feat(secret-ref): implemented ui for service token changes

frontend/src/hooks/api/serviceTokens/types.ts

@@ -1,9 +1,13 @@
+export type ServiceTokenScope = {
+  environment: string;
+  secretPath: string;
+};
+
 export type ServiceToken = {
   _id: string;
   name: string;
   workspace: string;
-  environment: string;
-  secretPath: string;
+  scopes: ServiceTokenScope[];
   user: string;
   expiresAt: string;
   createdAt: string;
@@ -14,9 +18,8 @@ export type ServiceToken = {
 export type CreateServiceTokenDTO = {
   name: string;
   workspaceId: string;
-  environment: string;
+  scopes: ServiceTokenScope[];
   expiresIn: number;
-  secretPath: string;
   encryptedKey: string;
   iv: string;
   tag: string;

frontend/src/views/Settings/ProjectSettingsPage/components/ServiceTokenSection/AddServiceTokenModal.tsx

@@ -1,9 +1,9 @@
 import crypto from "crypto";
 
 import { useEffect, useState } from "react";
-import { Controller, useForm } from "react-hook-form";
+import { Controller, useFieldArray, useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
-import { faCheck, faCopy } from "@fortawesome/free-solid-svg-icons";
+import { faCheck, faCopy, faPlus, faTrashCan } from "@fortawesome/free-solid-svg-icons";
 import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
 import { yupResolver } from "@hookform/resolvers/yup";
 import * as yup from "yup";
@@ -27,10 +27,7 @@ import {
 } from "@app/components/v2";
 import { useWorkspace } from "@app/context";
 import { useToggle } from "@app/hooks";
-import {
-    useCreateServiceToken,
-    useGetUserWsKey
-} from "@app/hooks/api";
+import { useCreateServiceToken, useGetUserWsKey } from "@app/hooks/api";
 import { UsePopUpState } from "@app/hooks/usePopUp";
 
 const apiTokenExpiry = [
@@ -44,8 +41,16 @@ const apiTokenExpiry = [
 
 const schema = yup.object({
   name: yup.string().max(100).required().label("Service Token Name"),
+  scopes: yup
+    .array(
+      yup.object({
         environment: yup.string().max(50).required().label("Environment"),
-  secretPath: yup.string().required().default("/").label("Secret Path"),
+        secretPath: yup.string().required().default("/").label("Secret Path")
+      })
+    )
+    .min(1)
+    .required()
+    .label("Scope"),
   expiresIn: yup.string().optional().label("Service Token Expiration"),
   permissions: yup
     .object()
@@ -64,10 +69,7 @@ type Props = {
   handlePopUpToggle: (popUpName: keyof UsePopUpState<["createAPIToken"]>, state?: boolean) => void;
 };
 
-export const AddServiceTokenModal = ({
-    popUp,
-    handlePopUpToggle
-}: Props) => {
+export const AddServiceTokenModal = ({ popUp, handlePopUpToggle }: Props) => {
   const { t } = useTranslation();
   const { createNotification } = useNotificationContext();
   const { currentWorkspace } = useWorkspace();
@@ -77,9 +79,14 @@ export const AddServiceTokenModal = ({
     handleSubmit,
     formState: { isSubmitting }
   } = useForm<FormData>({
-        resolver: yupResolver(schema)
+    resolver: yupResolver(schema),
+    defaultValues: {
+      scopes: [{ secretPath: "/", environment: currentWorkspace?.environments?.[0]?.slug }]
+    }
   });
 
+  const { fields: tokenScopes, append, remove } = useFieldArray({ control, name: "scopes" });
+
   const [newToken, setToken] = useState("");
   const [isTokenCopied, setIsTokenCopied] = useToggle(false);
 
@@ -101,13 +108,7 @@ export const AddServiceTokenModal = ({
     setIsTokenCopied.on();
   };
 
-    const onFormSubmit = async ({
-        name,
-        environment,
-        secretPath,
-        expiresIn,
-        permissions
-    }: FormData) => {
+  const onFormSubmit = async ({ name, scopes, expiresIn, permissions }: FormData) => {
     try {
       if (!currentWorkspace?._id) return;
       if (!latestFileKey) return;
@@ -130,8 +131,7 @@ export const AddServiceTokenModal = ({
         encryptedKey: ciphertext,
         iv,
         tag,
-                environment,
-                secretPath,
+        scopes,
         expiresIn: Number(expiresIn),
         name,
         workspaceId: currentWorkspace._id,
@@ -142,12 +142,10 @@ export const AddServiceTokenModal = ({
       });
 
       setToken(serviceToken);
-
       createNotification({
         text: "Successfully created a service token",
         type: "success"
       });
-        
     } catch (err) {
       console.error(err);
       createNotification({
@@ -190,13 +188,16 @@ export const AddServiceTokenModal = ({
                 </FormControl>
               )}
             />
+            {tokenScopes.map(({ id }, index) => (
+              <div className="mb-3 flex items-end space-x-2" key={id}>
                 <Controller
                   control={control}
-                            name="environment"
+                  name={`scopes.${index}.environment`}
                   defaultValue={currentWorkspace?.environments?.[0]?.slug}
                   render={({ field: { onChange, ...field }, fieldState: { error } }) => (
                     <FormControl
-                                    label="Environment"
+                      className="mb-0"
+                      label={index === 0 ? "Environment" : undefined}
                       errorText={error?.message}
                       isError={Boolean(error)}
                     >
@@ -217,29 +218,50 @@ export const AddServiceTokenModal = ({
                 />
                 <Controller
                   control={control}
-                            name="secretPath"
+                  name={`scopes.${index}.secretPath`}
                   defaultValue="/"
                   render={({ field, fieldState: { error } }) => (
                     <FormControl
-                                label="Secrets Path"
+                      className="mb-0 flex-grow"
+                      label={index === 0 ? "Secrets Path" : undefined}
                       isError={Boolean(error)}
-                                helperText="Tokens can be scoped to a folder path. Default path is /"
                       errorText={error?.message}
                     >
-                                <Input {...field} placeholder="Provide a path, default is /" />
+                      <Input {...field} placeholder="can be /, /nested/**, /**/deep" />
                     </FormControl>
                   )}
                 />
+                <IconButton
+                  className="p-3"
+                  ariaLabel="remove"
+                  colorSchema="danger"
+                  onClick={() => remove(index)}
+                >
+                  <FontAwesomeIcon icon={faTrashCan} size="sm" />
+                </IconButton>
+              </div>
+            ))}
+            <div className="my-4 ml-1">
+              <Button
+                variant="outline_bg"
+                onClick={() =>
+                  append({
+                    environment: currentWorkspace?.environments?.[0]?.slug || "",
+                    secretPath: ""
+                  })
+                }
+                leftIcon={<FontAwesomeIcon icon={faPlus} />}
+                size="xs"
+              >
+                Add Scope
+              </Button>
+            </div>
             <Controller
               control={control}
               name="expiresIn"
               defaultValue={String(apiTokenExpiry?.[0]?.value)}
               render={({ field: { onChange, ...field }, fieldState: { error } }) => (
-                                <FormControl
-                                    label="Expiration"
-                                    errorText={error?.message}
-                                    isError={Boolean(error)}
-                                >
+                <FormControl label="Expiration" errorText={error?.message} isError={Boolean(error)}>
                   <Select
                     defaultValue={field.value}
                     {...field}
@@ -340,4 +362,4 @@ export const AddServiceTokenModal = ({
       </ModalContent>
     </Modal>
   );
-}
+};

frontend/src/views/Settings/ProjectSettingsPage/components/ServiceTokenSection/ServiceTokenSection.tsx

@@ -3,14 +3,9 @@ import { faPlus } from "@fortawesome/free-solid-svg-icons";
 import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
 
 import { useNotificationContext } from "@app/components/context/Notifications/NotificationProvider";
-import {
-  Button,
-  DeleteActionModal,
-} from "@app/components/v2";
+import { Button, DeleteActionModal } from "@app/components/v2";
 import { usePopUp } from "@app/hooks";
-import {
-  useDeleteServiceToken
-} from "@app/hooks/api";
+import { useDeleteServiceToken } from "@app/hooks/api";
 
 import { AddServiceTokenModal } from "./AddServiceTokenModal";
 import { ServiceTokenTable } from "./ServiceTokenTable";
@@ -29,7 +24,9 @@ export const ServiceTokenSection = () => {
 
   const onDeleteApproved = async () => {
     try {
-      deleteServiceToken.mutateAsync((popUp?.deleteAPITokenConfirmation?.data as DeleteModalData)?.id);
+      deleteServiceToken.mutateAsync(
+        (popUp?.deleteAPITokenConfirmation?.data as DeleteModalData)?.id
+      );
       createNotification({
         text: "Successfully deleted service token",
         type: "success"
@@ -46,9 +43,11 @@ export const ServiceTokenSection = () => {
   };
 
   return (
-    <div className="mb-6 p-4 bg-mineshaft-900 max-w-screen-lg rounded-lg border border-mineshaft-600">
-      <div className="flex justify-between mb-8">
-          <p className="text-xl font-semibold text-mineshaft-100">{t("section.token.service-tokens")}</p>
+    <div className="mb-6 max-w-screen-lg rounded-lg border border-mineshaft-600 bg-mineshaft-900 p-4">
+      <div className="mb-2 flex justify-between">
+        <p className="text-xl font-semibold text-mineshaft-100">
+          {t("section.token.service-tokens")}
+        </p>
         <Button
           colorSchema="secondary"
           leftIcon={<FontAwesomeIcon icon={faPlus} />}
@@ -59,19 +58,14 @@ export const ServiceTokenSection = () => {
           Create token
         </Button>
       </div>
-      <p className="text-gray-400 mb-8">{t("section.token.service-tokens-description")}</p>
-      <ServiceTokenTable 
-        handlePopUpOpen={handlePopUpOpen}
-      />
-      <AddServiceTokenModal 
-        popUp={popUp}
-        handlePopUpToggle={handlePopUpToggle}
-      />  
+      <p className="mb-8 text-gray-400">{t("section.token.service-tokens-description")}</p>
+      <ServiceTokenTable handlePopUpOpen={handlePopUpOpen} />
+      <AddServiceTokenModal popUp={popUp} handlePopUpToggle={handlePopUpToggle} />
       <DeleteActionModal
         isOpen={popUp.deleteAPITokenConfirmation.isOpen}
-        title={
-          `Delete ${(popUp?.deleteAPITokenConfirmation?.data as DeleteModalData)?.name || " "} service token?`
-        }
+        title={`Delete ${
+          (popUp?.deleteAPITokenConfirmation?.data as DeleteModalData)?.name || " "
+        } service token?`}
         onChange={(isOpen) => handlePopUpToggle("deleteAPITokenConfirmation", isOpen)}
         deleteKey={(popUp?.deleteAPITokenConfirmation?.data as DeleteModalData)?.name}
         onClose={() => handlePopUpClose("deleteAPITokenConfirmation")}

frontend/src/views/Settings/ProjectSettingsPage/components/ServiceTokenSection/ServiceTokenTable.tsx

@@ -1,4 +1,4 @@
-import { faKey, faTrashCan } from "@fortawesome/free-solid-svg-icons";
+import { faFolder, faKey, faTrashCan } from "@fortawesome/free-solid-svg-icons";
 import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
 
 import {
@@ -30,9 +30,7 @@ type Props = {
   ) => void;
 };
 
-export const ServiceTokenTable = ({
-    handlePopUpOpen
-}: Props) => {
+export const ServiceTokenTable = ({ handlePopUpOpen }: Props) => {
   const { currentWorkspace } = useWorkspace();
   const { data, isLoading } = useGetUserWsServiceTokens({
     workspaceID: currentWorkspace?._id || ""
@@ -44,21 +42,34 @@ export const ServiceTokenTable = ({
         <THead>
           <Tr>
             <Th>Token Name</Th>
-                    <Th>Environment</Th>
-                    <Th>Secret Path</Th>
+            <Th>Envrionment - Secret Path</Th>
             <Th>Valid Until</Th>
             <Th aria-label="button" />
           </Tr>
         </THead>
         <TBody>
           {isLoading && <TableSkeleton columns={4} key="project-service-tokens" />}
-                    {!isLoading && data && data.map((row) => (
+          {!isLoading &&
+            data &&
+            data.map((row) => (
               <Tr key={row._id}>
                 <Td>{row.name}</Td>
-                            <Td>{row.environment}</Td>
-                            <Td>{row.secretPath}</Td>
+                <Td>
+                  <div className="mb-2 flex flex-col flex-wrap space-y-1">
+                    {row?.scopes.map(({ secretPath, environment }) => (
+                      <div
+                        key={`${row._id}-${environment}-${secretPath}`}
+                        className="inline-flex items-center space-x-1 rounded-md border border-mineshaft-600 p-1 px-2"
+                      >
+                        <div className="mr-2 border-r border-mineshaft-600 pr-2">{environment}</div>
+                        <FontAwesomeIcon icon={faFolder} size="sm" />
+                        <span className="pl-2">{secretPath}</span>
+                      </div>
+                    ))}
+                  </div>
+                </Td>
                 <Td>{row.expiresAt && new Date(row.expiresAt).toUTCString()}</Td>
-                            <Td className="flex items-center justify-end">
+                <Td>
                   <IconButton
                     onClick={() =>
                       handlePopUpOpen("deleteAPITokenConfirmation", {
@@ -85,4 +96,4 @@ export const ServiceTokenTable = ({
       </Table>
     </TableContainer>
   );
-}
+};