mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-05 21:36:02 +02:00
dbd7f55b20
* databroker: add databroker, identity manager, update cache (#864) * databroker: add databroker, identity manager, update cache * fix cache tests * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * authorize: use databroker data for rego policy (#904) * wip * add directory provider * initialize before sync, upate google provider, remove dead code * fix flaky test * update authorize to use databroker data * implement signed jwt * wait for session and user to appear * fix test * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * remove log line * only redirect when no session id exists * prepare rego query as part of create * return on ctx done * retry on disconnect for sync * move jwt signing * use != * use parent ctx for wait * remove session state, remove logs * rename function * add log message * pre-allocate slice * use errgroup * return nil on eof for sync * move check * disable timeout on gRPC requests in envoy * fix gitlab test * use v4 backoff * authenticate: databroker changes (#914) * wip * add directory provider * initialize before sync, upate google provider, remove dead code * fix flaky test * update authorize to use databroker data * implement signed jwt * wait for session and user to appear * fix test * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * remove log line * only redirect when no session id exists * prepare rego query as part of create * return on ctx done * retry on disconnect for sync * move jwt signing * use != * use parent ctx for wait * remove session state, remove logs * rename function * add log message * pre-allocate slice * use errgroup * return nil on eof for sync * move check * disable timeout on gRPC requests in envoy * fix dashboard * delete session on logout * permanently delete sessions once they are marked as deleted * remove permanent delete * fix tests * remove groups and refresh test * databroker: remove dead code, rename cache url, move dashboard (#925) * wip * add directory provider * initialize before sync, upate google provider, remove dead code * fix flaky test * update authorize to use databroker data * implement signed jwt * wait for session and user to appear * fix test * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * remove log line * only redirect when no session id exists * prepare rego query as part of create * return on ctx done * retry on disconnect for sync * move jwt signing * use != * use parent ctx for wait * remove session state, remove logs * rename function * add log message * pre-allocate slice * use errgroup * return nil on eof for sync * move check * disable timeout on gRPC requests in envoy * fix dashboard * delete session on logout * permanently delete sessions once they are marked as deleted * remove permanent delete * fix tests * remove cache service * remove kv * remove refresh docs * remove obsolete cache docs * add databroker url option * cache: use memberlist to detect multiple instances * add databroker service url * remove cache service * remove kv * remove refresh docs * remove obsolete cache docs * add databroker url option * cache: use memberlist to detect multiple instances * add databroker service url * wip * remove groups and refresh test * fix redirect, signout * remove databroker client from proxy * remove unused method * remove user dashboard test * handle missing session ids * session: reject sessions with no id * sessions: invalidate old sessions via databroker server version (#930) * session: add a version field tied to the databroker server version that can be used to invalidate sessions * fix tests * add log * authenticate: create user record immediately, call "get" directly in authorize (#931)
228 lines
6.8 KiB
HTML
228 lines
6.8 KiB
HTML
{{define "dashboard.html"}}
|
|
<!DOCTYPE html>
|
|
<html lang="en" charset="utf-8">
|
|
<head>
|
|
<title>Pomerium</title>
|
|
{{template "header.html"}}
|
|
</head>
|
|
|
|
<body>
|
|
<div id="main">
|
|
<div id="info-box">
|
|
<div class="card">
|
|
<div class="card-header">
|
|
<h2>Current user</h2>
|
|
{{if .User.Claims.picture }}
|
|
<img class="icon" src="{{.User.GetClaim "picture"}}" alt="user image" />
|
|
{{else}}
|
|
<img
|
|
class="icon"
|
|
src="{{dataURL "/.pomerium/assets/img/account_circle-24px.svg"}}"
|
|
xmlns="http://www.w3.org/2000/svg"
|
|
/>
|
|
{{end}}
|
|
</div>
|
|
|
|
<form method="GET" action="{{.SignOutURL}}">
|
|
<section>
|
|
<p class="message">Your current session details.</p>
|
|
<fieldset>
|
|
<label>
|
|
<span>URL</span>
|
|
<a href="{{.RedirectURL}}">{{.RedirectURL}}</a>
|
|
</label>
|
|
|
|
{{if .User.Name}}
|
|
<label>
|
|
<span>Name</span>
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.User.Name}}"
|
|
title="{{.User.Name}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{else}} {{if .User.Claims.given_name}}
|
|
<label>
|
|
<span>Given Name</span>
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.User.GetClaim "given_name"}}"
|
|
title="{{.User.GetClaim "given_name"}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}} {{if .User.Claims.family_name}}
|
|
<label>
|
|
<span>Family Name</span>
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.User.GetClaim "family_name"}}"
|
|
title="{{.User.GetClaim "family_name"}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}} {{end}} {{if .User.Id}}
|
|
<label>
|
|
<span>UserID</span>
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.User.Id}}"
|
|
title="{{.User.Id}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}} {{if .User.Email}}
|
|
<label>
|
|
<span>Email</span>
|
|
<input
|
|
type="email"
|
|
class="field"
|
|
value="{{.User.Email}}"
|
|
title="{{.User.Email}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}} {{range $i,$_:= .DirectoryUser.Groups}}
|
|
<label>
|
|
{{if eq $i 0}}
|
|
<span>Group</span>
|
|
{{else}}
|
|
<span></span>
|
|
{{end}}
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.}}"
|
|
title="{{.}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}}
|
|
{{with .Session.IdToken}}
|
|
{{with .ExpiresAt}}
|
|
<label>
|
|
<span>Expires At</span>
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.}}"
|
|
title="{{.}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}}
|
|
{{with .IssuedAt}}
|
|
<label>
|
|
<span>Issued At</span>
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.}}"
|
|
title="{{.}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}}
|
|
{{end}}
|
|
|
|
{{with .State}}
|
|
{{with .ImpersonateEmail}}
|
|
<label>
|
|
<span>Impersonating Email</span>
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}}
|
|
{{range $i,$_:= .ImpersonateGroups}}
|
|
<label>
|
|
{{if eq $i 0}}
|
|
<span>Impersonating Group</span>
|
|
{{else}}
|
|
<span></span>
|
|
{{end}}
|
|
<input
|
|
type="text"
|
|
class="field"
|
|
value="{{.}}"
|
|
title="{{.}}"
|
|
disabled
|
|
/>
|
|
</label>
|
|
{{end}}
|
|
{{end}}
|
|
|
|
</fieldset>
|
|
</section>
|
|
<div class="flex">
|
|
<button class="button full" type="submit">Sign Out</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="info-box">
|
|
<div class="card">
|
|
<div class="card-header">
|
|
<h2>Sign-in-as</h2>
|
|
<img
|
|
class="icon"
|
|
src="{{dataURL "/.pomerium/assets/img/supervised_user_circle-24px.svg"}}"
|
|
xmlns="http://www.w3.org/2000/svg"
|
|
/>
|
|
</div>
|
|
|
|
<form method="POST" action="/.pomerium/admin/impersonate">
|
|
<section>
|
|
<p class="message">
|
|
Administrators can temporarily impersonate another user.
|
|
</p>
|
|
<fieldset>
|
|
<label>
|
|
<span>Email</span>
|
|
<input
|
|
name="{{ .ImpersonateEmail }}"
|
|
type="email"
|
|
class="field"
|
|
value=""
|
|
placeholder="user@example.com"
|
|
/>
|
|
</label>
|
|
<label>
|
|
<span>Group</span>
|
|
<input
|
|
name="{{ .ImpersonateGroups }}"
|
|
type="text"
|
|
class="field"
|
|
value=""
|
|
placeholder="engineering"
|
|
/>
|
|
</label>
|
|
</fieldset>
|
|
</section>
|
|
<div class="flex">
|
|
{{ .csrfField }}
|
|
<button
|
|
name="{{ .ImpersonateAction }}"
|
|
value="set"
|
|
class="button full"
|
|
type="submit"
|
|
>
|
|
Impersonate
|
|
</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
{{end}}
|