• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

mendersoftware / gui / 951400782

pending completion
951400782

Pull #3900

gitlab-ci

web-flow
chore: bump @testing-library/jest-dom from 5.16.5 to 5.17.0

Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 5.16.5 to 5.17.0.
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v5.16.5...v5.17.0)

---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Pull Request #3900: chore: bump @testing-library/jest-dom from 5.16.5 to 5.17.0

4446 of 6414 branches covered (69.32%)

8342 of 10084 relevant lines covered (82.73%)

186.0 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

84.22
/src/js/actions/userActions.js
1
'use strict';
2

3
// Copyright 2019 Northern.tech AS
4
//
5
//    Licensed under the Apache License, Version 2.0 (the "License");
6
//    you may not use this file except in compliance with the License.
7
//    You may obtain a copy of the License at
8
//
9
//        http://www.apache.org/licenses/LICENSE-2.0
10
//
11
//    Unless required by applicable law or agreed to in writing, software
12
//    distributed under the License is distributed on an "AS IS" BASIS,
13
//    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
//    See the License for the specific language governing permissions and
15
//    limitations under the License.
16
import hashString from 'md5';
17
import Cookies from 'universal-cookie';
18

19
import GeneralApi, { apiRoot } from '../api/general-api';
20
import UsersApi from '../api/users-api';
21
import { cleanUp, logout } from '../auth';
22
import * as AppConstants from '../constants/appConstants';
23
import * as OnboardingConstants from '../constants/onboardingConstants';
24
import * as UserConstants from '../constants/userConstants';
25
import { duplicateFilter, extractErrorMessage, isEmpty, preformatWithRequestID } from '../helpers';
26
import { getCurrentUser, getOnboardingState, getUserSettings as getUserSettingsSelector } from '../selectors';
27
import { clearAllRetryTimers } from '../utils/retrytimer';
28
import { commonErrorFallback, commonErrorHandler, initializeAppData, setOfflineThreshold, setSnackbar } from './appActions';
29

30
const cookies = new Cookies();
187✔
31
const {
32
  defaultPermissionSets,
33
  emptyRole,
34
  emptyUiPermissions,
35
  itemUiPermissionsReducer,
36
  OWN_USER_ID,
37
  PermissionTypes,
38
  rolesById: defaultRolesById,
39
  scopedPermissionAreas,
40
  twoFAStates,
41
  uiPermissionsByArea,
42
  uiPermissionsById,
43
  useradmApiUrl,
44
  useradmApiUrlv2
45
} = UserConstants;
187✔
46

47
const handleLoginError = (err, has2FA) => dispatch => {
187✔
48
  const errorText = extractErrorMessage(err);
3✔
49
  const is2FABackend = errorText.includes('2fa');
3✔
50
  if (is2FABackend && !has2FA) {
3!
51
    return Promise.reject({ error: '2fa code missing' });
3✔
52
  }
53
  const twoFAError = is2FABackend ? ' and verification code' : '';
×
54
  const errorMessage = `There was a problem logging in. Please check your email${
×
55
    twoFAError ? ',' : ' and'
×
56
  } password${twoFAError}. If you still have problems, contact an administrator.`;
57
  return Promise.reject(dispatch(setSnackbar(preformatWithRequestID(err.response, errorMessage), null, 'Copy to clipboard')));
×
58
};
59

60
/*
61
  User management
62
*/
63
export const loginUser = (userData, stayLoggedIn) => dispatch =>
187✔
64
  UsersApi.postLogin(`${useradmApiUrl}/auth/login`, { ...userData, no_expiry: stayLoggedIn })
7✔
65
    .catch(err => {
66
      cleanUp();
3✔
67
      return Promise.resolve(dispatch(handleLoginError(err, userData['token2fa'])));
3✔
68
    })
69
    .then(res => {
70
      const token = res.text;
3✔
71
      if (!token) {
3!
72
        return;
×
73
      }
74
      // save token as cookie & set maxAge if noexpiry checkbox not checked
75
      cookies.set('JWT', token, { sameSite: 'strict', secure: true, path: '/', maxAge: stayLoggedIn ? undefined : 900 });
3!
76

77
      return dispatch(getUser(OWN_USER_ID))
3✔
78
        .catch(e => {
79
          cleanUp();
1✔
80
          return Promise.reject(dispatch(setSnackbar(extractErrorMessage(e))));
1✔
81
        })
82
        .then(() => {
83
          window.sessionStorage.removeItem('pendings-redirect');
2✔
84
          if (window.location.pathname !== '/ui/') {
2!
85
            window.location.replace('/ui/');
2✔
86
          }
87
          return Promise.all([dispatch({ type: UserConstants.SUCCESSFULLY_LOGGED_IN, value: token }), dispatch(initializeAppData())]);
2✔
88
        });
89
    });
90

91
export const logoutUser = reason => (dispatch, getState) => {
187✔
92
  if (getState().releases.uploadProgress) {
7✔
93
    return Promise.reject();
1✔
94
  }
95
  let tasks = [dispatch({ type: UserConstants.USER_LOGOUT })];
6✔
96
  return GeneralApi.post(`${useradmApiUrl}/auth/logout`).finally(() => {
6✔
97
    clearAllRetryTimers(setSnackbar);
3✔
98
    if (reason) {
3✔
99
      tasks.push(dispatch(setSnackbar(reason)));
2✔
100
    }
101
    logout();
3✔
102
    return Promise.all(tasks);
3✔
103
  });
104
};
105

106
export const passwordResetStart = email => dispatch =>
187✔
107
  GeneralApi.post(`${useradmApiUrl}/auth/password-reset/start`, { email }).catch(err =>
2✔
108
    commonErrorHandler(err, `The password reset request cannot be processed:`, dispatch, undefined, true)
×
109
  );
110

111
export const passwordResetComplete = (secretHash, newPassword) => dispatch =>
187✔
112
  GeneralApi.post(`${useradmApiUrl}/auth/password-reset/complete`, { secret_hash: secretHash, password: newPassword }).catch((err = {}) => {
2!
113
    const { error, response = {} } = err;
×
114
    let errorMsg = '';
×
115
    if (response.status == 400) {
×
116
      errorMsg = 'the link you are using expired or the request is not valid, please try again.';
×
117
    } else {
118
      errorMsg = error;
×
119
    }
120
    dispatch(setSnackbar('The password reset request cannot be processed: ' + errorMsg));
×
121
    return Promise.reject(err);
×
122
  });
123

124
export const verifyEmailStart = () => (dispatch, getState) =>
187✔
125
  GeneralApi.post(`${useradmApiUrl}/auth/verify-email/start`, { email: getCurrentUser(getState()).email })
1✔
126
    .catch(err => commonErrorHandler(err, 'An error occured starting the email verification process:', dispatch))
×
127
    .finally(() => Promise.resolve(dispatch(getUser(OWN_USER_ID))));
1✔
128

129
export const setAccountActivationCode = code => dispatch => Promise.resolve(dispatch({ type: UserConstants.RECEIVED_ACTIVATION_CODE, code }));
187✔
130

131
export const verifyEmailComplete = secret => dispatch =>
187✔
132
  GeneralApi.post(`${useradmApiUrl}/auth/verify-email/complete`, { secret_hash: secret })
2✔
133
    .catch(err => commonErrorHandler(err, 'An error occured completing the email verification process:', dispatch))
1✔
134
    .finally(() => Promise.resolve(dispatch(getUser(OWN_USER_ID))));
2✔
135

136
export const verify2FA = tfaData => dispatch =>
187✔
137
  UsersApi.putVerifyTFA(`${useradmApiUrl}/2faverify`, tfaData)
2✔
138
    .then(() => Promise.resolve(dispatch(getUser(OWN_USER_ID))))
2✔
139
    .catch(err =>
140
      commonErrorHandler(err, 'An error occured validating the verification code: failed to verify token, please try again.', dispatch, undefined, true)
×
141
    );
142

143
export const getUserList = () => dispatch =>
187✔
144
  GeneralApi.get(`${useradmApiUrl}/users`)
17✔
145
    .then(res => {
146
      const users = res.data.reduce((accu, item) => {
10✔
147
        accu[item.id] = item;
20✔
148
        return accu;
20✔
149
      }, {});
150
      return dispatch({ type: UserConstants.RECEIVED_USER_LIST, users });
10✔
151
    })
152
    .catch(err => commonErrorHandler(err, `Users couldn't be loaded.`, dispatch, commonErrorFallback));
×
153

154
export const getUser = id => dispatch =>
187✔
155
  GeneralApi.get(`${useradmApiUrl}/users/${id}`).then(({ data: user }) =>
13✔
156
    Promise.all([
12✔
157
      dispatch({ type: UserConstants.RECEIVED_USER, user }),
158
      dispatch(setHideAnnouncement(false, user.id)),
159
      dispatch(updateUserColumnSettings(undefined, user.id)),
160
      user
161
    ])
162
  );
163

164
export const initializeSelf = () => dispatch => dispatch(getUser(UserConstants.OWN_USER_ID)).then(() => dispatch(initializeAppData()));
187✔
165

166
export const updateUserColumnSettings = (columns, currentUserId) => (dispatch, getState) => {
187✔
167
  const userId = currentUserId ?? getCurrentUser(getState()).id;
15✔
168
  const storageKey = `${userId}-column-widths`;
15✔
169
  let customColumns = [];
15✔
170
  if (!columns) {
15✔
171
    try {
13✔
172
      customColumns = JSON.parse(window.localStorage.getItem(storageKey)) || customColumns;
13!
173
    } catch {
174
      // most likely the column info doesn't exist yet or is lost - continue
175
    }
176
  } else {
177
    customColumns = columns;
2✔
178
  }
179
  window.localStorage.setItem(storageKey, JSON.stringify(customColumns));
15✔
180
  return Promise.resolve(dispatch({ type: UserConstants.SET_CUSTOM_COLUMNS, value: customColumns }));
15✔
181
};
182

183
const actions = {
187✔
184
  create: {
185
    successMessage: 'The user was created successfully.',
186
    errorMessage: 'creating'
187
  },
188
  edit: {
189
    successMessage: 'The user has been updated.',
190
    errorMessage: 'editing'
191
  },
192
  remove: {
193
    successMessage: 'The user was removed from the system.',
194
    errorMessage: 'removing'
195
  }
196
};
197

198
const userActionErrorHandler = (err, type, dispatch) => commonErrorHandler(err, `There was an error ${actions[type].errorMessage} the user.`, dispatch);
187✔
199

200
export const createUser = userData => dispatch =>
187✔
201
  GeneralApi.post(`${useradmApiUrl}/users`, userData)
2✔
202
    .then(() =>
203
      Promise.all([
2✔
204
        dispatch({ type: UserConstants.CREATED_USER, user: userData }),
205
        dispatch(getUserList()),
206
        dispatch(setSnackbar(actions.create.successMessage))
207
      ])
208
    )
209
    .catch(err => userActionErrorHandler(err, 'create', dispatch));
×
210

211
export const removeUser = userId => dispatch =>
187✔
212
  GeneralApi.delete(`${useradmApiUrl}/users/${userId}`)
2✔
213
    .then(() =>
214
      Promise.all([dispatch({ type: UserConstants.REMOVED_USER, userId }), dispatch(getUserList()), dispatch(setSnackbar(actions.remove.successMessage))])
2✔
215
    )
216
    .catch(err => userActionErrorHandler(err, 'remove', dispatch));
×
217

218
export const editUser = (userId, userData) => (dispatch, getState) => {
187✔
219
  return GeneralApi.put(`${useradmApiUrl}/users/${userId}`, userData).then(() =>
3✔
220
    Promise.all([
3✔
221
      dispatch({ type: UserConstants.UPDATED_USER, userId: userId === UserConstants.OWN_USER_ID ? getState().users.currentUser : userId, user: userData }),
3!
222
      dispatch(setSnackbar(actions.edit.successMessage))
223
    ])
224
  );
225
};
226

227
export const enableUser2fa =
228
  (userId = OWN_USER_ID) =>
187✔
229
  dispatch =>
2✔
230
    GeneralApi.post(`${useradmApiUrl}/users/${userId}/2fa/enable`)
2✔
231
      .catch(err => commonErrorHandler(err, `There was an error enabling Two Factor authentication for the user.`, dispatch))
×
232
      .then(() => Promise.resolve(dispatch(getUser(userId))));
2✔
233

234
export const disableUser2fa =
235
  (userId = OWN_USER_ID) =>
187!
236
  dispatch =>
1✔
237
    GeneralApi.post(`${useradmApiUrl}/users/${userId}/2fa/disable`)
1✔
238
      .catch(err => commonErrorHandler(err, `There was an error disabling Two Factor authentication for the user.`, dispatch))
×
239
      .then(() => Promise.resolve(dispatch(getUser(userId))));
1✔
240

241
/* RBAC related things follow:  */
242

243
const mergePermissions = (existingPermissions = { ...emptyUiPermissions }, addedPermissions) =>
187!
244
  Object.entries(existingPermissions).reduce(
1,638✔
245
    (accu, [key, value]) => {
246
      let values;
247
      if (!accu[key]) {
3,061✔
248
        accu[key] = value;
329✔
249
        return accu;
329✔
250
      }
251
      if (Array.isArray(value)) {
2,732✔
252
        values = [...value, ...accu[key]].filter(duplicateFilter);
1,680✔
253
      } else {
254
        values = mergePermissions(accu[key], { ...value });
1,052✔
255
      }
256
      accu[key] = values;
2,732✔
257
      return accu;
2,732✔
258
    },
259
    { ...addedPermissions }
260
  );
261

262
const mapHttpPermission = permission =>
187✔
263
  Object.entries(uiPermissionsByArea).reduce(
140✔
264
    (accu, [area, definition]) => {
265
      const endpointMatches = definition.endpoints.filter(
700✔
266
        endpoint => endpoint.path.test(permission.value) && (endpoint.types.includes(permission.type) || permission.type === PermissionTypes.Any)
1,820✔
267
      );
268
      if (permission.value === PermissionTypes.Any || (permission.value.includes(apiRoot) && endpointMatches.length)) {
700✔
269
        const endpointUiPermission = endpointMatches.reduce((endpointAccu, endpoint) => [...endpointAccu, ...endpoint.uiPermissions], []);
210✔
270
        const collector = (endpointUiPermission || definition.uiPermissions)
110!
271
          .reduce((permissionsAccu, uiPermission) => {
272
            if (permission.type === PermissionTypes.Any || (!endpointMatches.length && uiPermission.verbs.some(verb => verb === permission.type))) {
230!
273
              permissionsAccu.push(uiPermission.value);
230✔
274
            }
275
            return permissionsAccu;
230✔
276
          }, [])
277
          .filter(duplicateFilter);
278
        if (Array.isArray(accu[area])) {
110✔
279
          accu[area] = [...accu[area], ...collector].filter(duplicateFilter);
60✔
280
        } else {
281
          accu[area] = mergePermissions(accu[area], { [scopedPermissionAreas[area].excessiveAccessSelector]: collector });
50✔
282
        }
283
      }
284
      return accu;
700✔
285
    },
286
    { ...emptyUiPermissions }
287
  );
288

289
const permissionActionTypes = {
187✔
290
  any: mapHttpPermission,
291
  CREATE_DEPLOYMENT: permission =>
292
    permission.type === PermissionTypes.DeviceGroup
10!
293
      ? {
294
          deployments: [uiPermissionsById.deploy.value],
295
          groups: { [permission.value]: [uiPermissionsById.deploy.value] }
296
        }
297
      : {},
298
  http: mapHttpPermission,
299
  REMOTE_TERMINAL: permission =>
300
    permission.type === PermissionTypes.DeviceGroup
×
301
      ? {
302
          groups: { [permission.value]: [uiPermissionsById.connect.value] }
303
        }
304
      : {},
305
  VIEW_DEVICE: permission =>
306
    permission.type === PermissionTypes.DeviceGroup
10!
307
      ? {
308
          groups: { [permission.value]: [uiPermissionsById.read.value] }
309
        }
310
      : {}
311
};
312

313
const combinePermissions = (existingPermissions, additionalPermissions = {}) =>
187!
314
  Object.entries(additionalPermissions).reduce((accu, [name, permissions]) => {
90✔
315
    let maybeExistingPermissions = accu[name] || [];
90✔
316
    accu[name] = [...permissions, ...maybeExistingPermissions].filter(duplicateFilter);
90✔
317
    return accu;
90✔
318
  }, existingPermissions);
319

320
const tryParseCustomPermission = permission => {
187✔
321
  const uiPermissions = permissionActionTypes[permission.action](permission.object);
160✔
322
  const result = mergePermissions({ ...emptyUiPermissions }, uiPermissions);
160✔
323
  return { isCustom: true, permission, result };
160✔
324
};
325

326
const customPermissionHandler = (accu, permission) => {
187✔
327
  let processor = tryParseCustomPermission(permission);
160✔
328
  return {
160✔
329
    ...accu,
330
    isCustom: accu.isCustom || processor.isCustom,
190✔
331
    uiPermissions: mergePermissions(accu.uiPermissions, processor.result)
332
  };
333
};
334

335
const mapPermissionSet = (permissionSetName, names, scope, existingGroupsPermissions = {}) => {
187✔
336
  const permission = Object.values(uiPermissionsById).find(permission => permission.permissionSets[scope] === permissionSetName).value;
280✔
337
  const scopedPermissions = names.reduce((accu, name) => combinePermissions(accu, { [name]: [permission] }), existingGroupsPermissions);
90✔
338
  return Object.entries(scopedPermissions).reduce((accu, [key, permissions]) => ({ ...accu, [key]: deriveImpliedAreaPermissions(scope, permissions) }), {});
90✔
339
};
340

341
const isEmptyPermissionSet = permissionSet =>
187✔
342
  !Object.values(permissionSet).reduce((accu, permissions) => {
150✔
343
    if (Array.isArray(permissions)) {
750✔
344
      return accu || !!permissions.length;
450✔
345
    }
346
    return accu || !isEmpty(permissions);
300✔
347
  }, false);
348

349
const parseRolePermissions = ({ permission_sets_with_scope = [], permissions = [] }, permissionSets) => {
187✔
350
  const preliminaryResult = permission_sets_with_scope.reduce(
70✔
351
    (accu, permissionSet) => {
352
      let processor = permissionSets[permissionSet.name];
190✔
353
      if (!processor) {
190!
354
        return accu;
×
355
      }
356
      const scope = Object.keys(scopedPermissionAreas).find(scope => uiPermissionsByArea[scope].scope === permissionSet.scope?.type);
340✔
357
      if (scope) {
190✔
358
        const result = mapPermissionSet(permissionSet.name, permissionSet.scope.value, scope, accu.uiPermissions[scope]);
40✔
359
        return { ...accu, uiPermissions: { ...accu.uiPermissions, [scope]: result } };
40✔
360
      } else if (isEmptyPermissionSet(processor.result)) {
150!
361
        return processor.permissions.reduce(customPermissionHandler, accu);
×
362
      }
363
      return {
150✔
364
        ...accu,
365
        isCustom: accu.isCustom || processor.isCustom,
300✔
366
        uiPermissions: mergePermissions(accu.uiPermissions, processor.result)
367
      };
368
    },
369
    { isCustom: false, uiPermissions: { ...emptyUiPermissions, groups: {}, releases: {} } }
370
  );
371
  return permissions.reduce(customPermissionHandler, preliminaryResult);
70✔
372
};
373

374
export const normalizeRbacRoles = (roles, rolesById, permissionSets) =>
187✔
375
  roles.reduce(
10✔
376
    (accu, role) => {
377
      let normalizedPermissions;
378
      let isCustom = false;
120✔
379
      if (rolesById[role.name]) {
120✔
380
        normalizedPermissions = {
50✔
381
          ...rolesById[role.name].uiPermissions,
382
          groups: { ...rolesById[role.name].uiPermissions.groups },
383
          releases: { ...rolesById[role.name].uiPermissions.releases }
384
        };
385
      } else {
386
        const result = parseRolePermissions(role, permissionSets);
70✔
387
        normalizedPermissions = result.uiPermissions;
70✔
388
        isCustom = result.isCustom;
70✔
389
      }
390

391
      const roleState = accu[role.name] ?? { ...emptyRole };
120✔
392
      accu[role.name] = {
120✔
393
        ...roleState,
394
        ...role,
395
        description: roleState.description ? roleState.description : role.description,
120✔
396
        editable: !defaultRolesById[role.name] && !isCustom && (typeof roleState.editable !== 'undefined' ? roleState.editable : true),
270!
397
        isCustom,
398
        name: roleState.name ? roleState.name : role.name,
120✔
399
        uiPermissions: normalizedPermissions
400
      };
401
      return accu;
120✔
402
    },
403
    { ...rolesById }
404
  );
405

406
export const mapUserRolesToUiPermissions = (userRoles, roles) =>
187✔
407
  userRoles.reduce(
77✔
408
    (accu, roleId) => {
409
      if (!(roleId && roles[roleId])) {
66!
410
        return accu;
×
411
      }
412
      return mergePermissions(accu, roles[roleId].uiPermissions);
66✔
413
    },
414
    { ...emptyUiPermissions }
415
  );
416

417
export const getPermissionSets = () => (dispatch, getState) =>
187✔
418
  GeneralApi.get(`${useradmApiUrlv2}/permission_sets?per_page=500`)
10✔
419
    .then(({ data }) => {
420
      const permissionSets = data.reduce(
10✔
421
        (accu, permissionSet) => {
422
          const permissionSetState = accu[permissionSet.name] ?? {};
140✔
423
          let permissionSetObject = { ...permissionSetState, ...permissionSet };
140✔
424
          permissionSetObject.result = Object.values(uiPermissionsById).reduce(
140✔
425
            (accu, item) =>
426
              Object.entries(item.permissionSets).reduce((collector, [area, permissionSet]) => {
840✔
427
                if (scopedPermissionAreas[area]) {
1,680✔
428
                  return collector;
1,120✔
429
                }
430
                if (permissionSet === permissionSetObject.name) {
560✔
431
                  collector[area] = [...collector[area], item.value].filter(duplicateFilter);
40✔
432
                }
433
                return collector;
560✔
434
              }, accu),
435
            { ...emptyUiPermissions, ...(permissionSetObject.result ?? {}) }
150✔
436
          );
437
          const scopes = Object.values(scopedPermissionAreas).reduce((accu, { key, scopeType }) => {
140✔
438
            if (permissionSetObject.supported_scope_types?.includes(key) || permissionSetObject.supported_scope_types?.includes(scopeType)) {
280✔
439
              accu.push(key);
50✔
440
            }
441
            return accu;
280✔
442
          }, []);
443
          permissionSetObject = scopes.reduce((accu, scope) => {
140✔
444
            accu.result[scope] = mapPermissionSet(permissionSetObject.name, [scopedPermissionAreas[scope].excessiveAccessSelector], scope);
50✔
445
            return accu;
50✔
446
          }, permissionSetObject);
447
          accu[permissionSet.name] = permissionSetObject;
140✔
448
          return accu;
140✔
449
        },
450
        { ...getState().users.permissionSetsById }
451
      );
452
      return Promise.all([dispatch({ type: UserConstants.RECEIVED_PERMISSION_SETS, value: permissionSets }), permissionSets]);
10✔
453
    })
454
    .catch(() => console.log('Permission set retrieval failed - likely accessing a non-RBAC backend'));
×
455

456
export const getRoles = () => (dispatch, getState) =>
187✔
457
  Promise.all([GeneralApi.get(`${useradmApiUrlv2}/roles?per_page=500`), dispatch(getPermissionSets())])
10✔
458
    .then(results => {
459
      if (!results) {
10!
460
        return Promise.resolve();
×
461
      }
462
      const [{ data: roles }, permissionSetTasks] = results;
10✔
463
      const rolesById = normalizeRbacRoles(roles, getState().users.rolesById, permissionSetTasks[permissionSetTasks.length - 1]);
10✔
464
      return Promise.resolve(dispatch({ type: UserConstants.RECEIVED_ROLES, value: rolesById }));
10✔
465
    })
466
    .catch(() => console.log('Role retrieval failed - likely accessing a non-RBAC backend'));
×
467

468
const deriveImpliedAreaPermissions = (area, areaPermissions) => {
187✔
469
  const highestAreaPermissionLevelSelected = areaPermissions.reduce(
97✔
470
    (highest, current) => (uiPermissionsById[current].permissionLevel > highest ? uiPermissionsById[current].permissionLevel : highest),
103✔
471
    1
472
  );
473
  return uiPermissionsByArea[area].uiPermissions.reduce((permissions, current) => {
97✔
474
    if (current.permissionLevel < highestAreaPermissionLevelSelected || areaPermissions.includes(current.value)) {
476✔
475
      permissions.push(current.value);
166✔
476
    }
477
    return permissions;
476✔
478
  }, []);
479
};
480

481
/**
482
 * transforms [{ group: "groupName",  uiPermissions: ["read", "manage", "connect"] }, ...] to
483
 * [{ name: "ReadDevices", scope: { type: "DeviceGroups", value: ["groupName", ...] } }, ...]
484
 */
485
const transformAreaRoleDataToScopedPermissionsSets = (area, areaPermissions, excessiveAccessSelector) => {
187✔
486
  const permissionSetObject = areaPermissions.reduce((accu, { item, uiPermissions }) => {
4✔
487
    const impliedPermissions = deriveImpliedAreaPermissions(area, uiPermissions);
5✔
488
    accu = impliedPermissions.reduce((itemPermissionAccu, impliedPermission) => {
5✔
489
      const permissionSetState = itemPermissionAccu[uiPermissionsById[impliedPermission].permissionSets[area]] ?? {
6✔
490
        type: uiPermissionsByArea[area].scope,
491
        value: []
492
      };
493
      itemPermissionAccu[uiPermissionsById[impliedPermission].permissionSets[area]] = {
6✔
494
        ...permissionSetState,
495
        value: [...permissionSetState.value, item]
496
      };
497
      return itemPermissionAccu;
6✔
498
    }, accu);
499
    return accu;
5✔
500
  }, {});
501
  return Object.entries(permissionSetObject).map(([name, { value, ...scope }]) => {
4✔
502
    if (value.includes(excessiveAccessSelector)) {
6✔
503
      return { name };
2✔
504
    }
505
    return { name, scope: { ...scope, value: value.filter(duplicateFilter) } };
4✔
506
  });
507
};
508

509
const transformRoleDataToRole = (roleData, roleState = {}) => {
187✔
510
  const role = { ...roleState, ...roleData };
3✔
511
  const { description = '', name, uiPermissions = emptyUiPermissions } = role;
3!
512
  const { maybeUiPermissions, remainderKeys } = Object.entries(emptyUiPermissions).reduce(
3✔
513
    (accu, [key, emptyPermissions]) => {
514
      if (!scopedPermissionAreas[key]) {
15✔
515
        accu.remainderKeys.push(key);
9✔
516
      } else if (uiPermissions[key]) {
6✔
517
        accu.maybeUiPermissions[key] = uiPermissions[key].reduce(itemUiPermissionsReducer, emptyPermissions);
4✔
518
      }
519
      return accu;
15✔
520
    },
521
    { maybeUiPermissions: {}, remainderKeys: [] }
522
  );
523
  const { permissionSetsWithScope, roleUiPermissions } = remainderKeys.reduce(
3✔
524
    (accu, area) => {
525
      const areaPermissions = role.uiPermissions[area];
9✔
526
      if (!Array.isArray(areaPermissions)) {
9✔
527
        return accu;
7✔
528
      }
529
      const impliedPermissions = deriveImpliedAreaPermissions(area, areaPermissions);
2✔
530
      accu.roleUiPermissions[area] = impliedPermissions;
2✔
531
      const mappedPermissions = impliedPermissions.map(uiPermission => ({ name: uiPermissionsById[uiPermission].permissionSets[area] }));
2✔
532
      accu.permissionSetsWithScope.push(...mappedPermissions);
2✔
533
      return accu;
2✔
534
    },
535
    { permissionSetsWithScope: [{ name: defaultPermissionSets.Basic.name }], roleUiPermissions: {} }
536
  );
537
  const scopedPermissionSets = Object.values(scopedPermissionAreas).reduce((accu, { key, excessiveAccessSelector }) => {
3✔
538
    if (!uiPermissions[key]) {
6✔
539
      return accu;
2✔
540
    }
541
    accu.push(...transformAreaRoleDataToScopedPermissionsSets(key, uiPermissions[key], excessiveAccessSelector));
4✔
542
    return accu;
4✔
543
  }, []);
544
  return {
3✔
545
    permissionSetsWithScope: [...permissionSetsWithScope, ...scopedPermissionSets],
546
    role: {
547
      ...emptyRole,
548
      name,
549
      description: description ? description : roleState.description,
3!
550
      uiPermissions: {
551
        ...emptyUiPermissions,
552
        ...roleUiPermissions,
553
        ...maybeUiPermissions
554
      }
555
    }
556
  };
557
};
558

559
export const createRole = roleData => dispatch => {
187✔
560
  const { permissionSetsWithScope, role } = transformRoleDataToRole(roleData);
1✔
561
  return GeneralApi.post(`${useradmApiUrlv2}/roles`, {
1✔
562
    name: role.name,
563
    description: role.description,
564
    permission_sets_with_scope: permissionSetsWithScope
565
  })
566
    .then(() => Promise.all([dispatch({ type: UserConstants.CREATED_ROLE, role, roleId: role.name }), dispatch(getRoles())]))
1✔
567
    .catch(err => commonErrorHandler(err, `There was an error creating the role:`, dispatch));
×
568
};
569

570
export const editRole = roleData => (dispatch, getState) => {
187✔
571
  const { permissionSetsWithScope, role } = transformRoleDataToRole(roleData, getState().users.rolesById[roleData.name]);
2✔
572
  return GeneralApi.put(`${useradmApiUrlv2}/roles/${role.name}`, {
2✔
573
    description: role.description,
574
    name: role.name,
575
    permission_sets_with_scope: permissionSetsWithScope
576
  })
577
    .then(() => Promise.all([dispatch({ type: UserConstants.UPDATED_ROLE, role, roleId: role.name }), dispatch(getRoles())]))
1✔
578
    .catch(err => commonErrorHandler(err, `There was an error editing the role:`, dispatch));
×
579
};
580

581
export const removeRole = roleId => (dispatch, getState) =>
187✔
582
  GeneralApi.delete(`${useradmApiUrlv2}/roles/${roleId}`)
2✔
583
    .then(() => {
584
      // eslint-disable-next-line no-unused-vars
585
      const { [roleId]: toBeRemoved, ...rolesById } = getState().users.rolesById;
2✔
586
      return Promise.all([dispatch({ type: UserConstants.REMOVED_ROLE, value: rolesById }), dispatch(getRoles())]);
2✔
587
    })
588
    .catch(err => commonErrorHandler(err, `There was an error removing the role:`, dispatch));
×
589

590
/*
591
  Global settings
592
*/
593
export const getGlobalSettings = () => dispatch =>
187✔
594
  GeneralApi.get(`${useradmApiUrl}/settings`).then(({ data: settings, headers: { etag } }) => {
14✔
595
    window.sessionStorage.setItem(UserConstants.settingsKeys.initialized, true);
14✔
596
    return Promise.all([dispatch({ type: UserConstants.SET_GLOBAL_SETTINGS, settings }), dispatch(setOfflineThreshold()), etag]);
14✔
597
  });
598

599
export const saveGlobalSettings =
600
  (settings, beOptimistic = false, notify = false) =>
187✔
601
  (dispatch, getState) => {
9✔
602
    if (!window.sessionStorage.getItem(UserConstants.settingsKeys.initialized) && !beOptimistic) {
9!
603
      return;
×
604
    }
605
    return Promise.resolve(dispatch(getGlobalSettings())).then(result => {
9✔
606
      let updatedSettings = { ...getState().users.globalSettings, ...settings };
9✔
607
      if (getCurrentUser(getState()).verified) {
9✔
608
        updatedSettings['2fa'] = twoFAStates.enabled;
8✔
609
      } else {
610
        delete updatedSettings['2fa'];
1✔
611
      }
612
      let tasks = [dispatch({ type: UserConstants.SET_GLOBAL_SETTINGS, settings: updatedSettings })];
9✔
613
      const headers = result[result.length - 1] ? { 'If-Match': result[result.length - 1] } : {};
9!
614
      return GeneralApi.post(`${useradmApiUrl}/settings`, updatedSettings, { headers })
9✔
615
        .then(() => {
616
          if (notify) {
9✔
617
            tasks.push(dispatch(setSnackbar('Settings saved successfully')));
1✔
618
          }
619
          return Promise.all(tasks);
9✔
620
        })
621
        .catch(err => {
622
          if (beOptimistic) {
×
623
            return Promise.all([tasks]);
×
624
          }
625
          console.log(err);
×
626
          return commonErrorHandler(err, `The settings couldn't be saved.`, dispatch);
×
627
        });
628
    });
629
  };
630

631
export const getUserSettings = () => dispatch =>
187✔
632
  GeneralApi.get(`${useradmApiUrl}/settings/me`).then(({ data: settings, headers: { etag } }) => {
60✔
633
    window.sessionStorage.setItem(UserConstants.settingsKeys.initialized, true);
52✔
634
    return Promise.all([dispatch({ type: UserConstants.SET_USER_SETTINGS, settings }), etag]);
52✔
635
  });
636

637
export const saveUserSettings =
638
  (settings = { onboarding: {} }) =>
187!
639
  (dispatch, getState) => {
55✔
640
    if (!getState().users.currentUser) {
55!
641
      return Promise.resolve();
×
642
    }
643
    return Promise.resolve(dispatch(getUserSettings())).then(result => {
55✔
644
      const userSettings = getUserSettingsSelector(getState());
47✔
645
      const updatedSettings = {
47✔
646
        ...userSettings,
647
        ...settings,
648
        onboarding: {
649
          ...userSettings.onboarding,
650
          ...settings.onboarding
651
        }
652
      };
653
      const headers = result[result.length - 1] ? { 'If-Match': result[result.length - 1] } : {};
47!
654
      return Promise.all([
47✔
655
        Promise.resolve(dispatch({ type: UserConstants.SET_USER_SETTINGS, settings: updatedSettings })),
656
        GeneralApi.post(`${useradmApiUrl}/settings/me`, updatedSettings, { headers })
657
      ]).catch(() => dispatch({ type: UserConstants.SET_USER_SETTINGS, settings: userSettings }));
×
658
    });
659
  };
660

661
export const get2FAQRCode = () => dispatch =>
187✔
662
  GeneralApi.get(`${useradmApiUrl}/2faqr`).then(res => dispatch({ type: UserConstants.RECEIVED_QR_CODE, value: res.data.qr }));
2✔
663

664
/*
665
  Onboarding
666
*/
667
export const setShowHelptips = show => (dispatch, getState) => {
187✔
668
  let tasks = [dispatch({ type: UserConstants.SET_SHOW_HELP, show }), dispatch(saveUserSettings({ showHelptips: show }))];
2✔
669
  if (!getOnboardingState(getState()).complete) {
2!
670
    tasks.push(dispatch({ type: OnboardingConstants.SET_SHOW_ONBOARDING_HELP, show }));
2✔
671
  }
672
  return Promise.all(tasks);
2✔
673
};
674

675
export const toggleHelptips = () => (dispatch, getState) => {
187✔
676
  const showHelptips = getUserSettingsSelector(getState()).showHelptips;
2✔
677
  return Promise.resolve(dispatch(setShowHelptips(!showHelptips)));
2✔
678
};
679

680
export const setShowConnectingDialog = show => dispatch => dispatch({ type: UserConstants.SET_SHOW_CONNECT_DEVICE, show: Boolean(show) });
187✔
681

682
export const setHideAnnouncement = (shouldHide, userId) => (dispatch, getState) => {
187✔
683
  const currentUserId = userId || getCurrentUser(getState()).id;
13✔
684
  const hash = getState().app.hostedAnnouncement ? hashString(getState().app.hostedAnnouncement) : '';
13✔
685
  const announceCookie = cookies.get(`${currentUserId}${hash}`);
13✔
686
  if (shouldHide || (hash.length && typeof announceCookie !== 'undefined')) {
13!
687
    cookies.set(`${currentUserId}${hash}`, true, { maxAge: 604800 });
1✔
688
    return Promise.resolve(dispatch({ type: AppConstants.SET_ANNOUNCEMENT, announcement: undefined }));
1✔
689
  }
690
  return Promise.resolve();
12✔
691
};
692

693
export const getTokens = () => (dispatch, getState) =>
187✔
694
  GeneralApi.get(`${useradmApiUrl}/settings/tokens`).then(({ data: tokens }) => {
14✔
695
    const user = getCurrentUser(getState());
13✔
696
    const updatedUser = {
13✔
697
      ...user,
698
      tokens
699
    };
700
    return Promise.resolve(dispatch({ type: UserConstants.UPDATED_USER, user: updatedUser, userId: user.id }));
13✔
701
  });
702

703
const ONE_YEAR = 31536000;
187✔
704

705
export const generateToken =
706
  ({ expiresIn = ONE_YEAR, name }) =>
187✔
707
  dispatch =>
5✔
708
    GeneralApi.post(`${useradmApiUrl}/settings/tokens`, { name, expires_in: expiresIn })
5✔
709
      .then(({ data: token }) => Promise.all([dispatch(getTokens()), token]))
5✔
710
      .catch(err => commonErrorHandler(err, 'There was an error creating the token:', dispatch));
×
711

712
export const revokeToken = token => dispatch =>
187✔
713
  GeneralApi.delete(`${useradmApiUrl}/settings/tokens/${token.id}`).then(() => Promise.resolve(dispatch(getTokens())));
1✔
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc