Browse Source
- Removed `unsafe-inline` for javascript from CSP. The admin interface now uses files instead of inline javascript. - Modified javascript to work not being inline. - Run eslint over javascript and fixed some items. - Added a `to_json` Handlebars helper. Used at the diagnostics page. - Changed `AdminTemplateData` struct to be smaller. The `config` was always added, but only used at one page. Same goes for `can_backup` and `version`. - Also inlined CSS. We can't remove the `unsafe-inline` from css, because that seems to break the web-vault currently. That might need some further checks. But for now the 404 page and all the admin pages are clear of inline scripts and styles.pull/3065/head
BlackDex
2 years ago
committed by
Daniel García
Daniel García
18 changed files with 946 additions and 718 deletions
@ -0,0 +1,26 @@ |
|||||
|
body { |
||||
|
padding-top: 75px; |
||||
|
} |
||||
|
.vaultwarden-icon { |
||||
|
width: 48px; |
||||
|
height: 48px; |
||||
|
height: 32px; |
||||
|
width: auto; |
||||
|
margin: -5px 0 0 0; |
||||
|
} |
||||
|
.footer { |
||||
|
padding: 40px 0 40px 0; |
||||
|
border-top: 1px solid #dee2e6; |
||||
|
} |
||||
|
.container { |
||||
|
max-width: 980px; |
||||
|
} |
||||
|
.content { |
||||
|
padding-top: 20px; |
||||
|
padding-bottom: 20px; |
||||
|
padding-left: 15px; |
||||
|
padding-right: 15px; |
||||
|
} |
||||
|
.vw-404 { |
||||
|
max-width: 500px; width: 100%; |
||||
|
} |
||||
@ -0,0 +1,45 @@ |
|||||
|
body { |
||||
|
padding-top: 75px; |
||||
|
} |
||||
|
img { |
||||
|
width: 48px; |
||||
|
height: 48px; |
||||
|
} |
||||
|
.vaultwarden-icon { |
||||
|
height: 32px; |
||||
|
width: auto; |
||||
|
margin: -5px 0 0 0; |
||||
|
} |
||||
|
/* Special alert-row class to use Bootstrap v5.2+ variable colors */ |
||||
|
.alert-row { |
||||
|
--bs-alert-border: 1px solid var(--bs-alert-border-color); |
||||
|
color: var(--bs-alert-color); |
||||
|
background-color: var(--bs-alert-bg); |
||||
|
border: var(--bs-alert-border); |
||||
|
} |
||||
|
|
||||
|
#users-table .vw-created-at, #users-table .vw-last-active { |
||||
|
width: 85px; |
||||
|
min-width: 70px; |
||||
|
} |
||||
|
#users-table .vw-items { |
||||
|
width: 35px; |
||||
|
min-width: 35px; |
||||
|
} |
||||
|
#users-table .vw-organizations { |
||||
|
min-width: 120px; |
||||
|
} |
||||
|
#users-table .vw-actions, #orgs-table .vw-actions { |
||||
|
width: 130px; |
||||
|
min-width: 130px; |
||||
|
} |
||||
|
#users-table .vw-org-cell { |
||||
|
max-height: 120px; |
||||
|
} |
||||
|
|
||||
|
#support-string { |
||||
|
height: 16rem; |
||||
|
} |
||||
|
.vw-copy-toast { |
||||
|
width: 15rem; |
||||
|
} |
||||
@ -0,0 +1,65 @@ |
|||||
|
"use strict"; |
||||
|
|
||||
|
function getBaseUrl() { |
||||
|
// If the base URL is `https://vaultwarden.example.com/base/path/`,
|
||||
|
// `window.location.href` should have one of the following forms:
|
||||
|
//
|
||||
|
// - `https://vaultwarden.example.com/base/path/`
|
||||
|
// - `https://vaultwarden.example.com/base/path/#/some/route[?queryParam=...]`
|
||||
|
//
|
||||
|
// We want to get to just `https://vaultwarden.example.com/base/path`.
|
||||
|
const baseUrl = window.location.href; |
||||
|
const adminPos = baseUrl.indexOf("/admin"); |
||||
|
return baseUrl.substring(0, adminPos != -1 ? adminPos : baseUrl.length); |
||||
|
} |
||||
|
const BASE_URL = getBaseUrl(); |
||||
|
|
||||
|
function reload() { |
||||
|
// Reload the page by setting the exact same href
|
||||
|
// Using window.location.reload() could cause a repost.
|
||||
|
window.location = window.location.href; |
||||
|
} |
||||
|
|
||||
|
function msg(text, reload_page = true) { |
||||
|
text && alert(text); |
||||
|
reload_page && reload(); |
||||
|
} |
||||
|
|
||||
|
function _post(url, successMsg, errMsg, body, reload_page = true) { |
||||
|
fetch(url, { |
||||
|
method: "POST", |
||||
|
body: body, |
||||
|
mode: "same-origin", |
||||
|
credentials: "same-origin", |
||||
|
headers: { "Content-Type": "application/json" } |
||||
|
}).then( resp => { |
||||
|
if (resp.ok) { msg(successMsg, reload_page); return Promise.reject({error: false}); } |
||||
|
const respStatus = resp.status; |
||||
|
const respStatusText = resp.statusText; |
||||
|
return resp.text(); |
||||
|
}).then( respText => { |
||||
|
try { |
||||
|
const respJson = JSON.parse(respText); |
||||
|
return respJson ? respJson.ErrorModel.Message : "Unknown error"; |
||||
|
} catch (e) { |
||||
|
return Promise.reject({body:respStatus + " - " + respStatusText, error: true}); |
||||
|
} |
||||
|
}).then( apiMsg => { |
||||
|
msg(errMsg + "\n" + apiMsg, reload_page); |
||||
|
}).catch( e => { |
||||
|
if (e.error === false) { return true; } |
||||
|
else { msg(errMsg + "\n" + e.body, reload_page); } |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
// onLoad events
|
||||
|
document.addEventListener("DOMContentLoaded", (/*event*/) => { |
||||
|
// get current URL path and assign "active" class to the correct nav-item
|
||||
|
const pathname = window.location.pathname; |
||||
|
if (pathname === "") return; |
||||
|
const navItem = document.querySelectorAll(`.navbar-nav .nav-item a[href="${pathname}"]`); |
||||
|
if (navItem.length === 1) { |
||||
|
navItem[0].className = navItem[0].className + " active"; |
||||
|
navItem[0].setAttribute("aria-current", "page"); |
||||
|
} |
||||
|
}); |
||||
@ -0,0 +1,219 @@ |
|||||
|
"use strict"; |
||||
|
|
||||
|
var dnsCheck = false; |
||||
|
var timeCheck = false; |
||||
|
var domainCheck = false; |
||||
|
var httpsCheck = false; |
||||
|
|
||||
|
// ================================
|
||||
|
// Date & Time Check
|
||||
|
const d = new Date(); |
||||
|
const year = d.getUTCFullYear(); |
||||
|
const month = String(d.getUTCMonth()+1).padStart(2, "0"); |
||||
|
const day = String(d.getUTCDate()).padStart(2, "0"); |
||||
|
const hour = String(d.getUTCHours()).padStart(2, "0"); |
||||
|
const minute = String(d.getUTCMinutes()).padStart(2, "0"); |
||||
|
const seconds = String(d.getUTCSeconds()).padStart(2, "0"); |
||||
|
const browserUTC = `${year}-${month}-${day} ${hour}:${minute}:${seconds} UTC`; |
||||
|
|
||||
|
// ================================
|
||||
|
// Check if the output is a valid IP
|
||||
|
const isValidIp = value => (/^(?:(?:^|\.)(?:2(?:5[0-5]|[0-4]\d)|1?\d?\d)){4}$/.test(value) ? true : false); |
||||
|
|
||||
|
function checkVersions(platform, installed, latest, commit=null) { |
||||
|
if (installed === "-" || latest === "-") { |
||||
|
document.getElementById(`${platform}-failed`).classList.remove("d-none"); |
||||
|
return; |
||||
|
} |
||||
|
|
||||
|
// Only check basic versions, no commit revisions
|
||||
|
if (commit === null || installed.indexOf("-") === -1) { |
||||
|
if (installed !== latest) { |
||||
|
document.getElementById(`${platform}-warning`).classList.remove("d-none"); |
||||
|
} else { |
||||
|
document.getElementById(`${platform}-success`).classList.remove("d-none"); |
||||
|
} |
||||
|
} else { |
||||
|
// Check if this is a branched version.
|
||||
|
const branchRegex = /(?:\s)\((.*?)\)/; |
||||
|
const branchMatch = installed.match(branchRegex); |
||||
|
if (branchMatch !== null) { |
||||
|
document.getElementById(`${platform}-branch`).classList.remove("d-none"); |
||||
|
} |
||||
|
|
||||
|
// This will remove branch info and check if there is a commit hash
|
||||
|
const installedRegex = /(\d+\.\d+\.\d+)-(\w+)/; |
||||
|
const instMatch = installed.match(installedRegex); |
||||
|
|
||||
|
// It could be that a new tagged version has the same commit hash.
|
||||
|
// In this case the version is the same but only the number is different
|
||||
|
if (instMatch !== null) { |
||||
|
if (instMatch[2] === commit) { |
||||
|
// The commit hashes are the same, so latest version is installed
|
||||
|
document.getElementById(`${platform}-success`).classList.remove("d-none"); |
||||
|
return; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
if (installed === latest) { |
||||
|
document.getElementById(`${platform}-success`).classList.remove("d-none"); |
||||
|
} else { |
||||
|
document.getElementById(`${platform}-warning`).classList.remove("d-none"); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
// ================================
|
||||
|
// Generate support string to be pasted on github or the forum
|
||||
|
async function generateSupportString(dj) { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
|
||||
|
let supportString = "### Your environment (Generated via diagnostics page)\n"; |
||||
|
|
||||
|
supportString += `* Vaultwarden version: v${dj.current_release}\n`; |
||||
|
supportString += `* Web-vault version: v${dj.web_vault_version}\n`; |
||||
|
supportString += `* OS/Arch: ${dj.host_os}/${dj.host_arch}\n`; |
||||
|
supportString += `* Running within Docker: ${dj.running_within_docker} (Base: ${dj.docker_base_image})\n`; |
||||
|
supportString += "* Environment settings overridden: "; |
||||
|
if (dj.overrides != "") { |
||||
|
supportString += "true\n"; |
||||
|
} else { |
||||
|
supportString += "false\n"; |
||||
|
} |
||||
|
supportString += `* Uses a reverse proxy: ${dj.ip_header_exists}\n`; |
||||
|
if (dj.ip_header_exists) { |
||||
|
supportString += `* IP Header check: ${dj.ip_header_match} (${dj.ip_header_name})\n`; |
||||
|
} |
||||
|
supportString += `* Internet access: ${dj.has_http_access}\n`; |
||||
|
supportString += `* Internet access via a proxy: ${dj.uses_proxy}\n`; |
||||
|
supportString += `* DNS Check: ${dnsCheck}\n`; |
||||
|
supportString += `* Time Check: ${timeCheck}\n`; |
||||
|
supportString += `* Domain Configuration Check: ${domainCheck}\n`; |
||||
|
supportString += `* HTTPS Check: ${httpsCheck}\n`; |
||||
|
supportString += `* Database type: ${dj.db_type}\n`; |
||||
|
supportString += `* Database version: ${dj.db_version}\n`; |
||||
|
supportString += "* Clients used: \n"; |
||||
|
supportString += "* Reverse proxy and version: \n"; |
||||
|
supportString += "* Other relevant information: \n"; |
||||
|
|
||||
|
const jsonResponse = await fetch(`${BASE_URL}/admin/diagnostics/config`, { |
||||
|
"headers": { "Accept": "application/json" } |
||||
|
}); |
||||
|
if (!jsonResponse.ok) { |
||||
|
alert("Generation failed: " + jsonResponse.statusText); |
||||
|
throw new Error(jsonResponse); |
||||
|
} |
||||
|
const configJson = await jsonResponse.json(); |
||||
|
supportString += "\n### Config (Generated via diagnostics page)\n<details><summary>Show Running Config</summary>\n"; |
||||
|
supportString += `\n**Environment settings which are overridden:** ${dj.overrides}\n`; |
||||
|
supportString += "\n\n```json\n" + JSON.stringify(configJson, undefined, 2) + "\n```\n</details>\n"; |
||||
|
|
||||
|
document.getElementById("support-string").innerText = supportString; |
||||
|
document.getElementById("support-string").classList.remove("d-none"); |
||||
|
document.getElementById("copy-support").classList.remove("d-none"); |
||||
|
} |
||||
|
|
||||
|
function copyToClipboard() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
|
||||
|
const supportStr = document.getElementById("support-string").innerText; |
||||
|
const tmpCopyEl = document.createElement("textarea"); |
||||
|
|
||||
|
tmpCopyEl.setAttribute("id", "copy-support-string"); |
||||
|
tmpCopyEl.setAttribute("readonly", ""); |
||||
|
tmpCopyEl.value = supportStr; |
||||
|
tmpCopyEl.style.position = "absolute"; |
||||
|
tmpCopyEl.style.left = "-9999px"; |
||||
|
document.body.appendChild(tmpCopyEl); |
||||
|
tmpCopyEl.select(); |
||||
|
document.execCommand("copy"); |
||||
|
tmpCopyEl.remove(); |
||||
|
|
||||
|
new BSN.Toast("#toastClipboardCopy").show(); |
||||
|
} |
||||
|
|
||||
|
function checkTimeDrift(browserUTC, serverUTC) { |
||||
|
const timeDrift = ( |
||||
|
Date.parse(serverUTC.replace(" ", "T").replace(" UTC", "")) - |
||||
|
Date.parse(browserUTC.replace(" ", "T").replace(" UTC", "")) |
||||
|
) / 1000; |
||||
|
if (timeDrift > 20 || timeDrift < -20) { |
||||
|
document.getElementById("time-warning").classList.remove("d-none"); |
||||
|
} else { |
||||
|
document.getElementById("time-success").classList.remove("d-none"); |
||||
|
timeCheck = true; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function checkDomain(browserURL, serverURL) { |
||||
|
if (serverURL == browserURL) { |
||||
|
document.getElementById("domain-success").classList.remove("d-none"); |
||||
|
domainCheck = true; |
||||
|
} else { |
||||
|
document.getElementById("domain-warning").classList.remove("d-none"); |
||||
|
} |
||||
|
|
||||
|
// Check for HTTPS at domain-server-string
|
||||
|
if (serverURL.startsWith("https://") ) { |
||||
|
document.getElementById("https-success").classList.remove("d-none"); |
||||
|
httpsCheck = true; |
||||
|
} else { |
||||
|
document.getElementById("https-warning").classList.remove("d-none"); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function initVersionCheck(dj) { |
||||
|
const serverInstalled = dj.current_release; |
||||
|
const serverLatest = dj.latest_release; |
||||
|
const serverLatestCommit = dj.latest_commit; |
||||
|
|
||||
|
if (serverInstalled.indexOf("-") !== -1 && serverLatest !== "-" && serverLatestCommit !== "-") { |
||||
|
document.getElementById("server-latest-commit").classList.remove("d-none"); |
||||
|
} |
||||
|
checkVersions("server", serverInstalled, serverLatest, serverLatestCommit); |
||||
|
|
||||
|
if (!dj.running_within_docker) { |
||||
|
const webInstalled = dj.web_vault_version; |
||||
|
const webLatest = dj.latest_web_build; |
||||
|
checkVersions("web", webInstalled, webLatest); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function checkDns(dns_resolved) { |
||||
|
if (isValidIp(dns_resolved)) { |
||||
|
document.getElementById("dns-success").classList.remove("d-none"); |
||||
|
dnsCheck = true; |
||||
|
} else { |
||||
|
document.getElementById("dns-warning").classList.remove("d-none"); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function init(dj) { |
||||
|
// Time check
|
||||
|
document.getElementById("time-browser-string").innerText = browserUTC; |
||||
|
checkTimeDrift(browserUTC, dj.server_time); |
||||
|
|
||||
|
// Domain check
|
||||
|
const browserURL = location.href.toLowerCase(); |
||||
|
document.getElementById("domain-browser-string").innerText = browserURL; |
||||
|
checkDomain(browserURL, dj.admin_url.toLowerCase()); |
||||
|
|
||||
|
// Version check
|
||||
|
initVersionCheck(dj); |
||||
|
|
||||
|
// DNS Check
|
||||
|
checkDns(dj.dns_resolved); |
||||
|
} |
||||
|
|
||||
|
// onLoad events
|
||||
|
document.addEventListener("DOMContentLoaded", (/*event*/) => { |
||||
|
const diag_json = JSON.parse(document.getElementById("diagnostics_json").innerText); |
||||
|
init(diag_json); |
||||
|
|
||||
|
document.getElementById("gen-support").addEventListener("click", () => { |
||||
|
generateSupportString(diag_json); |
||||
|
}); |
||||
|
document.getElementById("copy-support").addEventListener("click", copyToClipboard); |
||||
|
}); |
||||
@ -0,0 +1,54 @@ |
|||||
|
"use strict"; |
||||
|
|
||||
|
function deleteOrganization() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const org_uuid = event.target.dataset.vwOrgUuid; |
||||
|
const org_name = event.target.dataset.vwOrgName; |
||||
|
const billing_email = event.target.dataset.vwBillingEmail; |
||||
|
if (!org_uuid) { |
||||
|
alert("Required parameters not found!"); |
||||
|
return false; |
||||
|
} |
||||
|
|
||||
|
// First make sure the user wants to delete this organization
|
||||
|
const continueDelete = confirm(`WARNING: All data of this organization (${org_name}) will be lost!\nMake sure you have a backup, this cannot be undone!`); |
||||
|
if (continueDelete == true) { |
||||
|
const input_org_uuid = prompt(`To delete the organization "${org_name} (${billing_email})", please type the organization uuid below.`); |
||||
|
if (input_org_uuid != null) { |
||||
|
if (input_org_uuid == org_uuid) { |
||||
|
_post(`${BASE_URL}/admin/organizations/${org_uuid}/delete`, |
||||
|
"Organization deleted correctly", |
||||
|
"Error deleting organization" |
||||
|
); |
||||
|
} else { |
||||
|
alert("Wrong organization uuid, please try again"); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
// onLoad events
|
||||
|
document.addEventListener("DOMContentLoaded", (/*event*/) => { |
||||
|
jQuery("#orgs-table").DataTable({ |
||||
|
"stateSave": true, |
||||
|
"responsive": true, |
||||
|
"lengthMenu": [ |
||||
|
[-1, 5, 10, 25, 50], |
||||
|
["All", 5, 10, 25, 50] |
||||
|
], |
||||
|
"pageLength": -1, // Default show all
|
||||
|
"columnDefs": [{ |
||||
|
"targets": 4, |
||||
|
"searchable": false, |
||||
|
"orderable": false |
||||
|
}] |
||||
|
}); |
||||
|
|
||||
|
// Add click events for organization actions
|
||||
|
document.querySelectorAll("button[vw-delete-organization]").forEach(btn => { |
||||
|
btn.addEventListener("click", deleteOrganization); |
||||
|
}); |
||||
|
|
||||
|
document.getElementById("reload").addEventListener("click", reload); |
||||
|
}); |
||||
@ -0,0 +1,180 @@ |
|||||
|
"use strict"; |
||||
|
|
||||
|
function smtpTest() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
if (formHasChanges(config_form)) { |
||||
|
alert("Config has been changed but not yet saved.\nPlease save the changes first before sending a test email."); |
||||
|
return false; |
||||
|
} |
||||
|
|
||||
|
const test_email = document.getElementById("smtp-test-email"); |
||||
|
|
||||
|
// Do a very very basic email address check.
|
||||
|
if (test_email.value.match(/\S+@\S+/i) === null) { |
||||
|
test_email.parentElement.classList.add("was-validated"); |
||||
|
return false; |
||||
|
} |
||||
|
|
||||
|
const data = JSON.stringify({ "email": test_email.value }); |
||||
|
_post(`${BASE_URL}/admin/test/smtp/`, |
||||
|
"SMTP Test email sent correctly", |
||||
|
"Error sending SMTP test email", |
||||
|
data, false |
||||
|
); |
||||
|
} |
||||
|
|
||||
|
function getFormData() { |
||||
|
let data = {}; |
||||
|
|
||||
|
document.querySelectorAll(".conf-checkbox").forEach(function (e) { |
||||
|
data[e.name] = e.checked; |
||||
|
}); |
||||
|
|
||||
|
document.querySelectorAll(".conf-number").forEach(function (e) { |
||||
|
data[e.name] = e.value ? +e.value : null; |
||||
|
}); |
||||
|
|
||||
|
document.querySelectorAll(".conf-text, .conf-password").forEach(function (e) { |
||||
|
data[e.name] = e.value || null; |
||||
|
}); |
||||
|
return data; |
||||
|
} |
||||
|
|
||||
|
function saveConfig() { |
||||
|
const data = JSON.stringify(getFormData()); |
||||
|
_post(`${BASE_URL}/admin/config/`, |
||||
|
"Config saved correctly", |
||||
|
"Error saving config", |
||||
|
data |
||||
|
); |
||||
|
event.preventDefault(); |
||||
|
} |
||||
|
|
||||
|
function deleteConf() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const input = prompt( |
||||
|
"This will remove all user configurations, and restore the defaults and the " + |
||||
|
"values set by the environment. This operation could be dangerous. Type 'DELETE' to proceed:" |
||||
|
); |
||||
|
if (input === "DELETE") { |
||||
|
_post(`${BASE_URL}/admin/config/delete`, |
||||
|
"Config deleted correctly", |
||||
|
"Error deleting config" |
||||
|
); |
||||
|
} else { |
||||
|
alert("Wrong input, please try again"); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function backupDatabase() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
_post(`${BASE_URL}/admin/config/backup_db`, |
||||
|
"Backup created successfully", |
||||
|
"Error creating backup", null, false |
||||
|
); |
||||
|
} |
||||
|
|
||||
|
// Two functions to help check if there were changes to the form fields
|
||||
|
// Useful for example during the smtp test to prevent people from clicking save before testing there new settings
|
||||
|
function initChangeDetection(form) { |
||||
|
const ignore_fields = ["smtp-test-email"]; |
||||
|
Array.from(form).forEach((el) => { |
||||
|
if (! ignore_fields.includes(el.id)) { |
||||
|
el.dataset.origValue = el.value; |
||||
|
} |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
function formHasChanges(form) { |
||||
|
return Array.from(form).some(el => "origValue" in el.dataset && ( el.dataset.origValue !== el.value)); |
||||
|
} |
||||
|
|
||||
|
// This function will prevent submitting a from when someone presses enter.
|
||||
|
function preventFormSubmitOnEnter(form) { |
||||
|
form.onkeypress = function(e) { |
||||
|
const key = e.charCode || e.keyCode || 0; |
||||
|
if (key == 13) { |
||||
|
e.preventDefault(); |
||||
|
} |
||||
|
}; |
||||
|
} |
||||
|
|
||||
|
// This function will hook into the smtp-test-email input field and will call the smtpTest() function when enter is pressed.
|
||||
|
function submitTestEmailOnEnter() { |
||||
|
const smtp_test_email_input = document.getElementById("smtp-test-email"); |
||||
|
smtp_test_email_input.onkeypress = function(e) { |
||||
|
const key = e.charCode || e.keyCode || 0; |
||||
|
if (key == 13) { |
||||
|
e.preventDefault(); |
||||
|
smtpTest(); |
||||
|
} |
||||
|
}; |
||||
|
} |
||||
|
|
||||
|
// Colorize some settings which are high risk
|
||||
|
function colorRiskSettings() { |
||||
|
const risk_items = document.getElementsByClassName("col-form-label"); |
||||
|
Array.from(risk_items).forEach((el) => { |
||||
|
if (el.innerText.toLowerCase().includes("risks") ) { |
||||
|
el.parentElement.className += " alert-danger"; |
||||
|
} |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
function toggleVis(evt) { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
|
||||
|
const elem = document.getElementById(evt.target.dataset.vwPwToggle); |
||||
|
const type = elem.getAttribute("type"); |
||||
|
if (type === "text") { |
||||
|
elem.setAttribute("type", "password"); |
||||
|
} else { |
||||
|
elem.setAttribute("type", "text"); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function masterCheck(check_id, inputs_query) { |
||||
|
function onChanged(checkbox, inputs_query) { |
||||
|
return function _fn() { |
||||
|
document.querySelectorAll(inputs_query).forEach(function (e) { e.disabled = !checkbox.checked; }); |
||||
|
checkbox.disabled = false; |
||||
|
}; |
||||
|
} |
||||
|
|
||||
|
const checkbox = document.getElementById(check_id); |
||||
|
const onChange = onChanged(checkbox, inputs_query); |
||||
|
onChange(); // Trigger the event initially
|
||||
|
checkbox.addEventListener("change", onChange); |
||||
|
} |
||||
|
|
||||
|
const config_form = document.getElementById("config-form"); |
||||
|
|
||||
|
// onLoad events
|
||||
|
document.addEventListener("DOMContentLoaded", (/*event*/) => { |
||||
|
initChangeDetection(config_form); |
||||
|
// Prevent enter to submitting the form and save the config.
|
||||
|
// Users need to really click on save, this also to prevent accidental submits.
|
||||
|
preventFormSubmitOnEnter(config_form); |
||||
|
|
||||
|
submitTestEmailOnEnter(); |
||||
|
colorRiskSettings(); |
||||
|
|
||||
|
document.querySelectorAll("input[id^='input__enable_']").forEach(group_toggle => { |
||||
|
const input_id = group_toggle.id.replace("input__enable_", "#g_"); |
||||
|
masterCheck(group_toggle.id, `${input_id} input`); |
||||
|
}); |
||||
|
|
||||
|
document.querySelectorAll("button[data-vw-pw-toggle]").forEach(password_toggle_btn => { |
||||
|
password_toggle_btn.addEventListener("click", toggleVis); |
||||
|
}); |
||||
|
|
||||
|
document.getElementById("backupDatabase").addEventListener("click", backupDatabase); |
||||
|
document.getElementById("deleteConf").addEventListener("click", deleteConf); |
||||
|
document.getElementById("smtpTest").addEventListener("click", smtpTest); |
||||
|
|
||||
|
config_form.addEventListener("submit", saveConfig); |
||||
|
}); |
||||
@ -0,0 +1,246 @@ |
|||||
|
"use strict"; |
||||
|
|
||||
|
function deleteUser() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const id = event.target.parentNode.dataset.vwUserUuid; |
||||
|
const email = event.target.parentNode.dataset.vwUserEmail; |
||||
|
if (!id || !email) { |
||||
|
alert("Required parameters not found!"); |
||||
|
return false; |
||||
|
} |
||||
|
const input_email = prompt(`To delete user "${email}", please type the email below`); |
||||
|
if (input_email != null) { |
||||
|
if (input_email == email) { |
||||
|
_post(`${BASE_URL}/admin/users/${id}/delete`, |
||||
|
"User deleted correctly", |
||||
|
"Error deleting user" |
||||
|
); |
||||
|
} else { |
||||
|
alert("Wrong email, please try again"); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function remove2fa() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const id = event.target.parentNode.dataset.vwUserUuid; |
||||
|
if (!id) { |
||||
|
alert("Required parameters not found!"); |
||||
|
return false; |
||||
|
} |
||||
|
_post(`${BASE_URL}/admin/users/${id}/remove-2fa`, |
||||
|
"2FA removed correctly", |
||||
|
"Error removing 2FA" |
||||
|
); |
||||
|
} |
||||
|
|
||||
|
function deauthUser() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const id = event.target.parentNode.dataset.vwUserUuid; |
||||
|
if (!id) { |
||||
|
alert("Required parameters not found!"); |
||||
|
return false; |
||||
|
} |
||||
|
_post(`${BASE_URL}/admin/users/${id}/deauth`, |
||||
|
"Sessions deauthorized correctly", |
||||
|
"Error deauthorizing sessions" |
||||
|
); |
||||
|
} |
||||
|
|
||||
|
function disableUser() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const id = event.target.parentNode.dataset.vwUserUuid; |
||||
|
const email = event.target.parentNode.dataset.vwUserEmail; |
||||
|
if (!id || !email) { |
||||
|
alert("Required parameters not found!"); |
||||
|
return false; |
||||
|
} |
||||
|
const confirmed = confirm(`Are you sure you want to disable user "${email}"? This will also deauthorize their sessions.`); |
||||
|
if (confirmed) { |
||||
|
_post(`${BASE_URL}/admin/users/${id}/disable`, |
||||
|
"User disabled successfully", |
||||
|
"Error disabling user" |
||||
|
); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function enableUser() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const id = event.target.parentNode.dataset.vwUserUuid; |
||||
|
const email = event.target.parentNode.dataset.vwUserEmail; |
||||
|
if (!id || !email) { |
||||
|
alert("Required parameters not found!"); |
||||
|
return false; |
||||
|
} |
||||
|
const confirmed = confirm(`Are you sure you want to enable user "${email}"?`); |
||||
|
if (confirmed) { |
||||
|
_post(`${BASE_URL}/admin/users/${id}/enable`, |
||||
|
"User enabled successfully", |
||||
|
"Error enabling user" |
||||
|
); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function updateRevisions() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
_post(`${BASE_URL}/admin/users/update_revision`, |
||||
|
"Success, clients will sync next time they connect", |
||||
|
"Error forcing clients to sync" |
||||
|
); |
||||
|
} |
||||
|
|
||||
|
function inviteUser() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
const email = document.getElementById("inviteEmail"); |
||||
|
const data = JSON.stringify({ |
||||
|
"email": email.value |
||||
|
}); |
||||
|
email.value = ""; |
||||
|
_post(`${BASE_URL}/admin/invite/`, |
||||
|
"User invited correctly", |
||||
|
"Error inviting user", |
||||
|
data |
||||
|
); |
||||
|
} |
||||
|
|
||||
|
const ORG_TYPES = { |
||||
|
"0": { |
||||
|
"name": "Owner", |
||||
|
"color": "orange" |
||||
|
}, |
||||
|
"1": { |
||||
|
"name": "Admin", |
||||
|
"color": "blueviolet" |
||||
|
}, |
||||
|
"2": { |
||||
|
"name": "User", |
||||
|
"color": "blue" |
||||
|
}, |
||||
|
"3": { |
||||
|
"name": "Manager", |
||||
|
"color": "green" |
||||
|
}, |
||||
|
}; |
||||
|
|
||||
|
// Special sort function to sort dates in ISO format
|
||||
|
jQuery.extend(jQuery.fn.dataTableExt.oSort, { |
||||
|
"date-iso-pre": function(a) { |
||||
|
let x; |
||||
|
const sortDate = a.replace(/(<([^>]+)>)/gi, "").trim(); |
||||
|
if (sortDate !== "") { |
||||
|
const dtParts = sortDate.split(" "); |
||||
|
const timeParts = (undefined != dtParts[1]) ? dtParts[1].split(":") : ["00", "00", "00"]; |
||||
|
const dateParts = dtParts[0].split("-"); |
||||
|
x = (dateParts[0] + dateParts[1] + dateParts[2] + timeParts[0] + timeParts[1] + ((undefined != timeParts[2]) ? timeParts[2] : 0)) * 1; |
||||
|
if (isNaN(x)) { |
||||
|
x = 0; |
||||
|
} |
||||
|
} else { |
||||
|
x = Infinity; |
||||
|
} |
||||
|
return x; |
||||
|
}, |
||||
|
|
||||
|
"date-iso-asc": function(a, b) { |
||||
|
return a - b; |
||||
|
}, |
||||
|
|
||||
|
"date-iso-desc": function(a, b) { |
||||
|
return b - a; |
||||
|
} |
||||
|
}); |
||||
|
|
||||
|
const userOrgTypeDialog = document.getElementById("userOrgTypeDialog"); |
||||
|
// Fill the form and title
|
||||
|
userOrgTypeDialog.addEventListener("show.bs.modal", function(event) { |
||||
|
// Get shared values
|
||||
|
const userEmail = event.relatedTarget.parentNode.dataset.vwUserEmail; |
||||
|
const userUuid = event.relatedTarget.parentNode.dataset.vwUserUuid; |
||||
|
// Get org specific values
|
||||
|
const userOrgType = event.relatedTarget.dataset.vwOrgType; |
||||
|
const userOrgTypeName = ORG_TYPES[userOrgType]["name"]; |
||||
|
const orgName = event.relatedTarget.dataset.vwOrgName; |
||||
|
const orgUuid = event.relatedTarget.dataset.vwOrgUuid; |
||||
|
|
||||
|
document.getElementById("userOrgTypeDialogTitle").innerHTML = `<b>Update User Type:</b><br><b>Organization:</b> ${orgName}<br><b>User:</b> ${userEmail}`; |
||||
|
document.getElementById("userOrgTypeUserUuid").value = userUuid; |
||||
|
document.getElementById("userOrgTypeOrgUuid").value = orgUuid; |
||||
|
document.getElementById(`userOrgType${userOrgTypeName}`).checked = true; |
||||
|
}, false); |
||||
|
|
||||
|
// Prevent accidental submission of the form with valid elements after the modal has been hidden.
|
||||
|
userOrgTypeDialog.addEventListener("hide.bs.modal", function() { |
||||
|
document.getElementById("userOrgTypeDialogTitle").innerHTML = ""; |
||||
|
document.getElementById("userOrgTypeUserUuid").value = ""; |
||||
|
document.getElementById("userOrgTypeOrgUuid").value = ""; |
||||
|
}, false); |
||||
|
|
||||
|
function updateUserOrgType() { |
||||
|
event.preventDefault(); |
||||
|
event.stopPropagation(); |
||||
|
|
||||
|
const data = JSON.stringify(Object.fromEntries(new FormData(event.target).entries())); |
||||
|
|
||||
|
_post(`${BASE_URL}/admin/users/org_type`, |
||||
|
"Updated organization type of the user successfully", |
||||
|
"Error updating organization type of the user", |
||||
|
data |
||||
|
); |
||||
|
} |
||||
|
|
||||
|
// onLoad events
|
||||
|
document.addEventListener("DOMContentLoaded", (/*event*/) => { |
||||
|
jQuery("#users-table").DataTable({ |
||||
|
"stateSave": true, |
||||
|
"responsive": true, |
||||
|
"lengthMenu": [ |
||||
|
[-1, 5, 10, 25, 50], |
||||
|
["All", 5, 10, 25, 50] |
||||
|
], |
||||
|
"pageLength": -1, // Default show all
|
||||
|
"columnDefs": [{ |
||||
|
"targets": [1, 2], |
||||
|
"type": "date-iso" |
||||
|
}, { |
||||
|
"targets": 6, |
||||
|
"searchable": false, |
||||
|
"orderable": false |
||||
|
}] |
||||
|
}); |
||||
|
|
||||
|
// Color all the org buttons per type
|
||||
|
document.querySelectorAll("button[data-vw-org-type]").forEach(function(e) { |
||||
|
const orgType = ORG_TYPES[e.dataset.vwOrgType]; |
||||
|
e.style.backgroundColor = orgType.color; |
||||
|
e.title = orgType.name; |
||||
|
}); |
||||
|
|
||||
|
// Add click events for user actions
|
||||
|
document.querySelectorAll("button[vw-remove2fa]").forEach(btn => { |
||||
|
btn.addEventListener("click", remove2fa); |
||||
|
}); |
||||
|
document.querySelectorAll("button[vw-deauth-user]").forEach(btn => { |
||||
|
btn.addEventListener("click", deauthUser); |
||||
|
}); |
||||
|
document.querySelectorAll("button[vw-delete-user]").forEach(btn => { |
||||
|
btn.addEventListener("click", deleteUser); |
||||
|
}); |
||||
|
document.querySelectorAll("button[vw-disable-user]").forEach(btn => { |
||||
|
btn.addEventListener("click", disableUser); |
||||
|
}); |
||||
|
document.querySelectorAll("button[vw-enable-user]").forEach(btn => { |
||||
|
btn.addEventListener("click", enableUser); |
||||
|
}); |
||||
|
|
||||
|
document.getElementById("updateRevisions").addEventListener("click", updateRevisions); |
||||
|
document.getElementById("reload").addEventListener("click", reload); |
||||
|
document.getElementById("userOrgTypeForm").addEventListener("submit", updateUserOrgType); |
||||
|
document.getElementById("inviteUserForm").addEventListener("submit", inviteUser); |
||||
|
}); |
||||
Loading…
Reference in new issue