WIP: Attempt at adding header auth. Ignore Settings #981

src/utils/ConfigSchema.json

@@ -450,6 +450,37 @@
                 }
               }
             },
+            "enableHeaderAuth": {
+              "title": "Enable HeaderAuth?",
+              "type": "boolean",
+              "default": false,
+              "description": "If set to true, enable Header Authentication. See appConfig.auth.headerAuth"
+            },
+            "headerAuth": {
+              "type": "object",
+              "description": "Configuration for headerAuth",
+              "additionalProperties": false,
+              "required": [
+                "proxyWhitelist"
+              ],
+              "properties": {
+                "userHeader": {
+                  "title": "User Header",
+                  "type": "string",
+                  "description": "Header name which contains username",
+                  "default": "REMOTE_USER"
+                },
+                "proxyWhitelist": {
+                  "title": "Upstream Proxy Auth Trust",
+                  "type": "array",
+                  "description": "Upstream proxy servers to expect authenticated requests from",
+                  "items": {
+                    "type": "string",
+                    "description": "IPs of upstream proxies that will be trusted"
+                  }
+                }
+              }
+            },
             "enableKeycloak": {
               "title": "Enable Keycloak?",
               "type": "boolean",

src/utils/HeaderAuth.js

@@ -0,0 +1,77 @@
+import axios from 'axios';
+import sha256 from 'crypto-js/sha256';
+import ConfigAccumulator from '@/utils/ConfigAccumalator';
+import { cookieKeys, localStorageKeys, serviceEndpoints } from '@/utils/defaults';
+import { InfoHandler, ErrorHandler, InfoKeys } from '@/utils/ErrorHandler';
+import { logout, getUserState } from '@/utils/Auth';
+
+const getAppConfig = () => {
+  const Accumulator = new ConfigAccumulator();
+  const config = Accumulator.config();
+  return config.appConfig || {};
+};
+
+class HeaderAuth {
+  constructor() {
+    const { auth } = getAppConfig();
+    const {
+      userHeader, proxyWhitelist,
+    } = auth.headerAuth;
+    this.userHeader = userHeader;
+    this.proxyWhitelist = proxyWhitelist;
+    this.users = auth.users;
+  }
+
+  /* eslint-disable class-methods-use-this */
+  login() {
+    return new Promise((resolve, reject) => {
+      const baseUrl = process.env.VUE_APP_DOMAIN || window.location.origin;
+      axios.get(`${baseUrl}${serviceEndpoints.getUser}`).then((response) => {
+        if (!response.data || response.data.errorMsg) {
+          reject(response.data.errorMsg || 'Error');
+        } else {
+          try {
+            this.users.forEach((user) => {
+              if (user.user.toLowerCase() === response.data.user.toLowerCase()) { // User found
+                const strAndUpper = (input) => input.toString().toUpperCase();
+                const sha = strAndUpper(sha256(strAndUpper(user.user) + strAndUpper(user.hash)));
+                document.cookie = `${cookieKeys.AUTH_TOKEN}=${sha};`;
+                localStorage.setItem(localStorageKeys.USERNAME, user.user);
+                InfoHandler(`Succesfully signed in as ${response.data.user}`, InfoKeys.AUTH);
+                console.log('I think we\'re good', getUserState());
+                resolve(response.data.user);
+              }
+            });
+          } catch (e) {
+            reject(e);
+          }
+        }
+      });
+    });
+  }
+
+  logout() {
+    logout();
+  }
+}
+
+export const isHeaderAuthEnabled = () => {
+  const { auth } = getAppConfig();
+  if (!auth) return false;
+  return auth.enableHeaderAuth || false;
+};
+
+let headerAuth;
+
+export const initHeaderAuth = () => {
+  headerAuth = new HeaderAuth();
+  return headerAuth.login();
+};
+
+// TODO: Find where this is implemented
+export const getHeaderAuth = () => {
+  if (!headerAuth) {
+    ErrorHandler("HeaderAuth not initialized, can't get instance of class");
+  }
+  return headerAuth;
+};

src/utils/defaults.js

@@ -44,6 +44,7 @@ module.exports = {
     rebuild: '/config-manager/rebuild',
     systemInfo: '/system-info',
     corsProxy: '/cors-proxy',
+    getUser: '/get-user',
   },
   /* List of built-in themes, to be displayed within the theme-switcher dropdown */
   builtInThemes: [