nsrb
d666dc001d
- Introduced new HTTP authentication and page management APIs, allowing for the creation, retrieval, updating, and deletion of HTTP auth profiles and pages. - Added validation for auth and page fields to ensure proper configuration and error handling. - Implemented a mechanism for resolving auth credentials from various sources, including inline definitions, KV store, and secrets. - Enhanced workflow validation to include checks for HTTP triggers, ensuring proper auth and response configurations. - Updated the web interface to include new routes for managing HTTP auth profiles and pages, improving user experience and accessibility.
79 lines
2.3 KiB
JavaScript
79 lines
2.3 KiB
JavaScript
import {
|
|
assertAuthName,
|
|
assertAuthType,
|
|
listHttpAuths,
|
|
getHttpAuthById,
|
|
getHttpAuthByName,
|
|
upsertHttpAuth,
|
|
deleteHttpAuth,
|
|
} from "../../http-auths-store.js";
|
|
import { getHttpPageByName } from "../../http-pages-store.js";
|
|
|
|
/**
|
|
* @param {import("fastify").FastifyInstance} fastify
|
|
*/
|
|
export default async function httpAuthsPlugin(fastify) {
|
|
fastify.get("/http-auths", async () => {
|
|
return { auths: await listHttpAuths() };
|
|
});
|
|
|
|
fastify.get("/http-auths/:name", async (req, reply) => {
|
|
const { name } = /** @type {{ name: string }} */ (req.params);
|
|
try {
|
|
assertAuthName(name);
|
|
} catch (err) {
|
|
return reply.code(err.statusCode ?? 400).send({ error: err.message });
|
|
}
|
|
const auth = await getHttpAuthByName(name);
|
|
if (!auth) {
|
|
return reply.code(404).send({ error: "auth not found" });
|
|
}
|
|
return { auth };
|
|
});
|
|
|
|
fastify.put("/http-auths", async (req, reply) => {
|
|
const body = /** @type {{
|
|
name?: string,
|
|
type?: string,
|
|
config?: unknown,
|
|
unauthorized_status?: number | null,
|
|
unauthorized_response?: string | null,
|
|
}} */ (req.body ?? {});
|
|
try {
|
|
assertAuthName(String(body.name ?? ""));
|
|
assertAuthType(body.type);
|
|
if (
|
|
body.unauthorized_response != null &&
|
|
String(body.unauthorized_response).length > 0
|
|
) {
|
|
const page = await getHttpPageByName(String(body.unauthorized_response));
|
|
if (!page) {
|
|
return reply
|
|
.code(400)
|
|
.send({ error: `unknown response page "${body.unauthorized_response}"` });
|
|
}
|
|
}
|
|
const auth = await upsertHttpAuth({
|
|
name: String(body.name),
|
|
type: String(body.type),
|
|
config: body.config,
|
|
unauthorized_status: body.unauthorized_status,
|
|
unauthorized_response: body.unauthorized_response,
|
|
});
|
|
return reply.send({ auth });
|
|
} catch (err) {
|
|
return reply.code(err.statusCode ?? 500).send({ error: err.message });
|
|
}
|
|
});
|
|
|
|
fastify.delete("/http-auths/:id", async (req, reply) => {
|
|
const { id } = /** @type {{ id: string }} */ (req.params);
|
|
const existing = await getHttpAuthById(id);
|
|
if (!existing) {
|
|
return reply.code(404).send({ error: "auth not found" });
|
|
}
|
|
await deleteHttpAuth(id);
|
|
return { ok: true };
|
|
});
|
|
}
|