wmantly
aa3b3ed515
The web management UI was a bespoke minimal theme with LDAP-bind login.
Rebuild it to match the SSO Manager and Proxy — same stack, same look/feel,
same auth model. The SSH bridge, audit, metrics, and access logic are
unchanged; this is purely the web layer.
Frontend (mirrors proxy/sso):
- Express + EJS with the shared top.ejs/bottom.ejs shell, Bootstrap 5,
jQuery, jq-repeat, FontAwesome, Socket.IO, and the shared app-base.js /
val.js client framework (copied verbatim). Vendor libs served from
node_modules via /static-modules; app assets via /static.
- Dashboard / Sessions / Audit pages render in the common look/feel,
loading data through the authenticated /api/* endpoints.
Auth (mirrors proxy):
- OIDC against the SSO (utils/oidc.js + routes/auth.js + models/oidc_state)
plus a local anti-lockout admin (models/user_redis.js, bootstrapped from
auth.adminUsers[0] / auth.localAdminPass). AuthToken sessions carry the
group snapshot; middleware gates the data API on adminGroups or the local
admin. New config: oidc{} + auth.adminUsers/localAdminPass.
- /api/user/me drives the client login state; "Log in with SSO" hidden when
oidc.enabled is false.
Verified end to end: local admin login -> token -> /api/user/me isAdmin,
metrics/sessions/audit 200 with token / 401 without / 401 bad password;
static + page shells serve; 26 tests green.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
65 lines
2.2 KiB
Plaintext
65 lines
2.2 KiB
Plaintext
<%- include('top') %>
|
||
<script type="text/javascript">app.auth.forceLogin();</script>
|
||
|
||
<div class="row g-3 mb-4">
|
||
<div class="col-6 col-md-3">
|
||
<div class="card shadow-sm text-center"><div class="card-body">
|
||
<div class="display-6" id="stat-active">–</div>
|
||
<div class="text-muted small text-uppercase">Active sessions</div>
|
||
</div></div>
|
||
</div>
|
||
<div class="col-6 col-md-3">
|
||
<div class="card shadow-sm text-center"><div class="card-body">
|
||
<div class="display-6" id="stat-total">–</div>
|
||
<div class="text-muted small text-uppercase">Total connections</div>
|
||
</div></div>
|
||
</div>
|
||
<div class="col-6 col-md-3">
|
||
<div class="card shadow-sm text-center"><div class="card-body">
|
||
<div class="display-6 text-danger" id="stat-fail">–</div>
|
||
<div class="text-muted small text-uppercase">Failed</div>
|
||
</div></div>
|
||
</div>
|
||
<div class="col-6 col-md-3">
|
||
<div class="card shadow-sm text-center"><div class="card-body">
|
||
<div class="display-6" id="stat-users">–</div>
|
||
<div class="text-muted small text-uppercase">Users seen</div>
|
||
</div></div>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="row g-3">
|
||
<div class="col-md-6">
|
||
<div class="card shadow-sm"><div class="card-header"><i class="fa-solid fa-server me-1"></i> Top hosts</div>
|
||
<table class="table table-sm mb-0"><tbody id="top-hosts"></tbody></table>
|
||
</div>
|
||
</div>
|
||
<div class="col-md-6">
|
||
<div class="card shadow-sm"><div class="card-header"><i class="fa-solid fa-user me-1"></i> Top users</div>
|
||
<table class="table table-sm mb-0"><tbody id="top-users"></tbody></table>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<script type="text/javascript">
|
||
function rows(sel, list){
|
||
var $b = $(sel).empty();
|
||
if(!list || !list.length){ $b.append('<tr><td class="text-muted">No data.</td></tr>'); return; }
|
||
list.forEach(function(x){
|
||
$b.append('<tr><td>' + app.jump.esc(x.name) + '</td><td class="text-end">' + x.count + '</td></tr>');
|
||
});
|
||
}
|
||
$(document).ready(function(){
|
||
app.jump.metrics(function(error, data){
|
||
if(error || !data) return;
|
||
$('#stat-active').text(data.active);
|
||
$('#stat-total').text(data.total);
|
||
$('#stat-fail').text(data.fail);
|
||
$('#stat-users').text((data.topUsers || []).length);
|
||
rows('#top-hosts', data.topHosts);
|
||
rows('#top-users', data.topUsers);
|
||
});
|
||
});
|
||
</script>
|
||
<%- include('bottom') %>
|