gitoria

3.9 KB

1. // components/tokens.hl — ACCESS TOKENS (gitoria#7): what a developer's git uses as the PASSWORD to push over HTTPS
2. // (transport.hl). On the main address, for a logged-in user: make a named token — its secret is shown ONCE, right
3. // after it is made (only its hash is stored) — list the own tokens, remove one. Composed into list.hl (`#tokens`).
4. import { infoOfSession, userOfSession } from '../lib/users.hl'
5. import { tokenRows, createToken, revokeToken } from '../lib/tokens.hl'
7. session = null
8. me = infoOfSession(session)
9. shown = me != null
10. myUser = userOfSession(session)
11. tokens = myUser != null ? tokenRows(myUser.id) : []
12. showHead = shown
13. showForm = shown
14. showSecret = false
15. showNone = shown && tokens.length == 0
16. tokenError = ''
17. newSecret = ''
18. hasSecret = false
19. tokenName = ''
21. View {
22. accessTokens { id = "tokens"
23. if (showHead) { h2 { "Access tokens" } }
24. if (showHead) { p { class = "muted" "To push with git over HTTPS, use a token as the password (any user name). Reading a repository needs no token." } }
25. if (showForm) {
26. form { id = "tokenform"
27. on submit(e) {
28. e.preventDefault()
29. emit makeToken(e)
30. }
31. label { "Name (for example the computer it is for)"
32. input { id = "tokenname" name = "tokenname" required = "required" maxlength = "60" autocomplete = "off" value = tokenName on input(e) { emit setTokenName(e.target.value) } }
33. }
34. button { id = "tokensave" type = "submit" "Make token" }
35. p { id = "tokenerror" class = "message" tokenError }
36. }
37. }
38. if (showSecret) { p { id = "tokennotice" class = "notice" "Copy your token now — it is not shown again:" } }
39. if (showSecret) { pre { id = "tokensecret" newSecret } }
40. if (showNone) { p { id = "notokens" class = "muted" "You have no tokens yet." } }
41. ol { id = "tokenlist"
42. for (t of tokens) {
43. li {
44. span { class = "slug" t.name }
45. time { t.created }
46. button { class = "quiet removetoken" type = "button" value = t.id "Remove" on click(e) { emit removeToken(e.target.value) } }
47. }
48. }
49. }
50. }
51. }
53. // one `if` per element, none inside another (a nested `if` broke the client's repaint on logout)
55. on setTokenName(v) { tokenName = v }
57. on makeToken(e) {
58. r = emit server gitoriaMakeToken(tokenName)
59. if (r == null || r.error != null) {
60. tokenError = r != null ? r.error : 'could not make the token'
61. return null
62. }
63. tokenError = ''
64. tokenName = ''
65. newSecret = r.token
66. hasSecret = true
67. // the face's answer can bring `tokens` fresh from the server already (hl:web ships a member derived from
68. // `session` in the ack's sync, hybriel 64527baa) — so the new row is put on top ONCE, never twice
69. next = [r.row]
70. for (x of tokens) { if (x.id != r.row.id) { next.push(x) } }
71. tokens = next
72. showHead = shown
73. showForm = shown
74. showSecret = shown && hasSecret
75. showNone = shown && tokens.length == 0
76. }
78. on removeToken(id) {
79. r = emit server gitoriaRemoveToken(id)
80. if (r == null || r.error != null) {
81. tokenError = r != null ? r.error : 'could not remove the token'
82. return null
83. }
84. tokenError = ''
85. next = []
86. for (x of tokens) { if (x.id != id) { next.push(x) } }
87. tokens = next
88. showHead = shown
89. showForm = shown
90. showSecret = shown && hasSecret
91. showNone = shown && tokens.length == 0
92. }
94. // a login / logout (the shell's faces push them) shows or hides the section
95. on client gitoriaSignedIn(tag, info) {
96. shown = true
97. hasSecret = false
98. showHead = shown
99. showForm = shown
100. showSecret = shown && hasSecret
101. showNone = shown && tokens.length == 0
102. }
103. on client gitoriaSignedOut(tag) {
104. shown = false
105. hasSecret = false
106. newSecret = ''
107. tokens = []
108. showHead = shown
109. showForm = shown
110. showSecret = shown && hasSecret
111. showNone = shown && tokens.length == 0
112. }
114. on server gitoriaMakeToken(name, session) {
115. u = userOfSession(session)
116. if (u == null) { return { error = 'log in with ident (top right) first' } }
117. return createToken(u.id, name)
118. }
120. on server gitoriaRemoveToken(id, session) {
121. u = userOfSession(session)
122. if (u == null) { return { error = 'log in with ident (top right) first' } }
123. return revokeToken(u.id, id)
124. }