60d227585b
fixed management ui popup auto close problem #10797
2024-03-20 00:05:26 +02:00
31ac7922da
Fix test when idp is down
2024-02-12 07:38:25 +01:00
e4e0ece31d
Fix issue looking up logout button
2024-02-10 20:54:17 +01:00
91089feb7b
Warn when some oauth resource is not available
2024-02-10 20:12:18 +01:00
ec18b170fc
Show warning messages and disable resources
...
which are not available
2024-02-10 20:12:17 +01:00
b6ac76a6f3
Add prefix oauth to all resource server settings
2024-02-10 20:12:08 +01:00
d827b72ce1
Create Oauth2 client
2024-02-10 20:12:04 +01:00
f8401df53e
Drive-by change: naming
2024-01-29 12:21:45 -05:00
dc3b6fb5bc
Allow management users to query feature flags and deprecated features
...
The new banner to warn about not-enabled feature flags requires access
to this endpoint, and it must be visible for all users.
2024-01-29 15:51:21 +01:00
5a3584beea
Remove FF warning as soon as all features are enabled
...
The warning in the header needs a full refresh, just updating
the page content will not clear the warning.
2024-01-15 08:41:36 +01:00
5aa35e0570
Management: introduce deprecated features API endpoints, UI page and warnings
2023-12-13 07:39:37 +01:00
cd680bc568
move store pref to startWithOAuthLogin
2023-10-30 12:02:29 -03:00
3e0ca9ede7
add oauth-return-to
2023-10-29 18:34:42 -03:00
f4aed7a55e
Make sure that nav element ids follow a reasonable convention
...
Instead of using the label, use a snake-case value
without any spaces.
While at it, update Selenium/WebDriver test suites.
2023-06-10 19:38:36 +04:00
02fda919a5
Fix #8276
2023-05-23 16:47:11 +02:00
67e04259a0
Test various user tags without vhost permissions
2023-05-19 17:01:15 +02:00
1022f7d197
Do not mount route to pages
...
which require vhost access but the
use has no access to any vhost
2023-05-19 17:01:15 +02:00
24fb9afe16
WIP Fix issue
2023-05-19 17:01:15 +02:00
65e59f670b
Only validate regular expression when the regex box is checked
2023-04-27 13:43:44 +04:00
a4386db25d
Wording
2023-04-27 12:32:39 +04:00
fe1fbb8264
Add a warning for invalid regular expressions
...
Warn the user when filter expression does not compile to a regular
expression.
Part of #8008 .
2023-04-27 12:27:19 +04:00
a93ad3b7f1
First attempt at addressing #8008
...
When filter exression is not a valid regexp, send
it as a regular text filer.
2023-04-27 12:06:13 +04:00
e4f1486d7a
Fix Users filtering in Management UI.
...
close #4908
2023-01-26 16:28:47 +01:00
6a08cd014f
Resolve conflict
2023-01-03 07:09:05 -05:00
6e84444059
Test token refresh
...
And enable hard session timeout which was
disabled by mistake when moved credentials
from cookies to local storage
2023-01-03 07:09:04 -05:00
58be01f1d1
Use only token in authorization header to
...
import and export definitions
2023-01-03 07:09:04 -05:00
bf172af236
Do not use cookies to store basic auth
...
Use window.localStorage. If it is disabled
Management UI should stop working rather than
falling back to cookies
2023-01-03 07:09:03 -05:00
c76e589130
Do not use cookies to store basic auth
...
Instead use localStorage
2023-01-03 07:09:03 -05:00
9354397cbf
Support Idp initiated logon in mgt ui with Oauth
...
Configure preferred username from a token
Make client_secret optional
2023-01-03 07:09:00 -05:00
29d3a0e0d4
Escape the user controlled error parameter
2022-12-30 12:48:55 +01:00
a193f4516b
Use more modern method to download definitions
...
Does not require sending auth as a query parameter
Ref: https://vmware.slack.com/archives/C0RDGG81Z/p1669827808015729
2022-12-13 17:11:25 -08:00
6693af78af
Consistently expose default queue functionality in management UI
...
1. Allow to create queues without `x-queue-type` argument, which give
default queue type logic a chance to run. What's more, those queues
definitions will be exported without `x-queue-type`, so they can be
loaded into another vhost and default queue logic will be applied
again.
2. Show default queue type on the vhost page and the vhosts list pages
2022-12-08 17:39:44 +01:00
bbc3c75d05
Add missing renamed oauth.enable -> oauth.enabled
2022-09-02 09:33:11 +01:00
15637ba944
Fix two issues
...
One in the management ui when the user has
not enough priviledges
And a second one with the api/auth endpoint
which was using a worng json attribute
2022-08-30 17:11:16 +01:00
c73f95d3ac
Handle not authorized oauth user
...
When the oauth user has a token without enough
credentials to access the management ui, the
rest request `/api/whoami` returns a 401 with
www-authentication response header which instructs
the browser to show a popup dialog box for basic
auth. With this change, we had to remove the response
header so that we could use the same mechanism we
use to show other oauth errors, i.e. use the login-status
panel instead.
2022-08-30 17:11:16 +01:00
6426d116c0
Handle rabbitmq session timeout
2022-08-30 17:11:16 +01:00
10ccf33d4f
WIP login/logout/token-refresh against keycloak
2022-08-30 17:11:16 +01:00
91ba01e7c5
Set cookies expiry from token expiry claim
2022-08-30 17:11:15 +01:00
6218618fbf
Replace singular with oidc-client-ts library
...
Right now only login and logout flows are supported
To be added refresh token
And test all possible failure scenarios
2022-08-30 17:11:15 +01:00
fb81ae057a
Add option to choose payload encoding when manually publishing a message from the Management UI.
...
The HTTP management API already supports publishing binary messages by
encoding them in base64, but this feature is not exposed to the frontend.
This change adds a new field to the message publishing form that allows
the user to send base64-encoded messages right from the Management UI.
2022-02-14 17:20:27 +01:00
0038573f89
Display stream publishers in queue management page
...
If the queue is a stream. WIP, currently all the stream publishers
are listed, a new publishers per stream endpoint is required.
References #3389
2021-09-09 17:41:38 +02:00
23d7e8114c
Introduce stream management plugin
2020-11-19 14:48:25 +01:00
0686190f15
Stream queue
...
[#171206871 ]
2020-09-30 14:29:01 +01:00
0fc53cd109
prevent sending authorization: null header
2020-07-20 16:17:13 +03:00
c1e023dc7c
Remove direct login route
...
Event though this was an undocumented feature, it was a potential XSS
vector, as captured in #85 . Since OAuth 2 support was introduced in #722 ,
this functionality is less useful and it's time to remove it.
2019-11-08 16:58:39 +00:00
d85fd7fb14
is_classic should return true if x-queue-type not present
...
Fixes #741
2019-10-01 12:51:06 -07:00
d725c366d0
Ensure range type is set for new churn stats
...
Fixes #720
2019-09-12 09:14:49 -07:00
5b20c9a168
Revert change to text on "Add user" page, add an informative popup if a user is modified
2019-08-26 10:22:23 -07:00
f1ade9c9a6
Merge pull request #722 from rabbitmq/mgmt-oauth
...
Management UI can obtain an OAuth 2 token from UAA/CF SSO service
2019-08-02 19:19:18 +03:00
44a87b182c
Wording
2019-08-02 19:12:47 +03:00
ahmet.can.kepenek
Marcial Rosales
Michael Klishin
Diana Parra Corbacho
Diana Parra Corbacho
Duke
Michael Klishin
Iliia Khaprov
Patrik Ragnarsson
Luke Bakken
Alexey Lebedeff
Marco Cameriero
Arnaud Cogoluègnes
dcorbacho
furkhat
Gerhard Lazu
Luke Bakken
Michael Klishin