feat: label policy (#1708)

* feat: label policy proto extension * feat: label policy and activate event * feat: label policy asset events * feat: label policy asset commands * feat: add storage key * feat: storage key validation * feat: label policy asset tests * feat: label policy query side * feat: avatar * feat: avatar event * feat: human avatar * feat: avatar read side * feat: font on iam label policy * feat: label policy font * feat: possiblity to create bucket on put file * uplaoder * login policy logo * set bucket prefix * feat: avatar upload * feat: avatar upload * feat: use assets on command side * feat: fix human avatar removed event * feat: remove human avatar * feat: mock asset storage * feat: remove human avatar * fix(operator): add configuration of asset storage to zitadel operator * feat(console): private labeling policy (#1697) * private labeling component, routing, preview * font, colors, upload, i18n * show logo * fix: uniqueness (#1710) * fix: uniqueconstraint to lower * feat: change org * feat: org change test * feat: change org * fix: tests * fix: handle domain claims correctly * feat: update org Co-authored-by: fabi <[email protected]> * fix: handle domain claimed event correctly for service users (#1711) * fix: handle domain claimed event correctly on user view * fix: ignore domain claimed events for email notifications * fix: change org * handle org changed in read models correctly * fix: change org in user grant handler Co-authored-by: fabi <[email protected]> * fix: correct value (#1695) * docs(api): correct link (#1712) * upload service Co-authored-by: Livio Amstutz <[email protected]> Co-authored-by: fabi <[email protected]> Co-authored-by: Florian Forster <[email protected]> * feat: fix tests, * feat: remove assets from label policy * fix npm, set environment * lint ts * remove stylelinting * fix(operator): add mapping for console with changed unit tests * fix(operator): add secrets as env variables to pod * feat: remove human avatar * fix(operator): add secrets as env variables to pod * feat: map label policy * feat: labelpolicy, admin, mgmt, adv settings (#1715) * fetch label policy, mgmt, admin service * feat: advanced beh, links, add, update * lint ts * feat: watermark * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: custom css * css * css * css * css * css * getobject * feat: dynamic handler * feat: varibale css * content info * css overwrite * feat: variablen css * feat: generate css file * feat: dark mode * feat: dark mode * fix logo css * feat: upload logos * dark mode with cookie * feat: handle images in login * avatar css and begin font * feat: avatar * feat: user avatar * caching of static assets in login * add avatar.js to main.html * feat: header dont show logo if no url * feat: label policy colors * feat: mock asset storage * feat: mock asset storage * feat: fix tests * feat: user avatar * feat: header logo * avatar * avatar * make it compatible with go 1.15 * feat: remove unused logos * fix handler * fix: styling error handling * fonts * fix: download func * switch to mux * fix: change upload api to assets * fix build * fix: download avatar * fix: download logos * fix: my avatar * font * fix: remove error msg popup possibility * fix: docs * fix: svalidate colors * rem msg popup from frontend * fix: email with private labeling * fix: tests * fix: email templates * fix: change migration version * fix: fix duplicate imports * fix(console): assets, service url, upload, policy current and preview (#1781) * upload endpoint, layout * fetch current, preview, fix upload * cleanup private labeling * fix linting * begin generated asset handler * generate asset api in dockerfile * features for label policy * features for label policy * features * flag for asset generator * change asset generator flag * fix label policy view in grpc * fix: layout, activate policy (#1786) * theme switcher up on top * change layout * activate policy * feat(console): label policy back color, layout (#1788) * theme switcher up on top * change layout * activate policy * fix overwrite value fc * reset policy, reset service * autosave policy, preview desc, layout impv * layout, i18n * background colors, inject material styles * load images * clean, lint * fix layout * set custom hex * fix content size conversion * remove font format in generated css * fix features for assets * fix(console): label policy colors, image downloads, preview (#1804) * load images * colors, images binding * lint * refresh emitter * lint * propagate font colors * upload error handling * label policy feature check * add blob in csp for console * log * fix: feature edits for label policy, refresh state on upload (#1807) * show error on load image, stop spinner * fix merge * fix migration versions * fix assets * fix csp * fix background color * scss * fix build * lint scss * fix statik for console * fix features check for label policy * cleanup * lint * public links * fix notifications * public links * feat: merge main * feat: fix translation files * fix migration * set api domain * fix logo in email * font face in email * font face in email * validate assets on upload * cleanup * add missing translations * add missing translations Co-authored-by: Livio Amstutz <[email protected]> Co-authored-by: Stefan Benz <[email protected]> Co-authored-by: Max Peintner <[email protected]> Co-authored-by: Florian Forster <[email protected]>
2026-11-06 14:22:15 +00:00 · 2021-06-04 14:53:51 +02:00
parent c0d9d86b09
commit 73d37459bb
257 changed files with 18247 additions and 7177 deletions
@@ -9,119 +9,119 @@ import { EventstoreComponent } from './eventstore/eventstore.component';
 import { IamComponent } from './iam.component';

 const routes: Routes = [
-    {
-        path: 'policies',
-        component: IamComponent,
+  {
+    path: 'policies',
+    component: IamComponent,
+    canActivate: [AuthGuard, RoleGuard],
+    data: {
+      roles: ['iam.read'],
+    },
+  },
+  {
+    path: 'eventstore',
+    component: EventstoreComponent,
+    canActivate: [AuthGuard, RoleGuard],
+    data: {
+      roles: ['iam.read'],
+    },
+  },
+  {
+    path: 'members',
+    loadChildren: () => import('./iam-members/iam-members.module').then(m => m.IamMembersModule),
+    canActivate: [AuthGuard, RoleGuard],
+    data: {
+      roles: ['iam.member.read'],
+    },
+  },
+  {
+    path: 'features',
+    loadChildren: () => import('src/app/modules/features/features.module').then(m => m.FeaturesModule),
+    // canActivate: [RoleGuard],
+    data: {
+      roles: ['iam.features.read'],
+      serviceType: FeatureServiceType.ADMIN,
+    },
+  },
+  {
+    path: 'idp',
+    children: [
+      {
+        path: 'create',
+        loadChildren: () => import('src/app/modules/idp-create/idp-create.module').then(m => m.IdpCreateModule),
        canActivate: [AuthGuard, RoleGuard],
        data: {
-            roles: ['iam.read'],
+          roles: ['iam.idp.write'],
+          serviceType: PolicyComponentServiceType.ADMIN,
        },
-    },
-    {
-        path: 'eventstore',
-        component: EventstoreComponent,
+      },
+      {
+        path: ':id',
+        loadChildren: () => import('src/app/modules/idp/idp.module').then(m => m.IdpModule),
        canActivate: [AuthGuard, RoleGuard],
        data: {
-            roles: ['iam.read'],
+          roles: ['iam.idp.read'],
+          serviceType: PolicyComponentServiceType.ADMIN,
        },
-    },
-    {
-        path: 'members',
-        loadChildren: () => import('./iam-members/iam-members.module').then(m => m.IamMembersModule),
-        canActivate: [AuthGuard, RoleGuard],
+      },
+    ],
+  },
+  {
+    path: 'policy',
+    children: [
+      {
+        path: PolicyComponentType.AGE,
        data: {
-            roles: ['iam.member.read'],
+          serviceType: PolicyComponentServiceType.ADMIN,
        },
-    },
-    {
-        path: 'features',
-        loadChildren: () => import('src/app/modules/features/features.module').then(m => m.FeaturesModule),
-        // canActivate: [RoleGuard],
+        loadChildren: () => import('src/app/modules/policies/password-age-policy/password-age-policy.module')
+          .then(m => m.PasswordAgePolicyModule),
+      },
+      {
+        path: PolicyComponentType.LOCKOUT,
        data: {
-            roles: ['iam.features.read'],
-            serviceType: FeatureServiceType.ADMIN,
+          serviceType: PolicyComponentServiceType.ADMIN,
        },
-    },
-    {
-        path: 'idp',
-        children: [
-            {
-                path: 'create',
-                loadChildren: () => import('src/app/modules/idp-create/idp-create.module').then(m => m.IdpCreateModule),
-                canActivate: [AuthGuard, RoleGuard],
-                data: {
-                    roles: ['iam.idp.write'],
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-            },
-            {
-                path: ':id',
-                loadChildren: () => import('src/app/modules/idp/idp.module').then(m => m.IdpModule),
-                canActivate: [AuthGuard, RoleGuard],
-                data: {
-                    roles: ['iam.idp.read'],
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-            },
-        ],
-    },
-    {
-        path: 'policy',
-        children: [
-            {
-                path: PolicyComponentType.AGE,
-                data: {
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-                loadChildren: () => import('src/app/modules/policies/password-age-policy/password-age-policy.module')
-                    .then(m => m.PasswordAgePolicyModule),
-            },
-            {
-                path: PolicyComponentType.LOCKOUT,
-                data: {
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-                loadChildren: () => import('src/app/modules/policies/password-lockout-policy/password-lockout-policy.module')
-                    .then(m => m.PasswordLockoutPolicyModule),
-            },
-            {
-                path: PolicyComponentType.COMPLEXITY,
-                data: {
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-                loadChildren: () => import('src/app/modules/policies/password-complexity-policy/password-complexity-policy.module')
-                    .then(m => m.PasswordComplexityPolicyModule),
-            },
-            {
-                path: PolicyComponentType.IAM,
-                data: {
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-                loadChildren: () => import('src/app/modules/policies/org-iam-policy/org-iam-policy.module')
-                    .then(m => m.OrgIamPolicyModule),
-            },
-            {
-                path: PolicyComponentType.LOGIN,
-                data: {
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-                loadChildren: () => import('src/app/modules/policies/login-policy/login-policy.module')
-                    .then(m => m.LoginPolicyModule),
-            },
-            {
-                path: PolicyComponentType.LABEL,
-                data: {
-                    serviceType: PolicyComponentServiceType.ADMIN,
-                },
-                loadChildren: () => import('src/app/modules/policies/label-policy/label-policy.module')
-                    .then(m => m.LabelPolicyModule),
-            },
-        ],
-    },
+        loadChildren: () => import('src/app/modules/policies/password-lockout-policy/password-lockout-policy.module')
+          .then(m => m.PasswordLockoutPolicyModule),
+      },
+      {
+        path: PolicyComponentType.PRIVATELABEL,
+        data: {
+          serviceType: PolicyComponentServiceType.ADMIN,
+        },
+        loadChildren: () => import('src/app/modules/policies/private-labeling-policy/private-labeling-policy.module')
+          .then(m => m.PrivateLabelingPolicyModule),
+      },
+      {
+        path: PolicyComponentType.COMPLEXITY,
+        data: {
+          serviceType: PolicyComponentServiceType.ADMIN,
+        },
+        loadChildren: () => import('src/app/modules/policies/password-complexity-policy/password-complexity-policy.module')
+          .then(m => m.PasswordComplexityPolicyModule),
+      },
+      {
+        path: PolicyComponentType.IAM,
+        data: {
+          serviceType: PolicyComponentServiceType.ADMIN,
+        },
+        loadChildren: () => import('src/app/modules/policies/org-iam-policy/org-iam-policy.module')
+          .then(m => m.OrgIamPolicyModule),
+      },
+      {
+        path: PolicyComponentType.LOGIN,
+        data: {
+          serviceType: PolicyComponentServiceType.ADMIN,
+        },
+        loadChildren: () => import('src/app/modules/policies/login-policy/login-policy.module')
+          .then(m => m.LoginPolicyModule),
+      },
+    ],
+  },
 ];

@NgModule({
-    imports: [RouterModule.forChild(routes)],
-    exports: [RouterModule],
+  imports: [RouterModule.forChild(routes)],
+  exports: [RouterModule],
 })
 export class IamRoutingModule { }
@@ -73,7 +73,7 @@ h2 {

 .new-desc {
  font-size: 14px;
-  color: #818a8a;
+  color: var(--grey);
 }

 .custom-domain-deactivated {
@@ -8,108 +8,116 @@ import { OrgCreateComponent } from './org-create/org-create.component';
 import { OrgDetailComponent } from './org-detail/org-detail.component';

 const routes: Routes = [
-    {
+  {
+    path: 'create',
+    component: OrgCreateComponent,
+    canActivate: [RoleGuard],
+    data: {
+      roles: ['(org.create)?(iam.write)?'],
+    },
+    loadChildren: () => import('./org-create/org-create.module').then(m => m.OrgCreateModule),
+  },
+  {
+    path: 'idp',
+    children: [
+      {
        path: 'create',
-        component: OrgCreateComponent,
+        loadChildren: () => import('src/app/modules/idp-create/idp-create.module').then(m => m.IdpCreateModule),
        canActivate: [RoleGuard],
        data: {
-            roles: ['(org.create)?(iam.write)?'],
+          roles: ['org.idp.write'],
+          serviceType: PolicyComponentServiceType.MGMT,
        },
-        loadChildren: () => import('./org-create/org-create.module').then(m => m.OrgCreateModule),
-    },
-    {
-        path: 'idp',
-        children: [
-            {
-                path: 'create',
-                loadChildren: () => import('src/app/modules/idp-create/idp-create.module').then(m => m.IdpCreateModule),
-                canActivate: [RoleGuard],
-                data: {
-                    roles: ['org.idp.write'],
-                    serviceType: PolicyComponentServiceType.MGMT,
-                },
-            },
-            {
-                path: ':id',
-                loadChildren: () => import('src/app/modules/idp/idp.module').then(m => m.IdpModule),
-                canActivate: [RoleGuard],
-                data: {
-                    roles: ['iam.idp.read'],
-                    serviceType: PolicyComponentServiceType.MGMT,
-                },
-            },
-        ],
-    },
-    {
-        path: 'features',
-        loadChildren: () => import('src/app/modules/features/features.module').then(m => m.FeaturesModule),
+      },
+      {
+        path: ':id',
+        loadChildren: () => import('src/app/modules/idp/idp.module').then(m => m.IdpModule),
        canActivate: [RoleGuard],
        data: {
-            roles: ['features.read'],
-            serviceType: FeatureServiceType.MGMT,
+          roles: ['iam.idp.read'],
+          serviceType: PolicyComponentServiceType.MGMT,
        },
+      },
+    ],
+  },
+  {
+    path: 'features',
+    loadChildren: () => import('src/app/modules/features/features.module').then(m => m.FeaturesModule),
+    canActivate: [RoleGuard],
+    data: {
+      roles: ['features.read'],
+      serviceType: FeatureServiceType.MGMT,
    },
-    {
-        path: 'policy',
-        children: [
-            {
-                path: PolicyComponentType.AGE,
-                data: {
-                    serviceType: PolicyComponentServiceType.MGMT,
-                },
-                loadChildren: () => import('src/app/modules/policies/password-age-policy/password-age-policy.module')
-                    .then(m => m.PasswordAgePolicyModule),
-            },
-            {
-                path: PolicyComponentType.LOCKOUT,
-                data: {
-                    serviceType: PolicyComponentServiceType.MGMT,
-                },
-                loadChildren: () => import('src/app/modules/policies/password-lockout-policy/password-lockout-policy.module')
-                    .then(m => m.PasswordLockoutPolicyModule),
-            },
-            {
-                path: PolicyComponentType.COMPLEXITY,
-                data: {
-                    serviceType: PolicyComponentServiceType.MGMT,
-                },
-                loadChildren: () => import('src/app/modules/policies/password-complexity-policy/password-complexity-policy.module')
-                    .then(m => m.PasswordComplexityPolicyModule),
-            },
-            {
-                path: PolicyComponentType.IAM,
-                data: {
-                    serviceType: PolicyComponentServiceType.MGMT,
-                },
-                loadChildren: () => import('src/app/modules/policies/org-iam-policy/org-iam-policy.module')
-                    .then(m => m.OrgIamPolicyModule),
-            },
-            {
-                path: PolicyComponentType.LOGIN,
-                data: {
-                    serviceType: PolicyComponentServiceType.MGMT,
-                },
-                loadChildren: () => import('src/app/modules/policies/login-policy/login-policy.module')
-                    .then(m => m.LoginPolicyModule),
-            },
-        ],
-    },
-    {
-        path: 'members',
-        loadChildren: () => import('./org-members/org-members.module').then(m => m.OrgMembersModule),
-    },
-    {
-        path: '',
-        component: OrgDetailComponent,
-    },
-    {
-        path: 'overview',
-        loadChildren: () => import('./org-list/org-list.module').then(m => m.OrgListModule),
-    },
+  },
+  {
+    path: 'policy',
+    children: [
+      {
+        path: PolicyComponentType.AGE,
+        data: {
+          serviceType: PolicyComponentServiceType.MGMT,
+        },
+        loadChildren: () => import('src/app/modules/policies/password-age-policy/password-age-policy.module')
+          .then(m => m.PasswordAgePolicyModule),
+      },
+      {
+        path: PolicyComponentType.LOCKOUT,
+        data: {
+          serviceType: PolicyComponentServiceType.MGMT,
+        },
+        loadChildren: () => import('src/app/modules/policies/password-lockout-policy/password-lockout-policy.module')
+          .then(m => m.PasswordLockoutPolicyModule),
+      },
+      {
+        path: PolicyComponentType.PRIVATELABEL,
+        data: {
+          serviceType: PolicyComponentServiceType.MGMT,
+        },
+        loadChildren: () => import('src/app/modules/policies/private-labeling-policy/private-labeling-policy.module')
+          .then(m => m.PrivateLabelingPolicyModule),
+      },
+      {
+        path: PolicyComponentType.COMPLEXITY,
+        data: {
+          serviceType: PolicyComponentServiceType.MGMT,
+        },
+        loadChildren: () => import('src/app/modules/policies/password-complexity-policy/password-complexity-policy.module')
+          .then(m => m.PasswordComplexityPolicyModule),
+      },
+      {
+        path: PolicyComponentType.IAM,
+        data: {
+          serviceType: PolicyComponentServiceType.MGMT,
+        },
+        loadChildren: () => import('src/app/modules/policies/org-iam-policy/org-iam-policy.module')
+          .then(m => m.OrgIamPolicyModule),
+      },
+      {
+        path: PolicyComponentType.LOGIN,
+        data: {
+          serviceType: PolicyComponentServiceType.MGMT,
+        },
+        loadChildren: () => import('src/app/modules/policies/login-policy/login-policy.module')
+          .then(m => m.LoginPolicyModule),
+      },
+    ],
+  },
+  {
+    path: 'members',
+    loadChildren: () => import('./org-members/org-members.module').then(m => m.OrgMembersModule),
+  },
+  {
+    path: '',
+    component: OrgDetailComponent,
+  },
+  {
+    path: 'overview',
+    loadChildren: () => import('./org-list/org-list.module').then(m => m.OrgListModule),
+  },
 ];

@NgModule({
-    imports: [RouterModule.forChild(routes)],
-    exports: [RouterModule],
+  imports: [RouterModule.forChild(routes)],
+  exports: [RouterModule],
 })
 export class OrgsRoutingModule { }