gitoria

3.7 KB

1. // components/tokens.hl — ACCESS TOKENS (gitoria#7): what a developer's git uses as the PASSWORD to push over HTTPS
2. // (transport.hl). On the main address, for a logged-in user: make a named token — its secret is shown ONCE, right
3. // after it is made (only its hash is stored) — list the own tokens, remove one. Composed into list.hl (`#tokens`).
4. import { infoOfSession, userOfSession } from '../users.hl'
5. import { tokenRows, createToken, revokeToken } from '../tokens.hl'
7. session = null
8. me = infoOfSession(session)
9. shown = me != null
10. myUser = userOfSession(session)
11. tokens = myUser != null ? tokenRows(myUser.id) : []
12. showHead = shown
13. showForm = shown
14. showSecret = false
15. showNone = shown && tokens.length == 0
16. tokenError = ''
17. newSecret = ''
18. hasSecret = false
19. tokenName = ''
21. View {
22. accessTokens { id = "tokens"
23. if (showHead) { h2 { "Access tokens" } }
24. if (showHead) { p { class = "muted" "To push with git over HTTPS, use a token as the password (any user name). Reading a repository needs no token." } }
25. if (showForm) {
26. form { id = "tokenform"
27. on submit(e) {
28. e.preventDefault()
29. emit makeToken(e)
30. }
31. label { "Name (for example the computer it is for)"
32. input { id = "tokenname" name = "tokenname" required = "required" maxlength = "60" autocomplete = "off" value = tokenName on input(e) { emit setTokenName(e.target.value) } }
33. }
34. button { id = "tokensave" type = "submit" "Make token" }
35. p { id = "tokenerror" class = "message" tokenError }
36. }
37. }
38. if (showSecret) { p { id = "tokennotice" class = "notice" "Copy your token now — it is not shown again:" } }
39. if (showSecret) { pre { id = "tokensecret" newSecret } }
40. if (showNone) { p { id = "notokens" class = "muted" "You have no tokens yet." } }
41. ol { id = "tokenlist"
42. for (t of tokens) {
43. li {
44. span { class = "slug" t.name }
45. time { t.created }
46. button { class = "quiet removetoken" type = "button" value = t.id "Remove" on click(e) { emit removeToken(e.target.value) } }
47. }
48. }
49. }
50. }
51. }
53. // one `if` per element, none inside another (a nested `if` broke the client's repaint on logout)
55. on setTokenName(v) { tokenName = v }
57. on makeToken(e) {
58. let r = emit server gitoriaMakeToken(tokenName)
59. if (r == null || r.error != null) {
60. tokenError = r != null ? r.error : 'could not make the token'
61. return null
62. }
63. tokenError = ''
64. tokenName = ''
65. newSecret = r.token
66. hasSecret = true
67. let next = [r.row]
68. for (x of tokens) { next.push(x) }
69. tokens = next
70. showHead = shown
71. showForm = shown
72. showSecret = shown && hasSecret
73. showNone = shown && tokens.length == 0
74. }
76. on removeToken(id) {
77. let r = emit server gitoriaRemoveToken(id)
78. if (r == null || r.error != null) {
79. tokenError = r != null ? r.error : 'could not remove the token'
80. return null
81. }
82. tokenError = ''
83. let next = []
84. for (x of tokens) { if (x.id != id) { next.push(x) } }
85. tokens = next
86. showHead = shown
87. showForm = shown
88. showSecret = shown && hasSecret
89. showNone = shown && tokens.length == 0
90. }
92. // a login / logout (the shell's faces push them) shows or hides the section
93. on client gitoriaSignedIn(tag, info) {
94. shown = true
95. hasSecret = false
96. showHead = shown
97. showForm = shown
98. showSecret = shown && hasSecret
99. showNone = shown && tokens.length == 0
100. }
101. on client gitoriaSignedOut(tag) {
102. shown = false
103. hasSecret = false
104. newSecret = ''
105. tokens = []
106. showHead = shown
107. showForm = shown
108. showSecret = shown && hasSecret
109. showNone = shown && tokens.length == 0
110. }
112. on server gitoriaMakeToken(name, session) {
113. let u = userOfSession(session)
114. if (u == null) { return { error = 'log in with ident (top right) first' } }
115. return createToken(u.id, name)
116. }
118. on server gitoriaRemoveToken(id, session) {
119. let u = userOfSession(session)
120. if (u == null) { return { error = 'log in with ident (top right) first' } }
121. return revokeToken(u.id, id)
122. }