ident

7.8 KB

1. // components/apps.hl — `/apps`: THE ACCOUNT'S APPS (piece 2 of 6, ticket #25; CONCEPT.md
2. // "Apps: any ident user can register apps. An app gets an API key.").
3. // Register (name + the origins it runs on), list, edit, new secret, delete. An app has a
4. // public API key and a secret for its server; the secret is shown ONCE, right after it is
5. // made — ident stores only its sha256.
6. //
7. // The faces' names start with `app…`: a face is found by its EVENT NAME across all
8. // files (hl:web), so they must not collide with home.hl's.
9. parent './main.hl'
10. import { accountOfSession } from '../store.hl'
11. import { appRows, createApp, updateApp, regenerateSecret, deleteApp } from '../apps.hl'
12. import { siteName } from '../project.hl'
14. session = null
15. me = accountOfSession(session)
16. signedIn = me != null
17. signedOut = me == null
18. meEmail = me != null ? me.email : ''
19. apps = me != null ? appRows(me.id) : []
20. hasApps = apps.length > 0
21. noApps = apps.length == 0
22. __title = siteName + ' | your apps'
24. // THE APP FORM — new and edit
25. editing = false
26. editId = '' // '' = a new app, else the app's id (a UUID)
27. editHeading = ''
28. fName = ''
29. fOrigins = ''
31. // THE SECRET, shown once
32. showSecret = false
33. secretFor = ''
34. secret = ''
36. message = ''
37. notice = ''
39. View {
40. identCard {
41. if (signedOut) {
42. h1 { "Your apps" }
43. p { id = "signinfirst" class = "lead" "Sign in to ident first: " a { href = "/" "sign in" } "." }
44. }
45. if (signedIn) {
46. accountBar {
47. userEmail { id = "meemail" meEmail }
48. a { id = "toidentities" href = "/" "Your identities" }
49. }
50. if (showSecret) {
51. secretBox { id = "secretbox"
52. h2 { "Secret of " secretFor }
53. p { class = "lead" "Shown only now — copy it to your app's server. Its API calls (the code exchange) use it; it never goes into a web page. Lost it? Make a new one." }
54. code { id = "secret" secret }
55. button { id = "secretdone" type = "button" class = "small" "I copied it" on click(e) { emit hideSecret(e) } }
56. }
57. }
58. if (editing) {
59. form { id = "appform"
60. on submit(e) {
61. e.preventDefault()
62. emit saveApp(e)
63. }
64. h1 { id = "appformheading" editHeading }
65. label { "Name"
66. input { id = "fappname" name = "name" maxlength = "60" autocomplete = "off" required = "required" value = fName on input(e) { emit setName(e.target.value) } }
67. }
68. label { "Origins " fieldHint { "(where the app runs, like https://tickets.worldapi.org — several separated by spaces; the login button only returns there)" }
69. input { id = "forigins" name = "origins" autocomplete = "off" required = "required" value = fOrigins on input(e) { emit setOrigins(e.target.value) } }
70. }
71. formButtons {
72. button { id = "saveapp" type = "submit" "Save" }
73. button { id = "cancelapp" type = "button" class = "quiet" "Cancel" on click(e) { emit closeForm(e) } }
74. }
75. }
76. }
77. section { id = "appssection"
78. sectionHead {
79. h1 { "Your apps" }
80. button { id = "newapp" type = "button" class = "small" "Register an app" on click(e) { emit openNew(e) } }
81. }
82. if (noApps) { p { id = "noapps" class = "lead" "No apps yet. An app you register gets an API key for its “login with ident” button." } }
83. ul { id = "apps"
84. for (row of apps) {
85. li { class = "app"
86. appMain {
87. appName { row.name }
88. appOrigins { row.originsText }
89. appKey { "API key " code { class = "apikey" row.apiKey } }
90. }
91. identityActions {
92. button { type = "button" class = "quiet small edit" value = row.id "Edit" on click(e) { emit openEdit(e.target.value) } }
93. button { type = "button" class = "quiet small newsecret" value = row.id "New secret" on click(e) { emit renew(e.target.value) } }
94. button { type = "button" class = "quiet small danger delete" value = row.id "Delete" on click(e) { emit remove(e.target.value) } }
95. }
96. }
97. }
98. }
99. }
100. }
101. p { id = "notice" class = "notice" notice }
102. p { id = "message" class = "message" message }
103. }
104. }
106. on setName(v) { fName = v }
107. on setOrigins(v) { fOrigins = v }
109. rowOf = (id) => {
110. for (row of apps) { if ('' + row.id == '' + id) { return row } }
111. return null
112. }
114. // the origins field: words separated by spaces or commas
115. originList = (text) => {
116. let out = []
117. for (w of text.replaceAll(',', ' ').split(' ')) {
118. let t = w.trim()
119. if (t != '') { out.push(t) }
120. }
121. return out
122. }
124. setApps = (list) => {
125. apps = list
126. hasApps = list.length > 0
127. noApps = list.length == 0
128. return null
129. }
131. on openNew(e) {
132. message = ''
133. notice = ''
134. editId = ''
135. fName = ''
136. fOrigins = ''
137. editHeading = 'Register an app'
138. editing = true
139. }
141. on openEdit(id) {
142. message = ''
143. notice = ''
144. let row = rowOf(id)
145. if (row == null) { return null }
146. editId = row.id
147. fName = row.name
148. fOrigins = row.originsText
149. editHeading = 'Edit ' + row.name
150. editing = true
151. }
153. on closeForm(e) {
154. editing = false
155. message = ''
156. }
158. on hideSecret(e) {
159. showSecret = false
160. secret = ''
161. secretFor = ''
162. }
164. on saveApp(e) {
165. message = ''
166. notice = ''
167. let input = { name = fName origins = originList(fOrigins) }
168. let r = null
169. if (editId == '') {
170. r = emit server appCreate(input)
171. } else {
172. r = emit server appUpdate('' + editId, input)
173. }
174. if (r == null) {
175. message = 'the server did not answer — try again'
176. return null
177. }
178. if (r.error != null) {
179. message = r.error
180. return null
181. }
182. setApps(r.apps)
183. editing = false
184. if (r.secret != null) {
185. secretFor = r.app.name
186. secret = r.secret
187. showSecret = true
188. notice = 'App registered.'
189. } else {
190. notice = 'App saved.'
191. }
192. }
194. on renew(id) {
195. message = ''
196. notice = ''
197. let row = rowOf(id)
198. if (row == null) { return null }
199. if (!confirm('Make a new secret for “' + row.name + '”? The current one stops working at once.')) { return null }
200. let r = emit server appNewSecret('' + id)
201. if (r == null) {
202. message = 'the server did not answer — try again'
203. return null
204. }
205. if (r.error != null) {
206. message = r.error
207. return null
208. }
209. setApps(r.apps)
210. secretFor = r.app.name
211. secret = r.secret
212. showSecret = true
213. notice = 'New secret made.'
214. }
216. on remove(id) {
217. message = ''
218. notice = ''
219. let row = rowOf(id)
220. if (row == null) { return null }
221. if (!confirm('Delete the app “' + row.name + '”? Its API key stops working and the ids its users had in it are gone.')) { return null }
222. let r = emit server appDelete('' + id)
223. if (r == null) {
224. message = 'the server did not answer — try again'
225. return null
226. }
227. if (r.error != null) {
228. message = r.error
229. return null
230. }
231. setApps(r.apps)
232. if ('' + editId == '' + id) { editing = false }
233. showSecret = false
234. secret = ''
235. notice = 'App deleted.'
236. }
238. // ---- the faces ------------------------------------------------------------------------
239. // The LAST parameter is the session (the framework appends it); accountOfSession only
240. // gets the framework's own Session (hl:web never takes it from the peer, hybriel#16/#31).
242. on server appCreate(input, session) {
243. let me = accountOfSession(session)
244. if (me == null) { return { error = 'you are not signed in' } }
245. let r = createApp(me.id, input)
246. if (r.error != null) { return r }
247. return { app = r.app secret = r.secret apps = appRows(me.id) }
248. }
250. on server appUpdate(id, input, session) {
251. let me = accountOfSession(session)
252. if (me == null) { return { error = 'you are not signed in' } }
253. let r = updateApp(me.id, id, input)
254. if (r.error != null) { return r }
255. return { app = r.app apps = appRows(me.id) }
256. }
258. on server appNewSecret(id, session) {
259. let me = accountOfSession(session)
260. if (me == null) { return { error = 'you are not signed in' } }
261. let r = regenerateSecret(me.id, id)
262. if (r.error != null) { return r }
263. return { app = r.app secret = r.secret apps = appRows(me.id) }
264. }
266. on server appDelete(id, session) {
267. let me = accountOfSession(session)
268. if (me == null) { return { error = 'you are not signed in' } }
269. let r = deleteApp(me.id, id)
270. if (r.error != null) { return r }
271. return { deleted = r.deleted apps = appRows(me.id) }
272. }