mirror of
https://github.com/sysadminsmedia/homebox.git
synced 2025-12-21 13:23:14 +01:00
* ent re-generation
* add oidc integration
* document oidc integration
* go fmt
* address backend linter findings
* run prettier on index.vue
* State cookie domain can mismatch when Hostname override is used (breaks CSRF check). Add SameSite.
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* Delete state cookie with matching domain and MaxAge; add SameSite.
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* Fix endpoint path in comments and error to include /api/v1.
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* Also use request context when verifying the ID token.
* Do not return raw auth errors to clients (user-enumeration risk).
* consistently set cookie the same way across function
* remove baseURL after declaration
* only enable OIDC routes if OIDC is enabled
* swagger doc for failure
* Only block when provider=local; move the check after parsing provider
* fix extended session comment
* reduce pii logging
* futher reduce pii logging
* remove unused DiscoveryDocument
* remove unused offline_access from default oidc scopes
* remove offline access from AuthCodeURL
* support host from X-Forwarded-Host
* set sane default claim names if unset
* error strings should not be capitalized
* Revert "run prettier on index.vue"
This reverts commit aa22330a23.
* Add timeout to provider discovery
* Split scopes robustly
* refactor hostname calculation
* address frontend prettier findings
* add property oidc on type APISummary
* LoginOIDC: Normalize inputs, only create if not found
* add oidc email verification
* oidc handleCallback: clear state cookie before each return
* add support for oidc nonce parameter
* Harden first-login race: handle concurrent creates gracefully and fix log key.
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* support email verified claim as bool or string
* fail fast on empty email
* PKCE verifier
* fix: add timing delay to attachment test to resolve CI race condition
The attachment test was failing intermittently in CI due to a race condition
between attachment creation and retrieval. Adding a small 100ms delay after
attachment creation ensures the file system and database operations complete
before the test attempts to verify the attachment exists.
* Revert "fix: add timing delay to attachment test to resolve CI race condition"
This reverts commit 4aa8b2a0d829753e8d2dd1ba76f4b1e04e28c45e.
* oidc error state, use ref
* rename oidc.force to oidc.authRedirect
* remove hardcoded oidc error timeout
* feat: sub/iss based identity matching and userinfo endpoint collection
---------
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Matthew Kilgore <matthew@kilgore.dev>
440 lines
14 KiB
Vue
440 lines
14 KiB
Vue
<script setup lang="ts">
|
|
import { useI18n } from "vue-i18n";
|
|
import { toast } from "@/components/ui/sonner";
|
|
import MdiGithub from "~icons/mdi/github";
|
|
import MdiDiscord from "~icons/mdi/discord";
|
|
import MdiFolder from "~icons/mdi/folder";
|
|
import MdiAccount from "~icons/mdi/account";
|
|
import MdiAccountPlus from "~icons/mdi/account-plus";
|
|
import MdiLogin from "~icons/mdi/login";
|
|
import MdiArrowRight from "~icons/mdi/arrow-right";
|
|
import MdiLock from "~icons/mdi/lock";
|
|
import MdiMastodon from "~icons/mdi/mastodon";
|
|
import { Card, CardContent, CardFooter, CardHeader, CardTitle } from "@/components/ui/card";
|
|
import { Button } from "@/components/ui/button";
|
|
import LanguageSelector from "~/components/App/LanguageSelector.vue";
|
|
import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "@/components/ui/tooltip";
|
|
import AppLogo from "~/components/App/Logo.vue";
|
|
import FormTextField from "~/components/Form/TextField.vue";
|
|
import FormPassword from "~/components/Form/Password.vue";
|
|
import FormCheckbox from "~/components/Form/Checkbox.vue";
|
|
import PasswordScore from "~/components/global/PasswordScore.vue";
|
|
|
|
const { t } = useI18n();
|
|
|
|
useHead({
|
|
title: "HomeBox | " + t("index.title"),
|
|
});
|
|
|
|
definePageMeta({
|
|
layout: "empty",
|
|
middleware: [
|
|
() => {
|
|
const ctx = useAuthContext();
|
|
if (ctx.isAuthorized()) {
|
|
return "/home";
|
|
}
|
|
},
|
|
],
|
|
});
|
|
|
|
const ctx = useAuthContext();
|
|
|
|
const api = usePublicApi();
|
|
// Use ref for OIDC error state management
|
|
const oidcError = ref<string | null>(null);
|
|
const shownErrorMessage = ref(false);
|
|
|
|
const { data: status } = useAsyncData(async () => {
|
|
const { data } = await api.status();
|
|
|
|
if (data.demo) {
|
|
username.value = "demo@example.com";
|
|
password.value = "demo";
|
|
}
|
|
return data;
|
|
});
|
|
|
|
whenever(status, status => {
|
|
if (status?.demo) {
|
|
email.value = "demo@example.com";
|
|
loginPassword.value = "demo";
|
|
}
|
|
|
|
// Auto-redirect to OIDC if autoRedirect is enabled, but not if there's an OIDC initialization error
|
|
if (status?.oidc?.enabled && status?.oidc?.autoRedirect && !oidcError.value && !shownErrorMessage.value) {
|
|
loginWithOIDC();
|
|
}
|
|
});
|
|
|
|
const isEvilAccentTheme = useIsThemeInList([
|
|
"bumblebee",
|
|
"corporate",
|
|
"forest",
|
|
"pastel",
|
|
"wireframe",
|
|
"black",
|
|
"dracula",
|
|
"autumn",
|
|
"acid",
|
|
]);
|
|
const isEvilForegroundTheme = useIsThemeInList(["light", "aqua", "fantasy", "autumn", "night"]);
|
|
const isLofiTheme = useIsThemeInList(["lofi"]);
|
|
|
|
const route = useRoute();
|
|
const router = useRouter();
|
|
|
|
const username = ref("");
|
|
const email = ref("");
|
|
const password = ref("");
|
|
const canRegister = ref(false);
|
|
const remember = ref(false);
|
|
|
|
const groupToken = computed<string>({
|
|
get() {
|
|
const params = route.query.token;
|
|
|
|
if (typeof params === "string") {
|
|
return params;
|
|
}
|
|
|
|
return "";
|
|
},
|
|
set(v) {
|
|
router.push({
|
|
query: {
|
|
token: v,
|
|
},
|
|
});
|
|
},
|
|
});
|
|
|
|
async function registerUser() {
|
|
loading.value = true;
|
|
|
|
const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
|
|
|
|
if (!emailRegex.test(email.value)) {
|
|
toast.error(t("index.toast.invalid_email"));
|
|
loading.value = false;
|
|
return;
|
|
}
|
|
|
|
const { error } = await api.register({
|
|
name: username.value,
|
|
email: email.value,
|
|
password: password.value,
|
|
token: groupToken.value,
|
|
});
|
|
|
|
if (error) {
|
|
toast.error(t("index.toast.problem_registering"), {
|
|
classes: {
|
|
title: "login-error",
|
|
},
|
|
});
|
|
return;
|
|
}
|
|
|
|
toast.success(t("index.toast.user_registered"));
|
|
|
|
loading.value = false;
|
|
registerForm.value = false;
|
|
}
|
|
|
|
onMounted(() => {
|
|
if (groupToken.value !== "") {
|
|
registerForm.value = true;
|
|
}
|
|
|
|
// Handle OIDC error notifications from URL parameters
|
|
const oidcErrorParam = route.query.oidc_error;
|
|
if (typeof oidcErrorParam === "string" && oidcErrorParam.startsWith("oidc_")) {
|
|
// Set the error state to prevent auto-redirect
|
|
oidcError.value = oidcErrorParam;
|
|
shownErrorMessage.value = true;
|
|
|
|
const translationKey = `index.toast.${oidcErrorParam}`;
|
|
let errorMessage = t(translationKey);
|
|
|
|
// If there are additional details, append them
|
|
const details = route.query.details;
|
|
if (typeof details === "string" && details.trim() !== "") {
|
|
errorMessage += `: ${details}`;
|
|
}
|
|
|
|
toast.error(errorMessage);
|
|
|
|
// Clean up the URL by removing the error parameters
|
|
const newQuery = { ...route.query };
|
|
delete newQuery.oidc_error;
|
|
delete newQuery.details;
|
|
router.replace({ query: newQuery });
|
|
|
|
// Clear the error state after showing the message
|
|
oidcError.value = null;
|
|
}
|
|
});
|
|
|
|
const loading = ref(false);
|
|
const loginPassword = ref("");
|
|
const redirectTo = useState("authRedirect");
|
|
|
|
async function login() {
|
|
loading.value = true;
|
|
const { error } = await ctx.login(api, email.value, loginPassword.value, remember.value);
|
|
|
|
if (error) {
|
|
toast.error(t("index.toast.invalid_email_password"), {
|
|
classes: {
|
|
title: "login-error",
|
|
},
|
|
});
|
|
loading.value = false;
|
|
return;
|
|
}
|
|
|
|
toast.success(t("index.toast.login_success"));
|
|
|
|
navigateTo(redirectTo.value || "/home");
|
|
redirectTo.value = null;
|
|
loading.value = false;
|
|
}
|
|
|
|
function loginWithOIDC() {
|
|
window.location.href = "/api/v1/users/login/oidc";
|
|
}
|
|
|
|
const [registerForm, toggleLogin] = useToggle();
|
|
</script>
|
|
|
|
<template>
|
|
<div class="flex min-h-screen flex-col">
|
|
<div class="absolute top-0 -z-10 min-w-full fill-primary">
|
|
<div class="flex min-h-[20vh] flex-col bg-primary" />
|
|
<svg
|
|
class="fill-primary drop-shadow-xl"
|
|
xmlns="http://www.w3.org/2000/svg"
|
|
viewBox="0 0 1440 320"
|
|
preserveAspectRatio="none"
|
|
>
|
|
<path
|
|
fill-opacity="1"
|
|
d="M0,32L80,69.3C160,107,320,181,480,181.3C640,181,800,107,960,117.3C1120,128,1280,224,1360,272L1440,320L1440,0L1360,0C1280,0,1120,0,960,0C800,0,640,0,480,0C320,0,160,0,80,0L0,0Z"
|
|
/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<header
|
|
class="mx-auto p-4 sm:flex sm:items-end sm:p-6 lg:p-14"
|
|
:class="{
|
|
'text-accent': !isEvilAccentTheme,
|
|
'text-white': isLofiTheme,
|
|
}"
|
|
>
|
|
<div class="z-10">
|
|
<h2 class="mt-1 flex text-4xl font-bold tracking-tight sm:text-5xl lg:text-6xl">
|
|
HomeB
|
|
<AppLogo class="-mb-4 w-12" />
|
|
x
|
|
</h2>
|
|
<p
|
|
class="ml-1 text-lg"
|
|
:class="{
|
|
'text-foreground': !isEvilForegroundTheme,
|
|
'text-white': isLofiTheme,
|
|
}"
|
|
>
|
|
{{ $t("index.tagline") }}
|
|
</p>
|
|
</div>
|
|
<TooltipProvider :delay-duration="0">
|
|
<div class="z-10 ml-auto mt-6 flex items-center gap-4 sm:mt-0">
|
|
<Tooltip>
|
|
<TooltipTrigger as-child>
|
|
<a href="https://github.com/sysadminsmedia/homebox" target="_blank" rel="noopener noreferrer">
|
|
<MdiGithub class="size-8" />
|
|
</a>
|
|
</TooltipTrigger>
|
|
<TooltipContent>{{ $t("global.github") }}</TooltipContent>
|
|
</Tooltip>
|
|
|
|
<Tooltip>
|
|
<TooltipTrigger as-child>
|
|
<a href="https://noc.social/@sysadminszone" target="_blank" rel="noopener noreferrer">
|
|
<MdiMastodon class="size-8" />
|
|
</a>
|
|
</TooltipTrigger>
|
|
<TooltipContent>{{ $t("global.follow_dev") }}</TooltipContent>
|
|
</Tooltip>
|
|
|
|
<Tooltip>
|
|
<TooltipTrigger as-child>
|
|
<a href="https://discord.gg/aY4DCkpNA9" target="_blank" rel="noopener noreferrer">
|
|
<MdiDiscord class="size-8" />
|
|
</a>
|
|
</TooltipTrigger>
|
|
<TooltipContent>{{ $t("global.join_discord") }}</TooltipContent>
|
|
</Tooltip>
|
|
|
|
<Tooltip>
|
|
<TooltipTrigger as-child>
|
|
<a href="https://homebox.software/en/" target="_blank" rel="noopener noreferrer">
|
|
<MdiFolder class="size-8" />
|
|
</a>
|
|
</TooltipTrigger>
|
|
<TooltipContent>{{ $t("global.read_docs") }}</TooltipContent>
|
|
</Tooltip>
|
|
|
|
<LanguageSelector class="z-10 text-primary" :expanded="false" />
|
|
</div>
|
|
</TooltipProvider>
|
|
</header>
|
|
<div class="grid min-h-[50vh] p-6 sm:place-items-center">
|
|
<div>
|
|
<Transition name="slide-fade">
|
|
<form v-if="registerForm" @submit.prevent="registerUser">
|
|
<Card class="md:w-[500px]">
|
|
<CardHeader>
|
|
<CardTitle class="flex items-center gap-2">
|
|
<MdiAccount class="mr-1 size-7" />
|
|
{{ $t("index.register") }}
|
|
</CardTitle>
|
|
</CardHeader>
|
|
<CardContent class="flex flex-col gap-2">
|
|
<FormTextField v-model="email" :label="$t('index.set_email')" data-testid="email-input" />
|
|
<FormTextField v-model="username" :label="$t('index.set_name')" data-testid="name-input" />
|
|
<div v-if="!(groupToken == '')" class="pb-1 pt-4 text-center">
|
|
<p>{{ $t("index.joining_group") }}</p>
|
|
<button type="button" class="text-xs underline" @click="groupToken = ''">
|
|
{{ $t("index.dont_join_group") }}
|
|
</button>
|
|
</div>
|
|
<FormPassword v-model="password" :label="$t('index.set_password')" data-testid="password-input" />
|
|
<PasswordScore v-model:valid="canRegister" :password="password" />
|
|
</CardContent>
|
|
<CardFooter>
|
|
<Button
|
|
data-testid="confirm-register-button"
|
|
class="w-full"
|
|
type="submit"
|
|
:class="loading ? 'loading' : ''"
|
|
:disabled="loading || !canRegister"
|
|
>
|
|
{{ $t("index.register") }}
|
|
</Button>
|
|
</CardFooter>
|
|
</Card>
|
|
</form>
|
|
<form v-else @submit.prevent="login">
|
|
<Card class="md:w-[500px]">
|
|
<CardHeader>
|
|
<CardTitle class="flex items-center gap-2">
|
|
<MdiAccount class="mr-1 size-7" />
|
|
{{ $t("index.login") }}
|
|
</CardTitle>
|
|
</CardHeader>
|
|
<CardContent v-if="status?.oidc?.allowLocal !== false" class="flex flex-col gap-2">
|
|
<template v-if="status && status.demo">
|
|
<p class="text-center text-xs italic">
|
|
{{ $t("global.demo_instance") }}
|
|
</p>
|
|
<p class="text-center text-xs">
|
|
<b>{{ $t("global.email") }}</b> demo@example.com
|
|
</p>
|
|
<p class="text-center text-xs">
|
|
<b>{{ $t("global.password") }}</b> demo
|
|
</p>
|
|
</template>
|
|
<FormTextField v-model="email" :label="$t('global.email')" />
|
|
<FormPassword v-model="loginPassword" :label="$t('global.password')" />
|
|
<div class="max-w-[140px]">
|
|
<FormCheckbox v-model="remember" :label="$t('index.remember_me')" />
|
|
</div>
|
|
</CardContent>
|
|
<CardFooter class="flex flex-col gap-2">
|
|
<Button
|
|
v-if="status?.oidc?.allowLocal !== false"
|
|
class="w-full"
|
|
type="submit"
|
|
:class="loading ? 'loading' : ''"
|
|
:disabled="loading"
|
|
>
|
|
{{ $t("index.login") }}
|
|
</Button>
|
|
|
|
<div
|
|
v-if="status?.oidc?.enabled && status?.oidc?.allowLocal !== false"
|
|
class="flex w-full items-center gap-2"
|
|
>
|
|
<hr class="flex-1" />
|
|
<span class="text-xs text-muted-foreground">{{ $t("index.or") }}</span>
|
|
<hr class="flex-1" />
|
|
</div>
|
|
|
|
<Button
|
|
v-if="status?.oidc?.enabled"
|
|
type="button"
|
|
variant="outline"
|
|
class="w-full"
|
|
@click="loginWithOIDC"
|
|
>
|
|
{{ status.oidc.buttonText || "Sign in with OIDC" }}
|
|
</Button>
|
|
</CardFooter>
|
|
</Card>
|
|
</form>
|
|
</Transition>
|
|
<div class="mt-6 text-center">
|
|
<Button
|
|
v-if="status && status.allowRegistration && status?.oidc?.allowLocal !== false"
|
|
class="group"
|
|
variant="link"
|
|
data-testid="register-button"
|
|
@click="() => toggleLogin()"
|
|
>
|
|
<div class="relative mx-2">
|
|
<div
|
|
class="absolute inset-0 flex items-center justify-center transition-transform duration-300 group-hover:rotate-[360deg]"
|
|
>
|
|
<MdiAccountPlus v-if="!registerForm" class="size-5 group-hover:hidden" />
|
|
<MdiLogin v-else class="size-5 group-hover:hidden" />
|
|
<MdiArrowRight class="hidden size-5 group-hover:block" />
|
|
</div>
|
|
</div>
|
|
{{ registerForm ? $t("index.login") : $t("index.register") }}
|
|
</Button>
|
|
<p v-else class="inline-flex items-center gap-2 text-sm italic">
|
|
<MdiLock class="inline-block size-4" />
|
|
{{ $t("index.disabled_registration") }}
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<footer v-if="status" class="bottom-0 mt-auto w-full pb-4 text-center">
|
|
<p class="text-center text-sm">
|
|
{{ $t("global.version", { version: status.build.version }) }} ~
|
|
{{ $t("global.build", { build: status.build.commit }) }}
|
|
</p>
|
|
</footer>
|
|
</div>
|
|
</template>
|
|
|
|
<style lang="css" scoped>
|
|
.slide-fade-enter-active {
|
|
transition: all 0.2s ease-out;
|
|
}
|
|
|
|
.slide-fade-enter-from,
|
|
.slide-fade-leave-to {
|
|
position: absolute;
|
|
transform: translateX(20px);
|
|
opacity: 0;
|
|
}
|
|
|
|
progress[value]::-webkit-progress-value {
|
|
transition: width 0.5s;
|
|
}
|
|
</style>
|