export const ROUTES: Route[] = [
     }),
     new Route(new RegExp("^/core/property-mappings$"), html`<ak-property-mapping-list></ak-property-mapping-list>`),
     new Route(new RegExp("^/core/tokens$"), html`<ak-token-list></ak-token-list>`),
+    new Route(new RegExp("^/core/tenants$"), html`<ak-tenant-list></ak-tenant-list>`),
     new Route(new RegExp("^/policy/policies$"), html`<ak-policy-list></ak-policy-list>`),
     new Route(new RegExp("^/identity/groups$"), html`<ak-group-list></ak-group-list>`),
     new Route(new RegExp("^/identity/users$"), html`<ak-user-list></ak-user-list>`),