715 lines
40 KiB
HTML
715 lines
40 KiB
HTML
{% extends "base.html" %}
|
|
{% block content %}
|
|
{% set iam_disabled = 'disabled' if iam_locked else '' %}
|
|
<div class="page-header d-flex justify-content-between align-items-center mb-4">
|
|
<div>
|
|
<p class="text-uppercase text-muted small mb-1">Identity & Access Management</p>
|
|
<h1 class="h3 mb-1 d-flex align-items-center gap-2">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" fill="currentColor" class="text-primary" viewBox="0 0 16 16">
|
|
<path d="M8 8a3 3 0 1 0 0-6 3 3 0 0 0 0 6zm2-3a2 2 0 1 1-4 0 2 2 0 0 1 4 0zm4 8c0 1-1 1-1 1H3s-1 0-1-1 1-4 6-4 6 3 6 4zm-1-.004c-.001-.246-.154-.986-.832-1.664C11.516 10.68 10.289 10 8 10c-2.29 0-3.516.68-4.168 1.332-.678.678-.83 1.418-.832 1.664h10z"/>
|
|
</svg>
|
|
IAM Configuration
|
|
</h1>
|
|
</div>
|
|
<div class="d-flex gap-2">
|
|
{% if not iam_locked %}
|
|
<button class="btn btn-outline-secondary" type="button" data-bs-toggle="collapse" data-bs-target="#configPreview" aria-expanded="false" aria-controls="configPreview">
|
|
View Config JSON
|
|
</button>
|
|
{% endif %}
|
|
<button class="btn btn-primary" data-bs-toggle="modal" data-bs-target="#createUserModal" {{ iam_disabled }}>
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-person-plus me-1" viewBox="0 0 16 16">
|
|
<path d="M12.5 16a3.5 3.5 0 1 0 0-7 3.5 3.5 0 0 0 0 7Zm.5-5v1h1a.5.5 0 0 1 0 1h-1v1a.5.5 0 0 1-1 0v-1h-1a.5.5 0 0 1 0-1h1v-1a.5.5 0 0 1 1 0Zm-2-6a3 3 0 1 1-6 0 3 3 0 0 1 6 0ZM8 7a2 2 0 1 0 0-4 2 2 0 0 0 0 4Z"/>
|
|
<path d="M8.256 14a4.474 4.474 0 0 1-.229-1.004H3c.001-.246.154-.986.832-1.664C4.484 10.68 5.711 10 8 10c.26 0 .507.009.74.025.226-.341.496-.65.804-.918C9.077 9.038 8.564 9 8 9c-5 0-6 3-6 4s1 1 1 1h5.256Z"/>
|
|
</svg>
|
|
Create User
|
|
</button>
|
|
</div>
|
|
</div>
|
|
|
|
{% if iam_locked %}
|
|
<div class="alert alert-warning" role="alert">
|
|
<div class="fw-semibold mb-1">Administrator permissions required</div>
|
|
<p class="mb-0">You need the <code>iam:list_users</code> action to edit users or policies. {{ locked_reason or "Sign in with an admin identity to continue." }}</p>
|
|
</div>
|
|
{% endif %}
|
|
|
|
{% if disclosed_secret %}
|
|
<div class="alert alert-info border-0 shadow-sm mb-4" role="alert">
|
|
<div class="d-flex align-items-start gap-2 mb-2">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" class="bi bi-key flex-shrink-0 mt-1" viewBox="0 0 16 16">
|
|
<path d="M0 8a4 4 0 0 1 7.465-2H14a.5.5 0 0 1 .354.146l1.5 1.5a.5.5 0 0 1 0 .708l-1.5 1.5a.5.5 0 0 1-.708 0L13 9.207l-.646.647a.5.5 0 0 1-.708 0L11 9.207l-.646.647a.5.5 0 0 1-.708 0L9 9.207l-.646.647A.5.5 0 0 1 8 10h-.535A4 4 0 0 1 0 8zm4-3a3 3 0 1 0 2.712 4.285A.5.5 0 0 1 7.163 9h.63l.853-.854a.5.5 0 0 1 .708 0l.646.647.646-.647a.5.5 0 0 1 .708 0l.646.647.646-.647a.5.5 0 0 1 .708 0l.646.647.793-.793-1-1h-6.63a.5.5 0 0 1-.451-.285A3 3 0 0 0 4 5z"/>
|
|
<path d="M4 8a1 1 0 1 1-2 0 1 1 0 0 1 2 0z"/>
|
|
</svg>
|
|
<div class="flex-grow-1">
|
|
<div class="fw-semibold">
|
|
{% if disclosed_secret.operation == 'rotate' %}
|
|
Secret rotated for <code>{{ disclosed_secret.access_key }}</code>
|
|
{% else %}
|
|
New user created: <code>{{ disclosed_secret.access_key }}</code>
|
|
{% endif %}
|
|
</div>
|
|
<p class="mb-2 small">⚠️ This secret is only shown once. Copy it now and store it securely.</p>
|
|
</div>
|
|
</div>
|
|
<div class="input-group">
|
|
<span class="input-group-text"><strong>Secret key</strong></span>
|
|
<input class="form-control font-monospace" type="text" value="{{ disclosed_secret.secret_key }}" readonly id="disclosedSecretValue" />
|
|
<button class="btn btn-outline-primary" type="button" data-secret-copy>
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" class="bi bi-clipboard" viewBox="0 0 16 16">
|
|
<path d="M4 1.5H3a2 2 0 0 0-2 2V14a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2V3.5a2 2 0 0 0-2-2h-1v1h1a1 1 0 0 1 1 1V14a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1V3.5a1 1 0 0 1 1-1h1v-1z"/>
|
|
<path d="M9.5 1a.5.5 0 0 1 .5.5v1a.5.5 0 0 1-.5.5h-3a.5.5 0 0 1-.5-.5v-1a.5.5 0 0 1 .5-.5h3zm-3-1A1.5 1.5 0 0 0 5 1.5v1A1.5 1.5 0 0 0 6.5 4h3A1.5 1.5 0 0 0 11 2.5v-1A1.5 1.5 0 0 0 9.5 0h-3z"/>
|
|
</svg>
|
|
Copy
|
|
</button>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
|
|
{% if not iam_locked %}
|
|
<div class="collapse mb-4" id="configPreview">
|
|
<div class="card shadow-sm">
|
|
<div class="card-header d-flex justify-content-between align-items-center flex-wrap gap-2">
|
|
<span class="fw-semibold">Configuration Preview</span>
|
|
<span class="badge text-bg-secondary">{{ config_summary.user_count }} users</span>
|
|
</div>
|
|
<div class="card-body">
|
|
<div class="position-relative">
|
|
<pre class="policy-preview mb-0" id="iamConfigPreview">{{ config_document }}</pre>
|
|
<button class="btn btn-outline-light btn-sm config-copy" type="button" data-copy-target="iamConfigPreview">Copy JSON</button>
|
|
</div>
|
|
<p class="text-muted small mt-2 mb-0">Secrets are masked above. Access <code>{{ config_summary.path }}</code> directly to view full credentials.</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
|
|
<div class="card shadow-sm border-0" style="border-radius: 1rem;">
|
|
<div class="card-header bg-transparent border-0 pt-4 pb-0 px-4 d-flex justify-content-between align-items-center">
|
|
<div>
|
|
<h5 class="fw-semibold d-flex align-items-center gap-2 mb-1">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" class="text-muted" viewBox="0 0 16 16">
|
|
<path d="M15 14s1 0 1-1-1-4-5-4-5 3-5 4 1 1 1 1h8zm-7.978-1A.261.261 0 0 1 7 12.996c.001-.264.167-1.03.76-1.72C8.312 10.629 9.282 10 11 10c1.717 0 2.687.63 3.24 1.276.593.69.758 1.457.76 1.72l-.008.002a.274.274 0 0 1-.014.002H7.022zM11 7a2 2 0 1 0 0-4 2 2 0 0 0 0 4zm3-2a3 3 0 1 1-6 0 3 3 0 0 1 6 0zM6.936 9.28a5.88 5.88 0 0 0-1.23-.247A7.35 7.35 0 0 0 5 9c-4 0-5 3-5 4 0 .667.333 1 1 1h4.216A2.238 2.238 0 0 1 5 13c0-1.01.377-2.042 1.09-2.904.243-.294.526-.569.846-.816zM4.92 10A5.493 5.493 0 0 0 4 13H1c0-.26.164-1.03.76-1.724.545-.636 1.492-1.256 3.16-1.275zM1.5 5.5a3 3 0 1 1 6 0 3 3 0 0 1-6 0zm3-2a2 2 0 1 0 0 4 2 2 0 0 0 0-4z"/>
|
|
</svg>
|
|
Users
|
|
</h5>
|
|
<p class="text-muted small mb-0">{{ users|length if not iam_locked else '?' }} user{{ 's' if (users|length if not iam_locked else 0) != 1 else '' }} configured</p>
|
|
</div>
|
|
{% if iam_locked %}<span class="badge bg-warning bg-opacity-10 text-warning">View only</span>{% endif %}
|
|
</div>
|
|
{% if iam_locked %}
|
|
<div class="card-body px-4 pb-4">
|
|
<div class="alert alert-secondary d-flex align-items-center mb-0" role="alert">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" fill="currentColor" class="flex-shrink-0 me-2" viewBox="0 0 16 16">
|
|
<path d="M8 1a2 2 0 0 1 2 2v4H6V3a2 2 0 0 1 2-2zm3 6V3a3 3 0 0 0-6 0v4a2 2 0 0 0-2 2v5a2 2 0 0 0 2 2h6a2 2 0 0 0 2-2V9a2 2 0 0 0-2-2z"/>
|
|
</svg>
|
|
<div>Sign in with an administrator account to list or edit IAM users.</div>
|
|
</div>
|
|
</div>
|
|
{% else %}
|
|
<div class="card-body px-4 pb-4">
|
|
{% if users %}
|
|
<div class="table-responsive">
|
|
<table class="table table-hover align-middle mb-0">
|
|
<thead class="table-light">
|
|
<tr>
|
|
<th scope="col">User</th>
|
|
<th scope="col">Policies</th>
|
|
<th scope="col" class="text-end">Actions</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{% for user in users %}
|
|
<tr>
|
|
<td>
|
|
<div class="d-flex align-items-center gap-3">
|
|
<div class="user-avatar">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" fill="currentColor" viewBox="0 0 16 16">
|
|
<path d="M8 8a3 3 0 1 0 0-6 3 3 0 0 0 0 6zm2-3a2 2 0 1 1-4 0 2 2 0 0 1 4 0zm4 8c0 1-1 1-1 1H3s-1 0-1-1 1-4 6-4 6 3 6 4zm-1-.004c-.001-.246-.154-.986-.832-1.664C11.516 10.68 10.289 10 8 10c-2.29 0-3.516.68-4.168 1.332-.678.678-.83 1.418-.832 1.664h10z"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<div class="fw-medium">{{ user.display_name }}</div>
|
|
<code class="small text-muted">{{ user.access_key }}</code>
|
|
</div>
|
|
</div>
|
|
</td>
|
|
<td>
|
|
<div class="d-flex flex-wrap gap-1">
|
|
{% for policy in user.policies %}
|
|
<span class="badge bg-primary bg-opacity-10 text-primary">
|
|
{{ policy.bucket }}
|
|
{% if '*' in policy.actions %}
|
|
<span class="opacity-75">(full)</span>
|
|
{% else %}
|
|
<span class="opacity-75">({{ policy.actions|length }})</span>
|
|
{% endif %}
|
|
</span>
|
|
{% else %}
|
|
<span class="badge bg-secondary bg-opacity-10 text-secondary">No policies</span>
|
|
{% endfor %}
|
|
</div>
|
|
</td>
|
|
<td class="text-end">
|
|
<div class="btn-group btn-group-sm" role="group">
|
|
<button class="btn btn-outline-primary" type="button" data-rotate-user="{{ user.access_key }}" title="Rotate Secret">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" viewBox="0 0 16 16">
|
|
<path d="M11.534 7h3.932a.25.25 0 0 1 .192.41l-1.966 2.36a.25.25 0 0 1-.384 0l-1.966-2.36a.25.25 0 0 1 .192-.41zm-11 2h3.932a.25.25 0 0 0 .192-.41L2.692 6.23a.25.25 0 0 0-.384 0L.342 8.59A.25.25 0 0 0 .534 9z"/>
|
|
<path fill-rule="evenodd" d="M8 3c-1.552 0-2.94.707-3.857 1.818a.5.5 0 1 1-.771-.636A6.002 6.002 0 0 1 13.917 7H12.9A5.002 5.002 0 0 0 8 3zM3.1 9a5.002 5.002 0 0 0 8.757 2.182.5.5 0 1 1 .771.636A6.002 6.002 0 0 1 2.083 9H3.1z"/>
|
|
</svg>
|
|
</button>
|
|
<button class="btn btn-outline-secondary" type="button" data-edit-user="{{ user.access_key }}" data-display-name="{{ user.display_name }}" title="Edit User">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" viewBox="0 0 16 16">
|
|
<path d="M12.146.146a.5.5 0 0 1 .708 0l3 3a.5.5 0 0 1 0 .708l-10 10a.5.5 0 0 1-.168.11l-5 2a.5.5 0 0 1-.65-.65l2-5a.5.5 0 0 1 .11-.168l10-10zM11.207 2.5 13.5 4.793 14.793 3.5 12.5 1.207 11.207 2.5zm1.586 3L10.5 3.207 4 9.707V10h.5a.5.5 0 0 1 .5.5v.5h.5a.5.5 0 0 1 .5.5v.5h.293l6.5-6.5z"/>
|
|
</svg>
|
|
</button>
|
|
<button class="btn btn-outline-secondary" type="button" data-policy-editor data-access-key="{{ user.access_key }}" title="Edit Policies">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" viewBox="0 0 16 16">
|
|
<path d="M8 4.754a3.246 3.246 0 1 0 0 6.492 3.246 3.246 0 0 0 0-6.492zM5.754 8a2.246 2.246 0 1 1 4.492 0 2.246 2.246 0 0 1-4.492 0z"/>
|
|
<path d="M9.796 1.343c-.527-1.79-3.065-1.79-3.592 0l-.094.319a.873.873 0 0 1-1.255.52l-.292-.16c-1.64-.892-3.433.902-2.54 2.541l.159.292a.873.873 0 0 1-.52 1.255l-.319.094c-1.79.527-1.79 3.065 0 3.592l.319.094a.873.873 0 0 1 .52 1.255l-.16.292c-.892 1.64.901 3.434 2.541 2.54l.292-.159a.873.873 0 0 1 1.255.52l.094.319c.527 1.79 3.065 1.79 3.592 0l.094-.319a.873.873 0 0 1 1.255-.52l.292.16c1.64.893 3.434-.902 2.54-2.541l-.159-.292a.873.873 0 0 1 .52-1.255l.319-.094c1.79-.527 1.79-3.065 0-3.592l-.319-.094a.873.873 0 0 1-.52-1.255l.16-.292c.893-1.64-.902-3.433-2.541-2.54l-.292.159a.873.873 0 0 1-1.255-.52l-.094-.319z"/>
|
|
</svg>
|
|
</button>
|
|
<button class="btn btn-outline-danger" type="button" data-delete-user="{{ user.access_key }}" title="Delete User">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" viewBox="0 0 16 16">
|
|
<path d="M5.5 5.5a.5.5 0 0 1 .5.5v6a.5.5 0 0 1-1 0v-6a.5.5 0 0 1 .5-.5zm2.5 0a.5.5 0 0 1 .5.5v6a.5.5 0 0 1-1 0v-6a.5.5 0 0 1 .5-.5zm3 .5v6a.5.5 0 0 1-1 0v-6a.5.5 0 0 1 1 0z"/>
|
|
<path fill-rule="evenodd" d="M14.5 3a1 1 0 0 1-1 1H13v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V4h-.5a1 1 0 0 1-1-1V2a1 1 0 0 1 1-1H6a1 1 0 0 1 1-1h2a1 1 0 0 1 1 1h3.5a1 1 0 0 1 1 1v1zM4.118 4 4 4.059V13a1 1 0 0 0 1 1h6a1 1 0 0 0 1-1V4.059L11.882 4H4.118zM2.5 3V2h11v1h-11z"/>
|
|
</svg>
|
|
</button>
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
{% else %}
|
|
<div class="empty-state text-center py-5">
|
|
<div class="empty-state-icon mx-auto mb-3">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" fill="currentColor" viewBox="0 0 16 16">
|
|
<path d="M15 14s1 0 1-1-1-4-5-4-5 3-5 4 1 1 1 1h8zm-7.978-1A.261.261 0 0 1 7 12.996c.001-.264.167-1.03.76-1.72C8.312 10.629 9.282 10 11 10c1.717 0 2.687.63 3.24 1.276.593.69.758 1.457.76 1.72l-.008.002a.274.274 0 0 1-.014.002H7.022zM11 7a2 2 0 1 0 0-4 2 2 0 0 0 0 4zm3-2a3 3 0 1 1-6 0 3 3 0 0 1 6 0zM6.936 9.28a5.88 5.88 0 0 0-1.23-.247A7.35 7.35 0 0 0 5 9c-4 0-5 3-5 4 0 .667.333 1 1 1h4.216A2.238 2.238 0 0 1 5 13c0-1.01.377-2.042 1.09-2.904.243-.294.526-.569.846-.816zM4.92 10A5.493 5.493 0 0 0 4 13H1c0-.26.164-1.03.76-1.724.545-.636 1.492-1.256 3.16-1.275zM1.5 5.5a3 3 0 1 1 6 0 3 3 0 0 1-6 0zm3-2a2 2 0 1 0 0 4 2 2 0 0 0 0-4z"/>
|
|
</svg>
|
|
</div>
|
|
<h5 class="fw-semibold mb-2">No users yet</h5>
|
|
<p class="text-muted mb-3">Create your first IAM user to manage access to your storage.</p>
|
|
<button class="btn btn-primary" data-bs-toggle="modal" data-bs-target="#createUserModal">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="me-1" viewBox="0 0 16 16">
|
|
<path fill-rule="evenodd" d="M8 2a.5.5 0 0 1 .5.5v5h5a.5.5 0 0 1 0 1h-5v5a.5.5 0 0 1-1 0v-5h-5a.5.5 0 0 1 0-1h5v-5A.5.5 0 0 1 8 2Z"/>
|
|
</svg>
|
|
Create First User
|
|
</button>
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
|
|
<!-- Create User Modal -->
|
|
<div class="modal fade" id="createUserModal" tabindex="-1" aria-hidden="true">
|
|
<div class="modal-dialog modal-dialog-centered">
|
|
<div class="modal-content">
|
|
<div class="modal-header border-0 pb-0">
|
|
<h1 class="modal-title fs-5 fw-semibold">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" class="text-primary" viewBox="0 0 16 16">
|
|
<path d="M1 14s-1 0-1-1 1-4 6-4 6 3 6 4-1 1-1 1H1zm5-6a3 3 0 1 0 0-6 3 3 0 0 0 0 6z"/>
|
|
<path fill-rule="evenodd" d="M13.5 5a.5.5 0 0 1 .5.5V7h1.5a.5.5 0 0 1 0 1H14v1.5a.5.5 0 0 1-1 0V8h-1.5a.5.5 0 0 1 0-1H13V5.5a.5.5 0 0 1 .5-.5z"/>
|
|
</svg>
|
|
Create IAM User
|
|
</h1>
|
|
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
|
|
</div>
|
|
<form method="post" action="{{ url_for('ui.create_iam_user') }}">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}" />
|
|
<div class="modal-body">
|
|
<div class="mb-3">
|
|
<label class="form-label fw-medium">Display Name</label>
|
|
<input class="form-control" type="text" name="display_name" placeholder="Analytics Team" required autofocus />
|
|
</div>
|
|
<div class="mb-3">
|
|
<label class="form-label fw-medium">Initial Policies (JSON)</label>
|
|
<textarea class="form-control font-monospace" name="policies" id="createUserPolicies" rows="6" spellcheck="false" placeholder='[
|
|
{"bucket": "*", "actions": ["list", "read"]}
|
|
]'></textarea>
|
|
<div class="form-text">Leave blank to grant full control (for bootstrap admins only).</div>
|
|
</div>
|
|
<div class="d-flex flex-wrap gap-2">
|
|
<span class="text-muted small me-2 align-self-center">Quick templates:</span>
|
|
<button class="btn btn-outline-secondary btn-sm" type="button" data-create-policy-template="full">Full Control</button>
|
|
<button class="btn btn-outline-secondary btn-sm" type="button" data-create-policy-template="readonly">Read-Only</button>
|
|
<button class="btn btn-outline-secondary btn-sm" type="button" data-create-policy-template="writer">Read + Write</button>
|
|
</div>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-outline-secondary" data-bs-dismiss="modal">Cancel</button>
|
|
<button class="btn btn-primary" type="submit">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" class="me-1" viewBox="0 0 16 16">
|
|
<path fill-rule="evenodd" d="M8 2a.5.5 0 0 1 .5.5v5h5a.5.5 0 0 1 0 1h-5v5a.5.5 0 0 1-1 0v-5h-5a.5.5 0 0 1 0-1h5v-5A.5.5 0 0 1 8 2Z"/>
|
|
</svg>
|
|
Create User
|
|
</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Policy Editor Modal -->
|
|
<div class="modal fade" id="policyEditorModal" tabindex="-1" aria-hidden="true">
|
|
<div class="modal-dialog modal-lg modal-dialog-centered">
|
|
<div class="modal-content">
|
|
<div class="modal-header border-0 pb-0">
|
|
<h1 class="modal-title fs-5 fw-semibold">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" class="text-primary" viewBox="0 0 16 16">
|
|
<path d="M8 4.754a3.246 3.246 0 1 0 0 6.492 3.246 3.246 0 0 0 0-6.492zM5.754 8a2.246 2.246 0 1 1 4.492 0 2.246 2.246 0 0 1-4.492 0z"/>
|
|
<path d="M9.796 1.343c-.527-1.79-3.065-1.79-3.592 0l-.094.319a.873.873 0 0 1-1.255.52l-.292-.16c-1.64-.892-3.433.902-2.54 2.541l.159.292a.873.873 0 0 1-.52 1.255l-.319.094c-1.79.527-1.79 3.065 0 3.592l.319.094a.873.873 0 0 1 .52 1.255l-.16.292c-.892 1.64.901 3.434 2.541 2.54l.292-.159a.873.873 0 0 1 1.255.52l.094.319c.527 1.79 3.065 1.79 3.592 0l.094-.319a.873.873 0 0 1 1.255-.52l.292.16c1.64.893 3.434-.902 2.54-2.541l-.159-.292a.873.873 0 0 1 .52-1.255l.319-.094c1.79-.527 1.79-3.065 0-3.592l-.319-.094a.873.873 0 0 1-.52-1.255l.16-.292c.893-1.64-.902-3.433-2.541-2.54l-.292.159a.873.873 0 0 1-1.255-.52l-.094-.319zm-2.633.283c.246-.835 1.428-.835 1.674 0l.094.319a1.873 1.873 0 0 0 2.693 1.115l.291-.16c.764-.415 1.6.42 1.184 1.185l-.159.292a1.873 1.873 0 0 0 1.116 2.692l.318.094c.835.246.835 1.428 0 1.674l-.319.094a1.873 1.873 0 0 0-1.115 2.693l.16.291c.415.764-.42 1.6-1.185 1.184l-.291-.159a1.873 1.873 0 0 0-2.693 1.116l-.094.318c-.246.835-1.428.835-1.674 0l-.094-.319a1.873 1.873 0 0 0-2.692-1.115l-.292.16c-.764.415-1.6-.42-1.184-1.185l.159-.291A1.873 1.873 0 0 0 1.945 8.93l-.319-.094c-.835-.246-.835-1.428 0-1.674l.319-.094A1.873 1.873 0 0 0 3.06 4.377l-.16-.292c-.415-.764.42-1.6 1.185-1.184l.292.159a1.873 1.873 0 0 0 2.692-1.115l.094-.319z"/>
|
|
</svg>
|
|
Edit Policies
|
|
</h1>
|
|
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
|
|
</div>
|
|
<div class="modal-body">
|
|
<p class="text-muted small mb-3">Editing policies for <code id="policyEditorUserLabel"></code></p>
|
|
<form
|
|
id="policyEditorForm"
|
|
method="post"
|
|
data-action-template="{{ url_for('ui.update_iam_policies', access_key='ACCESS_KEY_PLACEHOLDER') }}"
|
|
class="d-flex flex-column gap-3"
|
|
>
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}" />
|
|
<input type="hidden" id="policyEditorUser" name="access_key" />
|
|
|
|
<div>
|
|
<label class="form-label fw-medium">Inline Policies (JSON array)</label>
|
|
<textarea class="form-control font-monospace" id="policyEditorDocument" name="policies" rows="12" spellcheck="false"></textarea>
|
|
<div class="form-text">Use standard MyFSIO policy format. Validation happens server-side.</div>
|
|
</div>
|
|
<div class="d-flex flex-wrap gap-2">
|
|
<span class="text-muted small me-2 align-self-center">Quick templates:</span>
|
|
<button class="btn btn-outline-secondary btn-sm" type="button" data-policy-template="full">Full Control</button>
|
|
<button class="btn btn-outline-secondary btn-sm" type="button" data-policy-template="readonly">Read-Only</button>
|
|
<button class="btn btn-outline-secondary btn-sm" type="button" data-policy-template="writer">Read + Write</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-outline-secondary" data-bs-dismiss="modal">Cancel</button>
|
|
<button class="btn btn-primary" type="submit" form="policyEditorForm">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" class="me-1" viewBox="0 0 16 16">
|
|
<path d="M10.97 4.97a.75.75 0 0 1 1.07 1.05l-3.99 4.99a.75.75 0 0 1-1.08.02L4.324 8.384a.75.75 0 1 1 1.06-1.06l2.094 2.093 3.473-4.425a.267.267 0 0 1 .02-.022z"/>
|
|
</svg>
|
|
Save Policies
|
|
</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Edit User Modal -->
|
|
<div class="modal fade" id="editUserModal" tabindex="-1" aria-hidden="true">
|
|
<div class="modal-dialog modal-dialog-centered">
|
|
<div class="modal-content">
|
|
<div class="modal-header border-0 pb-0">
|
|
<h1 class="modal-title fs-5 fw-semibold">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" class="text-primary" viewBox="0 0 16 16">
|
|
<path d="M12.146.146a.5.5 0 0 1 .708 0l3 3a.5.5 0 0 1 0 .708l-10 10a.5.5 0 0 1-.168.11l-5 2a.5.5 0 0 1-.65-.65l2-5a.5.5 0 0 1 .11-.168l10-10zM11.207 2.5 13.5 4.793 14.793 3.5 12.5 1.207 11.207 2.5zm1.586 3L10.5 3.207 4 9.707V10h.5a.5.5 0 0 1 .5.5v.5h.5a.5.5 0 0 1 .5.5v.5h.293l6.5-6.5zm-9.761 5.175-.106.106-1.528 3.821 3.821-1.528.106-.106A.5.5 0 0 1 5 12.5V12h-.5a.5.5 0 0 1-.5-.5V11h-.5a.5.5 0 0 1-.468-.325z"/>
|
|
</svg>
|
|
Edit User
|
|
</h1>
|
|
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
|
|
</div>
|
|
<form method="post" id="editUserForm">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}" />
|
|
<div class="modal-body">
|
|
<div class="mb-3">
|
|
<label class="form-label fw-medium">Display Name</label>
|
|
<input class="form-control" type="text" name="display_name" id="editUserDisplayName" required />
|
|
</div>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-outline-secondary" data-bs-dismiss="modal">Cancel</button>
|
|
<button class="btn btn-primary" type="submit">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" class="me-1" viewBox="0 0 16 16">
|
|
<path d="M10.97 4.97a.75.75 0 0 1 1.07 1.05l-3.99 4.99a.75.75 0 0 1-1.08.02L4.324 8.384a.75.75 0 1 1 1.06-1.06l2.094 2.093 3.473-4.425a.267.267 0 0 1 .02-.022z"/>
|
|
</svg>
|
|
Save Changes
|
|
</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Delete User Modal -->
|
|
<div class="modal fade" id="deleteUserModal" tabindex="-1" aria-hidden="true">
|
|
<div class="modal-dialog modal-dialog-centered">
|
|
<div class="modal-content">
|
|
<div class="modal-header border-0 pb-0">
|
|
<h1 class="modal-title fs-5 fw-semibold">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" class="text-danger" viewBox="0 0 16 16">
|
|
<path d="M1 14s-1 0-1-1 1-4 6-4 6 3 6 4-1 1-1 1H1zm5-6a3 3 0 1 0 0-6 3 3 0 0 0 0 6z"/>
|
|
<path fill-rule="evenodd" d="M11 1.5v1h5v1h-1v9a2 2 0 0 1-2 2H3a2 2 0 0 1-2-2v-9H0v-1h5v-1a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1zM4.118 4 4 4.059V13a1 1 0 0 0 1 1h6a1 1 0 0 0 1-1V4.059L11.882 4H4.118z"/>
|
|
</svg>
|
|
Delete User
|
|
</h1>
|
|
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
|
|
</div>
|
|
<div class="modal-body">
|
|
<p>Are you sure you want to delete user <strong id="deleteUserLabel"></strong>?</p>
|
|
<div id="deleteSelfWarning" class="alert alert-danger d-flex align-items-start d-none">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" fill="currentColor" class="flex-shrink-0 me-2 mt-1" viewBox="0 0 16 16">
|
|
<path d="M7.938 2.016A.13.13 0 0 1 8.002 2a.13.13 0 0 1 .063.016.146.146 0 0 1 .054.057l6.857 11.667c.036.06.035.124.002.183a.163.163 0 0 1-.054.06.116.116 0 0 1-.066.017H1.146a.115.115 0 0 1-.066-.017.163.163 0 0 1-.054-.06.176.176 0 0 1 .002-.183L7.884 2.073a.147.147 0 0 1 .054-.057zm1.044-.45a1.13 1.13 0 0 0-1.96 0L.165 13.233c-.457.778.091 1.767.98 1.767h13.713c.889 0 1.438-.99.98-1.767L8.982 1.566z"/>
|
|
<path d="M7.002 12a1 1 0 1 1 2 0 1 1 0 0 1-2 0zM7.1 5.995a.905.905 0 1 1 1.8 0l-.35 3.507a.552.552 0 0 1-1.1 0L7.1 5.995z"/>
|
|
</svg>
|
|
<div>
|
|
<strong>Warning:</strong> You are deleting your own account. You will be logged out immediately.
|
|
</div>
|
|
</div>
|
|
<p class="text-danger small mb-0">This action cannot be undone.</p>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-outline-secondary" data-bs-dismiss="modal">Cancel</button>
|
|
<form method="post" id="deleteUserForm">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}" />
|
|
<button class="btn btn-danger" type="submit">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" class="me-1" viewBox="0 0 16 16">
|
|
<path d="M5.5 5.5A.5.5 0 0 1 6 6v6a.5.5 0 0 1-1 0V6a.5.5 0 0 1 .5-.5zm2.5 0a.5.5 0 0 1 .5.5v6a.5.5 0 0 1-1 0V6a.5.5 0 0 1 .5-.5zm3 .5a.5.5 0 0 0-1 0v6a.5.5 0 0 0 1 0V6z"/>
|
|
<path fill-rule="evenodd" d="M14.5 3a1 1 0 0 1-1 1H13v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V4h-.5a1 1 0 0 1-1-1V2a1 1 0 0 1 1-1H6a1 1 0 0 1 1-1h2a1 1 0 0 1 1 1h3.5a1 1 0 0 1 1 1v1zM4.118 4 4 4.059V13a1 1 0 0 0 1 1h6a1 1 0 0 0 1-1V4.059L11.882 4H4.118zM2.5 3V2h11v1h-11z"/>
|
|
</svg>
|
|
Delete User
|
|
</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Rotate Secret Modal -->
|
|
<div class="modal fade" id="rotateSecretModal" tabindex="-1" aria-hidden="true">
|
|
<div class="modal-dialog modal-dialog-centered">
|
|
<div class="modal-content">
|
|
<div class="modal-header border-0 pb-0">
|
|
<h1 class="modal-title fs-5 fw-semibold">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" class="text-warning" viewBox="0 0 16 16">
|
|
<path fill-rule="evenodd" d="M8 3a5 5 0 1 0 4.546 2.914.5.5 0 0 1 .908-.417A6 6 0 1 1 8 2v1z"/>
|
|
<path d="M8 4.466V.534a.25.25 0 0 1 .41-.192l2.36 1.966c.12.1.12.284 0 .384L8.41 4.658A.25.25 0 0 1 8 4.466z"/>
|
|
</svg>
|
|
Rotate Secret Key
|
|
</h1>
|
|
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
|
|
</div>
|
|
<div class="modal-body" id="rotateSecretConfirm">
|
|
<p>Rotate the secret key for <strong id="rotateUserLabel"></strong>?</p>
|
|
<div class="alert alert-warning d-flex align-items-start mb-0">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" fill="currentColor" class="flex-shrink-0 me-2 mt-1" viewBox="0 0 16 16">
|
|
<path d="M7.938 2.016A.13.13 0 0 1 8.002 2a.13.13 0 0 1 .063.016.146.146 0 0 1 .054.057l6.857 11.667c.036.06.035.124.002.183a.163.163 0 0 1-.054.06.116.116 0 0 1-.066.017H1.146a.115.115 0 0 1-.066-.017.163.163 0 0 1-.054-.06.176.176 0 0 1 .002-.183L7.884 2.073a.147.147 0 0 1 .054-.057zm1.044-.45a1.13 1.13 0 0 0-1.96 0L.165 13.233c-.457.778.091 1.767.98 1.767h13.713c.889 0 1.438-.99.98-1.767L8.982 1.566z"/>
|
|
<path d="M7.002 12a1 1 0 1 1 2 0 1 1 0 0 1-2 0zM7.1 5.995a.905.905 0 1 1 1.8 0l-.35 3.507a.552.552 0 0 1-1.1 0L7.1 5.995z"/>
|
|
</svg>
|
|
<div>The old secret key will stop working immediately. Update any applications using it.</div>
|
|
</div>
|
|
</div>
|
|
<div class="modal-body d-none" id="rotateSecretResult">
|
|
<div class="alert alert-success d-flex align-items-center mb-3">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" fill="currentColor" class="flex-shrink-0 me-2" viewBox="0 0 16 16">
|
|
<path d="M16 8A8 8 0 1 1 0 8a8 8 0 0 1 16 0zm-3.97-3.03a.75.75 0 0 0-1.08.022L7.477 9.417 5.384 7.323a.75.75 0 0 0-1.06 1.06L6.97 11.03a.75.75 0 0 0 1.079-.02l3.992-4.99a.75.75 0 0 0-.01-1.05z"/>
|
|
</svg>
|
|
<div>Secret rotated successfully!</div>
|
|
</div>
|
|
<label class="form-label fw-medium">New Secret Key</label>
|
|
<div class="input-group">
|
|
<input type="text" class="form-control font-monospace bg-body-tertiary" id="newSecretKey" readonly>
|
|
<button class="btn btn-outline-primary" type="button" id="copyNewSecret">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" viewBox="0 0 16 16">
|
|
<path d="M4 1.5H3a2 2 0 0 0-2 2V14a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2V3.5a2 2 0 0 0-2-2h-1v1h1a1 1 0 0 1 1 1V14a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1V3.5a1 1 0 0 1 1-1h1v-1z"/>
|
|
<path d="M9.5 1a.5.5 0 0 1 .5.5v1a.5.5 0 0 1-.5.5h-3a.5.5 0 0 1-.5-.5v-1a.5.5 0 0 1 .5-.5h3zm-3-1A1.5 1.5 0 0 0 5 1.5v1A1.5 1.5 0 0 0 6.5 4h3A1.5 1.5 0 0 0 11 2.5v-1A1.5 1.5 0 0 0 9.5 0h-3z"/>
|
|
</svg>
|
|
</button>
|
|
</div>
|
|
<p class="form-text mb-0">Copy this now. It will not be shown again.</p>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-outline-secondary" data-bs-dismiss="modal" id="rotateCancelBtn">Cancel</button>
|
|
<button type="button" class="btn btn-warning" id="confirmRotateBtn">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" fill="currentColor" class="me-1" viewBox="0 0 16 16">
|
|
<path fill-rule="evenodd" d="M8 3a5 5 0 1 0 4.546 2.914.5.5 0 0 1 .908-.417A6 6 0 1 1 8 2v1z"/>
|
|
<path d="M8 4.466V.534a.25.25 0 0 1 .41-.192l2.36 1.966c.12.1.12.284 0 .384L8.41 4.658A.25.25 0 0 1 8 4.466z"/>
|
|
</svg>
|
|
Rotate Key
|
|
</button>
|
|
<button type="button" class="btn btn-primary d-none" data-bs-dismiss="modal" id="rotateDoneBtn">Done</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<script id="iamUsersJson" type="application/json">{{ users | tojson }}</script>
|
|
{% endblock %}
|
|
|
|
{% block extra_scripts %}
|
|
{{ super() }}
|
|
<script>
|
|
(function () {
|
|
const currentUserKey = {{ principal.access_key | tojson }};
|
|
const configCopyButtons = document.querySelectorAll('.config-copy');
|
|
configCopyButtons.forEach((button) => {
|
|
button.addEventListener('click', async () => {
|
|
const targetId = button.dataset.copyTarget;
|
|
const target = document.getElementById(targetId);
|
|
if (!target) return;
|
|
const text = target.innerText;
|
|
try {
|
|
await navigator.clipboard.writeText(text);
|
|
button.textContent = 'Copied!';
|
|
setTimeout(() => {
|
|
button.textContent = 'Copy JSON';
|
|
}, 1500);
|
|
} catch (err) {
|
|
console.error('Unable to copy IAM config', err);
|
|
}
|
|
});
|
|
});
|
|
|
|
const secretCopyButton = document.querySelector('[data-secret-copy]');
|
|
if (secretCopyButton) {
|
|
secretCopyButton.addEventListener('click', async () => {
|
|
const secretInput = document.getElementById('disclosedSecretValue');
|
|
if (!secretInput) return;
|
|
try {
|
|
await navigator.clipboard.writeText(secretInput.value);
|
|
secretCopyButton.textContent = 'Copied!';
|
|
setTimeout(() => {
|
|
secretCopyButton.textContent = 'Copy';
|
|
}, 1500);
|
|
} catch (err) {
|
|
console.error('Unable to copy IAM secret', err);
|
|
}
|
|
});
|
|
}
|
|
|
|
const iamUsersData = document.getElementById('iamUsersJson');
|
|
const users = iamUsersData ? JSON.parse(iamUsersData.textContent || '[]') : [];
|
|
|
|
// Policy Editor Logic
|
|
const policyModalEl = document.getElementById('policyEditorModal');
|
|
const policyModal = new bootstrap.Modal(policyModalEl);
|
|
const userLabelEl = document.getElementById('policyEditorUserLabel');
|
|
const userInputEl = document.getElementById('policyEditorUser');
|
|
const textareaEl = document.getElementById('policyEditorDocument');
|
|
const formEl = document.getElementById('policyEditorForm');
|
|
const templateButtons = document.querySelectorAll('[data-policy-template]');
|
|
const iamLocked = {{ iam_locked | tojson }};
|
|
|
|
if (iamLocked) return;
|
|
|
|
const userPolicies = (accessKey) => {
|
|
const target = users.find((user) => user.access_key === accessKey);
|
|
return target ? JSON.stringify(target.policies, null, 2) : '';
|
|
};
|
|
|
|
const applyTemplate = (name) => {
|
|
const templates = {
|
|
full: [
|
|
{
|
|
bucket: '*',
|
|
actions: ['list', 'read', 'write', 'delete', 'share', 'policy', 'replication', 'iam:list_users', 'iam:*'],
|
|
},
|
|
],
|
|
readonly: [
|
|
{
|
|
bucket: '*',
|
|
actions: ['list', 'read'],
|
|
},
|
|
],
|
|
writer: [
|
|
{
|
|
bucket: '*',
|
|
actions: ['list', 'read', 'write'],
|
|
},
|
|
],
|
|
};
|
|
if (templates[name]) {
|
|
textareaEl.value = JSON.stringify(templates[name], null, 2);
|
|
}
|
|
};
|
|
|
|
templateButtons.forEach((button) => {
|
|
button.addEventListener('click', () => applyTemplate(button.dataset.policyTemplate));
|
|
});
|
|
|
|
// Create User modal template buttons
|
|
const createUserPoliciesEl = document.getElementById('createUserPolicies');
|
|
const createTemplateButtons = document.querySelectorAll('[data-create-policy-template]');
|
|
|
|
const applyCreateTemplate = (name) => {
|
|
const templates = {
|
|
full: [
|
|
{
|
|
bucket: '*',
|
|
actions: ['list', 'read', 'write', 'delete', 'share', 'policy', 'replication', 'iam:list_users', 'iam:*'],
|
|
},
|
|
],
|
|
readonly: [
|
|
{
|
|
bucket: '*',
|
|
actions: ['list', 'read'],
|
|
},
|
|
],
|
|
writer: [
|
|
{
|
|
bucket: '*',
|
|
actions: ['list', 'read', 'write'],
|
|
},
|
|
],
|
|
};
|
|
if (templates[name] && createUserPoliciesEl) {
|
|
createUserPoliciesEl.value = JSON.stringify(templates[name], null, 2);
|
|
}
|
|
};
|
|
|
|
createTemplateButtons.forEach((button) => {
|
|
button.addEventListener('click', () => applyCreateTemplate(button.dataset.createPolicyTemplate));
|
|
});
|
|
|
|
formEl?.addEventListener('submit', (event) => {
|
|
const key = userInputEl.value;
|
|
if (!key) {
|
|
event.preventDefault();
|
|
return;
|
|
}
|
|
const template = formEl.dataset.actionTemplate;
|
|
formEl.action = template.replace('ACCESS_KEY_PLACEHOLDER', key);
|
|
});
|
|
|
|
document.querySelectorAll('[data-policy-editor]').forEach((button) => {
|
|
button.addEventListener('click', () => {
|
|
const key = button.getAttribute('data-access-key');
|
|
if (!key) return;
|
|
|
|
userLabelEl.textContent = key;
|
|
userInputEl.value = key;
|
|
textareaEl.value = userPolicies(key);
|
|
|
|
policyModal.show();
|
|
});
|
|
});
|
|
|
|
// Edit User Logic
|
|
const editUserModal = new bootstrap.Modal(document.getElementById('editUserModal'));
|
|
const editUserForm = document.getElementById('editUserForm');
|
|
const editUserDisplayName = document.getElementById('editUserDisplayName');
|
|
|
|
document.querySelectorAll('[data-edit-user]').forEach(btn => {
|
|
btn.addEventListener('click', () => {
|
|
const key = btn.dataset.editUser;
|
|
const name = btn.dataset.displayName;
|
|
editUserDisplayName.value = name;
|
|
editUserForm.action = "{{ url_for('ui.update_iam_user', access_key='ACCESS_KEY') }}".replace('ACCESS_KEY', key);
|
|
editUserModal.show();
|
|
});
|
|
});
|
|
|
|
// Delete User Logic
|
|
const deleteUserModal = new bootstrap.Modal(document.getElementById('deleteUserModal'));
|
|
const deleteUserForm = document.getElementById('deleteUserForm');
|
|
const deleteUserLabel = document.getElementById('deleteUserLabel');
|
|
const deleteSelfWarning = document.getElementById('deleteSelfWarning');
|
|
|
|
document.querySelectorAll('[data-delete-user]').forEach(btn => {
|
|
btn.addEventListener('click', () => {
|
|
const key = btn.dataset.deleteUser;
|
|
deleteUserLabel.textContent = key;
|
|
deleteUserForm.action = "{{ url_for('ui.delete_iam_user', access_key='ACCESS_KEY') }}".replace('ACCESS_KEY', key);
|
|
|
|
if (key === currentUserKey) {
|
|
deleteSelfWarning.classList.remove('d-none');
|
|
} else {
|
|
deleteSelfWarning.classList.add('d-none');
|
|
}
|
|
|
|
deleteUserModal.show();
|
|
});
|
|
});
|
|
|
|
// Rotate Secret Logic
|
|
const rotateSecretModal = new bootstrap.Modal(document.getElementById('rotateSecretModal'));
|
|
const rotateUserLabel = document.getElementById('rotateUserLabel');
|
|
const confirmRotateBtn = document.getElementById('confirmRotateBtn');
|
|
const rotateCancelBtn = document.getElementById('rotateCancelBtn');
|
|
const rotateDoneBtn = document.getElementById('rotateDoneBtn');
|
|
const rotateSecretConfirm = document.getElementById('rotateSecretConfirm');
|
|
const rotateSecretResult = document.getElementById('rotateSecretResult');
|
|
const newSecretKeyInput = document.getElementById('newSecretKey');
|
|
const copyNewSecretBtn = document.getElementById('copyNewSecret');
|
|
let currentRotateKey = null;
|
|
|
|
document.querySelectorAll('[data-rotate-user]').forEach(btn => {
|
|
btn.addEventListener('click', () => {
|
|
currentRotateKey = btn.dataset.rotateUser;
|
|
rotateUserLabel.textContent = currentRotateKey;
|
|
|
|
// Reset Modal State
|
|
rotateSecretConfirm.classList.remove('d-none');
|
|
rotateSecretResult.classList.add('d-none');
|
|
confirmRotateBtn.classList.remove('d-none');
|
|
rotateCancelBtn.classList.remove('d-none');
|
|
rotateDoneBtn.classList.add('d-none');
|
|
|
|
rotateSecretModal.show();
|
|
});
|
|
});
|
|
|
|
confirmRotateBtn.addEventListener('click', async () => {
|
|
if (!currentRotateKey) return;
|
|
|
|
confirmRotateBtn.disabled = true;
|
|
confirmRotateBtn.textContent = "Rotating...";
|
|
|
|
try {
|
|
const url = "{{ url_for('ui.rotate_iam_secret', access_key='ACCESS_KEY') }}".replace('ACCESS_KEY', currentRotateKey);
|
|
const response = await fetch(url, {
|
|
method: 'POST',
|
|
headers: {
|
|
'Accept': 'application/json',
|
|
'X-CSRFToken': "{{ csrf_token() }}"
|
|
}
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const data = await response.json();
|
|
throw new Error(data.error || 'Failed to rotate secret');
|
|
}
|
|
|
|
const data = await response.json();
|
|
newSecretKeyInput.value = data.secret_key;
|
|
|
|
// Show Result
|
|
rotateSecretConfirm.classList.add('d-none');
|
|
rotateSecretResult.classList.remove('d-none');
|
|
confirmRotateBtn.classList.add('d-none');
|
|
rotateCancelBtn.classList.add('d-none');
|
|
rotateDoneBtn.classList.remove('d-none');
|
|
|
|
} catch (err) {
|
|
alert(err.message);
|
|
rotateSecretModal.hide();
|
|
} finally {
|
|
confirmRotateBtn.disabled = false;
|
|
confirmRotateBtn.textContent = "Rotate Key";
|
|
}
|
|
});
|
|
|
|
copyNewSecretBtn.addEventListener('click', async () => {
|
|
try {
|
|
await navigator.clipboard.writeText(newSecretKeyInput.value);
|
|
copyNewSecretBtn.textContent = 'Copied!';
|
|
setTimeout(() => copyNewSecretBtn.textContent = 'Copy', 1500);
|
|
} catch (err) {
|
|
console.error('Failed to copy', err);
|
|
}
|
|
});
|
|
|
|
rotateDoneBtn.addEventListener('click', () => {
|
|
window.location.reload();
|
|
});
|
|
})();
|
|
</script>
|
|
{% endblock %}
|