wmantly
aa3b3ed515
The web management UI was a bespoke minimal theme with LDAP-bind login.
Rebuild it to match the SSO Manager and Proxy — same stack, same look/feel,
same auth model. The SSH bridge, audit, metrics, and access logic are
unchanged; this is purely the web layer.
Frontend (mirrors proxy/sso):
- Express + EJS with the shared top.ejs/bottom.ejs shell, Bootstrap 5,
jQuery, jq-repeat, FontAwesome, Socket.IO, and the shared app-base.js /
val.js client framework (copied verbatim). Vendor libs served from
node_modules via /static-modules; app assets via /static.
- Dashboard / Sessions / Audit pages render in the common look/feel,
loading data through the authenticated /api/* endpoints.
Auth (mirrors proxy):
- OIDC against the SSO (utils/oidc.js + routes/auth.js + models/oidc_state)
plus a local anti-lockout admin (models/user_redis.js, bootstrapped from
auth.adminUsers[0] / auth.localAdminPass). AuthToken sessions carry the
group snapshot; middleware gates the data API on adminGroups or the local
admin. New config: oidc{} + auth.adminUsers/localAdminPass.
- /api/user/me drives the client login state; "Log in with SSO" hidden when
oidc.enabled is false.
Verified end to end: local admin login -> token -> /api/user/me isAdmin,
metrics/sessions/audit 200 with token / 401 without / 401 bad password;
static + page shells serve; 26 tests green.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
63 lines
2.9 KiB
Plaintext
63 lines
2.9 KiB
Plaintext
<%- include('top') %>
|
|
<script type="text/javascript">app.auth.forceLogin();</script>
|
|
|
|
<div class="card shadow-sm">
|
|
<div class="card-header"><i class="fa-solid fa-clipboard-list me-1"></i> Audit log</div>
|
|
<div class="card-body pb-0">
|
|
<form class="row g-2 mb-2" onsubmit="applyFilters(); return false;">
|
|
<div class="col-auto"><input class="form-control form-control-sm" id="f-uid" placeholder="user"></div>
|
|
<div class="col-auto"><input class="form-control form-control-sm" id="f-target" placeholder="target"></div>
|
|
<div class="col-auto">
|
|
<select class="form-select form-select-sm" id="f-status">
|
|
<option value="">any result</option>
|
|
<option value="success">success</option>
|
|
<option value="fail">fail</option>
|
|
</select>
|
|
</div>
|
|
<div class="col-auto"><button class="btn btn-sm btn-primary">Filter</button></div>
|
|
</form>
|
|
</div>
|
|
<div class="table-responsive">
|
|
<table class="table table-striped table-sm mb-0">
|
|
<thead><tr><th>Time</th><th>User</th><th>Method</th><th>Mode</th><th>Target</th><th>Chan</th><th>Client</th><th>Result</th><th class="text-end">Bytes</th></tr></thead>
|
|
<tbody id="audit-body"></tbody>
|
|
</table>
|
|
</div>
|
|
<div class="card-footer d-flex justify-content-between align-items-center">
|
|
<button class="btn btn-sm btn-outline-secondary" id="prev" onclick="changePage(-1)">← prev</button>
|
|
<span class="text-muted small" id="page-info"></span>
|
|
<button class="btn btn-sm btn-outline-secondary" id="next" onclick="changePage(1)">next →</button>
|
|
</div>
|
|
</div>
|
|
|
|
<script type="text/javascript">
|
|
var page = 0;
|
|
function filters(){ return {page: page, uid: $('#f-uid').val(), target: $('#f-target').val(), status: $('#f-status').val()}; }
|
|
function applyFilters(){ page = 0; load(); }
|
|
function changePage(d){ page = Math.max(0, page + d); load(); }
|
|
function load(){
|
|
app.jump.audit(filters(), function(error, data){
|
|
var $b = $('#audit-body').empty();
|
|
if(error || !data || !data.results.length){ $b.append('<tr><td colspan="9" class="text-muted">No events.</td></tr>'); }
|
|
else data.results.forEach(function(e){
|
|
$b.append('<tr class="' + (e.success ? '' : 'table-danger') + '">' +
|
|
'<td>' + app.jump.fmtTime(e.ts) + '</td>' +
|
|
'<td>' + app.jump.esc(e.uid) + '</td>' +
|
|
'<td>' + app.jump.esc(e.authMethod) + '</td>' +
|
|
'<td>' + app.jump.esc(e.mode) + '</td>' +
|
|
'<td>' + app.jump.esc(e.targetSlug || e.targetAddr || '—') + '</td>' +
|
|
'<td>' + app.jump.esc(e.channel || '—') + '</td>' +
|
|
'<td>' + app.jump.esc(e.clientIp) + '</td>' +
|
|
'<td>' + app.jump.result(e) + '</td>' +
|
|
'<td class="text-end">' + ((e.bytesIn + e.bytesOut) || 0) + '</td></tr>');
|
|
});
|
|
var total = data ? data.total : 0, size = data ? data.pageSize : 50;
|
|
$('#page-info').text(total + ' events · page ' + (page + 1));
|
|
$('#prev').prop('disabled', page === 0);
|
|
$('#next').prop('disabled', (page + 1) * size >= total);
|
|
});
|
|
}
|
|
$(document).ready(load);
|
|
</script>
|
|
<%- include('bottom') %>
|