diff --git a/README.md b/README.md index aeae03870..c2d045c08 100644 --- a/README.md +++ b/README.md @@ -55,6 +55,13 @@ running the tests: STACK=test python -m unittest discover ``` +running the tests with coverage (requires coverage module): + +``` +STACK=test coverage run -m unittest discover +coverage html +``` + generating screenshots: ``` diff --git a/app.py b/app.py index 3870e9b93..488c108d4 100644 --- a/app.py +++ b/app.py @@ -8,7 +8,7 @@ from flask.ext.login import LoginManager from flask.ext.mail import Mail from config import (ProductionConfig, DebugConfig, LocalHostedConfig, - TestConfig) + TestConfig, StagingConfig) from util import analytics @@ -20,6 +20,9 @@ stack = os.environ.get('STACK', '').strip().lower() if stack.startswith('prod'): logger.info('Running with production config.') config = ProductionConfig() +elif stack.startswith('staging'): + logger.info('Running with staging config on production data.') + config = StagingConfig() elif stack.startswith('localhosted'): logger.info('Running with debug config on production data.') config = LocalHostedConfig() @@ -32,7 +35,7 @@ else: app.config.from_object(config) -Principal(app, use_sessions=True) +Principal(app, use_sessions=False) login_manager = LoginManager() login_manager.init_app(app) diff --git a/application.py b/application.py index 2d6660866..91062d4f6 100644 --- a/application.py +++ b/application.py @@ -9,22 +9,24 @@ application.config['LOGGING_CONFIG']() # Turn off debug logging for boto logging.getLogger('boto').setLevel(logging.CRITICAL) -from endpoints.api import api +from endpoints.api import api_bp from endpoints.index import index from endpoints.web import web from endpoints.tags import tags from endpoints.registry import registry from endpoints.webhooks import webhooks from endpoints.realtime import realtime +from endpoints.callbacks import callback logger = logging.getLogger(__name__) application.register_blueprint(web) +application.register_blueprint(callback, url_prefix='/oauth2') application.register_blueprint(index, url_prefix='/v1') application.register_blueprint(tags, url_prefix='/v1') application.register_blueprint(registry, url_prefix='/v1') -application.register_blueprint(api, url_prefix='/api') +application.register_blueprint(api_bp, url_prefix='/api') application.register_blueprint(webhooks, url_prefix='/webhooks') application.register_blueprint(realtime, url_prefix='/realtime') @@ -37,9 +39,5 @@ def close_db(exc): application.teardown_request(close_db) - -# Remove this for prod config -application.debug = True - if __name__ == '__main__': application.run(port=5000, debug=True, threaded=True, host='0.0.0.0') diff --git a/auth/auth.py b/auth/auth.py index fb08b9184..ac78102a4 100644 --- a/auth/auth.py +++ b/auth/auth.py @@ -1,20 +1,69 @@ import logging from functools import wraps -from flask import request, _request_ctx_stack, session +from datetime import datetime +from flask import request, session from flask.ext.principal import identity_changed, Identity +from flask.ext.login import current_user from base64 import b64decode +import scopes + from data import model +from data.model import oauth from app import app from permissions import QuayDeferredPermissionUser - -from util.names import parse_namespace_repository +from auth_context import (set_authenticated_user, set_validated_token, + set_authenticated_user_deferred, set_validated_oauth_token) from util.http import abort logger = logging.getLogger(__name__) + +def _load_user_from_cookie(): + if not current_user.is_anonymous(): + logger.debug('Loading user from cookie: %s', current_user.get_id()) + set_authenticated_user_deferred(current_user.get_id()) + loaded = QuayDeferredPermissionUser(current_user.get_id(), 'username', {scopes.DIRECT_LOGIN}) + identity_changed.send(app, identity=loaded) + return current_user.db_user() + return None + + +def _validate_and_apply_oauth_token(token): + validated = oauth.validate_access_token(token) + if not validated: + logger.warning('OAuth access token could not be validated: %s', token) + authenticate_header = { + 'WWW-Authenticate': ('Bearer error="invalid_token", ' + 'error_description="The access token is invalid"'), + } + abort(401, message='OAuth access token could not be validated: %(token)s', + issue='invalid-oauth-token', token=token, headers=authenticate_header) + elif validated.expires_at <= datetime.now(): + logger.info('OAuth access with an expired token: %s', token) + authenticate_header = { + 'WWW-Authenticate': ('Bearer error="invalid_token", ' + 'error_description="The access token expired"'), + } + abort(401, message='OAuth access token has expired: %(token)s', + issue='invalid-oauth-token', token=token, headers=authenticate_header) + + # We have a valid token + scope_set = scopes.scopes_from_scope_string(validated.scope) + logger.debug('Successfully validated oauth access token: %s with scope: %s', token, + scope_set) + + set_authenticated_user(validated.authorized_user) + set_validated_oauth_token(validated) + + new_identity = QuayDeferredPermissionUser(validated.authorized_user.username, 'username', + scope_set) + identity_changed.send(app, identity=new_identity) + + + def process_basic_auth(auth): normalized = [part.strip() for part in auth.split(' ') if part] if normalized[0].lower() != 'basic' or len(normalized) != 2: @@ -31,8 +80,7 @@ def process_basic_auth(auth): try: token = model.load_token_data(credentials[1]) logger.debug('Successfully validated token: %s' % credentials[1]) - ctx = _request_ctx_stack.top - ctx.validated_token = token + set_validated_token(token) identity_changed.send(app, identity=Identity(token.code, 'token')) return @@ -40,16 +88,21 @@ def process_basic_auth(auth): except model.DataModelException: logger.debug('Invalid token: %s' % credentials[1]) + elif credentials[0] == '$oauthtoken': + oauth_token = credentials[1] + _validate_and_apply_oauth_token(oauth_token) + elif '+' in credentials[0]: logger.debug('Trying robot auth with credentials %s' % str(credentials)) # Use as robot auth try: robot = model.verify_robot(credentials[0], credentials[1]) logger.debug('Successfully validated robot: %s' % credentials[0]) - ctx = _request_ctx_stack.top - ctx.authenticated_user = robot + set_authenticated_user(robot) - identity_changed.send(app, identity=Identity(robot.username, 'username')) + deferred_robot = QuayDeferredPermissionUser(robot.username, 'username', + {scopes.DIRECT_LOGIN}) + identity_changed.send(app, identity=deferred_robot) return except model.InvalidRobotException: logger.debug('Invalid robot or password for robot: %s' % credentials[0]) @@ -59,11 +112,10 @@ def process_basic_auth(auth): if authenticated: logger.debug('Successfully validated user: %s' % authenticated.username) - ctx = _request_ctx_stack.top - ctx.authenticated_user = authenticated + set_authenticated_user(authenticated) - new_identity = QuayDeferredPermissionUser(authenticated.username, - 'username') + new_identity = QuayDeferredPermissionUser(authenticated.username, 'username', + {scopes.DIRECT_LOGIN}) identity_changed.send(app, identity=new_identity) return @@ -81,31 +133,49 @@ def process_token(auth): if len(token_details) != 1: logger.warning('Invalid token format: %s' % auth) - abort(401, message="Invalid token format: %(auth)", issue='invalid-auth-token', auth=auth) + abort(401, message='Invalid token format: %(auth)s', issue='invalid-auth-token', auth=auth) token_vals = {val[0]: val[1] for val in (detail.split('=') for detail in token_details)} if 'signature' not in token_vals: logger.warning('Token does not contain signature: %s' % auth) - abort(401, message="Token does not contain a valid signature: %(auth)", issue='invalid-auth-token', auth=auth) + abort(401, message='Token does not contain a valid signature: %(auth)s', + issue='invalid-auth-token', auth=auth) try: token_data = model.load_token_data(token_vals['signature']) except model.InvalidTokenException: - logger.warning('Token could not be validated: %s' % - token_vals['signature']) - abort(401, message="Token could not be validated: %(auth)", issue='invalid-auth-token', auth=auth) + logger.warning('Token could not be validated: %s', token_vals['signature']) + abort(401, message='Token could not be validated: %(auth)s', issue='invalid-auth-token', + auth=auth) - logger.debug('Successfully validated token: %s' % token_data.code) - ctx = _request_ctx_stack.top - ctx.validated_token = token_data + logger.debug('Successfully validated token: %s', token_data.code) + set_validated_token(token_data) identity_changed.send(app, identity=Identity(token_data.code, 'token')) -def process_auth(f): - @wraps(f) +def process_oauth(func): + @wraps(func) + def wrapper(*args, **kwargs): + auth = request.headers.get('authorization', '') + if auth: + normalized = [part.strip() for part in auth.split(' ') if part] + if normalized[0].lower() != 'bearer' or len(normalized) != 2: + logger.debug('Invalid oauth bearer token format.') + return + + token = normalized[1] + _validate_and_apply_oauth_token(token) + elif _load_user_from_cookie() is None: + logger.debug('No auth header or login cookie.') + return func(*args, **kwargs) + return wrapper + + +def process_auth(func): + @wraps(func) def wrapper(*args, **kwargs): auth = request.headers.get('authorization', '') @@ -116,17 +186,26 @@ def process_auth(f): else: logger.debug('No auth header.') - return f(*args, **kwargs) + return func(*args, **kwargs) return wrapper -def extract_namespace_repo_from_session(f): - @wraps(f) +def require_session_login(func): + @wraps(func) + def wrapper(*args, **kwargs): + loaded = _load_user_from_cookie() + if loaded is None or loaded.organization: + abort(401, message='Method requires login and no valid login could be loaded.') + return func(*args, **kwargs) + return wrapper + + +def extract_namespace_repo_from_session(func): + @wraps(func) def wrapper(*args, **kwargs): if 'namespace' not in session or 'repository' not in session: - logger.error('Unable to load namespace or repository from session: %s' % - session) - abort(400, message="Missing namespace in request") + logger.error('Unable to load namespace or repository from session: %s' % session) + abort(400, message='Missing namespace in request') - return f(session['namespace'], session['repository'], *args, **kwargs) + return func(session['namespace'], session['repository'], *args, **kwargs) return wrapper diff --git a/auth/auth_context.py b/auth/auth_context.py index 09ff8d759..2aad14685 100644 --- a/auth/auth_context.py +++ b/auth/auth_context.py @@ -1,7 +1,53 @@ +import logging + from flask import _request_ctx_stack +from data import model + + +logger = logging.getLogger(__name__) + def get_authenticated_user(): - return getattr(_request_ctx_stack.top, 'authenticated_user', None) + user = getattr(_request_ctx_stack.top, 'authenticated_user', None) + if not user: + username = getattr(_request_ctx_stack.top, 'authenticated_username', None) + if not username: + logger.debug('No authenticated user or deferred username.') + return None + + logger.debug('Loading deferred authenticated user.') + loaded = model.get_user(username) + set_authenticated_user(loaded) + user = loaded + + logger.debug('Returning authenticated user: %s', user.username) + return user + + +def set_authenticated_user(user_or_robot): + ctx = _request_ctx_stack.top + ctx.authenticated_user = user_or_robot + + +def set_authenticated_user_deferred(username_or_robotname): + logger.debug('Deferring loading of authenticated user object: %s', username_or_robotname) + ctx = _request_ctx_stack.top + ctx.authenticated_username = username_or_robotname + + +def get_validated_oauth_token(): + return getattr(_request_ctx_stack.top, 'validated_oauth_token', None) + + +def set_validated_oauth_token(token): + ctx = _request_ctx_stack.top + ctx.validated_oauth_token = token + def get_validated_token(): return getattr(_request_ctx_stack.top, 'validated_token', None) + + +def set_validated_token(token): + ctx = _request_ctx_stack.top + ctx.validated_token = token diff --git a/auth/permissions.py b/auth/permissions.py index 0e1655337..59af7be42 100644 --- a/auth/permissions.py +++ b/auth/permissions.py @@ -1,10 +1,11 @@ import logging -from flask.ext.principal import (identity_loaded, UserNeed, Permission, - Identity, identity_changed) -from collections import namedtuple +from flask.ext.principal import identity_loaded, Permission, Identity, identity_changed +from collections import namedtuple, defaultdict from functools import partial +import scopes + from data import model from app import app @@ -14,44 +15,117 @@ logger = logging.getLogger(__name__) _ResourceNeed = namedtuple('resource', ['type', 'namespace', 'name', 'role']) _RepositoryNeed = partial(_ResourceNeed, 'repository') -_OrganizationNeed = namedtuple('organization', ['orgname', 'role']) -_TeamNeed = namedtuple('orgteam', ['orgname', 'teamname', 'role']) +_NamespaceWideNeed = namedtuple('namespacewide', ['type', 'namespace', 'role']) +_OrganizationNeed = partial(_NamespaceWideNeed, 'organization') +_OrganizationRepoNeed = partial(_NamespaceWideNeed, 'organizationrepo') +_TeamTypeNeed = namedtuple('teamwideneed', ['type', 'orgname', 'teamname', 'role']) +_TeamNeed = partial(_TeamTypeNeed, 'orgteam') +_UserTypeNeed = namedtuple('userspecificneed', ['type', 'username', 'role']) +_UserNeed = partial(_UserTypeNeed, 'user') + + +REPO_ROLES = [None, 'read', 'write', 'admin'] +TEAM_ROLES = [None, 'member', 'creator', 'admin'] +USER_ROLES = [None, 'read', 'admin'] + +TEAM_REPO_ROLES = { + 'admin': 'admin', + 'creator': 'read', + 'member': 'read', +} + +SCOPE_MAX_REPO_ROLES = defaultdict(lambda: None) +SCOPE_MAX_REPO_ROLES.update({ + scopes.READ_REPO: 'read', + scopes.WRITE_REPO: 'write', + scopes.ADMIN_REPO: 'admin', + scopes.DIRECT_LOGIN: 'admin', +}) + +SCOPE_MAX_TEAM_ROLES = defaultdict(lambda: None) +SCOPE_MAX_TEAM_ROLES.update({ + scopes.CREATE_REPO: 'creator', + scopes.DIRECT_LOGIN: 'admin', +}) + +SCOPE_MAX_USER_ROLES = defaultdict(lambda: None) +SCOPE_MAX_USER_ROLES.update({ + scopes.READ_USER: 'read', + scopes.DIRECT_LOGIN: 'admin', +}) class QuayDeferredPermissionUser(Identity): - def __init__(self, id, auth_type=None): + def __init__(self, id, auth_type, scopes): super(QuayDeferredPermissionUser, self).__init__(id, auth_type) self._permissions_loaded = False + self._scope_set = scopes + + def _translate_role_for_scopes(self, cardinality, max_roles, role): + if self._scope_set is None: + return role + + max_for_scopes = max({cardinality.index(max_roles[scope]) for scope in self._scope_set}) + + if max_for_scopes < cardinality.index(role): + logger.debug('Translated permission %s -> %s', role, cardinality[max_for_scopes]) + return cardinality[max_for_scopes] + else: + return role + + def _team_role_for_scopes(self, role): + return self._translate_role_for_scopes(TEAM_ROLES, SCOPE_MAX_TEAM_ROLES, role) + + def _repo_role_for_scopes(self, role): + return self._translate_role_for_scopes(REPO_ROLES, SCOPE_MAX_REPO_ROLES, role) + + def _user_role_for_scopes(self, role): + return self._translate_role_for_scopes(USER_ROLES, SCOPE_MAX_USER_ROLES, role) def can(self, permission): if not self._permissions_loaded: logger.debug('Loading user permissions after deferring.') user_object = model.get_user(self.id) - # Add the user specific permissions - user_grant = UserNeed(user_object.username) + # Add the user specific permissions, only for non-oauth permission + user_grant = _UserNeed(user_object.username, self._user_role_for_scopes('admin')) + logger.debug('User permission: {0}'.format(user_grant)) self.provides.add(user_grant) # Every user is the admin of their own 'org' - user_namespace = _OrganizationNeed(user_object.username, 'admin') + user_namespace = _OrganizationNeed(user_object.username, self._team_role_for_scopes('admin')) + logger.debug('User namespace permission: {0}'.format(user_namespace)) self.provides.add(user_namespace) + # Org repo roles can differ for scopes + user_repos = _OrganizationRepoNeed(user_object.username, self._repo_role_for_scopes('admin')) + logger.debug('User namespace repo permission: {0}'.format(user_repos)) + self.provides.add(user_repos) + # Add repository permissions for perm in model.get_all_user_permissions(user_object): - grant = _RepositoryNeed(perm.repository.namespace, - perm.repository.name, perm.role.name) - logger.debug('User added permission: {0}'.format(grant)) - self.provides.add(grant) + repo_grant = _RepositoryNeed(perm.repository.namespace, perm.repository.name, + self._repo_role_for_scopes(perm.role.name)) + logger.debug('User added permission: {0}'.format(repo_grant)) + self.provides.add(repo_grant) # Add namespace permissions derived for team in model.get_org_wide_permissions(user_object): - grant = _OrganizationNeed(team.organization.username, team.role.name) - logger.debug('Organization team added permission: {0}'.format(grant)) - self.provides.add(grant) + team_org_grant = _OrganizationNeed(team.organization.username, + self._team_role_for_scopes(team.role.name)) + logger.debug('Organization team added permission: {0}'.format(team_org_grant)) + self.provides.add(team_org_grant) + + + team_repo_role = TEAM_REPO_ROLES[team.role.name] + org_repo_grant = _OrganizationRepoNeed(team.organization.username, + self._repo_role_for_scopes(team_repo_role)) + logger.debug('Organization team added repo permission: {0}'.format(org_repo_grant)) + self.provides.add(org_repo_grant) team_grant = _TeamNeed(team.organization.username, team.name, - team.role.name) + self._team_role_for_scopes(team.role.name)) logger.debug('Team added permission: {0}'.format(team_grant)) self.provides.add(team_grant) @@ -64,9 +138,10 @@ class ModifyRepositoryPermission(Permission): def __init__(self, namespace, name): admin_need = _RepositoryNeed(namespace, name, 'admin') write_need = _RepositoryNeed(namespace, name, 'write') - org_admin_need = _OrganizationNeed(namespace, 'admin') - super(ModifyRepositoryPermission, self).__init__(admin_need, write_need, - org_admin_need) + org_admin_need = _OrganizationRepoNeed(namespace, 'admin') + org_write_need = _OrganizationRepoNeed(namespace, 'write') + super(ModifyRepositoryPermission, self).__init__(admin_need, write_need, org_admin_need, + org_write_need) class ReadRepositoryPermission(Permission): @@ -74,15 +149,17 @@ class ReadRepositoryPermission(Permission): admin_need = _RepositoryNeed(namespace, name, 'admin') write_need = _RepositoryNeed(namespace, name, 'write') read_need = _RepositoryNeed(namespace, name, 'read') - org_admin_need = _OrganizationNeed(namespace, 'admin') - super(ReadRepositoryPermission, self).__init__(admin_need, write_need, - read_need, org_admin_need) + org_admin_need = _OrganizationRepoNeed(namespace, 'admin') + org_write_need = _OrganizationRepoNeed(namespace, 'write') + org_read_need = _OrganizationRepoNeed(namespace, 'read') + super(ReadRepositoryPermission, self).__init__(admin_need, write_need, read_need, + org_admin_need, org_read_need, org_write_need) class AdministerRepositoryPermission(Permission): def __init__(self, namespace, name): admin_need = _RepositoryNeed(namespace, name, 'admin') - org_admin_need = _OrganizationNeed(namespace, 'admin') + org_admin_need = _OrganizationRepoNeed(namespace, 'admin') super(AdministerRepositoryPermission, self).__init__(admin_need, org_admin_need) @@ -95,10 +172,17 @@ class CreateRepositoryPermission(Permission): create_repo_org) -class UserPermission(Permission): +class UserAdminPermission(Permission): def __init__(self, username): - user_need = UserNeed(username) - super(UserPermission, self).__init__(user_need) + user_admin = _UserNeed(username, 'admin') + super(UserAdminPermission, self).__init__(user_admin) + + +class UserReadPermission(Permission): + def __init__(self, username): + user_admin = _UserNeed(username, 'admin') + user_read = _UserNeed(username, 'read') + super(UserReadPermission, self).__init__(user_read, user_admin) class AdministerOrganizationPermission(Permission): @@ -132,14 +216,15 @@ def on_identity_loaded(sender, identity): # We have verified an identity, load in all of the permissions if isinstance(identity, QuayDeferredPermissionUser): - logger.debug('Deferring permissions for user: %s' % identity.id) + logger.debug('Deferring permissions for user: %s', identity.id) elif identity.auth_type == 'username': - switch_to_deferred = QuayDeferredPermissionUser(identity.id, 'username') + logger.debug('Switching username permission to deferred object: %s', identity.id) + switch_to_deferred = QuayDeferredPermissionUser(identity.id, 'username', {scopes.DIRECT_LOGIN}) identity_changed.send(app, identity=switch_to_deferred) elif identity.auth_type == 'token': - logger.debug('Loading permissions for token: %s' % identity.id) + logger.debug('Loading permissions for token: %s', identity.id) token_data = model.load_token_data(identity.id) repo_grant = _RepositoryNeed(token_data.repository.namespace, @@ -149,4 +234,4 @@ def on_identity_loaded(sender, identity): identity.provides.add(repo_grant) else: - logger.error('Unknown identity auth type: %s' % identity.auth_type) + logger.error('Unknown identity auth type: %s', identity.auth_type) diff --git a/auth/scopes.py b/auth/scopes.py new file mode 100644 index 000000000..aad91182b --- /dev/null +++ b/auth/scopes.py @@ -0,0 +1,92 @@ +from collections import namedtuple + + +Scope = namedtuple('scope', ['scope', 'icon', 'title', 'description']) + + +READ_REPO = Scope(scope='repo:read', + icon='fa-hdd-o', + title='View all visible repositories', + description=('This application will be able to view and pull all repositories ' + 'visible to the granting user or robot account')) + +WRITE_REPO = Scope(scope='repo:write', + icon='fa-hdd-o', + title='Read/Write to any accessible repositories', + description=('This application will be able to view, push and pull to all ' + 'repositories to which the granting user or robot account has ' + 'write access')) + +ADMIN_REPO = Scope(scope='repo:admin', + icon='fa-hdd-o', + title='Administer Repositories', + description=('This application will have administrator access to all ' + 'repositories to which the granting user or robot account has ' + 'access')) + +CREATE_REPO = Scope(scope='repo:create', + icon='fa-plus', + title='Create Repositories', + description=('This application will be able to create repositories in to any ' + 'namespaces that the granting user or robot account is allowed to ' + 'create repositories')) + +READ_USER = Scope(scope= 'user:read', + icon='fa-user', + title='Read User Information', + description=('This application will be able to read user information such as ' + 'username and email address.')) + + +DIRECT_LOGIN = Scope(scope='direct_user_login', + icon='fa-exclamation-triangle', + title='Full Access', + description=('This scope should not be available to OAuth applications. ' + 'Never approve a request for this scope!')) + + +ALL_SCOPES = {scope.scope:scope for scope in (READ_REPO, WRITE_REPO, ADMIN_REPO, CREATE_REPO, + READ_USER)} + +IMPLIED_SCOPES = { + ADMIN_REPO: {ADMIN_REPO, WRITE_REPO, READ_REPO}, + WRITE_REPO: {WRITE_REPO, READ_REPO}, + READ_REPO: {READ_REPO}, + CREATE_REPO: {CREATE_REPO}, + READ_USER: {READ_USER}, + None: set(), +} + + +def scopes_from_scope_string(scopes): + return {ALL_SCOPES.get(scope, None) for scope in scopes.split(',')} + + +def validate_scope_string(scopes): + decoded = scopes_from_scope_string(scopes) + return None not in decoded and len(decoded) > 0 + + +def is_subset_string(full_string, expected_string): + """ Returns true if the scopes found in expected_string are also found + in full_string. + """ + full_scopes = scopes_from_scope_string(full_string) + full_implied_scopes = set.union(*[IMPLIED_SCOPES[scope] for scope in full_scopes]) + expected_scopes = scopes_from_scope_string(expected_string) + return expected_scopes.issubset(full_implied_scopes) + + +def get_scope_information(scopes_string): + scopes = scopes_from_scope_string(scopes_string) + scope_info = [] + for scope in scopes: + if scope: + scope_info.append({ + 'title': scope.title, + 'scope': scope.scope, + 'description': scope.description, + 'icon': scope.icon, + }) + + return scope_info diff --git a/buildstatus/building.svg b/buildstatus/building.svg new file mode 100644 index 000000000..6a2e8fc8c --- /dev/null +++ b/buildstatus/building.svg @@ -0,0 +1 @@ +Docker ImageDocker Imagebuildingbuilding \ No newline at end of file diff --git a/buildstatus/failed.svg b/buildstatus/failed.svg new file mode 100644 index 000000000..1a3d79f75 --- /dev/null +++ b/buildstatus/failed.svg @@ -0,0 +1 @@ +Docker ImageDocker Imagebuild failedbuild failed \ No newline at end of file diff --git a/buildstatus/none.svg b/buildstatus/none.svg new file mode 100644 index 000000000..0f513d9cd --- /dev/null +++ b/buildstatus/none.svg @@ -0,0 +1 @@ +Docker ImageDocker Imagenonenone \ No newline at end of file diff --git a/buildstatus/ready.svg b/buildstatus/ready.svg new file mode 100644 index 000000000..4ea770599 --- /dev/null +++ b/buildstatus/ready.svg @@ -0,0 +1 @@ +Docker ImageDocker Imagereadyready \ No newline at end of file diff --git a/config.py b/config.py index 073dde963..2428a9a1e 100644 --- a/config.py +++ b/config.py @@ -1,5 +1,7 @@ import logging import logstash_formatter +import requests +import os.path from peewee import MySQLDatabase, SqliteDatabase from storage.s3 import S3Storage @@ -18,6 +20,7 @@ class FlaskConfig(object): SECRET_KEY = '1cb18882-6d12-440d-a4cc-b7430fb5f884' JSONIFY_PRETTYPRINT_REGULAR = False + class FlaskProdConfig(FlaskConfig): SESSION_COOKIE_SECURE = True @@ -44,7 +47,8 @@ class RealTransactions(object): class SQLiteDB(RealTransactions): DB_NAME = 'test/data/test.db' DB_CONNECTION_ARGS = { - 'threadlocals': True + 'threadlocals': True, + 'autorollback': True, } DB_DRIVER = SqliteDatabase @@ -76,6 +80,7 @@ class RDSMySQL(RealTransactions): 'user': 'fluxmonkey', 'passwd': '8eifM#uoZ85xqC^', 'threadlocals': True, + 'autorollback': True, } DB_DRIVER = MySQLDatabase @@ -154,6 +159,11 @@ class GitHubTestConfig(object): GITHUB_USER_EMAILS = GITHUB_USER_URL + '/emails' +class GitHubStagingConfig(GitHubTestConfig): + GITHUB_CLIENT_ID = '4886304accbc444f0471' + GITHUB_CLIENT_SECRET = '27d8a5d99af02dda821eb10883bcb2e785e70a62' + + class GitHubProdConfig(GitHubTestConfig): GITHUB_CLIENT_ID = '5a8c08b06c48d89d4d1e' GITHUB_CLIENT_SECRET = 'f89d8bb28ea3bd4e1c68808500d185a816be53b1' @@ -185,36 +195,79 @@ def logs_init_builder(level=logging.DEBUG, return init_logs +def build_requests_session(): + sess = requests.Session() + adapter = requests.adapters.HTTPAdapter(pool_connections=100, + pool_maxsize=100) + sess.mount('http://', adapter) + sess.mount('https://', adapter) + return sess + + +class LargePoolHttpClient(object): + HTTPCLIENT = build_requests_session() + + +class StatusTagConfig(object): + STATUS_TAGS = {} + + for tag_name in ['building', 'failed', 'none', 'ready']: + tag_path = os.path.join('buildstatus', tag_name + '.svg') + with open(tag_path) as tag_svg: + STATUS_TAGS[tag_name] = tag_svg.read() + + class TestConfig(FlaskConfig, FakeStorage, EphemeralDB, FakeUserfiles, FakeAnalytics, StripeTestConfig, RedisBuildLogs, - UserEventConfig): + UserEventConfig, LargePoolHttpClient, StatusTagConfig): LOGGING_CONFIG = logs_init_builder(logging.WARN) POPULATE_DB_TEST_DATA = True TESTING = True + URL_SCHEME = 'http' + URL_HOST = 'localhost:5000' class DebugConfig(FlaskConfig, MailConfig, LocalStorage, SQLiteDB, StripeTestConfig, MixpanelTestConfig, GitHubTestConfig, DigitalOceanConfig, BuildNodeConfig, S3Userfiles, - UserEventConfig, TestBuildLogs): + UserEventConfig, TestBuildLogs, LargePoolHttpClient, + StatusTagConfig): LOGGING_CONFIG = logs_init_builder(formatter=logging.Formatter()) SEND_FILE_MAX_AGE_DEFAULT = 0 POPULATE_DB_TEST_DATA = True + URL_SCHEME = 'http' + URL_HOST = 'ci.devtable.com:5000' class LocalHostedConfig(FlaskConfig, MailConfig, S3Storage, RDSMySQL, StripeLiveConfig, MixpanelTestConfig, GitHubProdConfig, DigitalOceanConfig, BuildNodeConfig, S3Userfiles, RedisBuildLogs, - UserEventConfig): - LOGGING_CONFIG = logs_init_builder() + UserEventConfig, LargePoolHttpClient, + StatusTagConfig): + LOGGING_CONFIG = logs_init_builder(formatter=logging.Formatter()) SEND_FILE_MAX_AGE_DEFAULT = 0 + URL_SCHEME = 'http' + URL_HOST = 'ci.devtable.com:5000' + + +class StagingConfig(FlaskProdConfig, MailConfig, S3Storage, RDSMySQL, + StripeLiveConfig, MixpanelProdConfig, + GitHubStagingConfig, DigitalOceanConfig, BuildNodeConfig, + S3Userfiles, RedisBuildLogs, UserEventConfig, + LargePoolHttpClient, StatusTagConfig): + LOGGING_CONFIG = logs_init_builder(formatter=logging.Formatter()) + SEND_FILE_MAX_AGE_DEFAULT = 0 + URL_SCHEME = 'https' + URL_HOST = 'staging.quay.io' class ProductionConfig(FlaskProdConfig, MailConfig, S3Storage, RDSMySQL, StripeLiveConfig, MixpanelProdConfig, GitHubProdConfig, DigitalOceanConfig, BuildNodeConfig, - S3Userfiles, RedisBuildLogs, UserEventConfig): - + S3Userfiles, RedisBuildLogs, UserEventConfig, + LargePoolHttpClient, StatusTagConfig): LOGGING_CONFIG = logs_init_builder() SEND_FILE_MAX_AGE_DEFAULT = 0 + URL_SCHEME = 'https' + URL_HOST = 'quay.io' diff --git a/data/buildlogs.py b/data/buildlogs.py index bb96ac7dc..817fbc2b4 100644 --- a/data/buildlogs.py +++ b/data/buildlogs.py @@ -40,9 +40,12 @@ class BuildLogs(object): Returns a tuple of the current length of the list and an iterable of the requested log entries. """ - llen = self._redis.llen(self._logs_key(build_id)) - log_entries = self._redis.lrange(self._logs_key(build_id), start_index, -1) - return (llen, (json.loads(entry) for entry in log_entries)) + try: + llen = self._redis.llen(self._logs_key(build_id)) + log_entries = self._redis.lrange(self._logs_key(build_id), start_index, -1) + return (llen, (json.loads(entry) for entry in log_entries)) + except redis.ConnectionError: + return (0, []) @staticmethod def _status_key(build_id): @@ -59,5 +62,9 @@ class BuildLogs(object): """ Loads the status information for the specified build id. """ - fetched = self._redis.get(self._status_key(build_id)) + try: + fetched = self._redis.get(self._status_key(build_id)) + except redis.ConnectionError: + return None + return json.loads(fetched) if fetched else None diff --git a/data/database.py b/data/database.py index 9c5f48efd..d99f56c77 100644 --- a/data/database.py +++ b/data/database.py @@ -101,6 +101,7 @@ class Repository(BaseModel): name = CharField() visibility = ForeignKeyField(Visibility) description = TextField(null=True) + badge_token = CharField(default=uuid_generator) class Meta: database = db @@ -163,6 +164,20 @@ class AccessToken(BaseModel): temporary = BooleanField(default=True) +class BuildTriggerService(BaseModel): + name = CharField(index=True) + + +class RepositoryBuildTrigger(BaseModel): + uuid = CharField(default=uuid_generator) + service = ForeignKeyField(BuildTriggerService, index=True) + repository = ForeignKeyField(Repository, index=True) + connected_user = ForeignKeyField(User) + auth_token = CharField() + config = TextField(default='{}') + write_token = ForeignKeyField(AccessToken, null=True) + + class EmailConfirmation(BaseModel): code = CharField(default=random_string_generator(), unique=True, index=True) user = ForeignKeyField(User) @@ -223,11 +238,12 @@ class RepositoryBuild(BaseModel): uuid = CharField(default=uuid_generator, index=True) repository = ForeignKeyField(Repository, index=True) access_token = ForeignKeyField(AccessToken) - resource_key = CharField() - tag = CharField() + resource_key = CharField(index=True) + job_config = TextField() phase = CharField(default='waiting') started = DateTimeField(default=datetime.now) display_name = CharField() + trigger = ForeignKeyField(RepositoryBuildTrigger, null=True, index=True) class QueueItem(BaseModel): @@ -255,8 +271,52 @@ class LogEntry(BaseModel): metadata_json = TextField(default='{}') -all_models = [User, Repository, Image, AccessToken, Role, - RepositoryPermission, Visibility, RepositoryTag, - EmailConfirmation, FederatedLogin, LoginService, QueueItem, - RepositoryBuild, Team, TeamMember, TeamRole, Webhook, - LogEntryKind, LogEntry, PermissionPrototype, ImageStorage] +class OAuthApplication(BaseModel): + client_id = CharField(index=True, default=random_string_generator(length=20)) + client_secret = CharField(default=random_string_generator(length=40)) + redirect_uri = CharField() + application_uri = CharField() + organization = ForeignKeyField(User) + + name = CharField() + description = TextField(default='') + gravatar_email = CharField(null=True) + + +class OAuthAuthorizationCode(BaseModel): + application = ForeignKeyField(OAuthApplication) + code = CharField(index=True) + scope = CharField() + data = TextField() # Context for the code, such as the user + + +class OAuthAccessToken(BaseModel): + uuid = CharField(default=uuid_generator, index=True) + application = ForeignKeyField(OAuthApplication) + authorized_user = ForeignKeyField(User) + scope = CharField() + access_token = CharField(index=True) + token_type = CharField(default='Bearer') + expires_at = DateTimeField() + refresh_token = CharField(index=True, null=True) + data = TextField() # This is context for which this token was generated, such as the user + + +class NotificationKind(BaseModel): + name = CharField(index=True) + + +class Notification(BaseModel): + uuid = CharField(default=uuid_generator, index=True) + kind = ForeignKeyField(NotificationKind, index=True) + target = ForeignKeyField(User, index=True) + metadata_json = TextField(default='{}') + created = DateTimeField(default=datetime.now, index=True) + + +all_models = [User, Repository, Image, AccessToken, Role, RepositoryPermission, Visibility, + RepositoryTag, EmailConfirmation, FederatedLogin, LoginService, QueueItem, + RepositoryBuild, Team, TeamMember, TeamRole, Webhook, LogEntryKind, LogEntry, + PermissionPrototype, ImageStorage, BuildTriggerService, RepositoryBuildTrigger, + OAuthApplication, OAuthAuthorizationCode, OAuthAccessToken, NotificationKind, + Notification] diff --git a/data/model/__init__.py b/data/model/__init__.py new file mode 100644 index 000000000..8258c9c94 --- /dev/null +++ b/data/model/__init__.py @@ -0,0 +1 @@ +from data.model.legacy import * \ No newline at end of file diff --git a/data/model.py b/data/model/legacy.py similarity index 87% rename from data/model.py rename to data/model/legacy.py index 876f4e0a5..00d9c9b26 100644 --- a/data/model.py +++ b/data/model/legacy.py @@ -2,11 +2,10 @@ import bcrypt import logging import datetime import dateutil.parser -import operator import json -from database import * +from data.database import * from util.validation import * from util.names import format_robot_username @@ -55,7 +54,11 @@ class InvalidWebhookException(DataModelException): pass -def create_user(username, password, email): +class InvalidBuildTriggerException(DataModelException): + pass + + +def create_user(username, password, email, is_organization=False): if not validate_email(email): raise InvalidEmailAddressException('Invalid email address: %s' % email) if not validate_username(username): @@ -89,6 +92,12 @@ def create_user(username, password, email): new_user = User.create(username=username, password_hash=pw_hash, email=email) + + # If the password is None, then add a notification for the user to change + # their password ASAP. + if not pw_hash and not is_organization: + create_notification('password_required', new_user) + return new_user except Exception as ex: raise DataModelException(ex.message) @@ -97,7 +106,7 @@ def create_user(username, password, email): def create_organization(name, email, creating_user): try: # Create the org - new_org = create_user(name, None, email) + new_org = create_user(name, None, email, is_organization=True) new_org.organization = True new_org.save() @@ -546,9 +555,9 @@ def get_visible_repository_count(username=None, include_public=True, def get_visible_repositories(username=None, include_public=True, page=None, limit=None, sort=False, namespace=None): - query = _visible_repository_query(username=username, - include_public=include_public, page=page, - limit=limit, namespace=namespace) + query = _visible_repository_query(username=username, include_public=include_public, page=page, + limit=limit, namespace=namespace, + select_models=[Repository, Visibility]) if sort: query = query.order_by(Repository.description.desc()) @@ -560,9 +569,9 @@ def get_visible_repositories(username=None, include_public=True, page=None, def _visible_repository_query(username=None, include_public=True, limit=None, - page=None, namespace=None): + page=None, namespace=None, select_models=[]): query = (Repository - .select() # Note: We need to leave this blank for the get_count case. Otherwise, MySQL/RDS complains. + .select(*select_models) # Note: We need to leave this blank for the get_count case. Otherwise, MySQL/RDS complains. .distinct() .join(Visibility) .switch(Repository) @@ -658,6 +667,9 @@ def change_password(user, new_password): user.password_hash = pw_hash user.save() + # Remove any password required notifications for the user. + delete_notifications_by_kind(user, 'password_required') + def change_invoice_email(user, invoice_email): user.invoice_email = invoice_email @@ -771,14 +783,15 @@ def get_all_repo_users(namespace_name, repository_name): def get_repository_for_resource(resource_key): - joined = Repository.select().join(RepositoryBuild) - query = joined.where(RepositoryBuild.resource_key == resource_key).limit(1) - result = list(query) - if not result: + try: + return (Repository + .select() + .join(RepositoryBuild) + .where(RepositoryBuild.resource_key == resource_key) + .get()) + except Repository.DoesNotExist: return None - return result[0] - def get_repository(namespace_name, repository_name): try: @@ -1284,7 +1297,10 @@ def set_user_repo_permission(username, namespace_name, repository_name, if username == namespace_name: raise DataModelException('Namespace owner must always be admin.') - user = User.get(User.username == username) + try: + user = User.get(User.username == username) + except User.DoesNotExist: + raise InvalidUsernameException('Invalid username: %s' % username) return __set_entity_repo_permission(user, 'user', namespace_name, repository_name, role_name) @@ -1327,8 +1343,9 @@ def create_access_token(repository, role): return new_token -def create_delegate_token(namespace_name, repository_name, friendly_name): - read_only = Role.get(name='read') +def create_delegate_token(namespace_name, repository_name, friendly_name, + role='read'): + read_only = Role.get(name=role) repo = Repository.get(Repository.name == repository_name, Repository.namespace == namespace_name) new_token = AccessToken.create(repository=repo, role=read_only, @@ -1388,35 +1405,49 @@ def load_token_data(code): def get_repository_build(namespace_name, repository_name, build_uuid): - joined = RepositoryBuild.select().join(Repository) - fetched = list(joined.where(Repository.name == repository_name, - Repository.namespace == namespace_name, - RepositoryBuild.uuid == build_uuid)) + try: + query = list_repository_builds(namespace_name, repository_name, 1) + return query.where(RepositoryBuild.uuid == build_uuid).get() - if not fetched: + except RepositoryBuild.DoesNotExist: msg = 'Unable to locate a build by id: %s' % build_uuid raise InvalidRepositoryBuildException(msg) - return fetched[0] - -def list_repository_builds(namespace_name, repository_name, +def list_repository_builds(namespace_name, repository_name, limit, include_inactive=True): - joined = RepositoryBuild.select().join(Repository) - filtered = joined + query = (RepositoryBuild + .select(RepositoryBuild, RepositoryBuildTrigger, BuildTriggerService) + .join(Repository) + .switch(RepositoryBuild) + .join(RepositoryBuildTrigger, JOIN_LEFT_OUTER) + .join(BuildTriggerService, JOIN_LEFT_OUTER) + .where(Repository.name == repository_name, + Repository.namespace == namespace_name) + .order_by(RepositoryBuild.started.desc()) + .limit(limit)) + if not include_inactive: - filtered = filtered.where(RepositoryBuild.phase != 'error', - RepositoryBuild.phase != 'complete') - fetched = list(filtered.where(Repository.name == repository_name, - Repository.namespace == namespace_name)) - return fetched + query = query.where(RepositoryBuild.phase != 'error', + RepositoryBuild.phase != 'complete') + + return query -def create_repository_build(repo, access_token, resource_key, tag, - display_name): +def get_recent_repository_build(namespace_name, repository_name): + query = list_repository_builds(namespace_name, repository_name, 1) + try: + return query.get() + except RepositoryBuild.DoesNotExist: + return None + + +def create_repository_build(repo, access_token, job_config_obj, dockerfile_id, + display_name, trigger=None): return RepositoryBuild.create(repository=repo, access_token=access_token, - resource_key=resource_key, tag=tag, - display_name=display_name) + job_config=json.dumps(job_config_obj), + display_name=display_name, trigger=trigger, + resource_key=dockerfile_id) def create_webhook(repo, params_obj): @@ -1445,27 +1476,116 @@ def delete_webhook(namespace_name, repository_name, public_id): webhook = get_webhook(namespace_name, repository_name, public_id) webhook.delete_instance() return webhook - -def list_logs(user_or_organization_name, start_time, end_time, performer = None, repository = None): - joined = LogEntry.select().join(User) - if repository: - joined = joined.where(LogEntry.repository == repository) - if performer: - joined = joined.where(LogEntry.performer == performer) - return joined.where( - User.username == user_or_organization_name, - LogEntry.datetime >= start_time, - LogEntry.datetime < end_time).order_by(LogEntry.datetime.desc()) +def list_logs(user_or_organization_name, start_time, end_time, performer=None, + repository=None): + joined = LogEntry.select().join(User) + if repository: + joined = joined.where(LogEntry.repository == repository) -def log_action(kind_name, user_or_organization_name, performer=None, repository=None, - access_token=None, ip=None, metadata={}, timestamp=None): + if performer: + joined = joined.where(LogEntry.performer == performer) + + return joined.where( + User.username == user_or_organization_name, + LogEntry.datetime >= start_time, + LogEntry.datetime < end_time).order_by(LogEntry.datetime.desc()) + + +def log_action(kind_name, user_or_organization_name, performer=None, + repository=None, access_token=None, ip=None, metadata={}, + timestamp=None): if not timestamp: timestamp = datetime.today() kind = LogEntryKind.get(LogEntryKind.name == kind_name) account = User.get(User.username == user_or_organization_name) - entry = LogEntry.create(kind=kind, account=account, performer=performer, - repository=repository, access_token=access_token, ip=ip, - metadata_json=json.dumps(metadata), datetime=timestamp) + LogEntry.create(kind=kind, account=account, performer=performer, + repository=repository, access_token=access_token, ip=ip, + metadata_json=json.dumps(metadata), datetime=timestamp) + + +def create_build_trigger(repo, service_name, auth_token, user): + service = BuildTriggerService.get(name=service_name) + trigger = RepositoryBuildTrigger.create(repository=repo, service=service, + auth_token=auth_token, + connected_user=user) + return trigger + + +def get_build_trigger(namespace_name, repository_name, trigger_uuid): + try: + return (RepositoryBuildTrigger + .select(RepositoryBuildTrigger, BuildTriggerService, Repository) + .join(BuildTriggerService) + .switch(RepositoryBuildTrigger) + .join(Repository) + .switch(RepositoryBuildTrigger) + .join(User) + .where(RepositoryBuildTrigger.uuid == trigger_uuid, + Repository.namespace == namespace_name, + Repository.name == repository_name) + .get()) + except RepositoryBuildTrigger.DoesNotExist: + msg = 'No build trigger with uuid: %s' % trigger_uuid + raise InvalidBuildTriggerException(msg) + + +def list_build_triggers(namespace_name, repository_name): + return (RepositoryBuildTrigger + .select(RepositoryBuildTrigger, BuildTriggerService, Repository) + .join(BuildTriggerService) + .switch(RepositoryBuildTrigger) + .join(Repository) + .where(Repository.namespace == namespace_name, + Repository.name == repository_name)) + + +def list_trigger_builds(namespace_name, repository_name, trigger_uuid, + limit): + return (list_repository_builds(namespace_name, repository_name, limit) + .where(RepositoryBuildTrigger.uuid == trigger_uuid)) + + +def create_notification(kind, target, metadata={}): + kind_ref = NotificationKind.get(name=kind) + notification = Notification.create(kind=kind_ref, target=target, + metadata_json=json.dumps(metadata)) + return notification + + +def list_notifications(user, kind=None): + Org = User.alias() + AdminTeam = Team.alias() + AdminTeamMember = TeamMember.alias() + AdminUser = User.alias() + + query = (Notification.select() + .join(User) + + .switch(Notification) + .join(Org, JOIN_LEFT_OUTER, on=(Org.id == Notification.target)) + .join(AdminTeam, JOIN_LEFT_OUTER, on=(Org.id == + AdminTeam.organization)) + .join(TeamRole, JOIN_LEFT_OUTER, on=(AdminTeam.role == TeamRole.id)) + .switch(AdminTeam) + .join(AdminTeamMember, JOIN_LEFT_OUTER, on=(AdminTeam.id == + AdminTeamMember.team)) + .join(AdminUser, JOIN_LEFT_OUTER, on=(AdminTeamMember.user == + AdminUser.id))) + + where_clause = ((Notification.target == user) | + ((AdminUser.id == user) & + (TeamRole.name == 'admin'))) + + if kind: + where_clause = where_clause & (NotificationKind.name == kind) + + return query.where(where_clause).order_by(Notification.created).desc() + + +def delete_notifications_by_kind(target, kind): + kind_ref = NotificationKind.get(name=kind) + Notification.delete().where(Notification.target == target, + Notification.kind == kind_ref).execute() diff --git a/data/model/oauth.py b/data/model/oauth.py new file mode 100644 index 000000000..b99a9cb58 --- /dev/null +++ b/data/model/oauth.py @@ -0,0 +1,281 @@ +import logging +import json + +from datetime import datetime, timedelta +from oauth2lib.provider import AuthorizationProvider +from oauth2lib import utils + +from data.database import (OAuthApplication, OAuthAuthorizationCode, OAuthAccessToken, User, + random_string_generator) +from data.model.legacy import get_user +from auth import scopes + + +logger = logging.getLogger(__name__) + + +class DatabaseAuthorizationProvider(AuthorizationProvider): + def get_authorized_user(self): + raise NotImplementedError('Subclasses must fill in the ability to get the authorized_user.') + + def _generate_data_string(self): + return json.dumps({'username': self.get_authorized_user().username}) + + @property + def token_expires_in(self): + """Property method to get the token expiration time in seconds. + """ + return int(60*60*24*365.25*10) # 10 Years + + def validate_client_id(self, client_id): + return self.get_application_for_client_id(client_id) is not None + + def get_application_for_client_id(self, client_id): + try: + return OAuthApplication.get(client_id=client_id) + except OAuthApplication.DoesNotExist: + return None + + def validate_client_secret(self, client_id, client_secret): + try: + OAuthApplication.get(client_id=client_id, client_secret=client_secret) + return True + except OAuthApplication.DoesNotExist: + return False + + def validate_redirect_uri(self, client_id, redirect_uri): + try: + app = OAuthApplication.get(client_id=client_id) + if app.redirect_uri and redirect_uri.startswith(app.redirect_uri): + return True + return False + except OAuthApplication.DoesNotExist: + return False + + def validate_scope(self, client_id, scopes_string): + return scopes.validate_scope_string(scopes_string) + + def validate_access(self): + return self.get_authorized_user() is not None + + def load_authorized_scope_string(self, client_id, username): + found = (OAuthAccessToken + .select() + .join(OAuthApplication) + .switch(OAuthAccessToken) + .join(User) + .where(OAuthApplication.client_id == client_id, User.username == username, + OAuthAccessToken.expires_at > datetime.now())) + found = list(found) + logger.debug('Found %s matching tokens.', len(found)) + long_scope_string = ','.join([token.scope for token in found]) + logger.debug('Computed long scope string: %s', long_scope_string) + return long_scope_string + + def validate_has_scopes(self, client_id, username, scope): + long_scope_string = self.load_authorized_scope_string(client_id, username) + + # Make sure the token contains the given scopes (at least). + return scopes.is_subset_string(long_scope_string, scope) + + def from_authorization_code(self, client_id, code, scope): + try: + found = (OAuthAuthorizationCode + .select() + .join(OAuthApplication) + .where(OAuthApplication.client_id == client_id, OAuthAuthorizationCode.code == code, + OAuthAuthorizationCode.scope == scope) + .get()) + logger.debug('Returning data: %s', found.data) + return found.data + except OAuthAuthorizationCode.DoesNotExist: + return None + + def from_refresh_token(self, client_id, refresh_token, scope): + try: + found = (OAuthAccessToken + .select() + .join(OAuthApplication) + .where(OAuthApplication.client_id == client_id, + OAuthAccessToken.refresh_token == refresh_token, + OAuthAccessToken.scope == scope) + .get()) + return found.data + except OAuthAccessToken.DoesNotExist: + return None + + def persist_authorization_code(self, client_id, code, scope): + app = OAuthApplication.get(client_id=client_id) + data = self._generate_data_string() + OAuthAuthorizationCode.create(application=app, code=code, scope=scope, data=data) + + def persist_token_information(self, client_id, scope, access_token, token_type, expires_in, + refresh_token, data): + user = get_user(json.loads(data)['username']) + if not user: + raise RuntimeError('Username must be in the data field') + + app = OAuthApplication.get(client_id=client_id) + expires_at = datetime.now() + timedelta(seconds=expires_in) + OAuthAccessToken.create(application=app, authorized_user=user, scope=scope, + access_token=access_token, token_type=token_type, + expires_at=expires_at, refresh_token=refresh_token, data=data) + + def discard_authorization_code(self, client_id, code): + found = (OAuthAuthorizationCode + .select() + .join(OAuthApplication) + .where(OAuthApplication.client_id == client_id, OAuthAuthorizationCode.code == code) + .get()) + found.delete_instance() + + def discard_refresh_token(self, client_id, refresh_token): + found = (AccessToken + .select() + .join(OAuthApplication) + .where(OAuthApplication.client_id == client_id, + OAuthAccessToken.refresh_token == refresh_token) + .get()) + found.delete_instance() + + + def get_auth_denied_response(self, response_type, client_id, redirect_uri, **params): + # Ensure proper response_type + if response_type != 'token': + err = 'unsupported_response_type' + return self._make_redirect_error_response(redirect_uri, err) + + # Check redirect URI + is_valid_redirect_uri = self.validate_redirect_uri(client_id, redirect_uri) + if not is_valid_redirect_uri: + return self._invalid_redirect_uri_response() + + return self._make_redirect_error_response(redirect_uri, 'authorization_denied') + + + def get_token_response(self, response_type, client_id, redirect_uri, **params): + # Ensure proper response_type + if response_type != 'token': + err = 'unsupported_response_type' + return self._make_redirect_error_response(redirect_uri, err) + + # Check redirect URI + is_valid_redirect_uri = self.validate_redirect_uri(client_id, redirect_uri) + if not is_valid_redirect_uri: + return self._invalid_redirect_uri_response() + + # Check conditions + is_valid_client_id = self.validate_client_id(client_id) + is_valid_access = self.validate_access() + scope = params.get('scope', '') + are_valid_scopes = self.validate_scope(client_id, scope) + + # Return proper error responses on invalid conditions + if not is_valid_client_id: + err = 'unauthorized_client' + return self._make_redirect_error_response(redirect_uri, err) + + if not is_valid_access: + err = 'access_denied' + return self._make_redirect_error_response(redirect_uri, err) + + if not are_valid_scopes: + err = 'invalid_scope' + return self._make_redirect_error_response(redirect_uri, err) + + access_token = self.generate_access_token() + token_type = self.token_type + expires_in = self.token_expires_in + refresh_token = None # No refresh token for this kind of flow + + data = self._generate_data_string() + self.persist_token_information(client_id=client_id, scope=scope, access_token=access_token, + token_type=token_type, expires_in=expires_in, + refresh_token=refresh_token, data=data) + + url = utils.build_url(redirect_uri, params) + url += '#access_token=%s&token_type=%s&expires_in=%s' % (access_token, token_type, expires_in) + + return self._make_response(headers={'Location': url}, status_code=302) + + +def create_application(org, name, application_uri, redirect_uri, **kwargs): + return OAuthApplication.create(organization=org, name=name, application_uri=application_uri, + redirect_uri=redirect_uri, **kwargs) + + +def validate_access_token(access_token): + try: + found = (OAuthAccessToken + .select(OAuthAccessToken, User) + .join(User) + .where(OAuthAccessToken.access_token == access_token) + .get()) + return found + except OAuthAccessToken.DoesNotExist: + return None + + +def get_application_for_client_id(client_id): + try: + return OAuthApplication.get(client_id=client_id) + except OAuthApplication.DoesNotExist: + return None + + +def reset_client_secret(application): + application.client_secret = random_string_generator(length=40)() + application.save() + return application + + +def lookup_application(org, client_id): + try: + return OAuthApplication.get(organization = org, client_id=client_id) + except OAuthApplication.DoesNotExist: + return None + + +def delete_application(org, client_id): + application = lookup_application(org, client_id) + if not application: + return + + application.delete_instance(recursive=True, delete_nullable=True) + return application + + +def lookup_access_token_for_user(user, token_uuid): + try: + return OAuthAccessToken.get(OAuthAccessToken.authorized_user == user, + OAuthAccessToken.uuid == token_uuid) + except OAuthAccessToken.DoesNotExist: + return None + + +def list_access_tokens_for_user(user): + query = (OAuthAccessToken + .select() + .join(OAuthApplication) + .switch(OAuthAccessToken) + .join(User) + .where(OAuthAccessToken.authorized_user == user)) + + return query + + +def list_applications_for_org(org): + query = (OAuthApplication + .select() + .join(User) + .where(OAuthApplication.organization == org)) + + return query + + +def create_access_token_for_testing(user, client_id, scope): + expires_at = datetime.now() + timedelta(seconds=10000) + application = get_application_for_client_id(client_id) + OAuthAccessToken.create(application=application, authorized_user=user, scope=scope, + token_type='token', access_token='test', + expires_at=expires_at, refresh_token='', data='') diff --git a/data/queue.py b/data/queue.py index 46db150bf..09e90f1a1 100644 --- a/data/queue.py +++ b/data/queue.py @@ -68,5 +68,5 @@ class WorkQueue(object): image_diff_queue = WorkQueue('imagediff') -dockerfile_build_queue = WorkQueue('dockerfilebuild2') +dockerfile_build_queue = WorkQueue('dockerfilebuild3') webhook_queue = WorkQueue('webhook') diff --git a/data/userfiles.py b/data/userfiles.py index c2a8bc63c..cc314a47f 100644 --- a/data/userfiles.py +++ b/data/userfiles.py @@ -40,14 +40,15 @@ class UserRequestFiles(object): encrypt_key=True) return (url, file_id) - def store_file(self, flask_file): + def store_file(self, file_like_obj, content_type): self._initialize_s3() file_id = str(uuid4()) full_key = os.path.join(self._prefix, file_id) k = Key(self._bucket, full_key) - logger.debug('Setting s3 content type to: %s' % flask_file.content_type) - k.set_metadata('Content-Type', flask_file.content_type) - bytes_written = k.set_contents_from_file(flask_file, encrypt_key=True) + logger.debug('Setting s3 content type to: %s' % content_type) + k.set_metadata('Content-Type', content_type) + bytes_written = k.set_contents_from_file(file_like_obj, encrypt_key=True, + rewind=True) if bytes_written == 0: raise S3FileWriteException('Unable to write file to S3') diff --git a/endpoints/api.py b/endpoints/api.py deleted file mode 100644 index d480923b5..000000000 --- a/endpoints/api.py +++ /dev/null @@ -1,2309 +0,0 @@ -import logging -import stripe -import requests -import urlparse -import json - -from flask import request, make_response, jsonify, abort, url_for, Blueprint, session -from flask.ext.login import current_user, logout_user -from flask.ext.principal import identity_changed, AnonymousIdentity -from functools import wraps -from collections import defaultdict - -from data import model -from data.queue import dockerfile_build_queue -from data.plans import PLANS, get_plan -from app import app -from util.email import send_confirmation_email, send_recovery_email, send_change_email -from util.names import parse_repository_name, format_robot_username -from util.gravatar import compute_hash - -from auth.permissions import (ReadRepositoryPermission, - ModifyRepositoryPermission, - AdministerRepositoryPermission, - CreateRepositoryPermission, - AdministerOrganizationPermission, - OrganizationMemberPermission, - ViewTeamPermission) -from endpoints.common import common_login, truthy_param -from util.cache import cache_control -from datetime import datetime, timedelta - -store = app.config['STORAGE'] -user_files = app.config['USERFILES'] -build_logs = app.config['BUILDLOGS'] -logger = logging.getLogger(__name__) - -route_data = None - -api = Blueprint('api', __name__) - - -@api.before_request -def csrf_protect(): - if request.method != "GET" and request.method != "HEAD": - token = session.get('_csrf_token', None) - found_token = request.values.get('_csrf_token', None) - - # TODO: add if not token here, once we are sure all sessions have a token. - if token != found_token: - msg = 'CSRF Failure. Session token was %s and request token was %s' - logger.error(msg, token, found_token) - - if not token: - logger.warning('No CSRF token in session.') - - -def request_error(exception=None, **kwargs): - data = kwargs.copy() - if exception: - data['message'] = exception.message - - return make_response(jsonify(data), 400) - - -def get_route_data(): - global route_data - if route_data: - return route_data - - routes = [] - for rule in app.url_map.iter_rules(): - if rule.endpoint.startswith('api.'): - endpoint_method = app.view_functions[rule.endpoint] - is_internal = '__internal_call' in dir(endpoint_method) - is_org_api = '__user_call' in dir(endpoint_method) - methods = list(rule.methods.difference(['HEAD', 'OPTIONS'])) - - route = { - 'name': rule.endpoint[4:], - 'methods': methods, - 'path': rule.rule, - 'parameters': list(rule.arguments) - } - - if is_org_api: - route['user_method'] = endpoint_method.__user_call - - routes.append(route) - - route_data = { - 'endpoints': routes - } - return route_data - - -def log_action(kind, user_or_orgname, metadata={}, repo=None): - performer = current_user.db_user() - model.log_action(kind, user_or_orgname, performer=performer, - ip=request.remote_addr, metadata=metadata, repository=repo) - - -def api_login_required(f): - @wraps(f) - def decorated_view(*args, **kwargs): - if not current_user.is_authenticated(): - abort(401) - - if (current_user and current_user.db_user() and - current_user.db_user().organization): - abort(401) - - if (current_user and current_user.db_user() and - current_user.db_user().robot): - abort(401) - - return f(*args, **kwargs) - return decorated_view - - -def internal_api_call(f): - @wraps(f) - def decorated_view(*args, **kwargs): - return f(*args, **kwargs) - - decorated_view.__internal_call = True - return decorated_view - - -def org_api_call(user_call_name): - def internal_decorator(f): - @wraps(f) - def decorated_view(*args, **kwargs): - return f(*args, **kwargs) - - decorated_view.__user_call = user_call_name - return decorated_view - - return internal_decorator - - -@api.route('/discovery') -def discovery(): - return jsonify(get_route_data()) - - -@api.route('/') -@internal_api_call -def welcome(): - return jsonify({'version': '0.5'}) - - -@api.route('/plans/') -def list_plans(): - return jsonify({ - 'plans': PLANS, - }) - - -def user_view(user): - def org_view(o): - admin_org = AdministerOrganizationPermission(o.username) - return { - 'name': o.username, - 'gravatar': compute_hash(o.email), - 'is_org_admin': admin_org.can(), - 'can_create_repo': admin_org.can() or CreateRepositoryPermission(o.username).can(), - 'preferred_namespace': not (o.stripe_id is None) - } - - organizations = model.get_user_organizations(user.username) - - def login_view(login): - return { - 'service': login.service.name, - 'service_identifier': login.service_ident, - } - - logins = model.list_federated_logins(user) - - return { - 'verified': user.verified, - 'anonymous': False, - 'username': user.username, - 'email': user.email, - 'gravatar': compute_hash(user.email), - 'askForPassword': user.password_hash is None, - 'organizations': [org_view(o) for o in organizations], - 'logins': [login_view(login) for login in logins], - 'can_create_repo': True, - 'invoice_email': user.invoice_email, - 'preferred_namespace': not (user.stripe_id is None) - } - - -@api.route('/user/', methods=['GET']) -@internal_api_call -def get_logged_in_user(): - if current_user.is_anonymous(): - return jsonify({'anonymous': True}) - - user = current_user.db_user() - if not user or user.organization: - return jsonify({'anonymous': True}) - - return jsonify(user_view(user)) - - -@api.route('/user/private', methods=['GET']) -@api_login_required -@internal_api_call -def get_user_private_count(): - user = current_user.db_user() - private_repos = model.get_private_repo_count(user.username) - repos_allowed = 0 - - if user.stripe_id: - cus = stripe.Customer.retrieve(user.stripe_id) - if cus.subscription: - plan = get_plan(cus.subscription.plan.id) - if plan: - repos_allowed = plan['privateRepos'] - - return jsonify({ - 'privateCount': private_repos, - 'reposAllowed': repos_allowed - }) - - -@api.route('/user/convert', methods=['POST']) -@api_login_required -@internal_api_call -def convert_user_to_organization(): - user = current_user.db_user() - convert_data = request.get_json() - - # Ensure that the new admin user is the not user being converted. - admin_username = convert_data['adminUser'] - if admin_username == user.username: - return request_error(reason='invaliduser', - message='The admin user is not valid') - - # Ensure that the sign in credentials work. - admin_password = convert_data['adminPassword'] - if not model.verify_user(admin_username, admin_password): - return request_error(reason='invaliduser', - message='The admin user credentials are not valid') - - # Subscribe the organization to the new plan. - plan = convert_data['plan'] - subscribe(user, plan, None, True) # Require business plans - - # Convert the user to an organization. - model.convert_user_to_organization(user, model.get_user(admin_username)) - log_action('account_convert', user.username) - - # And finally login with the admin credentials. - return conduct_signin(admin_username, admin_password) - - -@api.route('/user/', methods=['PUT']) -@api_login_required -@internal_api_call -def change_user_details(): - user = current_user.db_user() - user_data = request.get_json() - - try: - if 'password' in user_data: - logger.debug('Changing password for user: %s', user.username) - log_action('account_change_password', user.username) - model.change_password(user, user_data['password']) - - if 'invoice_email' in user_data: - logger.debug('Changing invoice_email for user: %s', user.username) - model.change_invoice_email(user, user_data['invoice_email']) - - if 'email' in user_data and user_data['email'] != user.email: - new_email = user_data['email'] - if model.find_user_by_email(new_email): - # Email already used. - return request_error(message='E-mail address already used') - - logger.debug('Sending email to change email address for user: %s', - user.username) - code = model.create_confirm_email_code(user, new_email=new_email) - send_change_email(user.username, user_data['email'], code.code) - - except model.InvalidPasswordException, ex: - return request_error(exception=ex) - - return jsonify(user_view(user)) - - -@api.route('/user/', methods=['POST']) -@internal_api_call -def create_new_user(): - user_data = request.get_json() - - existing_user = model.get_user(user_data['username']) - if existing_user: - return request_error(message='The username already exists') - - try: - new_user = model.create_user(user_data['username'], user_data['password'], - user_data['email']) - code = model.create_confirm_email_code(new_user) - send_confirmation_email(new_user.username, new_user.email, code.code) - return make_response('Created', 201) - except model.DataModelException as ex: - return request_error(exception=ex) - - -@api.route('/signin', methods=['POST']) -@internal_api_call -def signin_user(): - signin_data = request.get_json() - if not signin_data: - abort(404) - - username = signin_data['username'] - password = signin_data['password'] - - return conduct_signin(username, password) - - -def conduct_signin(username_or_email, password): - needs_email_verification = False - invalid_credentials = False - - verified = model.verify_user(username_or_email, password) - if verified: - if common_login(verified): - return jsonify({'success': True}) - else: - needs_email_verification = True - - else: - invalid_credentials = True - - response = jsonify({ - 'needsEmailVerification': needs_email_verification, - 'invalidCredentials': invalid_credentials, - }) - response.status_code = 403 - return response - - -@api.route("/signout", methods=['POST']) -@api_login_required -@internal_api_call -def logout(): - logout_user() - identity_changed.send(app, identity=AnonymousIdentity()) - return jsonify({'success': True}) - - -@api.route("/recovery", methods=['POST']) -@internal_api_call -def request_recovery_email(): - email = request.get_json()['email'] - code = model.create_reset_password_email_code(email) - send_recovery_email(email, code.code) - return make_response('Created', 201) - - -@api.route('/users/', methods=['GET']) -@api_login_required -def get_matching_users(prefix): - users = model.get_matching_users(prefix) - - return jsonify({ - 'users': [user.username for user in users] - }) - - -@api.route('/entities/', methods=['GET']) -@api_login_required -def get_matching_entities(prefix): - teams = [] - - namespace_name = request.args.get('namespace', '') - robot_namespace = None - organization = None - - try: - organization = model.get_organization(namespace_name) - - # namespace name was an org - permission = OrganizationMemberPermission(namespace_name) - if permission.can(): - robot_namespace = namespace_name - - if truthy_param(request.args.get('includeTeams', False)): - teams = model.get_matching_teams(prefix, organization) - - except model.InvalidOrganizationException: - # namespace name was a user - if current_user.db_user().username == namespace_name: - robot_namespace = namespace_name - - users = model.get_matching_users(prefix, robot_namespace, organization) - - def entity_team_view(team): - result = { - 'name': team.name, - 'kind': 'team', - 'is_org_member': True - } - return result - - def user_view(user): - user_json = { - 'name': user.username, - 'kind': 'user', - 'is_robot': user.is_robot, - } - - if organization is not None: - user_json['is_org_member'] = user.is_robot or user.is_org_member - - return user_json - - team_data = [entity_team_view(team) for team in teams] - user_data = [user_view(user) for user in users] - - return jsonify({ - 'results': team_data + user_data - }) - - -def team_view(orgname, team): - view_permission = ViewTeamPermission(orgname, team.name) - role = model.get_team_org_role(team).name - return { - 'id': team.id, - 'name': team.name, - 'description': team.description, - 'can_view': view_permission.can(), - 'role': role - } - - -@api.route('/organization/', methods=['POST']) -@api_login_required -@internal_api_call -def create_organization(): - org_data = request.get_json() - existing = None - - try: - existing = model.get_organization(org_data['name']) - except model.InvalidOrganizationException: - pass - - if not existing: - try: - existing = model.get_user(org_data['name']) - except model.InvalidUserException: - pass - - if existing: - msg = 'A user or organization with this name already exists' - return request_error(message=msg) - - try: - model.create_organization(org_data['name'], org_data['email'], - current_user.db_user()) - return make_response('Created', 201) - except model.DataModelException as ex: - return request_error(exception=ex) - - -def org_view(o, teams): - admin_org = AdministerOrganizationPermission(o.username) - is_admin = admin_org.can() - view = { - 'name': o.username, - 'email': o.email if is_admin else '', - 'gravatar': compute_hash(o.email), - 'teams': {t.name : team_view(o.username, t) for t in teams}, - 'is_admin': is_admin - } - - if is_admin: - view['invoice_email'] = o.invoice_email - - return view - - -@api.route('/organization/', methods=['GET']) -@api_login_required -def get_organization(orgname): - permission = OrganizationMemberPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - teams = model.get_teams_within_org(org) - return jsonify(org_view(org, teams)) - - abort(403) - - -@api.route('/organization/', methods=['PUT']) -@api_login_required -@org_api_call('change_user_details') -def change_organization_details(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - org_data = request.get_json() - if 'invoice_email' in org_data: - logger.debug('Changing invoice_email for organization: %s', org.username) - model.change_invoice_email(org, org_data['invoice_email']) - - if 'email' in org_data and org_data['email'] != org.email: - new_email = org_data['email'] - if model.find_user_by_email(new_email): - return request_error(message='E-mail address already used') - - logger.debug('Changing email address for organization: %s', org.username) - model.update_email(org, new_email) - - teams = model.get_teams_within_org(org) - return jsonify(org_view(org, teams)) - - abort(403) - -def prototype_view(proto, org_members): - def prototype_user_view(user): - return { - 'name': user.username, - 'is_robot': user.robot, - 'kind': 'user', - 'is_org_member': user.robot or user.username in org_members, - } - - if proto.delegate_user: - delegate_view = prototype_user_view(proto.delegate_user) - else: - delegate_view = { - 'name': proto.delegate_team.name, - 'kind': 'team', - } - - return { - 'activating_user': prototype_user_view(proto.activating_user) if proto.activating_user else None, - 'delegate': delegate_view, - 'role': proto.role.name, - 'id': proto.uuid, - } - -@api.route('/organization//prototypes', methods=['GET']) -@api_login_required -def get_organization_prototype_permissions(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - permissions = model.get_prototype_permissions(org) - org_members = model.get_organization_member_set(orgname) - return jsonify({'prototypes': [prototype_view(p, org_members) - for p in permissions]}) - - abort(403) - - -def log_prototype_action(action_kind, orgname, prototype, **kwargs): - username = current_user.db_user().username - log_params = { - 'prototypeid': prototype.uuid, - 'username': username, - 'activating_username': prototype.activating_user.username if prototype.activating_user else None, - 'role': prototype.role.name - } - - for key, value in kwargs.items(): - log_params[key] = value - - if prototype.delegate_user: - log_params['delegate_user'] = prototype.delegate_user.username - elif prototype.delegate_team: - log_params['delegate_team'] = prototype.delegate_team.name - - log_action(action_kind, orgname, log_params) - - -@api.route('/organization//prototypes', methods=['POST']) -@api_login_required -def create_organization_prototype_permission(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - details = request.get_json() - activating_username = None - - if ('activating_user' in details and details['activating_user'] and - 'name' in details['activating_user']): - activating_username = details['activating_user']['name'] - - delegate = details['delegate'] if 'delegate' in details else {} - delegate_kind = delegate.get('kind', None) - delegate_name = delegate.get('name', None) - - delegate_username = delegate_name if delegate_kind == 'user' else None - delegate_teamname = delegate_name if delegate_kind == 'team' else None - - activating_user = (model.get_user(activating_username) - if activating_username else None) - delegate_user = (model.get_user(delegate_username) - if delegate_username else None) - delegate_team = (model.get_organization_team(orgname, delegate_teamname) - if delegate_teamname else None) - - if activating_username and not activating_user: - return request_error(message='Unknown activating user') - - if not delegate_user and not delegate_team: - return request_error(message='Missing delegate user or team') - - role_name = details['role'] - - prototype = model.add_prototype_permission(org, role_name, activating_user, - delegate_user, delegate_team) - log_prototype_action('create_prototype_permission', orgname, prototype) - org_members = model.get_organization_member_set(orgname) - return jsonify(prototype_view(prototype, org_members)) - - abort(403) - - -@api.route('/organization//prototypes/', - methods=['DELETE']) -@api_login_required -def delete_organization_prototype_permission(orgname, prototypeid): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - prototype = model.delete_prototype_permission(org, prototypeid) - if not prototype: - abort(404) - - log_prototype_action('delete_prototype_permission', orgname, prototype) - - return make_response('Deleted', 204) - - abort(403) - - -@api.route('/organization//prototypes/', - methods=['PUT']) -@api_login_required -def update_organization_prototype_permission(orgname, prototypeid): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - existing = model.get_prototype_permission(org, prototypeid) - if not existing: - abort(404) - - details = request.get_json() - role_name = details['role'] - prototype = model.update_prototype_permission(org, prototypeid, role_name) - if not prototype: - abort(404) - - log_prototype_action('modify_prototype_permission', orgname, prototype, - original_role=existing.role.name) - org_members = model.get_organization_member_set(orgname) - return jsonify(prototype_view(prototype, org_members)) - - abort(403) - - -@api.route('/organization//members', methods=['GET']) -@api_login_required -def get_organization_members(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - # Loop to create the members dictionary. Note that the members collection - # will return an entry for *every team* a member is on, so we will have - # duplicate keys (which is why we pre-build the dictionary). - members_dict = {} - members = model.get_organization_members_with_teams(org) - for member in members: - if not member.user.username in members_dict: - members_dict[member.user.username] = {'name': member.user.username, - 'kind': 'user', - 'is_robot': member.user.robot, - 'teams': []} - - members_dict[member.user.username]['teams'].append(member.team.name) - - return jsonify({'members': members_dict}) - - abort(403) - - -@api.route('/organization//members/', methods=['GET']) -@api_login_required -def get_organization_member(orgname, membername): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - try: - org = model.get_organization(orgname) - except model.InvalidOrganizationException: - abort(404) - - member_dict = None - member_teams = model.get_organization_members_with_teams(org, membername=membername) - for member in member_teams: - if not member_dict: - member_dict = {'name': member.user.username, - 'kind': 'user', - 'is_robot': member.user.robot, - 'teams': []} - - member_dict['teams'].append(member.team.name) - - if not member_dict: - abort(404) - - return jsonify({'member': member_dict}) - - abort(403) - - -@api.route('/organization//private', methods=['GET']) -@api_login_required -@internal_api_call -def get_organization_private_allowed(orgname): - permission = CreateRepositoryPermission(orgname) - if permission.can(): - organization = model.get_organization(orgname) - - private_repos = model.get_private_repo_count(organization.username) - if organization.stripe_id: - cus = stripe.Customer.retrieve(organization.stripe_id) - if cus.subscription: - repos_allowed = 0 - plan = get_plan(cus.subscription.plan.id) - if plan: - repos_allowed = plan['privateRepos'] - - return jsonify({ - 'privateAllowed': (private_repos < repos_allowed) - }) - - return jsonify({ - 'privateAllowed': False - }) - - abort(403) - - -def member_view(member): - return { - 'name': member.username, - 'kind': 'user', - 'is_robot': member.robot, - } - - -@api.route('/organization//team/', - methods=['PUT', 'POST']) -@api_login_required -def update_organization_team(orgname, teamname): - edit_permission = AdministerOrganizationPermission(orgname) - if edit_permission.can(): - team = None - - details = request.get_json() - is_existing = False - try: - team = model.get_organization_team(orgname, teamname) - is_existing = True - except model.InvalidTeamException: - # Create the new team. - description = details['description'] if 'description' in details else '' - role = details['role'] if 'role' in details else 'member' - - org = model.get_organization(orgname) - team = model.create_team(teamname, org, role, description) - log_action('org_create_team', orgname, {'team': teamname}) - - if is_existing: - if ('description' in details and - team.description != details['description']): - team.description = details['description'] - team.save() - log_action('org_set_team_description', orgname, - {'team': teamname, 'description': team.description}) - - if 'role' in details: - role = model.get_team_org_role(team).name - if role != details['role']: - team = model.set_team_org_permission(team, details['role'], - current_user.db_user().username) - log_action('org_set_team_role', orgname, - {'team': teamname, 'role': details['role']}) - - resp = jsonify(team_view(orgname, team)) - if not is_existing: - resp.status_code = 201 - return resp - - abort(403) - - -@api.route('/organization//team/', - methods=['DELETE']) -@api_login_required -def delete_organization_team(orgname, teamname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - model.remove_team(orgname, teamname, current_user.db_user().username) - log_action('org_delete_team', orgname, {'team': teamname}) - return make_response('Deleted', 204) - - abort(403) - - -@api.route('/organization//team//members', - methods=['GET']) -@api_login_required -def get_organization_team_members(orgname, teamname): - view_permission = ViewTeamPermission(orgname, teamname) - edit_permission = AdministerOrganizationPermission(orgname) - - if view_permission.can(): - team = None - try: - team = model.get_organization_team(orgname, teamname) - except model.InvalidTeamException: - abort(404) - - members = model.get_organization_team_members(team.id) - return jsonify({ - 'members': { m.username : member_view(m) for m in members }, - 'can_edit': edit_permission.can() - }) - - abort(403) - - -@api.route('/organization//team//members/', - methods=['PUT', 'POST']) -@api_login_required -def update_organization_team_member(orgname, teamname, membername): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - team = None - user = None - - # Find the team. - try: - team = model.get_organization_team(orgname, teamname) - except model.InvalidTeamException: - abort(404) - - # Find the user. - user = model.get_user(membername) - if not user: - return request_error(message='Unknown user') - - # Add the user to the team. - model.add_user_to_team(user, team) - log_action('org_add_team_member', orgname, - {'member': membername, 'team': teamname}) - return jsonify(member_view(user)) - - abort(403) - - -@api.route('/organization//team//members/', - methods=['DELETE']) -@api_login_required -def delete_organization_team_member(orgname, teamname, membername): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - # Remote the user from the team. - invoking_user = current_user.db_user().username - model.remove_user_from_team(orgname, teamname, membername, invoking_user) - log_action('org_remove_team_member', orgname, - {'member': membername, 'team': teamname}) - return make_response('Deleted', 204) - - abort(403) - - -@api.route('/repository', methods=['POST']) -@api_login_required -def create_repo(): - owner = current_user.db_user() - req = request.get_json() - namespace_name = req['namespace'] if 'namespace' in req else owner.username - - permission = CreateRepositoryPermission(namespace_name) - if permission.can(): - repository_name = req['repository'] - visibility = req['visibility'] - - existing = model.get_repository(namespace_name, repository_name) - if existing: - return request_error(message='Repository already exists') - - visibility = req['visibility'] - - repo = model.create_repository(namespace_name, repository_name, owner, - visibility) - repo.description = req['description'] - repo.save() - - log_action('create_repo', namespace_name, - {'repo': repository_name, 'namespace': namespace_name}, - repo=repo) - return jsonify({ - 'namespace': namespace_name, - 'name': repository_name - }) - - abort(403) - - -@api.route('/find/repository', methods=['GET']) -def find_repos(): - prefix = request.args.get('query', '') - - def repo_view(repo): - return { - 'namespace': repo.namespace, - 'name': repo.name, - 'description': repo.description - } - - username = None - if current_user.is_authenticated(): - username = current_user.db_user().username - - matching = model.get_matching_repositories(prefix, username) - response = { - 'repositories': [repo_view(repo) for repo in matching] - } - - return jsonify(response) - - -@api.route('/repository/', methods=['GET']) -def list_repos(): - def repo_view(repo_obj): - return { - 'namespace': repo_obj.namespace, - 'name': repo_obj.name, - 'description': repo_obj.description, - 'is_public': repo_obj.visibility.name == 'public', - } - - page = request.args.get('page', None) - limit = request.args.get('limit', None) - namespace_filter = request.args.get('namespace', None) - include_public = truthy_param(request.args.get('public', True)) - include_private = truthy_param(request.args.get('private', True)) - sort = truthy_param(request.args.get('sort', False)) - include_count = truthy_param(request.args.get('count', False)) - - try: - limit = int(limit) if limit else None - except TypeError: - limit = None - - if page: - try: - page = int(page) - except Exception: - page = None - - username = None - if current_user.is_authenticated() and include_private: - username = current_user.db_user().username - - repo_count = None - if include_count: - repo_count = model.get_visible_repository_count(username, - include_public=include_public, - namespace=namespace_filter) - - repo_query = model.get_visible_repositories(username, limit=limit, page=page, - include_public=include_public, - sort=sort, - namespace=namespace_filter) - - repos = [repo_view(repo) for repo in repo_query] - response = { - 'repositories': repos - } - - if include_count: - response['count'] = repo_count - - return jsonify(response) - - -@api.route('/repository/', methods=['PUT']) -@api_login_required -@parse_repository_name -def update_repo(namespace, repository): - permission = ModifyRepositoryPermission(namespace, repository) - if permission.can(): - repo = model.get_repository(namespace, repository) - if repo: - values = request.get_json() - repo.description = values['description'] - repo.save() - - log_action('set_repo_description', namespace, - {'repo': repository, 'description': values['description']}, - repo=repo) - return jsonify({ - 'success': True - }) - - abort(403) - - -@api.route('/repository//changevisibility', - methods=['POST']) -@api_login_required -@parse_repository_name -def change_repo_visibility(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - repo = model.get_repository(namespace, repository) - if repo: - values = request.get_json() - model.set_repository_visibility(repo, values['visibility']) - log_action('change_repo_visibility', namespace, - {'repo': repository, 'visibility': values['visibility']}, - repo=repo) - return jsonify({ - 'success': True - }) - - abort(403) - - -@api.route('/repository/', methods=['DELETE']) -@api_login_required -@parse_repository_name -def delete_repository(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - model.purge_repository(namespace, repository) - log_action('delete_repo', namespace, - {'repo': repository, 'namespace': namespace}) - return make_response('Deleted', 204) - - abort(403) - - -def image_view(image): - extended_props = image - if image.storage and image.storage.id: - extended_props = image.storage - - command = extended_props.command - return { - 'id': image.docker_image_id, - 'created': extended_props.created, - 'comment': extended_props.comment, - 'command': json.loads(command) if command else None, - 'ancestors': image.ancestors, - 'dbid': image.id, - 'size': extended_props.image_size, - } - - -@api.route('/repository/', methods=['GET']) -@parse_repository_name -def get_repo(namespace, repository): - logger.debug('Get repo: %s/%s' % (namespace, repository)) - - def tag_view(tag): - image = model.get_tag_image(namespace, repository, tag.name) - if not image: - return {} - - return { - 'name': tag.name, - 'image': image_view(image), - } - - organization = None - try: - organization = model.get_organization(namespace) - except model.InvalidOrganizationException: - pass - - permission = ReadRepositoryPermission(namespace, repository) - is_public = model.repository_is_public(namespace, repository) - if permission.can() or is_public: - repo = model.get_repository(namespace, repository) - if repo: - tags = model.list_repository_tags(namespace, repository) - tag_dict = {tag.name: tag_view(tag) for tag in tags} - can_write = ModifyRepositoryPermission(namespace, repository).can() - can_admin = AdministerRepositoryPermission(namespace, repository).can() - active_builds = model.list_repository_builds(namespace, repository, - include_inactive=False) - - return jsonify({ - 'namespace': namespace, - 'name': repository, - 'description': repo.description, - 'tags': tag_dict, - 'can_write': can_write, - 'can_admin': can_admin, - 'is_public': is_public, - 'is_building': len(active_builds) > 0, - 'is_organization': bool(organization) - }) - - abort(404) # Not found - abort(403) # Permission denied - - -def build_status_view(build_obj, can_write=False): - status = build_logs.get_status(build_obj.uuid) - return { - 'id': build_obj.uuid, - 'phase': build_obj.phase, - 'started': build_obj.started, - 'display_name': build_obj.display_name, - 'status': status, - 'resource_key': build_obj.resource_key if can_write else None, - 'is_writer': can_write - } - - -@api.route('/repository//build/', methods=['GET']) -@parse_repository_name -def get_repo_builds(namespace, repository): - permission = ReadRepositoryPermission(namespace, repository) - is_public = model.repository_is_public(namespace, repository) - if permission.can() or is_public: - can_write = ModifyRepositoryPermission(namespace, repository).can() - builds = model.list_repository_builds(namespace, repository) - return jsonify({ - 'builds': [build_status_view(build, can_write) for build in builds] - }) - - abort(403) # Permission denied - - -@api.route('/repository//build//status', - methods=['GET']) -@parse_repository_name -def get_repo_build_status(namespace, repository, build_uuid): - permission = ReadRepositoryPermission(namespace, repository) - is_public = model.repository_is_public(namespace, repository) - if permission.can() or is_public: - build = model.get_repository_build(namespace, repository, build_uuid) - if not build: - abort(404) - - can_write = ModifyRepositoryPermission(namespace, repository).can() - return jsonify(build_status_view(build, can_write)) - - abort(403) # Permission denied - - -@api.route('/repository//build//archiveurl', - methods=['GET']) -@parse_repository_name -def get_repo_build_archive_url(namespace, repository, build_uuid): - permission = ModifyRepositoryPermission(namespace, repository) - if permission.can(): - build = model.get_repository_build(namespace, repository, build_uuid) - if not build: - abort(404) - - url = user_files.get_file_url(build.resource_key) - return jsonify({ - 'url': url - }) - - abort(403) # Permission denied - - -@api.route('/repository//build//logs', - methods=['GET']) -@parse_repository_name -def get_repo_build_logs(namespace, repository, build_uuid): - permission = ModifyRepositoryPermission(namespace, repository) - if permission.can(): - response_obj = {} - - build = model.get_repository_build(namespace, repository, build_uuid) - - start = int(request.args.get('start', 0)) - - count, logs = build_logs.get_log_entries(build.uuid, start) - - response_obj.update({ - 'start': start, - 'total': count, - 'logs': [log for log in logs], - }) - - return jsonify(response_obj) - - abort(403) # Permission denied - - -@api.route('/repository//build/', methods=['POST']) -@api_login_required -@parse_repository_name -def request_repo_build(namespace, repository): - permission = ModifyRepositoryPermission(namespace, repository) - if permission.can(): - logger.debug('User requested repository initialization.') - dockerfile_id = request.get_json()['file_id'] - - # Check if the dockerfile resource has already been used. If so, then it can only be reused if the - # user has access to the repository for which it was used. - associated_repository = model.get_repository_for_resource(dockerfile_id) - if associated_repository: - if not ModifyRepositoryPermission(associated_repository.namespace, associated_repository.name): - abort(403) - - # Start the build. - repo = model.get_repository(namespace, repository) - token = model.create_access_token(repo, 'write') - display_name = user_files.get_file_checksum(dockerfile_id) - logger.debug('**********Md5: %s' % display_name) - - host = urlparse.urlparse(request.url).netloc - tag = '%s/%s/%s' % (host, repo.namespace, repo.name) - build_request = model.create_repository_build(repo, token, dockerfile_id, - tag, display_name) - dockerfile_build_queue.put(json.dumps({ - 'build_uuid': build_request.uuid, - 'namespace': namespace, - 'repository': repository, - }), retries_remaining=1) - - log_action('build_dockerfile', namespace, - {'repo': repository, 'namespace': namespace, - 'fileid': dockerfile_id}, repo=repo) - - resp = jsonify(build_status_view(build_request, True)) - repo_string = '%s/%s' % (namespace, repository) - resp.headers['Location'] = url_for('api.get_repo_build_status', - repository=repo_string, - build_uuid=build_request.uuid) - resp.status_code = 201 - return resp - - abort(403) # Permissions denied - - -def webhook_view(webhook): - return { - 'public_id': webhook.public_id, - 'parameters': json.loads(webhook.parameters), - } - - -@api.route('/repository//webhook/', methods=['POST']) -@api_login_required -@parse_repository_name -def create_webhook(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - repo = model.get_repository(namespace, repository) - webhook = model.create_webhook(repo, request.get_json()) - resp = jsonify(webhook_view(webhook)) - repo_string = '%s/%s' % (namespace, repository) - resp.headers['Location'] = url_for('api.get_webhook', - repository=repo_string, - public_id=webhook.public_id) - log_action('add_repo_webhook', namespace, - {'repo': repository, 'webhook_id': webhook.public_id}, - repo=repo) - return resp - - abort(403) # Permissions denied - - -@api.route('/repository//webhook/', - methods=['GET']) -@api_login_required -@parse_repository_name -def get_webhook(namespace, repository, public_id): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - try: - webhook = model.get_webhook(namespace, repository, public_id) - except model.InvalidWebhookException: - abort(404) - - return jsonify(webhook_view(webhook)) - - abort(403) # Permission denied - - -@api.route('/repository//webhook/', methods=['GET']) -@api_login_required -@parse_repository_name -def list_webhooks(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - webhooks = model.list_webhooks(namespace, repository) - return jsonify({ - 'webhooks': [webhook_view(webhook) for webhook in webhooks] - }) - - abort(403) # Permission denied - - -@api.route('/repository//webhook/', - methods=['DELETE']) -@api_login_required -@parse_repository_name -def delete_webhook(namespace, repository, public_id): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - model.delete_webhook(namespace, repository, public_id) - log_action('delete_repo_webhook', namespace, - {'repo': repository, 'webhook_id': public_id}, - repo=model.get_repository(namespace, repository)) - return make_response('No Content', 204) - - abort(403) # Permission denied - - -@api.route('/filedrop/', methods=['POST']) -@api_login_required -@internal_api_call -def get_filedrop_url(): - mime_type = request.get_json()['mimeType'] - (url, file_id) = user_files.prepare_for_drop(mime_type) - return jsonify({ - 'url': url, - 'file_id': file_id - }) - -def role_view(repo_perm_obj): - return { - 'role': repo_perm_obj.role.name, - } - - -def wrap_role_view_user(role_json, user): - role_json['is_robot'] = user.robot - return role_json - - -def wrap_role_view_org(role_json, user, org_members): - role_json['is_org_member'] = user.robot or user.username in org_members - return role_json - - -@api.route('/repository//image/', methods=['GET']) -@parse_repository_name -def list_repository_images(namespace, repository): - permission = ReadRepositoryPermission(namespace, repository) - if permission.can() or model.repository_is_public(namespace, repository): - all_images = model.get_repository_images(namespace, repository) - all_tags = model.list_repository_tags(namespace, repository) - - tags_by_image_id = defaultdict(list) - for tag in all_tags: - tags_by_image_id[tag.image.docker_image_id].append(tag.name) - - - def add_tags(image_json): - image_json['tags'] = tags_by_image_id[image_json['id']] - return image_json - - - return jsonify({ - 'images': [add_tags(image_view(image)) for image in all_images] - }) - - abort(403) - - -@api.route('/repository//image/', - methods=['GET']) -@parse_repository_name -def get_image(namespace, repository, image_id): - permission = ReadRepositoryPermission(namespace, repository) - if permission.can() or model.repository_is_public(namespace, repository): - image = model.get_repo_image(namespace, repository, image_id) - if not image: - abort(404) - - return jsonify(image_view(image)) - abort(403) - - -@api.route('/repository//image//changes', - methods=['GET']) -@cache_control(max_age=60*60) # Cache for one hour -@parse_repository_name -def get_image_changes(namespace, repository, image_id): - permission = ReadRepositoryPermission(namespace, repository) - if permission.can() or model.repository_is_public(namespace, repository): - image = model.get_repo_image(namespace, repository, image_id) - - if not image: - abort(404) - - uuid = image.storage and image.storage.uuid - diffs_path = store.image_file_diffs_path(namespace, repository, image_id, - uuid) - - try: - response_json = store.get_content(diffs_path) - return make_response(response_json) - except IOError: - abort(404) - - abort(403) - - -@api.route('/repository//tag/', - methods=['PUT']) -@parse_repository_name -def change_tag_image(namespace, repository, tag): - permission = ModifyRepositoryPermission(namespace, repository) - if permission.can(): - image_id = request.get_json()['image'] - image = model.get_repo_image(namespace, repository, image_id) - if not image: - abort(404) - - original_image_id = None - try: - original_tag_image = model.get_tag_image(namespace, repository, tag) - if original_tag_image: - original_image_id = original_tag_image.docker_image_id - except model.DataModelException: - # This is a new tag. - pass - - model.create_or_update_tag(namespace, repository, tag, image_id) - model.garbage_collect_repository(namespace, repository) - - username = current_user.db_user().username - log_action('move_tag' if original_image_id else 'create_tag', namespace, - { 'username': username, 'repo': repository, 'tag': tag, - 'image': image_id, 'original_image': original_image_id }, - repo=model.get_repository(namespace, repository)) - - return make_response('Updated', 201) - - abort(403) # Permission denied - - -@api.route('/repository//tag/', - methods=['DELETE']) -@parse_repository_name -def delete_full_tag(namespace, repository, tag): - permission = ModifyRepositoryPermission(namespace, repository) - if permission.can(): - model.delete_tag(namespace, repository, tag) - model.garbage_collect_repository(namespace, repository) - - username = current_user.db_user().username - log_action('delete_tag', namespace, - {'username': username, 'repo': repository, 'tag': tag}, - repo=model.get_repository(namespace, repository)) - - return make_response('Deleted', 204) - - abort(403) # Permission denied - - -@api.route('/repository//tag//images', - methods=['GET']) -@parse_repository_name -def list_tag_images(namespace, repository, tag): - permission = ReadRepositoryPermission(namespace, repository) - if permission.can() or model.repository_is_public(namespace, repository): - try: - tag_image = model.get_tag_image(namespace, repository, tag) - except model.DataModelException: - abort(404) - - parent_images = model.get_parent_images(tag_image) - - parents = list(parent_images) - parents.reverse() - all_images = [tag_image] + parents - - return jsonify({ - 'images': [image_view(image) for image in all_images] - }) - - abort(403) # Permission denied - - -@api.route('/repository//permissions/team/', - methods=['GET']) -@api_login_required -@parse_repository_name -def list_repo_team_permissions(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - repo_perms = model.get_all_repo_teams(namespace, repository) - - return jsonify({ - 'permissions': {repo_perm.team.name: role_view(repo_perm) - for repo_perm in repo_perms} - }) - - abort(403) # Permission denied - - -@api.route('/repository//permissions/user/', - methods=['GET']) -@api_login_required -@parse_repository_name -def list_repo_user_permissions(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - # Lookup the organization (if any). - org = None - try: - org = model.get_organization(namespace) # Will raise an error if not org - except model.InvalidOrganizationException: - # This repository isn't under an org - pass - - # Determine how to wrap the role(s). - def wrapped_role_view(repo_perm): - return wrap_role_view_user(role_view(repo_perm), repo_perm.user) - - role_view_func = wrapped_role_view - - if org: - org_members = model.get_organization_member_set(namespace) - current_func = role_view_func - - def wrapped_role_org_view(repo_perm): - return wrap_role_view_org(current_func(repo_perm), repo_perm.user, - org_members) - - role_view_func = wrapped_role_org_view - - # Load and return the permissions. - repo_perms = model.get_all_repo_users(namespace, repository) - return jsonify({ - 'permissions': {perm.user.username: role_view_func(perm) - for perm in repo_perms} - }) - - abort(403) # Permission denied - - -@api.route('/repository//permissions/user/', - methods=['GET']) -@api_login_required -@parse_repository_name -def get_user_permissions(namespace, repository, username): - logger.debug('Get repo: %s/%s permissions for user %s' % - (namespace, repository, username)) - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - perm = model.get_user_reponame_permission(username, namespace, repository) - perm_view = wrap_role_view_user(role_view(perm), perm.user) - - try: - model.get_organization(namespace) - org_members = model.get_organization_member_set(namespace) - perm_view = wrap_role_view_org(perm_view, perm.user, org_members) - except model.InvalidOrganizationException: - # This repository is not part of an organization - pass - - return jsonify(perm_view) - - abort(403) # Permission denied - - -@api.route('/repository//permissions/team/', - methods=['GET']) -@api_login_required -@parse_repository_name -def get_team_permissions(namespace, repository, teamname): - logger.debug('Get repo: %s/%s permissions for team %s' % - (namespace, repository, teamname)) - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - perm = model.get_team_reponame_permission(teamname, namespace, repository) - return jsonify(role_view(perm)) - - abort(403) # Permission denied - - -@api.route('/repository//permissions/user/', - methods=['PUT', 'POST']) -@api_login_required -@parse_repository_name -def change_user_permissions(namespace, repository, username): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - new_permission = request.get_json() - - logger.debug('Setting permission to: %s for user %s' % - (new_permission['role'], username)) - - perm = model.set_user_repo_permission(username, namespace, repository, - new_permission['role']) - perm_view = wrap_role_view_user(role_view(perm), perm.user) - - try: - model.get_organization(namespace) - org_members = model.get_organization_member_set(namespace) - perm_view = wrap_role_view_org(perm_view, perm.user, org_members) - except model.InvalidOrganizationException: - # This repository is not part of an organization - pass - except model.DataModelException as ex: - return request_error(exception=ex) - - log_action('change_repo_permission', namespace, - {'username': username, 'repo': repository, - 'role': new_permission['role']}, - repo=model.get_repository(namespace, repository)) - - resp = jsonify(perm_view) - if request.method == 'POST': - resp.status_code = 201 - return resp - - abort(403) # Permission denied - - -@api.route('/repository//permissions/team/', - methods=['PUT', 'POST']) -@api_login_required -@parse_repository_name -def change_team_permissions(namespace, repository, teamname): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - new_permission = request.get_json() - - logger.debug('Setting permission to: %s for team %s' % - (new_permission['role'], teamname)) - - perm = model.set_team_repo_permission(teamname, namespace, repository, - new_permission['role']) - - log_action('change_repo_permission', namespace, - {'team': teamname, 'repo': repository, - 'role': new_permission['role']}, - repo=model.get_repository(namespace, repository)) - - resp = jsonify(role_view(perm)) - if request.method == 'POST': - resp.status_code = 201 - return resp - - abort(403) # Permission denied - - -@api.route('/repository//permissions/user/', - methods=['DELETE']) -@api_login_required -@parse_repository_name -def delete_user_permissions(namespace, repository, username): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - try: - model.delete_user_permission(username, namespace, repository) - except model.DataModelException as ex: - return request_error(exception=ex) - - log_action('delete_repo_permission', namespace, - {'username': username, 'repo': repository}, - repo=model.get_repository(namespace, repository)) - - return make_response('Deleted', 204) - - abort(403) # Permission denied - - -@api.route('/repository//permissions/team/', - methods=['DELETE']) -@api_login_required -@parse_repository_name -def delete_team_permissions(namespace, repository, teamname): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - model.delete_team_permission(teamname, namespace, repository) - - log_action('delete_repo_permission', namespace, - {'team': teamname, 'repo': repository}, - repo=model.get_repository(namespace, repository)) - - return make_response('Deleted', 204) - - abort(403) # Permission denied - - -def token_view(token_obj): - return { - 'friendlyName': token_obj.friendly_name, - 'code': token_obj.code, - 'role': token_obj.role.name, - } - - -@api.route('/repository//tokens/', methods=['GET']) -@api_login_required -@parse_repository_name -def list_repo_tokens(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - tokens = model.get_repository_delegate_tokens(namespace, repository) - - return jsonify({ - 'tokens': {token.code: token_view(token) for token in tokens} - }) - - abort(403) # Permission denied - - -@api.route('/repository//tokens/', methods=['GET']) -@api_login_required -@parse_repository_name -def get_tokens(namespace, repository, code): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - try: - perm = model.get_repo_delegate_token(namespace, repository, code) - except model.InvalidTokenException: - abort(404) - - return jsonify(token_view(perm)) - - abort(403) # Permission denied - - -@api.route('/repository//tokens/', methods=['POST']) -@api_login_required -@parse_repository_name -def create_token(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - token_params = request.get_json() - - token = model.create_delegate_token(namespace, repository, - token_params['friendlyName']) - - log_action('add_repo_accesstoken', namespace, - {'repo': repository, 'token': token_params['friendlyName']}, - repo = model.get_repository(namespace, repository)) - - resp = jsonify(token_view(token)) - resp.status_code = 201 - return resp - - abort(403) # Permission denied - - -@api.route('/repository//tokens/', methods=['PUT']) -@api_login_required -@parse_repository_name -def change_token(namespace, repository, code): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - new_permission = request.get_json() - - logger.debug('Setting permission to: %s for code %s' % - (new_permission['role'], code)) - - token = model.set_repo_delegate_token_role(namespace, repository, code, - new_permission['role']) - - log_action('change_repo_permission', namespace, - {'repo': repository, 'token': token.friendly_name, 'code': code, - 'role': new_permission['role']}, - repo = model.get_repository(namespace, repository)) - - resp = jsonify(token_view(token)) - return resp - - abort(403) # Permission denied - - -@api.route('/repository//tokens/', - methods=['DELETE']) -@api_login_required -@parse_repository_name -def delete_token(namespace, repository, code): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - token = model.delete_delegate_token(namespace, repository, code) - - log_action('delete_repo_accesstoken', namespace, - {'repo': repository, 'token': token.friendly_name, - 'code': code}, - repo = model.get_repository(namespace, repository)) - - return make_response('Deleted', 204) - - abort(403) # Permission denied - - -def subscription_view(stripe_subscription, used_repos): - return { - 'currentPeriodStart': stripe_subscription.current_period_start, - 'currentPeriodEnd': stripe_subscription.current_period_end, - 'plan': stripe_subscription.plan.id, - 'usedPrivateRepos': used_repos, - } - - -@api.route('/user/card', methods=['GET']) -@api_login_required -@internal_api_call -def get_user_card(): - user = current_user.db_user() - return get_card(user) - - -@api.route('/organization//card', methods=['GET']) -@api_login_required -@internal_api_call -@org_api_call('get_user_card') -def get_org_card(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - organization = model.get_organization(orgname) - return get_card(organization) - - abort(403) - - -@api.route('/user/card', methods=['POST']) -@api_login_required -@internal_api_call -def set_user_card(): - user = current_user.db_user() - token = request.get_json()['token'] - response = set_card(user, token) - log_action('account_change_cc', user.username) - return response - - -@api.route('/organization//card', methods=['POST']) -@api_login_required -@org_api_call('set_user_card') -def set_org_card(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - organization = model.get_organization(orgname) - token = request.get_json()['token'] - response = set_card(organization, token) - log_action('account_change_cc', orgname) - return response - - abort(403) - - -def set_card(user, token): - if user.stripe_id: - cus = stripe.Customer.retrieve(user.stripe_id) - if cus: - try: - cus.card = token - cus.save() - except stripe.CardError as e: - return carderror_response(e) - except stripe.InvalidRequestError as e: - return carderror_response(e) - - return get_card(user) - - -def get_card(user): - card_info = { - 'is_valid': False - } - - if user.stripe_id: - cus = stripe.Customer.retrieve(user.stripe_id) - if cus and cus.default_card: - # Find the default card. - default_card = None - for card in cus.cards.data: - if card.id == cus.default_card: - default_card = card - break - - if default_card: - card_info = { - 'owner': default_card.name, - 'type': default_card.type, - 'last4': default_card.last4 - } - - return jsonify({'card': card_info}) - -@api.route('/user/plan', methods=['PUT']) -@api_login_required -@internal_api_call -def update_user_subscription(): - request_data = request.get_json() - plan = request_data['plan'] - token = request_data['token'] if 'token' in request_data else None - user = current_user.db_user() - return subscribe(user, plan, token, False) # Business features not required - - -def carderror_response(e): - resp = jsonify({ - 'carderror': e.message, - }) - resp.status_code = 402 - return resp - - -def subscribe(user, plan, token, require_business_plan): - plan_found = None - for plan_obj in PLANS: - if plan_obj['stripeId'] == plan: - plan_found = plan_obj - - if not plan_found or plan_found['deprecated']: - logger.warning('Plan not found or deprecated: %s', plan) - abort(404) - - if (require_business_plan and not plan_found['bus_features'] and not - plan_found['price'] == 0): - logger.warning('Business attempting to subscribe to personal plan: %s', - user.username) - return request_error(message='No matching plan found') - - private_repos = model.get_private_repo_count(user.username) - - # This is the default response - response_json = { - 'plan': plan, - 'usedPrivateRepos': private_repos, - } - status_code = 200 - - if not user.stripe_id: - # Check if a non-paying user is trying to subscribe to a free plan - if not plan_found['price'] == 0: - # They want a real paying plan, create the customer and plan - # simultaneously - card = token - - try: - cus = stripe.Customer.create(email=user.email, plan=plan, card=card) - user.stripe_id = cus.id - user.save() - log_action('account_change_plan', user.username, {'plan': plan}) - except stripe.CardError as e: - return carderror_response(e) - - response_json = subscription_view(cus.subscription, private_repos) - status_code = 201 - - else: - # Change the plan - cus = stripe.Customer.retrieve(user.stripe_id) - - if plan_found['price'] == 0: - if cus.subscription is not None: - # We only have to cancel the subscription if they actually have one - cus.cancel_subscription() - cus.save() - log_action('account_change_plan', user.username, {'plan': plan}) - - else: - # User may have been a previous customer who is resubscribing - if token: - cus.card = token - - cus.plan = plan - - try: - cus.save() - except stripe.CardError as e: - return carderror_response(e) - - response_json = subscription_view(cus.subscription, private_repos) - log_action('account_change_plan', user.username, {'plan': plan}) - - resp = jsonify(response_json) - resp.status_code = status_code - return resp - - -@api.route('/user/invoices', methods=['GET']) -@api_login_required -def list_user_invoices(): - user = current_user.db_user() - if not user.stripe_id: - abort(404) - - return get_invoices(user.stripe_id) - - -@api.route('/organization//invoices', methods=['GET']) -@api_login_required -@org_api_call('list_user_invoices') -def list_org_invoices(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - organization = model.get_organization(orgname) - if not organization.stripe_id: - abort(404) - - return get_invoices(organization.stripe_id) - - abort(403) - - -def get_invoices(customer_id): - def invoice_view(i): - return { - 'id': i.id, - 'date': i.date, - 'period_start': i.period_start, - 'period_end': i.period_end, - 'paid': i.paid, - 'amount_due': i.amount_due, - 'next_payment_attempt': i.next_payment_attempt, - 'attempted': i.attempted, - 'closed': i.closed, - 'total': i.total, - 'plan': i.lines.data[0].plan.id if i.lines.data[0].plan else None - } - - invoices = stripe.Invoice.all(customer=customer_id, count=12) - return jsonify({ - 'invoices': [invoice_view(i) for i in invoices.data] - }) - - -@api.route('/organization//plan', methods=['PUT']) -@api_login_required -@internal_api_call -@org_api_call('update_user_subscription') -def update_org_subscription(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - request_data = request.get_json() - plan = request_data['plan'] - token = request_data['token'] if 'token' in request_data else None - organization = model.get_organization(orgname) - return subscribe(organization, plan, token, True) # Business plan required - - abort(403) - - -@api.route('/user/plan', methods=['GET']) -@api_login_required -@internal_api_call -def get_user_subscription(): - user = current_user.db_user() - private_repos = model.get_private_repo_count(user.username) - - if user.stripe_id: - cus = stripe.Customer.retrieve(user.stripe_id) - - if cus.subscription: - return jsonify(subscription_view(cus.subscription, private_repos)) - - return jsonify({ - 'plan': 'free', - 'usedPrivateRepos': private_repos, - }) - - -@api.route('/organization//plan', methods=['GET']) -@api_login_required -@internal_api_call -@org_api_call('get_user_subscription') -def get_org_subscription(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - private_repos = model.get_private_repo_count(orgname) - organization = model.get_organization(orgname) - if organization.stripe_id: - cus = stripe.Customer.retrieve(organization.stripe_id) - - if cus.subscription: - return jsonify(subscription_view(cus.subscription, private_repos)) - - return jsonify({ - 'plan': 'free', - 'usedPrivateRepos': private_repos, - }) - - abort(403) - - -def robot_view(name, token): - return { - 'name': name, - 'token': token, - } - - -@api.route('/user/robots', methods=['GET']) -@api_login_required -def get_user_robots(): - user = current_user.db_user() - robots = model.list_entity_robots(user.username) - return jsonify({ - 'robots': [robot_view(name, password) for name, password in robots] - }) - - -@api.route('/organization//robots', methods=['GET']) -@api_login_required -@org_api_call('get_user_robots') -def get_org_robots(orgname): - permission = OrganizationMemberPermission(orgname) - if permission.can(): - robots = model.list_entity_robots(orgname) - return jsonify({ - 'robots': [robot_view(name, password) for name, password in robots] - }) - - abort(403) - - -@api.route('/user/robots/', methods=['PUT']) -@api_login_required -def create_user_robot(robot_shortname): - parent = current_user.db_user() - robot, password = model.create_robot(robot_shortname, parent) - resp = jsonify(robot_view(robot.username, password)) - log_action('create_robot', parent.username, {'robot': robot_shortname}) - resp.status_code = 201 - return resp - - -@api.route('/organization//robots/', - methods=['PUT']) -@api_login_required -@org_api_call('create_user_robot') -def create_org_robot(orgname, robot_shortname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - parent = model.get_organization(orgname) - robot, password = model.create_robot(robot_shortname, parent) - resp = jsonify(robot_view(robot.username, password)) - log_action('create_robot', orgname, {'robot': robot_shortname}) - resp.status_code = 201 - return resp - - abort(403) - - -@api.route('/user/robots/', methods=['DELETE']) -@api_login_required -def delete_user_robot(robot_shortname): - parent = current_user.db_user() - model.delete_robot(format_robot_username(parent.username, robot_shortname)) - log_action('delete_robot', parent.username, {'robot': robot_shortname}) - return make_response('Deleted', 204) - - -@api.route('/organization//robots/', - methods=['DELETE']) -@api_login_required -@org_api_call('delete_user_robot') -def delete_org_robot(orgname, robot_shortname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - model.delete_robot(format_robot_username(orgname, robot_shortname)) - log_action('delete_robot', orgname, {'robot': robot_shortname}) - return make_response('Deleted', 204) - - abort(403) - - -def log_view(log): - view = { - 'kind': log.kind.name, - 'metadata': json.loads(log.metadata_json), - 'ip': log.ip, - 'datetime': log.datetime, - } - - if log.performer: - view['performer'] = { - 'kind': 'user', - 'name': log.performer.username, - 'is_robot': log.performer.robot, - } - - return view - - - -@api.route('/repository//logs', methods=['GET']) -@api_login_required -@parse_repository_name -def list_repo_logs(namespace, repository): - permission = AdministerRepositoryPermission(namespace, repository) - if permission.can(): - repo = model.get_repository(namespace, repository) - if not repo: - abort(404) - - start_time = request.args.get('starttime', None) - end_time = request.args.get('endtime', None) - return get_logs(namespace, start_time, end_time, repository=repo) - - abort(403) - - -@api.route('/organization//logs', methods=['GET']) -@api_login_required -@org_api_call('list_user_logs') -def list_org_logs(orgname): - permission = AdministerOrganizationPermission(orgname) - if permission.can(): - performer_name = request.args.get('performer', None) - start_time = request.args.get('starttime', None) - end_time = request.args.get('endtime', None) - - return get_logs(orgname, start_time, end_time, - performer_name=performer_name) - - abort(403) - - -@api.route('/user/logs', methods=['GET']) -@api_login_required -def list_user_logs(): - performer_name = request.args.get('performer', None) - start_time = request.args.get('starttime', None) - end_time = request.args.get('endtime', None) - - return get_logs(current_user.db_user().username, start_time, end_time, - performer_name=performer_name) - - -def get_logs(namespace, start_time, end_time, performer_name=None, - repository=None): - performer = None - if performer_name: - performer = model.get_user(performer_name) - - if start_time: - try: - start_time = datetime.strptime(start_time + ' UTC', '%m/%d/%Y %Z') - except ValueError: - start_time = None - - if not start_time: - start_time = datetime.today() - timedelta(7) # One week - - if end_time: - try: - end_time = datetime.strptime(end_time + ' UTC', '%m/%d/%Y %Z') - end_time = end_time + timedelta(days=1) - except ValueError: - end_time = None - - if not end_time: - end_time = datetime.today() - - logs = model.list_logs(namespace, start_time, end_time, performer=performer, - repository=repository) - return jsonify({ - 'start_time': start_time, - 'end_time': end_time, - 'logs': [log_view(log) for log in logs] - }) - diff --git a/endpoints/api/__init__.py b/endpoints/api/__init__.py new file mode 100644 index 000000000..60b5d7398 --- /dev/null +++ b/endpoints/api/__init__.py @@ -0,0 +1,281 @@ +import logging +import json + +from flask import Blueprint, request, make_response, jsonify +from flask.ext.restful import Resource, abort, Api, reqparse +from flask.ext.restful.utils.cors import crossdomain +from werkzeug.exceptions import HTTPException +from calendar import timegm +from email.utils import formatdate +from functools import partial, wraps +from jsonschema import validate, ValidationError + +from data import model +from util.names import parse_namespace_repository +from auth.permissions import (ReadRepositoryPermission, ModifyRepositoryPermission, + AdministerRepositoryPermission, UserReadPermission, + UserAdminPermission) +from auth import scopes +from auth.auth_context import get_authenticated_user, get_validated_oauth_token +from auth.auth import process_oauth +from endpoints.csrf import csrf_protect + + +logger = logging.getLogger(__name__) +api_bp = Blueprint('api', __name__) +api = Api() +api.init_app(api_bp) +api.decorators = [csrf_protect, + process_oauth, + crossdomain(origin='*', headers=['Authorization', 'Content-Type'])] + + +class ApiException(Exception): + def __init__(self, error_type, status_code, error_description, payload=None): + Exception.__init__(self) + self.error_description = error_description + self.status_code = status_code + self.payload = payload + self.error_type = error_type + + def to_dict(self): + rv = dict(self.payload or ()) + if self.error_description is not None: + rv['error_description'] = self.error_description + + rv['error_type'] = self.error_type + return rv + + +class InvalidRequest(ApiException): + def __init__(self, error_description, payload=None): + ApiException.__init__(self, 'invalid_request', 400, error_description, payload) + + +class InvalidToken(ApiException): + def __init__(self, error_description, payload=None): + ApiException.__init__(self, 'invalid_token', 401, error_description, payload) + + +class Unauthorized(ApiException): + def __init__(self, payload=None): + user = get_authenticated_user() + if user is None or user.organization: + ApiException.__init__(self, 'invalid_token', 401, "Requires authentication", payload) + else: + ApiException.__init__(self, 'insufficient_scope', 403, 'Unauthorized', payload) + + + +class NotFound(ApiException): + def __init__(self, payload=None): + ApiException.__init__(self, None, 404, 'Not Found', payload) + + +@api_bp.app_errorhandler(ApiException) +@crossdomain(origin='*', headers=['Authorization', 'Content-Type']) +def handle_api_error(error): + response = jsonify(error.to_dict()) + response.status_code = error.status_code + if error.error_type is not None: + response.headers['WWW-Authenticate'] = ('Bearer error="%s" error_description="%s"' % + (error.error_type, error.error_description)) + return response + + +def resource(*urls, **kwargs): + def wrapper(api_resource): + api.add_resource(api_resource, *urls, **kwargs) + return api_resource + return wrapper + + +def truthy_bool(param): + return param not in {False, 'false', 'False', '0', 'FALSE', '', 'null'} + + +def format_date(date): + """ Output an RFC822 date format. """ + if date is None: + return None + return formatdate(timegm(date.utctimetuple())) + + +def add_method_metadata(name, value): + def modifier(func): + if '__api_metadata' not in dir(func): + func.__api_metadata = {} + func.__api_metadata[name] = value + return func + return modifier + + +def method_metadata(func, name): + if '__api_metadata' in dir(func): + return func.__api_metadata.get(name, None) + return None + + +nickname = partial(add_method_metadata, 'nickname') +related_user_resource = partial(add_method_metadata, 'related_user_resource') +internal_only = add_method_metadata('internal', True) + + +def query_param(name, help_str, type=reqparse.text_type, default=None, + choices=(), required=False): + def add_param(func): + if '__api_query_params' not in dir(func): + func.__api_query_params = [] + func.__api_query_params.append({ + 'name': name, + 'type': type, + 'help': help_str, + 'default': default, + 'choices': choices, + 'required': required, + }) + return func + return add_param + + +def parse_args(func): + @wraps(func) + def wrapper(self, *args, **kwargs): + if '__api_query_params' not in dir(func): + abort(500) + + parser = reqparse.RequestParser() + for arg_spec in func.__api_query_params: + parser.add_argument(**arg_spec) + parsed_args = parser.parse_args() + + return func(self, parsed_args, *args, **kwargs) + return wrapper + + +def parse_repository_name(func): + @wraps(func) + def wrapper(repository, *args, **kwargs): + (namespace, repository) = parse_namespace_repository(repository) + return func(namespace, repository, *args, **kwargs) + return wrapper + + +class ApiResource(Resource): + def options(self): + return None, 200 + + +class RepositoryParamResource(ApiResource): + method_decorators = [parse_repository_name] + + +def require_repo_permission(permission_class, scope, allow_public=False): + def wrapper(func): + @add_method_metadata('oauth2_scope', scope) + @wraps(func) + def wrapped(self, namespace, repository, *args, **kwargs): + logger.debug('Checking permission %s for repo: %s/%s', permission_class, namespace, + repository) + permission = permission_class(namespace, repository) + if (permission.can() or + (allow_public and + model.repository_is_public(namespace, repository))): + return func(self, namespace, repository, *args, **kwargs) + raise Unauthorized() + return wrapped + return wrapper + + +require_repo_read = require_repo_permission(ReadRepositoryPermission, scopes.READ_REPO, True) +require_repo_write = require_repo_permission(ModifyRepositoryPermission, scopes.WRITE_REPO) +require_repo_admin = require_repo_permission(AdministerRepositoryPermission, scopes.ADMIN_REPO) + + +def require_user_permission(permission_class, scope=None): + def wrapper(func): + @add_method_metadata('oauth2_scope', scope) + @wraps(func) + def wrapped(self, *args, **kwargs): + user = get_authenticated_user() + if not user: + raise Unauthorized() + + logger.debug('Checking permission %s for user %s', permission_class, user.username) + permission = permission_class(user.username) + if permission.can(): + return func(self, *args, **kwargs) + raise Unauthorized() + return wrapped + return wrapper + + +require_user_read = require_user_permission(UserReadPermission, scopes.READ_USER) +require_user_admin = require_user_permission(UserAdminPermission, None) + + +def require_scope(scope_object): + def wrapper(func): + @add_method_metadata('oauth2_scope', scope_object) + @wraps(func) + def wrapped(*args, **kwargs): + return func(*args, **kwargs) + return wrapped + return wrapper + + +def validate_json_request(schema_name): + def wrapper(func): + @add_method_metadata('request_schema', schema_name) + @wraps(func) + def wrapped(self, *args, **kwargs): + schema = self.schemas[schema_name] + try: + validate(request.get_json(), schema) + return func(self, *args, **kwargs) + except ValidationError as ex: + raise InvalidRequest(ex.message) + return wrapped + return wrapper + + +def request_error(exception=None, **kwargs): + data = kwargs.copy() + message = 'Request error.' + if exception: + message = exception.message + raise InvalidRequest(message, data) + + +def log_action(kind, user_or_orgname, metadata=None, repo=None): + if not metadata: + metadata = {} + + oauth_token = get_validated_oauth_token() + if oauth_token: + metadata['oauth_token_id'] = oauth_token.id + metadata['oauth_token_application_id'] = oauth_token.application.client_id + metadata['oauth_token_application'] = oauth_token.application.name + + performer = get_authenticated_user() + model.log_action(kind, user_or_orgname, performer=performer, ip=request.remote_addr, + metadata=metadata, repository=repo) + + +import endpoints.api.billing +import endpoints.api.build +import endpoints.api.discovery +import endpoints.api.image +import endpoints.api.logs +import endpoints.api.organization +import endpoints.api.permission +import endpoints.api.prototype +import endpoints.api.repository +import endpoints.api.repotoken +import endpoints.api.robot +import endpoints.api.search +import endpoints.api.tag +import endpoints.api.team +import endpoints.api.trigger +import endpoints.api.user +import endpoints.api.webhook diff --git a/endpoints/api/billing.py b/endpoints/api/billing.py new file mode 100644 index 000000000..1f31aa58b --- /dev/null +++ b/endpoints/api/billing.py @@ -0,0 +1,326 @@ +import stripe + +from flask import request + +from endpoints.api import (resource, nickname, ApiResource, validate_json_request, log_action, + related_user_resource, internal_only, Unauthorized, NotFound, + require_user_admin) +from endpoints.api.subscribe import subscribe, subscription_view +from auth.permissions import AdministerOrganizationPermission +from auth.auth_context import get_authenticated_user +from data import model +from data.plans import PLANS + + +def carderror_response(e): + return {'carderror': e.message}, 402 + + +def get_card(user): + card_info = { + 'is_valid': False + } + + if user.stripe_id: + cus = stripe.Customer.retrieve(user.stripe_id) + if cus and cus.default_card: + # Find the default card. + default_card = None + for card in cus.cards.data: + if card.id == cus.default_card: + default_card = card + break + + if default_card: + card_info = { + 'owner': default_card.name, + 'type': default_card.type, + 'last4': default_card.last4 + } + + return {'card': card_info} + + +def set_card(user, token): + if user.stripe_id: + cus = stripe.Customer.retrieve(user.stripe_id) + if cus: + try: + cus.card = token + cus.save() + except stripe.CardError as exc: + return carderror_response(exc) + except stripe.InvalidRequestError as exc: + return carderror_response(exc) + + return get_card(user) + + +def get_invoices(customer_id): + def invoice_view(i): + return { + 'id': i.id, + 'date': i.date, + 'period_start': i.period_start, + 'period_end': i.period_end, + 'paid': i.paid, + 'amount_due': i.amount_due, + 'next_payment_attempt': i.next_payment_attempt, + 'attempted': i.attempted, + 'closed': i.closed, + 'total': i.total, + 'plan': i.lines.data[0].plan.id if i.lines.data[0].plan else None + } + + invoices = stripe.Invoice.all(customer=customer_id, count=12) + return { + 'invoices': [invoice_view(i) for i in invoices.data] + } + + +@resource('/v1/plans/') +class ListPlans(ApiResource): + """ Resource for listing the available plans. """ + @nickname('listPlans') + def get(self): + """ List the avaialble plans. """ + return { + 'plans': PLANS, + } + + +@resource('/v1/user/card') +@internal_only +class UserCard(ApiResource): + """ Resource for managing a user's credit card. """ + schemas = { + 'UserCard': { + 'id': 'UserCard', + 'type': 'object', + 'description': 'Description of a user card', + 'required': [ + 'token', + ], + 'properties': { + 'token': { + 'type': 'string', + 'description': 'Stripe token that is generated by stripe checkout.js', + }, + }, + }, + } + + @require_user_admin + @nickname('getUserCard') + def get(self): + """ Get the user's credit card. """ + user = get_authenticated_user() + return get_card(user) + + @require_user_admin + @nickname('setUserCard') + @validate_json_request('UserCard') + def post(self): + """ Update the user's credit card. """ + user = get_authenticated_user() + token = request.get_json()['token'] + response = set_card(user, token) + log_action('account_change_cc', user.username) + return response + + +@resource('/v1/organization//card') +@internal_only +@related_user_resource(UserCard) +class OrganizationCard(ApiResource): + """ Resource for managing an organization's credit card. """ + schemas = { + 'OrgCard': { + 'id': 'OrgCard', + 'type': 'object', + 'description': 'Description of a user card', + 'required': [ + 'token', + ], + 'properties': { + 'token': { + 'type': 'string', + 'description': 'Stripe token that is generated by stripe checkout.js', + }, + }, + }, + } + + @nickname('getOrgCard') + def get(self, orgname): + """ Get the organization's credit card. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + organization = model.get_organization(orgname) + return get_card(organization) + + raise Unauthorized() + + @nickname('setOrgCard') + @validate_json_request('OrgCard') + def post(self, orgname): + """ Update the orgnaization's credit card. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + organization = model.get_organization(orgname) + token = request.get_json()['token'] + response = set_card(organization, token) + log_action('account_change_cc', orgname) + return response + + raise Unauthorized() + + +@resource('/v1/user/plan') +@internal_only +class UserPlan(ApiResource): + """ Resource for managing a user's subscription. """ + schemas = { + 'UserSubscription': { + 'id': 'UserSubscription', + 'type': 'object', + 'description': 'Description of a user card', + 'required': [ + 'plan', + ], + 'properties': { + 'token': { + 'type': 'string', + 'description': 'Stripe token that is generated by stripe checkout.js', + }, + 'plan': { + 'type': 'string', + 'description': 'Plan name to which the user wants to subscribe', + }, + }, + }, + } + + @require_user_admin + @nickname('updateUserSubscription') + @validate_json_request('UserSubscription') + def put(self): + """ Create or update the user's subscription. """ + request_data = request.get_json() + plan = request_data['plan'] + token = request_data['token'] if 'token' in request_data else None + user = get_authenticated_user() + return subscribe(user, plan, token, False) # Business features not required + + @require_user_admin + @nickname('getUserSubscription') + def get(self): + """ Fetch any existing subscription for the user. """ + user = get_authenticated_user() + private_repos = model.get_private_repo_count(user.username) + + if user.stripe_id: + cus = stripe.Customer.retrieve(user.stripe_id) + + if cus.subscription: + return subscription_view(cus.subscription, private_repos) + + return { + 'plan': 'free', + 'usedPrivateRepos': private_repos, + } + + +@resource('/v1/organization//plan') +@internal_only +@related_user_resource(UserPlan) +class OrganizationPlan(ApiResource): + """ Resource for managing a org's subscription. """ + schemas = { + 'OrgSubscription': { + 'id': 'OrgSubscription', + 'type': 'object', + 'description': 'Description of a user card', + 'required': [ + 'plan', + ], + 'properties': { + 'token': { + 'type': 'string', + 'description': 'Stripe token that is generated by stripe checkout.js', + }, + 'plan': { + 'type': 'string', + 'description': 'Plan name to which the user wants to subscribe', + }, + }, + }, + } + + @nickname('updateOrgSubscription') + @validate_json_request('OrgSubscription') + def put(self, orgname): + """ Create or update the org's subscription. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + request_data = request.get_json() + plan = request_data['plan'] + token = request_data['token'] if 'token' in request_data else None + organization = model.get_organization(orgname) + return subscribe(organization, plan, token, True) # Business plan required + + raise Unauthorized() + + @nickname('getOrgSubscription') + def get(self, orgname): + """ Fetch any existing subscription for the org. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + private_repos = model.get_private_repo_count(orgname) + organization = model.get_organization(orgname) + if organization.stripe_id: + cus = stripe.Customer.retrieve(organization.stripe_id) + + if cus.subscription: + return subscription_view(cus.subscription, private_repos) + + return { + 'plan': 'free', + 'usedPrivateRepos': private_repos, + } + + raise Unauthorized() + + +@resource('/v1/user/invoices') +@internal_only +class UserInvoiceList(ApiResource): + """ Resource for listing a user's invoices. """ + @require_user_admin + @nickname('listUserInvoices') + def get(self): + """ List the invoices for the current user. """ + user = get_authenticated_user() + if not user.stripe_id: + raise NotFound() + + return get_invoices(user.stripe_id) + + +@resource('/v1/organization//invoices') +@internal_only +@related_user_resource(UserInvoiceList) +class OrgnaizationInvoiceList(ApiResource): + """ Resource for listing an orgnaization's invoices. """ + @nickname('listOrgInvoices') + def get(self, orgname): + """ List the invoices for the specified orgnaization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + organization = model.get_organization(orgname) + if not organization.stripe_id: + raise NotFound() + + return get_invoices(organization.stripe_id) + + raise Unauthorized() \ No newline at end of file diff --git a/endpoints/api/build.py b/endpoints/api/build.py new file mode 100644 index 000000000..f14d097bb --- /dev/null +++ b/endpoints/api/build.py @@ -0,0 +1,213 @@ +import logging +import json + +from flask import request + +from app import app +from endpoints.api import (RepositoryParamResource, parse_args, query_param, nickname, resource, + require_repo_read, require_repo_write, validate_json_request, + ApiResource, internal_only, format_date, api, Unauthorized, NotFound) +from endpoints.common import start_build +from endpoints.trigger import BuildTrigger +from data import model +from auth.permissions import ModifyRepositoryPermission + + +logger = logging.getLogger(__name__) +user_files = app.config['USERFILES'] +build_logs = app.config['BUILDLOGS'] + + +def get_trigger_config(trigger): + try: + return json.loads(trigger.config) + except: + return {} + + +def get_job_config(build_obj): + try: + return json.loads(build_obj.job_config) + except: + return None + + +def trigger_view(trigger): + if trigger and trigger.uuid: + config_dict = get_trigger_config(trigger) + build_trigger = BuildTrigger.get_trigger_for_service(trigger.service.name) + return { + 'service': trigger.service.name, + 'config': config_dict, + 'id': trigger.uuid, + 'connected_user': trigger.connected_user.username, + 'is_active': build_trigger.is_active(config_dict) + } + + return None + + +def build_status_view(build_obj, can_write=False): + status = build_logs.get_status(build_obj.uuid) + logger.debug('Can write: %s job_config: %s', can_write, build_obj.job_config) + resp = { + 'id': build_obj.uuid, + 'phase': build_obj.phase if status else 'cannot_load', + 'started': format_date(build_obj.started), + 'display_name': build_obj.display_name, + 'status': status or {}, + 'job_config': get_job_config(build_obj) if can_write else None, + 'is_writer': can_write, + 'trigger': trigger_view(build_obj.trigger), + 'resource_key': build_obj.resource_key, + } + + if can_write: + resp['archive_url'] = user_files.get_file_url(build_obj.resource_key) + + return resp + + +@resource('/v1/repository//build/') +class RepositoryBuildList(RepositoryParamResource): + """ Resource related to creating and listing repository builds. """ + schemas = { + 'RepositoryBuildRequest': { + 'id': 'RepositoryBuildRequest', + 'type': 'object', + 'description': 'Description of a new repository build.', + 'required': [ + 'file_id', + ], + 'properties': { + 'file_id': { + 'type': 'string', + 'description': 'The file id that was generated when the build spec was uploaded', + }, + 'subdirectory': { + 'type': 'string', + 'description': 'Subdirectory in which the Dockerfile can be found', + }, + }, + }, + } + + @require_repo_read + @parse_args + @query_param('limit', 'The maximum number of builds to return', type=int, default=5) + @nickname('getRepoBuilds') + def get(self, args, namespace, repository): + """ Get the list of repository builds. """ + limit = args['limit'] + builds = list(model.list_repository_builds(namespace, repository, limit)) + + can_write = ModifyRepositoryPermission(namespace, repository).can() + return { + 'builds': [build_status_view(build, can_write) for build in builds] + } + + @require_repo_write + @nickname('requestRepoBuild') + @validate_json_request('RepositoryBuildRequest') + def post(self, namespace, repository): + """ Request that a repository be built and pushed from the specified input. """ + logger.debug('User requested repository initialization.') + request_json = request.get_json() + + dockerfile_id = request_json['file_id'] + subdir = request_json['subdirectory'] if 'subdirectory' in request_json else '' + + # Check if the dockerfile resource has already been used. If so, then it + # can only be reused if the user has access to the repository for which it + # was used. + associated_repository = model.get_repository_for_resource(dockerfile_id) + if associated_repository: + if not ModifyRepositoryPermission(associated_repository.namespace, + associated_repository.name): + raise Unauthorized() + + # Start the build. + repo = model.get_repository(namespace, repository) + display_name = user_files.get_file_checksum(dockerfile_id) + + build_request = start_build(repo, dockerfile_id, ['latest'], display_name, subdir, True) + + resp = build_status_view(build_request, True) + repo_string = '%s/%s' % (namespace, repository) + headers = { + 'Location': api.url_for(RepositoryBuildStatus, repository=repo_string, + build_uuid=build_request.uuid), + } + return resp, 201, headers + + +@resource('/v1/repository//build//status') +class RepositoryBuildStatus(RepositoryParamResource): + """ Resource for dealing with repository build status. """ + @require_repo_read + @nickname('getRepoBuildStatus') + def get(self, namespace, repository, build_uuid): + """ Return the status for the builds specified by the build uuids. """ + build = model.get_repository_build(namespace, repository, build_uuid) + if not build: + raise NotFound() + + can_write = ModifyRepositoryPermission(namespace, repository).can() + return build_status_view(build, can_write) + + +@resource('/v1/repository//build//logs') +class RepositoryBuildLogs(RepositoryParamResource): + """ Resource for loading repository build logs. """ + @require_repo_write + @nickname('getRepoBuildLogs') + def get(self, namespace, repository, build_uuid): + """ Return the build logs for the build specified by the build uuid. """ + response_obj = {} + + build = model.get_repository_build(namespace, repository, build_uuid) + + start = int(request.args.get('start', 0)) + + count, logs = build_logs.get_log_entries(build.uuid, start) + + response_obj.update({ + 'start': start, + 'total': count, + 'logs': [log for log in logs], + }) + + return response_obj + + +@resource('/v1/filedrop/') +@internal_only +class FileDropResource(ApiResource): + """ Custom verb for setting up a client side file transfer. """ + schemas = { + 'FileDropRequest': { + 'id': 'FileDropRequest', + 'type': 'object', + 'description': 'Description of the file that the user wishes to upload.', + 'required': [ + 'mimeType', + ], + 'properties': { + 'mimeType': { + 'type': 'string', + 'description': 'Type of the file which is about to be uploaded', + }, + }, + }, + } + + @nickname('getFiledropUrl') + @validate_json_request('FileDropRequest') + def post(self): + """ Request a URL to which a file may be uploaded. """ + mime_type = request.get_json()['mimeType'] + (url, file_id) = user_files.prepare_for_drop(mime_type) + return { + 'url': url, + 'file_id': str(file_id), + } diff --git a/endpoints/api/discovery.py b/endpoints/api/discovery.py new file mode 100644 index 000000000..212d6654e --- /dev/null +++ b/endpoints/api/discovery.py @@ -0,0 +1,184 @@ +import re +import logging + +from flask.ext.restful import reqparse + +from endpoints.api import (ApiResource, resource, method_metadata, nickname, truthy_bool, + parse_args, query_param) +from app import app +from auth import scopes + + +logger = logging.getLogger(__name__) + + +PARAM_REGEX = re.compile(r'<([\w]+:)?([\w]+)>') + + +TYPE_CONVERTER = { + truthy_bool: 'boolean', + str: 'string', + basestring: 'string', + reqparse.text_type: 'string', + int: 'integer', +} + +URL_SCHEME = app.config['URL_SCHEME'] +URL_HOST = app.config['URL_HOST'] + + +def fully_qualified_name(method_view_class): + inst = method_view_class() + return '%s.%s' % (inst.__module__, inst.__class__.__name__) + + +def swagger_route_data(include_internal=False, compact=False): + apis = [] + models = {} + for rule in app.url_map.iter_rules(): + endpoint_method = app.view_functions[rule.endpoint] + + if 'view_class' in dir(endpoint_method): + view_class = endpoint_method.view_class + operations = [] + + method_names = list(rule.methods.difference(['HEAD', 'OPTIONS'])) + for method_name in method_names: + method = getattr(view_class, method_name.lower(), None) + + parameters = [] + for param in rule.arguments: + parameters.append({ + 'paramType': 'path', + 'name': param, + 'dataType': 'string', + 'description': 'Param description.', + 'required': True, + }) + + if method is None: + logger.debug('Unable to find method for %s in class %s', method_name, view_class) + else: + req_schema_name = method_metadata(method, 'request_schema') + if req_schema_name: + parameters.append({ + 'paramType': 'body', + 'name': 'body', + 'description': 'Request body contents.', + 'dataType': req_schema_name, + 'required': True, + }) + + schema = view_class.schemas[req_schema_name] + models[req_schema_name] = schema + + if '__api_query_params' in dir(method): + for param_spec in method.__api_query_params: + new_param = { + 'paramType': 'query', + 'name': param_spec['name'], + 'description': param_spec['help'], + 'dataType': TYPE_CONVERTER[param_spec['type']], + 'required': param_spec['required'], + } + + if len(param_spec['choices']) > 0: + new_param['enum'] = list(param_spec['choices']) + + parameters.append(new_param) + + new_operation = { + 'method': method_name, + 'nickname': method_metadata(method, 'nickname') + } + + if not compact: + new_operation.update({ + 'type': 'void', + 'summary': method.__doc__ if method.__doc__ else '', + 'parameters': parameters, + }) + + + scope = method_metadata(method, 'oauth2_scope') + if scope and not compact: + new_operation['authorizations'] = { + 'oauth2': [ + { + 'scope': scope.scope + } + ], + } + + internal = method_metadata(method, 'internal') + if internal is not None: + new_operation['internal'] = True + + if not internal or (internal and include_internal): + operations.append(new_operation) + + swagger_path = PARAM_REGEX.sub(r'{\2}', rule.rule) + new_resource = { + 'path': swagger_path, + 'description': view_class.__doc__ if view_class.__doc__ else "", + 'operations': operations, + 'name': fully_qualified_name(view_class), + } + + related_user_res = method_metadata(view_class, 'related_user_resource') + if related_user_res is not None: + new_resource['quayUserRelated'] = fully_qualified_name(related_user_res) + + internal = method_metadata(view_class, 'internal') + if internal is not None: + new_resource['internal'] = True + + if not internal or (internal and include_internal): + apis.append(new_resource) + + # If compact form was requested, simply return the APIs. + if compact: + return {'apis': apis} + + swagger_data = { + 'apiVersion': 'v1', + 'swaggerVersion': '1.2', + 'basePath': '%s://%s' % (URL_SCHEME, URL_HOST), + 'resourcePath': '/', + 'info': { + 'title': 'Quay.io API', + 'description': ('This API allows you to perform many of the operations required to work ' + 'with Quay.io repositories, users, and organizations. You can find out more ' + 'at Quay.io.'), + 'termsOfServiceUrl': 'https://quay.io/tos', + 'contact': 'support@quay.io', + }, + 'authorizations': { + 'oauth2': { + 'scopes': [scope._asdict() for scope in scopes.ALL_SCOPES.values()], + 'grantTypes': { + "implicit": { + "tokenName": "access_token", + "loginEndpoint": { + "url": "%s://%s/oauth/authorize" % (URL_SCHEME, URL_HOST), + }, + }, + }, + }, + }, + 'apis': apis, + 'models': models, + } + + return swagger_data + + +@resource('/v1/discovery') +class DiscoveryResource(ApiResource): + """Ability to inspect the API for usage information and documentation.""" + @parse_args + @query_param('internal', 'Whether to include internal APIs.', type=truthy_bool, default=False) + @nickname('discovery') + def get(self, args): + """ List all of the API endpoints available in the swagger API format.""" + return swagger_route_data(args['internal']) diff --git a/endpoints/api/image.py b/endpoints/api/image.py new file mode 100644 index 000000000..edfae14b8 --- /dev/null +++ b/endpoints/api/image.py @@ -0,0 +1,92 @@ +import json + +from collections import defaultdict + +from app import app +from endpoints.api import (resource, nickname, require_repo_read, RepositoryParamResource, + format_date, NotFound) +from data import model +from util.cache import cache_control_flask_restful + + +store = app.config['STORAGE'] + + +def image_view(image): + extended_props = image + if image.storage and image.storage.id: + extended_props = image.storage + + command = extended_props.command + return { + 'id': image.docker_image_id, + 'created': format_date(extended_props.created), + 'comment': extended_props.comment, + 'command': json.loads(command) if command else None, + 'ancestors': image.ancestors, + 'dbid': image.id, + 'size': extended_props.image_size, + } + + +@resource('/v1/repository//image/') +class RepositoryImageList(RepositoryParamResource): + """ Resource for listing repository images. """ + @require_repo_read + @nickname('listRepositoryImages') + def get(self, namespace, repository): + """ List the images for the specified repository. """ + all_images = model.get_repository_images(namespace, repository) + all_tags = model.list_repository_tags(namespace, repository) + + tags_by_image_id = defaultdict(list) + for tag in all_tags: + tags_by_image_id[tag.image.docker_image_id].append(tag.name) + + + def add_tags(image_json): + image_json['tags'] = tags_by_image_id[image_json['id']] + return image_json + + + return { + 'images': [add_tags(image_view(image)) for image in all_images] + } + + +@resource('/v1/repository//image/') +class RepositoryImage(RepositoryParamResource): + """ Resource for handling repository images. """ + @require_repo_read + @nickname('getImage') + def get(self, namespace, repository, image_id): + """ Get the information available for the specified image. """ + image = model.get_repo_image(namespace, repository, image_id) + if not image: + raise NotFound() + + return image_view(image) + + +@resource('/v1/repository//image//changes') +class RepositoryImageChanges(RepositoryParamResource): + """ Resource for handling repository image change lists. """ + + @cache_control_flask_restful(max_age=60*60) # Cache for one hour + @require_repo_read + @nickname('getImageChanges') + def get(self, namespace, repository, image_id): + """ Get the list of changes for the specified image. """ + image = model.get_repo_image(namespace, repository, image_id) + + if not image: + raise NotFound() + + uuid = image.storage and image.storage.uuid + diffs_path = store.image_file_diffs_path(namespace, repository, image_id, uuid) + + try: + response_json = json.loads(store.get_content(diffs_path)) + return response_json + except IOError: + raise NotFound() diff --git a/endpoints/api/logs.py b/endpoints/api/logs.py new file mode 100644 index 000000000..abd2c3e03 --- /dev/null +++ b/endpoints/api/logs.py @@ -0,0 +1,126 @@ +import json + +from datetime import datetime, timedelta + +from endpoints.api import (resource, nickname, ApiResource, query_param, parse_args, + RepositoryParamResource, require_repo_admin, related_user_resource, + format_date, Unauthorized, NotFound, require_user_admin, + internal_only) +from auth.permissions import AdministerOrganizationPermission, AdministerOrganizationPermission +from auth.auth_context import get_authenticated_user +from data import model + + +def log_view(log): + view = { + 'kind': log.kind.name, + 'metadata': json.loads(log.metadata_json), + 'ip': log.ip, + 'datetime': format_date(log.datetime), + } + + if log.performer: + view['performer'] = { + 'kind': 'user', + 'name': log.performer.username, + 'is_robot': log.performer.robot, + } + + return view + + +def get_logs(namespace, start_time, end_time, performer_name=None, + repository=None): + performer = None + if performer_name: + performer = model.get_user(performer_name) + + if start_time: + try: + start_time = datetime.strptime(start_time + ' UTC', '%m/%d/%Y %Z') + except ValueError: + start_time = None + + if not start_time: + start_time = datetime.today() - timedelta(7) # One week + + if end_time: + try: + end_time = datetime.strptime(end_time + ' UTC', '%m/%d/%Y %Z') + end_time = end_time + timedelta(days=1) + except ValueError: + end_time = None + + if not end_time: + end_time = datetime.today() + + logs = model.list_logs(namespace, start_time, end_time, performer=performer, + repository=repository) + return { + 'start_time': format_date(start_time), + 'end_time': format_date(end_time), + 'logs': [log_view(log) for log in logs] + } + + +@resource('/v1/repository//logs') +@internal_only +class RepositoryLogs(RepositoryParamResource): + """ Resource for fetching logs for the specific repository. """ + @require_repo_admin + @nickname('listRepoLogs') + @parse_args + @query_param('starttime', 'Earliest time from which to get logs (%m/%d/%Y %Z)', type=str) + @query_param('endtime', 'Latest time to which to get logs (%m/%d/%Y %Z)', type=str) + def get(self, args, namespace, repository): + """ List the logs for the specified repository. """ + repo = model.get_repository(namespace, repository) + if not repo: + raise NotFound() + + start_time = args['starttime'] + end_time = args['endtime'] + return get_logs(namespace, start_time, end_time, repository=repo) + + +@resource('/v1/user/logs') +@internal_only +class UserLogs(ApiResource): + """ Resource for fetching logs for the current user. """ + @require_user_admin + @nickname('listUserLogs') + @parse_args + @query_param('starttime', 'Earliest time from which to get logs. (%m/%d/%Y %Z)', type=str) + @query_param('endtime', 'Latest time to which to get logs. (%m/%d/%Y %Z)', type=str) + @query_param('performer', 'Username for which to filter logs.', type=str) + def get(self, args): + """ List the logs for the current user. """ + performer_name = args['performer'] + start_time = args['starttime'] + end_time = args['endtime'] + + user = get_authenticated_user() + return get_logs(user.username, start_time, end_time, performer_name=performer_name) + + +@resource('/v1/organization//logs') +@internal_only +@related_user_resource(UserLogs) +class OrgLogs(ApiResource): + """ Resource for fetching logs for the entire organization. """ + @nickname('listOrgLogs') + @parse_args + @query_param('starttime', 'Earliest time from which to get logs. (%m/%d/%Y %Z)', type=str) + @query_param('endtime', 'Latest time to which to get logs. (%m/%d/%Y %Z)', type=str) + @query_param('performer', 'Username for which to filter logs.', type=str) + def get(self, args, orgname): + """ List the logs for the specified organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + performer_name = args['performer'] + start_time = args['starttime'] + end_time = args['endtime'] + + return get_logs(orgname, start_time, end_time, performer_name=performer_name) + + raise Unauthorized() \ No newline at end of file diff --git a/endpoints/api/organization.py b/endpoints/api/organization.py new file mode 100644 index 000000000..9cb6a267a --- /dev/null +++ b/endpoints/api/organization.py @@ -0,0 +1,520 @@ +import logging +import stripe + +from flask import request + +from endpoints.api import (resource, nickname, ApiResource, validate_json_request, request_error, + related_user_resource, internal_only, Unauthorized, NotFound, + require_user_admin, log_action) +from endpoints.api.team import team_view +from endpoints.api.user import User, PrivateRepositories +from auth.permissions import (AdministerOrganizationPermission, OrganizationMemberPermission, + CreateRepositoryPermission) +from auth.auth_context import get_authenticated_user +from data import model +from data.plans import get_plan +from util.gravatar import compute_hash + + +logger = logging.getLogger(__name__) + + + +def org_view(o, teams): + admin_org = AdministerOrganizationPermission(o.username) + is_admin = admin_org.can() + view = { + 'name': o.username, + 'email': o.email if is_admin else '', + 'gravatar': compute_hash(o.email), + 'teams': {t.name : team_view(o.username, t) for t in teams}, + 'is_admin': is_admin + } + + if is_admin: + view['invoice_email'] = o.invoice_email + + return view + + +@resource('/v1/organization/') +@internal_only +class OrganizationList(ApiResource): + """ Resource for creating organizations. """ + schemas = { + 'NewOrg': { + 'id': 'NewOrg', + 'type': 'object', + 'description': 'Description of a new organization.', + 'required': [ + 'name', + 'email', + ], + 'properties': { + 'name': { + 'type': 'string', + 'description': 'Organization username', + }, + 'email': { + 'type': 'string', + 'description': 'Organization contact email', + }, + }, + }, + } + + @require_user_admin + @nickname('createOrganization') + @validate_json_request('NewOrg') + def post(self): + """ Create a new organization. """ + user = get_authenticated_user() + org_data = request.get_json() + existing = None + + try: + existing = model.get_organization(org_data['name']) + except model.InvalidOrganizationException: + pass + + if not existing: + try: + existing = model.get_user(org_data['name']) + except model.InvalidUserException: + pass + + if existing: + msg = 'A user or organization with this name already exists' + raise request_error(message=msg) + + try: + model.create_organization(org_data['name'], org_data['email'], user) + return 'Created', 201 + except model.DataModelException as ex: + raise request_error(exception=ex) + + +@resource('/v1/organization/') +@internal_only +@related_user_resource(User) +class Organization(ApiResource): + """ Resource for managing organizations. """ + schemas = { + 'UpdateOrg': { + 'id': 'UpdateOrg', + 'type': 'object', + 'description': 'Description of updates for an existing organization', + 'properties': { + 'email': { + 'type': 'string', + 'description': 'Organization contact email', + }, + 'invoice_email': { + 'type': 'boolean', + 'description': 'Whether the organization desires to receive emails for invoices', + }, + }, + }, + } + @nickname('getOrganization') + def get(self, orgname): + """ Get the details for the specified organization """ + permission = OrganizationMemberPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + teams = model.get_teams_within_org(org) + return org_view(org, teams) + + raise Unauthorized() + + @nickname('changeOrganizationDetails') + @validate_json_request('UpdateOrg') + def put(self, orgname): + """ Change the details for the specified organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + org_data = request.get_json() + if 'invoice_email' in org_data: + logger.debug('Changing invoice_email for organization: %s', org.username) + model.change_invoice_email(org, org_data['invoice_email']) + + if 'email' in org_data and org_data['email'] != org.email: + new_email = org_data['email'] + if model.find_user_by_email(new_email): + raise request_error(message='E-mail address already used') + + logger.debug('Changing email address for organization: %s', org.username) + model.update_email(org, new_email) + + teams = model.get_teams_within_org(org) + return org_view(org, teams) + raise Unauthorized() + + +@resource('/v1/organization//private') +@internal_only +@related_user_resource(PrivateRepositories) +class OrgPrivateRepositories(ApiResource): + """ Custom verb to compute whether additional private repositories are available. """ + @nickname('getOrganizationPrivateAllowed') + def get(self, orgname): + """ Return whether or not this org is allowed to create new private repositories. """ + permission = CreateRepositoryPermission(orgname) + if permission.can(): + organization = model.get_organization(orgname) + private_repos = model.get_private_repo_count(organization.username) + data = { + 'privateAllowed': False + } + + if organization.stripe_id: + cus = stripe.Customer.retrieve(organization.stripe_id) + if cus.subscription: + repos_allowed = 0 + plan = get_plan(cus.subscription.plan.id) + if plan: + repos_allowed = plan['privateRepos'] + + data['privateAllowed'] = (private_repos < repos_allowed) + + + if AdministerOrganizationPermission(orgname).can(): + data['privateCount'] = private_repos + + return data + + raise Unauthorized() + + +@resource('/v1/organization//members') +@internal_only +class OrgnaizationMemberList(ApiResource): + """ Resource for listing the members of an organization. """ + @nickname('getOrganizationMembers') + def get(self, orgname): + """ List the members of the specified organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + # Loop to create the members dictionary. Note that the members collection + # will return an entry for *every team* a member is on, so we will have + # duplicate keys (which is why we pre-build the dictionary). + members_dict = {} + members = model.get_organization_members_with_teams(org) + for member in members: + if not member.user.username in members_dict: + members_dict[member.user.username] = {'name': member.user.username, + 'kind': 'user', + 'is_robot': member.user.robot, + 'teams': []} + + members_dict[member.user.username]['teams'].append(member.team.name) + + return {'members': members_dict} + + raise Unauthorized() + + +@resource('/v1/organization//members/') +@internal_only +class OrganizationMember(ApiResource): + """ Resource for managing individual organization members. """ + @nickname('getOrganizationMember') + def get(self, orgname, membername): + """ Get information on the specific orgnaization member. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + member_dict = None + member_teams = model.get_organization_members_with_teams(org, membername=membername) + for member in member_teams: + if not member_dict: + member_dict = {'name': member.user.username, + 'kind': 'user', + 'is_robot': member.user.robot, + 'teams': []} + + member_dict['teams'].append(member.team.name) + + if not member_dict: + raise NotFound() + + return {'member': member_dict} + + raise Unauthorized() + + +@resource('/v1/app/') +class ApplicationInformation(ApiResource): + """ Resource that returns public information about a registered application. """ + @nickname('getApplicationInformation') + def get(self, client_id): + """ Get information on the specified application. """ + application = model.oauth.get_application_for_client_id(client_id) + if not application: + raise NotFound() + + org_hash = compute_hash(application.organization.email) + gravatar = compute_hash(application.gravatar_email) if application.gravatar_email else org_hash + + return { + 'name': application.name, + 'description': application.description, + 'uri': application.application_uri, + 'gravatar': gravatar, + 'organization': org_view(application.organization, []) + } + + +def app_view(application): + is_admin = AdministerOrganizationPermission(application.organization.username).can() + + return { + 'name': application.name, + 'description': application.description, + 'application_uri': application.application_uri, + + 'client_id': application.client_id, + 'client_secret': application.client_secret if is_admin else None, + 'redirect_uri': application.redirect_uri if is_admin else None, + 'gravatar_email': application.gravatar_email if is_admin else None, + } + + +@resource('/v1/organization//applications') +@internal_only +class OrganizationApplications(ApiResource): + """ Resource for managing applications defined by an organizations. """ + schemas = { + 'NewApp': { + 'id': 'NewApp', + 'type': 'object', + 'description': 'Description of a new organization application.', + 'required': [ + 'name', + ], + 'properties': { + 'name': { + 'type': 'string', + 'description': 'The name of the application', + }, + 'redirect_uri': { + 'type': 'string', + 'description': 'The URI for the application\'s OAuth redirect', + }, + 'application_uri': { + 'type': 'string', + 'description': 'The URI for the application\'s homepage', + }, + 'description': { + 'type': 'string', + 'description': 'The human-readable description for the application', + }, + 'gravatar_email': { + 'type': 'string', + 'description': 'The e-mail address of the gravatar to use for the application', + } + }, + }, + } + + + @nickname('getOrganizationApplications') + def get(self, orgname): + """ List the applications for the specified organization """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + applications = model.oauth.list_applications_for_org(org) + return {'applications': [app_view(application) for application in applications]} + + raise Unauthorized() + + @nickname('createOrganizationApplication') + @validate_json_request('NewApp') + def post(self, orgname): + """ Creates a new application under this organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + app_data = request.get_json() + application = model.oauth.create_application( + org, app_data['name'], + app_data.get('application_uri', ''), + app_data.get('redirect_uri', ''), + description = app_data.get('description', ''), + gravatar_email = app_data.get('gravatar_email', None),) + + + app_data.update({ + 'application_name': application.name, + 'client_id': application.client_id + }) + + log_action('create_application', orgname, app_data) + + return app_view(application) + raise Unauthorized() + + +@resource('/v1/organization//applications/') +@internal_only +class OrganizationApplicationResource(ApiResource): + """ Resource for managing an application defined by an organizations. """ + schemas = { + 'UpdateApp': { + 'id': 'UpdateApp', + 'type': 'object', + 'description': 'Description of an updated application.', + 'required': [ + 'name', + 'redirect_uri', + 'application_uri' + ], + 'properties': { + 'name': { + 'type': 'string', + 'description': 'The name of the application', + }, + 'redirect_uri': { + 'type': 'string', + 'description': 'The URI for the application\'s OAuth redirect', + }, + 'application_uri': { + 'type': 'string', + 'description': 'The URI for the application\'s homepage', + }, + 'description': { + 'type': 'string', + 'description': 'The human-readable description for the application', + }, + 'gravatar_email': { + 'type': 'string', + 'description': 'The e-mail address of the gravatar to use for the application', + } + }, + }, + } + + @nickname('getOrganizationApplication') + def get(self, orgname, client_id): + """ Retrieves the application with the specified client_id under the specified organization """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + application = model.oauth.lookup_application(org, client_id) + if not application: + raise NotFound() + + return app_view(application) + + raise Unauthorized() + + @nickname('updateOrganizationApplication') + @validate_json_request('UpdateApp') + def put(self, orgname, client_id): + """ Updates an application under this organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + application = model.oauth.lookup_application(org, client_id) + if not application: + raise NotFound() + + app_data = request.get_json() + application.name = app_data['name'] + application.application_uri = app_data['application_uri'] + application.redirect_uri = app_data['redirect_uri'] + application.description = app_data.get('description', '') + application.gravatar_email = app_data.get('gravatar_email', None) + application.save() + + app_data.update({ + 'application_name': application.name, + 'client_id': application.client_id + }) + + log_action('update_application', orgname, app_data) + + return app_view(application) + raise Unauthorized() + + + @nickname('deleteOrganizationApplication') + def delete(self, orgname, client_id): + """ Deletes the application under this organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + application = model.oauth.delete_application(org, client_id) + if not application: + raise NotFound() + + log_action('delete_application', orgname, + {'application_name': application.name, 'client_id': client_id}) + + return 'Deleted', 204 + raise Unauthorized() + + +@resource('/v1/organization//applications//resetclientsecret') +@internal_only +class OrganizationApplicationResetClientSecret(ApiResource): + """ Custom verb for resetting the client secret of an application. """ + @nickname('resetOrganizationApplicationClientSecret') + def post(self, orgname, client_id): + """ Resets the client secret of the application. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + application = model.oauth.lookup_application(org, client_id) + if not application: + raise NotFound() + + application = model.oauth.reset_client_secret(application) + log_action('reset_application_client_secret', orgname, + {'application_name': application.name, 'client_id': client_id}) + + return app_view(application) + raise Unauthorized() diff --git a/endpoints/api/permission.py b/endpoints/api/permission.py new file mode 100644 index 000000000..601a549e3 --- /dev/null +++ b/endpoints/api/permission.py @@ -0,0 +1,241 @@ +import logging + +from flask import request + +from endpoints.api import (resource, nickname, require_repo_admin, RepositoryParamResource, + log_action, request_error, validate_json_request) +from data import model + + +logger = logging.getLogger(__name__) + + +def role_view(repo_perm_obj): + return { + 'role': repo_perm_obj.role.name, + } + +def wrap_role_view_user(role_json, user): + role_json['is_robot'] = user.robot + return role_json + + +def wrap_role_view_org(role_json, user, org_members): + role_json['is_org_member'] = user.robot or user.username in org_members + return role_json + + +@resource('/v1/repository//permissions/team/') +class RepositoryTeamPermissionList(RepositoryParamResource): + """ Resource for repository team permissions. """ + @require_repo_admin + @nickname('listRepoTeamPermissions') + def get(self, namespace, repository): + """ List all team permission. """ + repo_perms = model.get_all_repo_teams(namespace, repository) + + return { + 'permissions': {repo_perm.team.name: role_view(repo_perm) + for repo_perm in repo_perms} + } + + +@resource('/v1/repository//permissions/user/') +class RepositoryUserPermissionList(RepositoryParamResource): + """ Resource for repository user permissions. """ + @require_repo_admin + @nickname('listRepoUserPermissions') + def get(self, namespace, repository): + """ List all user permissions. """ + # Lookup the organization (if any). + org = None + try: + org = model.get_organization(namespace) # Will raise an error if not org + except model.InvalidOrganizationException: + # This repository isn't under an org + pass + + # Determine how to wrap the role(s). + def wrapped_role_view(repo_perm): + return wrap_role_view_user(role_view(repo_perm), repo_perm.user) + + role_view_func = wrapped_role_view + + if org: + org_members = model.get_organization_member_set(namespace) + current_func = role_view_func + + def wrapped_role_org_view(repo_perm): + return wrap_role_view_org(current_func(repo_perm), repo_perm.user, + org_members) + + role_view_func = wrapped_role_org_view + + # Load and return the permissions. + repo_perms = model.get_all_repo_users(namespace, repository) + return { + 'permissions': {perm.user.username: role_view_func(perm) + for perm in repo_perms} + } + + +@resource('/v1/repository//permissions/user/') +class RepositoryUserPermission(RepositoryParamResource): + """ Resource for managing individual user permissions. """ + schemas = { + 'UserPermission': { + 'id': 'UserPermission', + 'type': 'object', + 'description': 'Description of a user permission.', + 'required': [ + 'role', + ], + 'properties': { + 'role': { + 'type': 'string', + 'description': 'Role to use for the user', + 'enum': [ + 'read', + 'write', + 'admin', + ], + }, + }, + }, + } + + @require_repo_admin + @nickname('getUserPermissions') + def get(self, namespace, repository, username): + """ Get the Fetch the permission for the specified user. """ + logger.debug('Get repo: %s/%s permissions for user %s' % + (namespace, repository, username)) + perm = model.get_user_reponame_permission(username, namespace, repository) + perm_view = wrap_role_view_user(role_view(perm), perm.user) + + try: + model.get_organization(namespace) + org_members = model.get_organization_member_set(namespace) + perm_view = wrap_role_view_org(perm_view, perm.user, org_members) + except model.InvalidOrganizationException: + # This repository is not part of an organization + pass + + return perm_view + + @require_repo_admin + @nickname('changeUserPermissions') + @validate_json_request('UserPermission') + def put(self, namespace, repository, username): # Also needs to respond to post + """ Update the perimssions for an existing repository. """ + new_permission = request.get_json() + + logger.debug('Setting permission to: %s for user %s' % + (new_permission['role'], username)) + + try: + perm = model.set_user_repo_permission(username, namespace, repository, + new_permission['role']) + except model.InvalidUsernameException as ex: + raise request_error(exception=ex) + + perm_view = wrap_role_view_user(role_view(perm), perm.user) + + try: + model.get_organization(namespace) + org_members = model.get_organization_member_set(namespace) + perm_view = wrap_role_view_org(perm_view, perm.user, org_members) + except model.InvalidOrganizationException: + # This repository is not part of an organization + pass + except model.DataModelException as ex: + raise request_error(exception=ex) + + log_action('change_repo_permission', namespace, + {'username': username, 'repo': repository, + 'role': new_permission['role']}, + repo=model.get_repository(namespace, repository)) + + return perm_view, 200 + + @require_repo_admin + @nickname('deleteUserPermissions') + def delete(self, namespace, repository, username): + """ Delete the permission for the user. """ + try: + model.delete_user_permission(username, namespace, repository) + except model.DataModelException as ex: + raise request_error(exception=ex) + + log_action('delete_repo_permission', namespace, + {'username': username, 'repo': repository}, + repo=model.get_repository(namespace, repository)) + + return 'Deleted', 204 + + +@resource('/v1/repository//permissions/team/') +class RepositoryTeamPermission(RepositoryParamResource): + """ Resource for managing individual team permissions. """ + schemas = { + 'TeamPermission': { + 'id': 'TeamPermission', + 'type': 'object', + 'description': 'Description of a team permission.', + 'required': [ + 'role', + ], + 'properties': { + 'role': { + 'type': 'string', + 'description': 'Role to use for the team', + 'enum': [ + 'read', + 'write', + 'admin', + ], + }, + }, + }, + } + + @require_repo_admin + @nickname('getTeamPermissions') + def get(self, namespace, repository, teamname): + """ Fetch the permission for the specified team. """ + logger.debug('Get repo: %s/%s permissions for team %s' % + (namespace, repository, teamname)) + perm = model.get_team_reponame_permission(teamname, namespace, repository) + return role_view(perm) + + @require_repo_admin + @nickname('changeTeamPermissions') + @validate_json_request('TeamPermission') + def put(self, namespace, repository, teamname): + """ Update the existing team permission. """ + new_permission = request.get_json() + + logger.debug('Setting permission to: %s for team %s' % + (new_permission['role'], teamname)) + + perm = model.set_team_repo_permission(teamname, namespace, repository, + new_permission['role']) + + log_action('change_repo_permission', namespace, + {'team': teamname, 'repo': repository, + 'role': new_permission['role']}, + repo=model.get_repository(namespace, repository)) + + return role_view(perm), 200 + + @require_repo_admin + @nickname('deleteTeamPermissions') + def delete(self, namespace, repository, teamname): + """ Delete the permission for the specified team. """ + model.delete_team_permission(teamname, namespace, repository) + + log_action('delete_repo_permission', namespace, + {'team': teamname, 'repo': repository}, + repo=model.get_repository(namespace, repository)) + + return 'Deleted', 204 diff --git a/endpoints/api/prototype.py b/endpoints/api/prototype.py new file mode 100644 index 000000000..bedc19832 --- /dev/null +++ b/endpoints/api/prototype.py @@ -0,0 +1,253 @@ +from flask import request + +from endpoints.api import (resource, nickname, ApiResource, validate_json_request, request_error, + log_action, Unauthorized, NotFound, internal_only) +from auth.permissions import AdministerOrganizationPermission +from auth.auth_context import get_authenticated_user +from data import model + + +def prototype_view(proto, org_members): + def prototype_user_view(user): + return { + 'name': user.username, + 'is_robot': user.robot, + 'kind': 'user', + 'is_org_member': user.robot or user.username in org_members, + } + + if proto.delegate_user: + delegate_view = prototype_user_view(proto.delegate_user) + else: + delegate_view = { + 'name': proto.delegate_team.name, + 'kind': 'team', + } + + return { + 'activating_user': (prototype_user_view(proto.activating_user) + if proto.activating_user else None), + 'delegate': delegate_view, + 'role': proto.role.name, + 'id': proto.uuid, + } + +def log_prototype_action(action_kind, orgname, prototype, **kwargs): + username = get_authenticated_user().username + log_params = { + 'prototypeid': prototype.uuid, + 'username': username, + 'activating_username': (prototype.activating_user.username + if prototype.activating_user else None), + 'role': prototype.role.name + } + + for key, value in kwargs.items(): + log_params[key] = value + + if prototype.delegate_user: + log_params['delegate_user'] = prototype.delegate_user.username + elif prototype.delegate_team: + log_params['delegate_team'] = prototype.delegate_team.name + + log_action(action_kind, orgname, log_params) + + +@resource('/v1/organization//prototypes') +@internal_only +class PermissionPrototypeList(ApiResource): + """ Resource for listing and creating permission prototypes. """ + schemas = { + 'NewPrototype': { + 'id': 'NewPrototype', + 'type': 'object', + 'description': 'Description of a new prototype', + 'required': [ + 'role', + 'delegate', + ], + 'properties': { + 'role': { + 'type': 'string', + 'description': 'Role that should be applied to the delegate', + 'enum': [ + 'read', + 'write', + 'admin', + ], + }, + 'activating_user': { + 'type': 'object', + 'description': 'Repository creating user to whom the rule should apply', + 'required': [ + 'name', + ], + 'properties': { + 'name': { + 'type': 'string', + 'description': 'The username for the activating_user', + }, + }, + }, + 'delegate': { + 'type': 'object', + 'description': 'Information about the user or team to which the rule grants access', + 'required': [ + 'name', + 'kind', + ], + 'properties': { + 'name': { + 'type': 'string', + 'description': 'The name for the delegate team or user', + }, + 'kind': { + 'type': 'string', + 'description': 'Whether the delegate is a user or a team', + 'enum': [ + 'user', + 'team', + ], + }, + }, + }, + }, + }, + } + + @nickname('getOrganizationPrototypePermissions') + def get(self, orgname): + """ List the existing prototypes for this organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + permissions = model.get_prototype_permissions(org) + org_members = model.get_organization_member_set(orgname) + return {'prototypes': [prototype_view(p, org_members) for p in permissions]} + + raise Unauthorized() + + @nickname('createOrganizationPrototypePermission') + @validate_json_request('NewPrototype') + def post(self, orgname): + """ Create a new permission prototype. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + details = request.get_json() + activating_username = None + + if ('activating_user' in details and details['activating_user'] and + 'name' in details['activating_user']): + activating_username = details['activating_user']['name'] + + delegate = details['delegate'] if 'delegate' in details else {} + delegate_kind = delegate.get('kind', None) + delegate_name = delegate.get('name', None) + + delegate_username = delegate_name if delegate_kind == 'user' else None + delegate_teamname = delegate_name if delegate_kind == 'team' else None + + activating_user = (model.get_user(activating_username) if activating_username else None) + delegate_user = (model.get_user(delegate_username) if delegate_username else None) + delegate_team = (model.get_organization_team(orgname, delegate_teamname) + if delegate_teamname else None) + + if activating_username and not activating_user: + raise request_error(message='Unknown activating user') + + if not delegate_user and not delegate_team: + raise request_error(message='Missing delegate user or team') + + role_name = details['role'] + + prototype = model.add_prototype_permission(org, role_name, activating_user, + delegate_user, delegate_team) + log_prototype_action('create_prototype_permission', orgname, prototype) + org_members = model.get_organization_member_set(orgname) + return prototype_view(prototype, org_members) + + raise Unauthorized() + + +@resource('/v1/organization//prototypes/') +@internal_only +class PermissionPrototype(ApiResource): + """ Resource for managingin individual permission prototypes. """ + schemas = { + 'PrototypeUpdate': { + 'id': 'PrototypeUpdate', + 'type': 'object', + 'description': 'Description of a the new prototype role', + 'required': [ + 'role', + ], + 'properties': { + 'role': { + 'type': 'string', + 'description': 'Role that should be applied to the permission', + 'enum': [ + 'read', + 'write', + 'admin', + ], + }, + }, + }, + } + + @nickname('deleteOrganizationPrototypePermission') + def delete(self, orgname, prototypeid): + """ Delete an existing permission prototype. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + prototype = model.delete_prototype_permission(org, prototypeid) + if not prototype: + raise NotFound() + + log_prototype_action('delete_prototype_permission', orgname, prototype) + + return 'Deleted', 204 + + raise Unauthorized() + + @nickname('updateOrganizationPrototypePermission') + @validate_json_request('PrototypeUpdate') + def put(self, orgname, prototypeid): + """ Update the role of an existing permission prototype. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + try: + org = model.get_organization(orgname) + except model.InvalidOrganizationException: + raise NotFound() + + existing = model.get_prototype_permission(org, prototypeid) + if not existing: + raise NotFound() + + details = request.get_json() + role_name = details['role'] + prototype = model.update_prototype_permission(org, prototypeid, role_name) + if not prototype: + raise NotFound() + + log_prototype_action('modify_prototype_permission', orgname, prototype, + original_role=existing.role.name) + org_members = model.get_organization_member_set(orgname) + return prototype_view(prototype, org_members) + + raise Unauthorized() diff --git a/endpoints/api/repository.py b/endpoints/api/repository.py new file mode 100644 index 000000000..13d32a3fc --- /dev/null +++ b/endpoints/api/repository.py @@ -0,0 +1,291 @@ +import logging +import json + +from flask import request + +from data import model +from endpoints.api import (truthy_bool, format_date, nickname, log_action, validate_json_request, + require_repo_read, require_repo_write, require_repo_admin, + RepositoryParamResource, resource, query_param, parse_args, ApiResource, + request_error, require_scope, Unauthorized, NotFound, InvalidRequest) +from auth.permissions import (ModifyRepositoryPermission, AdministerRepositoryPermission, + CreateRepositoryPermission, ReadRepositoryPermission) +from auth.auth_context import get_authenticated_user +from auth import scopes + + +logger = logging.getLogger(__name__) + + +@resource('/v1/repository') +class RepositoryList(ApiResource): + """Operations for creating and listing repositories.""" + schemas = { + 'NewRepo': { + 'id': 'NewRepo', + 'type': 'object', + 'description': 'Description of a new repository', + 'required': [ + 'repository', + 'visibility', + 'description', + ], + 'properties': { + 'repository': { + 'type': 'string', + 'description': 'Repository name', + }, + 'visibility': { + 'type': 'string', + 'description': 'Visibility which the repository will start with', + 'enum': [ + 'public', + 'private', + ], + }, + 'namespace': { + 'type': 'string', + 'description': ('Namespace in which the repository should be created. If omitted, the ' + 'username of the caller is used'), + }, + 'description': { + 'type': 'string', + 'description': 'Markdown encoded description for the repository', + }, + }, + }, + } + + @require_scope(scopes.CREATE_REPO) + @nickname('createRepo') + @validate_json_request('NewRepo') + def post(self): + """Create a new repository.""" + owner = get_authenticated_user() + req = request.get_json() + + if owner is None and 'namespace' not in 'req': + raise InvalidRequest('Must provide a namespace or must be logged in.') + + namespace_name = req['namespace'] if 'namespace' in req else owner.username + + permission = CreateRepositoryPermission(namespace_name) + if permission.can(): + repository_name = req['repository'] + visibility = req['visibility'] + + existing = model.get_repository(namespace_name, repository_name) + if existing: + raise request_error(message='Repository already exists') + + visibility = req['visibility'] + + repo = model.create_repository(namespace_name, repository_name, owner, + visibility) + repo.description = req['description'] + repo.save() + + log_action('create_repo', namespace_name, {'repo': repository_name, + 'namespace': namespace_name}, repo=repo) + return { + 'namespace': namespace_name, + 'name': repository_name + }, 201 + + raise Unauthorized() + + @require_scope(scopes.READ_REPO) + @nickname('listRepos') + @parse_args + @query_param('page', 'Offset page number. (int)', type=int) + @query_param('limit', 'Limit on the number of results (int)', type=int) + @query_param('namespace', 'Namespace to use when querying for org repositories.', type=str) + @query_param('public', 'Whether to include public repositories.', type=truthy_bool, default=True) + @query_param('private', 'Whether to inlcude private repositories.', type=truthy_bool, + default=True) + @query_param('sort', 'Whether to sort the results.', type=truthy_bool, default=False) + @query_param('count', 'Whether to include a count of the total number of results available.', + type=truthy_bool, default=False) + def get(self, args): + """Fetch the list of repositories under a variety of situations.""" + def repo_view(repo_obj): + return { + 'namespace': repo_obj.namespace, + 'name': repo_obj.name, + 'description': repo_obj.description, + 'is_public': repo_obj.visibility.name == 'public', + } + + username = None + if get_authenticated_user() and args['private']: + username = get_authenticated_user().username + + response = {} + + repo_count = None + if args['count']: + repo_count = model.get_visible_repository_count(username, include_public=args['public'], + namespace=args['namespace']) + response['count'] = repo_count + + repo_query = model.get_visible_repositories(username, limit=args['limit'], page=args['page'], + include_public=args['public'], sort=args['sort'], + namespace=args['namespace']) + + response['repositories'] = [repo_view(repo) for repo in repo_query + if (repo.visibility.name == 'public' or + ReadRepositoryPermission(repo.namespace, repo.name).can())] + + return response + +def image_view(image): + extended_props = image + if image.storage and image.storage.id: + extended_props = image.storage + + command = extended_props.command + return { + 'id': image.docker_image_id, + 'created': format_date(extended_props.created), + 'comment': extended_props.comment, + 'command': json.loads(command) if command else None, + 'ancestors': image.ancestors, + 'dbid': image.id, + 'size': extended_props.image_size, + } + +@resource('/v1/repository/') +class Repository(RepositoryParamResource): + """Operations for managing a specific repository.""" + schemas = { + 'RepoUpdate': { + 'id': 'RepoUpdate', + 'type': 'object', + 'description': 'Fields which can be updated in a repository.', + 'required': [ + 'description', + ], + 'properties': { + 'description': { + 'type': 'string', + 'description': 'Markdown encoded description for the repository', + }, + } + } + } + + @require_repo_read + @nickname('getRepo') + def get(self, namespace, repository): + """Fetch the specified repository.""" + logger.debug('Get repo: %s/%s' % (namespace, repository)) + + def tag_view(tag): + image = model.get_tag_image(namespace, repository, tag.name) + if not image: + return {} + + return { + 'name': tag.name, + 'image': image_view(image), + } + + organization = None + try: + organization = model.get_organization(namespace) + except model.InvalidOrganizationException: + pass + + is_public = model.repository_is_public(namespace, repository) + repo = model.get_repository(namespace, repository) + if repo: + tags = model.list_repository_tags(namespace, repository) + tag_dict = {tag.name: tag_view(tag) for tag in tags} + can_write = ModifyRepositoryPermission(namespace, repository).can() + can_admin = AdministerRepositoryPermission(namespace, repository).can() + active_builds = model.list_repository_builds(namespace, repository, 1, + include_inactive=False) + + return { + 'namespace': namespace, + 'name': repository, + 'description': repo.description, + 'tags': tag_dict, + 'can_write': can_write, + 'can_admin': can_admin, + 'is_public': is_public, + 'is_building': len(list(active_builds)) > 0, + 'is_organization': bool(organization), + 'status_token': repo.badge_token if not is_public else '' + } + + raise NotFound() + + @require_repo_write + @nickname('updateRepo') + @validate_json_request('RepoUpdate') + def put(self, namespace, repository): + """ Update the description in the specified repository. """ + repo = model.get_repository(namespace, repository) + if repo: + values = request.get_json() + repo.description = values['description'] + repo.save() + + log_action('set_repo_description', namespace, + {'repo': repository, 'description': values['description']}, + repo=repo) + return { + 'success': True + } + raise NotFound() + + @require_repo_admin + @nickname('deleteRepository') + def delete(self, namespace, repository): + """ Delete a repository. """ + model.purge_repository(namespace, repository) + log_action('delete_repo', namespace, + {'repo': repository, 'namespace': namespace}) + return 'Deleted', 204 + + +@resource('/v1/repository//changevisibility') +class RepositoryVisibility(RepositoryParamResource): + """ Custom verb for changing the visibility of the repository. """ + schemas = { + 'ChangeVisibility': { + 'id': 'ChangeVisibility', + 'type': 'object', + 'description': 'Change the visibility for the repository.', + 'required': [ + 'visibility', + ], + 'properties': { + 'visibility': { + 'type': 'string', + 'description': 'Visibility which the repository will start with', + 'enum': [ + 'public', + 'private', + ], + }, + } + } + } + + @require_repo_admin + @nickname('changeRepoVisibility') + @validate_json_request('ChangeVisibility') + def post(self, namespace, repository): + """ Change the visibility of a repository. """ + repo = model.get_repository(namespace, repository) + if repo: + values = request.get_json() + model.set_repository_visibility(repo, values['visibility']) + log_action('change_repo_visibility', namespace, + {'repo': repository, 'visibility': values['visibility']}, + repo=repo) + return { + 'success': True + } diff --git a/endpoints/api/repotoken.py b/endpoints/api/repotoken.py new file mode 100644 index 000000000..1d9f6bf3b --- /dev/null +++ b/endpoints/api/repotoken.py @@ -0,0 +1,134 @@ +import logging + +from flask import request + +from endpoints.api import (resource, nickname, require_repo_admin, RepositoryParamResource, + log_action, validate_json_request, NotFound) +from data import model + + +logger = logging.getLogger(__name__) + + +def token_view(token_obj): + return { + 'friendlyName': token_obj.friendly_name, + 'code': token_obj.code, + 'role': token_obj.role.name, + } + + +@resource('/v1/repository//tokens/') +class RepositoryTokenList(RepositoryParamResource): + """ Resource for creating and listing repository tokens. """ + schemas = { + 'NewToken': { + 'id': 'NewToken', + 'type': 'object', + 'description': 'Description of a new token.', + 'required':[ + 'friendlyName', + ], + 'properties': { + 'friendlyName': { + 'type': 'string', + 'description': 'Friendly name to help identify the token', + }, + }, + }, + } + + @require_repo_admin + @nickname('listRepoTokens') + def get(self, namespace, repository): + """ List the tokens for the specified repository. """ + tokens = model.get_repository_delegate_tokens(namespace, repository) + + return { + 'tokens': {token.code: token_view(token) for token in tokens} + } + + @require_repo_admin + @nickname('createToken') + @validate_json_request('NewToken') + def post(self, namespace, repository): + """ Create a new repository token. """ + token_params = request.get_json() + + token = model.create_delegate_token(namespace, repository, + token_params['friendlyName']) + + log_action('add_repo_accesstoken', namespace, + {'repo': repository, 'token': token_params['friendlyName']}, + repo = model.get_repository(namespace, repository)) + + return token_view(token), 201 + + +@resource('/v1/repository//tokens/') +class RepositoryToken(RepositoryParamResource): + """ Resource for managing individual tokens. """ + schemas = { + 'TokenPermission': { + 'id': 'TokenPermission', + 'type': 'object', + 'description': 'Description of a token permission', + 'required': [ + 'role', + ], + 'properties': { + 'role': { + 'type': 'string', + 'description': 'Role to use for the token', + 'enum': [ + 'read', + 'write', + 'admin', + ], + }, + }, + }, + } + @require_repo_admin + @nickname('getTokens') + def get(self, namespace, repository, code): + """ Fetch the specified repository token information. """ + try: + perm = model.get_repo_delegate_token(namespace, repository, code) + except model.InvalidTokenException: + raise NotFound() + + return token_view(perm) + + @require_repo_admin + @nickname('changeToken') + @validate_json_request('TokenPermission') + def put(self, namespace, repository, code): + """ Update the permissions for the specified repository token. """ + new_permission = request.get_json() + + logger.debug('Setting permission to: %s for code %s' % + (new_permission['role'], code)) + + token = model.set_repo_delegate_token_role(namespace, repository, code, + new_permission['role']) + + log_action('change_repo_permission', namespace, + {'repo': repository, 'token': token.friendly_name, 'code': code, + 'role': new_permission['role']}, + repo = model.get_repository(namespace, repository)) + + return token_view(token) + + @require_repo_admin + @nickname('deleteToken') + def delete(self, namespace, repository, code): + """ Delete the repository token. """ + token = model.delete_delegate_token(namespace, repository, code) + + log_action('delete_repo_accesstoken', namespace, + {'repo': repository, 'token': token.friendly_name, + 'code': code}, + repo = model.get_repository(namespace, repository)) + + return 'Deleted', 204 diff --git a/endpoints/api/robot.py b/endpoints/api/robot.py new file mode 100644 index 000000000..0961d694e --- /dev/null +++ b/endpoints/api/robot.py @@ -0,0 +1,98 @@ +from endpoints.api import (resource, nickname, ApiResource, log_action, related_user_resource, + Unauthorized, require_user_admin, internal_only) +from auth.permissions import AdministerOrganizationPermission, OrganizationMemberPermission +from auth.auth_context import get_authenticated_user +from data import model +from util.names import format_robot_username + + +def robot_view(name, token): + return { + 'name': name, + 'token': token, + } + + +@resource('/v1/user/robots') +@internal_only +class UserRobotList(ApiResource): + """ Resource for listing user robots. """ + @require_user_admin + @nickname('getUserRobots') + def get(self): + """ List the available robots for the user. """ + user = get_authenticated_user() + robots = model.list_entity_robots(user.username) + return { + 'robots': [robot_view(name, password) for name, password in robots] + } + + +@resource('/v1/user/robots/') +@internal_only +class UserRobot(ApiResource): + """ Resource for managing a user's robots. """ + @require_user_admin + @nickname('createUserRobot') + def put(self, robot_shortname): + """ Create a new user robot with the specified name. """ + parent = get_authenticated_user() + robot, password = model.create_robot(robot_shortname, parent) + log_action('create_robot', parent.username, {'robot': robot_shortname}) + return robot_view(robot.username, password), 201 + + @require_user_admin + @nickname('deleteUserRobot') + def delete(self, robot_shortname): + """ Delete an existing robot. """ + parent = get_authenticated_user() + model.delete_robot(format_robot_username(parent.username, robot_shortname)) + log_action('delete_robot', parent.username, {'robot': robot_shortname}) + return 'Deleted', 204 + + +@resource('/v1/organization//robots') +@internal_only +@related_user_resource(UserRobotList) +class OrgRobotList(ApiResource): + """ Resource for listing an organization's robots. """ + @nickname('getOrgRobots') + def get(self, orgname): + """ List the organization's robots. """ + permission = OrganizationMemberPermission(orgname) + if permission.can(): + robots = model.list_entity_robots(orgname) + return { + 'robots': [robot_view(name, password) for name, password in robots] + } + + raise Unauthorized() + + +@resource('/v1/organization//robots/') +@internal_only +@related_user_resource(UserRobot) +class OrgRobot(ApiResource): + """ Resource for managing an organization's robots. """ + @nickname('createOrgRobot') + def put(self, orgname, robot_shortname): + """ Create a new robot in the organization. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + parent = model.get_organization(orgname) + robot, password = model.create_robot(robot_shortname, parent) + log_action('create_robot', orgname, {'robot': robot_shortname}) + return robot_view(robot.username, password), 201 + + raise Unauthorized() + + @nickname('deleteOrgRobot') + def delete(self, orgname, robot_shortname): + """ Delete an existing organization robot. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + model.delete_robot(format_robot_username(orgname, robot_shortname)) + log_action('delete_robot', orgname, {'robot': robot_shortname}) + return 'Deleted', 204 + + raise Unauthorized() diff --git a/endpoints/api/search.py b/endpoints/api/search.py new file mode 100644 index 000000000..2d96b0384 --- /dev/null +++ b/endpoints/api/search.py @@ -0,0 +1,116 @@ +from endpoints.api import (ApiResource, parse_args, query_param, truthy_bool, nickname, resource, + require_scope) +from data import model +from auth.permissions import (OrganizationMemberPermission, ViewTeamPermission, + ReadRepositoryPermission, UserAdminPermission) +from auth.auth_context import get_authenticated_user +from auth import scopes + + +@resource('/v1/entities/') +class EntitySearch(ApiResource): + """ Resource for searching entities. """ + @parse_args + @query_param('namespace', 'Namespace to use when querying for org entities.', type=str, + default='') + @query_param('includeTeams', 'Whether to include team names.', type=truthy_bool, default=False) + @nickname('getMatchingEntities') + def get(self, args, prefix): + """ Get a list of entities that match the specified prefix. """ + teams = [] + + namespace_name = args['namespace'] + robot_namespace = None + organization = None + + try: + organization = model.get_organization(namespace_name) + + # namespace name was an org + permission = OrganizationMemberPermission(namespace_name) + if permission.can(): + robot_namespace = namespace_name + + if args['includeTeams']: + teams = model.get_matching_teams(prefix, organization) + + except model.InvalidOrganizationException: + # namespace name was a user + user = get_authenticated_user() + if user and user.username == namespace_name: + # Check if there is admin user permissions (login only) + admin_permission = UserAdminPermission(user.username) + if admin_permission.can(): + robot_namespace = namespace_name + + users = model.get_matching_users(prefix, robot_namespace, organization) + + def entity_team_view(team): + result = { + 'name': team.name, + 'kind': 'team', + 'is_org_member': True + } + return result + + def user_view(user): + user_json = { + 'name': user.username, + 'kind': 'user', + 'is_robot': user.is_robot, + } + + if organization is not None: + user_json['is_org_member'] = user.is_robot or user.is_org_member + + return user_json + + team_data = [entity_team_view(team) for team in teams] + user_data = [user_view(user) for user in users] + + return { + 'results': team_data + user_data + } + + + def team_view(orgname, team): + view_permission = ViewTeamPermission(orgname, team.name) + role = model.get_team_org_role(team).name + return { + 'id': team.id, + 'name': team.name, + 'description': team.description, + 'can_view': view_permission.can(), + 'role': role + } + + +@resource('/v1/find/repository') +class FindRepositories(ApiResource): + """ Resource for finding repositories. """ + @parse_args + @query_param('query', 'The prefix to use when querying for repositories.', type=str, default='') + @require_scope(scopes.READ_REPO) + @nickname('findRepos') + def get(self, args): + """ Get a list of repositories that match the specified prefix query. """ + prefix = args['query'] + + def repo_view(repo): + return { + 'namespace': repo.namespace, + 'name': repo.name, + 'description': repo.description + } + + username = None + user = get_authenticated_user() + if user is not None: + username = user.username + + matching = model.get_matching_repositories(prefix, username) + return { + 'repositories': [repo_view(repo) for repo in matching + if (repo.visibility.name == 'public' or + ReadRepositoryPermission(repo.namespace, repo.name).can())] + } \ No newline at end of file diff --git a/endpoints/api/subscribe.py b/endpoints/api/subscribe.py new file mode 100644 index 000000000..f9f9d7f14 --- /dev/null +++ b/endpoints/api/subscribe.py @@ -0,0 +1,98 @@ +import logging +import stripe + +from endpoints.api import request_error, log_action, NotFound +from endpoints.common import check_repository_usage +from data import model +from data.plans import PLANS + + +logger = logging.getLogger(__name__) + + +def carderror_response(exc): + return {'carderror': exc.message}, 402 + + +def subscription_view(stripe_subscription, used_repos): + return { + 'currentPeriodStart': stripe_subscription.current_period_start, + 'currentPeriodEnd': stripe_subscription.current_period_end, + 'plan': stripe_subscription.plan.id, + 'usedPrivateRepos': used_repos, + } + + +def subscribe(user, plan, token, require_business_plan): + plan_found = None + for plan_obj in PLANS: + if plan_obj['stripeId'] == plan: + plan_found = plan_obj + + if not plan_found or plan_found['deprecated']: + logger.warning('Plan not found or deprecated: %s', plan) + raise NotFound() + + if (require_business_plan and not plan_found['bus_features'] and not + plan_found['price'] == 0): + logger.warning('Business attempting to subscribe to personal plan: %s', + user.username) + raise request_error(message='No matching plan found') + + private_repos = model.get_private_repo_count(user.username) + + # This is the default response + response_json = { + 'plan': plan, + 'usedPrivateRepos': private_repos, + } + status_code = 200 + + if not user.stripe_id: + # Check if a non-paying user is trying to subscribe to a free plan + if not plan_found['price'] == 0: + # They want a real paying plan, create the customer and plan + # simultaneously + card = token + + try: + cus = stripe.Customer.create(email=user.email, plan=plan, card=card) + user.stripe_id = cus.id + user.save() + check_repository_usage(user, plan_found) + log_action('account_change_plan', user.username, {'plan': plan}) + except stripe.CardError as e: + return carderror_response(e) + + response_json = subscription_view(cus.subscription, private_repos) + status_code = 201 + + else: + # Change the plan + cus = stripe.Customer.retrieve(user.stripe_id) + + if plan_found['price'] == 0: + if cus.subscription is not None: + # We only have to cancel the subscription if they actually have one + cus.cancel_subscription() + cus.save() + check_repository_usage(user, plan_found) + log_action('account_change_plan', user.username, {'plan': plan}) + + else: + # User may have been a previous customer who is resubscribing + if token: + cus.card = token + + cus.plan = plan + + try: + cus.save() + except stripe.CardError as e: + return carderror_response(e) + + response_json = subscription_view(cus.subscription, private_repos) + check_repository_usage(user, plan_found) + log_action('account_change_plan', user.username, {'plan': plan}) + + return response_json, status_code diff --git a/endpoints/api/tag.py b/endpoints/api/tag.py new file mode 100644 index 000000000..10d466e81 --- /dev/null +++ b/endpoints/api/tag.py @@ -0,0 +1,95 @@ +from flask import request + +from endpoints.api import (resource, nickname, require_repo_read, require_repo_write, + RepositoryParamResource, log_action, NotFound, validate_json_request) +from endpoints.api.image import image_view +from data import model +from auth.auth_context import get_authenticated_user + + +@resource('/v1/repository//tag/') +class RepositoryTag(RepositoryParamResource): + """ Resource for managing repository tags. """ + schemas = { + 'MoveTag': { + 'id': 'MoveTag', + 'type': 'object', + 'description': 'Description of to which image a new or existing tag should point', + 'required': [ + 'image', + ], + 'properties': { + 'image': { + 'type': 'string', + 'description': 'Image identifier to which the tag should point', + }, + }, + }, + } + + @require_repo_write + @nickname('changeTagImage') + @validate_json_request('MoveTag') + def put(self, namespace, repository, tag): + """ Change which image a tag points to or create a new tag.""" + image_id = request.get_json()['image'] + image = model.get_repo_image(namespace, repository, image_id) + if not image: + raise NotFound() + + original_image_id = None + try: + original_tag_image = model.get_tag_image(namespace, repository, tag) + if original_tag_image: + original_image_id = original_tag_image.docker_image_id + except model.DataModelException: + # This is a new tag. + pass + + model.create_or_update_tag(namespace, repository, tag, image_id) + model.garbage_collect_repository(namespace, repository) + + username = get_authenticated_user().username + log_action('move_tag' if original_image_id else 'create_tag', namespace, + { 'username': username, 'repo': repository, 'tag': tag, + 'image': image_id, 'original_image': original_image_id }, + repo=model.get_repository(namespace, repository)) + + return 'Updated', 201 + + @require_repo_write + @nickname('deleteFullTag') + def delete(self, namespace, repository, tag): + """ Delete the specified repository tag. """ + model.delete_tag(namespace, repository, tag) + model.garbage_collect_repository(namespace, repository) + + username = get_authenticated_user().username + log_action('delete_tag', namespace, + {'username': username, 'repo': repository, 'tag': tag}, + repo=model.get_repository(namespace, repository)) + + return 'Deleted', 204 + + +@resource('/v1/repository//tag//images') +class RepositoryTagImages(RepositoryParamResource): + """ Resource for listing the images in a specific repository tag. """ + @require_repo_read + @nickname('listTagImages') + def get(self, namespace, repository, tag): + """ List the images for the specified repository tag. """ + try: + tag_image = model.get_tag_image(namespace, repository, tag) + except model.DataModelException: + raise NotFound() + + parent_images = model.get_parent_images(tag_image) + + parents = list(parent_images) + parents.reverse() + all_images = [tag_image] + parents + + return { + 'images': [image_view(image) for image in all_images] + } diff --git a/endpoints/api/team.py b/endpoints/api/team.py new file mode 100644 index 000000000..e82a2bd69 --- /dev/null +++ b/endpoints/api/team.py @@ -0,0 +1,179 @@ +from flask import request + +from endpoints.api import (resource, nickname, ApiResource, validate_json_request, request_error, + log_action, Unauthorized, NotFound, internal_only) +from auth.permissions import AdministerOrganizationPermission, ViewTeamPermission +from auth.auth_context import get_authenticated_user +from data import model + + +def team_view(orgname, team): + view_permission = ViewTeamPermission(orgname, team.name) + role = model.get_team_org_role(team).name + return { + 'id': team.id, + 'name': team.name, + 'description': team.description, + 'can_view': view_permission.can(), + 'role': role + } + +def member_view(member): + return { + 'name': member.username, + 'kind': 'user', + 'is_robot': member.robot, + } + + +@resource('/v1/organization//team/') +@internal_only +class OrganizationTeam(ApiResource): + """ Resource for manging an organization's teams. """ + schemas = { + 'TeamDescription': { + 'id': 'TeamDescription', + 'type': 'object', + 'description': 'Description of a team', + 'required': [ + 'role', + ], + 'properties': { + 'role': { + 'type': 'string', + 'description': 'Org wide permissions that should apply to the team', + 'enum': [ + 'member', + 'creator', + 'admin', + ], + }, + 'description': { + 'type': 'string', + 'description': 'Markdown description for the team', + }, + }, + }, + } + + @nickname('updateOrganizationTeam') + @validate_json_request('TeamDescription') + def put(self, orgname, teamname): + """ Update the org-wide permission for the specified team. """ + edit_permission = AdministerOrganizationPermission(orgname) + if edit_permission.can(): + team = None + + details = request.get_json() + is_existing = False + try: + team = model.get_organization_team(orgname, teamname) + is_existing = True + except model.InvalidTeamException: + # Create the new team. + description = details['description'] if 'description' in details else '' + role = details['role'] if 'role' in details else 'member' + + org = model.get_organization(orgname) + team = model.create_team(teamname, org, role, description) + log_action('org_create_team', orgname, {'team': teamname}) + + if is_existing: + if ('description' in details and + team.description != details['description']): + team.description = details['description'] + team.save() + log_action('org_set_team_description', orgname, + {'team': teamname, 'description': team.description}) + + if 'role' in details: + role = model.get_team_org_role(team).name + if role != details['role']: + team = model.set_team_org_permission(team, details['role'], + get_authenticated_user().username) + log_action('org_set_team_role', orgname, {'team': teamname, 'role': details['role']}) + + return team_view(orgname, team), 200 + + raise Unauthorized() + + @nickname('deleteOrganizationTeam') + def delete(self, orgname, teamname): + """ Delete the specified team. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + model.remove_team(orgname, teamname, get_authenticated_user().username) + log_action('org_delete_team', orgname, {'team': teamname}) + return 'Deleted', 204 + + raise Unauthorized() + + +@resource('/v1/organization//team//members') +@internal_only +class TeamMemberList(ApiResource): + """ Resource for managing the list of members for a team. """ + @nickname('getOrganizationTeamMembers') + def get(self, orgname, teamname): + """ Retrieve the list of members for the specified team. """ + view_permission = ViewTeamPermission(orgname, teamname) + edit_permission = AdministerOrganizationPermission(orgname) + + if view_permission.can(): + team = None + try: + team = model.get_organization_team(orgname, teamname) + except model.InvalidTeamException: + raise NotFound() + + members = model.get_organization_team_members(team.id) + return { + 'members': {m.username : member_view(m) for m in members}, + 'can_edit': edit_permission.can() + } + + raise Unauthorized() + + +@resource('/v1/organization//team//members/') +@internal_only +class TeamMember(ApiResource): + """ Resource for managing individual members of a team. """ + @nickname('updateOrganizationTeamMember') + def put(self, orgname, teamname, membername): + """ Add a member to an existing team. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + team = None + user = None + + # Find the team. + try: + team = model.get_organization_team(orgname, teamname) + except model.InvalidTeamException: + raise NotFound() + + # Find the user. + user = model.get_user(membername) + if not user: + raise request_error(message='Unknown user') + + # Add the user to the team. + model.add_user_to_team(user, team) + log_action('org_add_team_member', orgname, {'member': membername, 'team': teamname}) + return member_view(user) + + raise Unauthorized() + + @nickname('deleteOrganizationTeamMember') + def delete(self, orgname, teamname, membername): + """ Delete an existing member of a team. """ + permission = AdministerOrganizationPermission(orgname) + if permission.can(): + # Remote the user from the team. + invoking_user = get_authenticated_user().username + model.remove_user_from_team(orgname, teamname, membername, invoking_user) + log_action('org_remove_team_member', orgname, {'member': membername, 'team': teamname}) + return 'Deleted', 204 + + raise Unauthorized() diff --git a/endpoints/api/trigger.py b/endpoints/api/trigger.py new file mode 100644 index 000000000..1eb7cd169 --- /dev/null +++ b/endpoints/api/trigger.py @@ -0,0 +1,267 @@ +import json +import logging + +from flask import request, url_for +from urllib import quote +from urlparse import urlunparse + +from app import app +from endpoints.api import (RepositoryParamResource, nickname, resource, require_repo_admin, + log_action, request_error, query_param, parse_args, internal_only, + validate_json_request, api, Unauthorized, NotFound, InvalidRequest) +from endpoints.api.build import (build_status_view, trigger_view, RepositoryBuildStatus, + get_trigger_config) +from endpoints.common import start_build +from endpoints.trigger import (BuildTrigger as BuildTriggerBase, TriggerDeactivationException, + TriggerActivationException, EmptyRepositoryException) +from data import model +from auth.permissions import UserAdminPermission + + +logger = logging.getLogger(__name__) + + +def _prepare_webhook_url(scheme, username, password, hostname, path): + auth_hostname = '%s:%s@%s' % (quote(username), quote(password), hostname) + return urlunparse((scheme, auth_hostname, path, '', '', '')) + + +@resource('/v1/repository//trigger/') +class BuildTriggerList(RepositoryParamResource): + """ Resource for listing repository build triggers. """ + + @require_repo_admin + @nickname('listBuildTriggers') + def get(self, namespace, repository): + """ List the triggers for the specified repository. """ + triggers = model.list_build_triggers(namespace, repository) + return { + 'triggers': [trigger_view(trigger) for trigger in triggers] + } + + +@resource('/v1/repository//trigger/') +class BuildTrigger(RepositoryParamResource): + """ Resource for managing specific build triggers. """ + + @require_repo_admin + @nickname('getBuildTrigger') + def get(self, namespace, repository, trigger_uuid): + """ Get information for the specified build trigger. """ + try: + trigger = model.get_build_trigger(namespace, repository, trigger_uuid) + except model.InvalidBuildTriggerException: + raise NotFound() + + return trigger_view(trigger) + + @require_repo_admin + @nickname('deleteBuildTrigger') + def delete(self, namespace, repository, trigger_uuid): + """ Delete the specified build trigger. """ + try: + trigger = model.get_build_trigger(namespace, repository, trigger_uuid) + except model.InvalidBuildTriggerException: + raise NotFound() + + handler = BuildTriggerBase.get_trigger_for_service(trigger.service.name) + config_dict = get_trigger_config(trigger) + if handler.is_active(config_dict): + try: + handler.deactivate(trigger.auth_token, config_dict) + except TriggerDeactivationException as ex: + # We are just going to eat this error + logger.warning('Trigger deactivation problem: %s', ex) + + log_action('delete_repo_trigger', namespace, + {'repo': repository, 'trigger_id': trigger_uuid, + 'service': trigger.service.name, 'config': config_dict}, + repo=model.get_repository(namespace, repository)) + + trigger.delete_instance(recursive=True) + return 'No Content', 204 + + +@resource('/v1/repository//trigger//subdir') +@internal_only +class BuildTriggerSubdirs(RepositoryParamResource): + """ Custom verb for fetching the subdirs which are buildable for a trigger. """ + schemas = { + 'BuildTriggerSubdirRequest': { + 'id': 'BuildTriggerSubdirRequest', + 'type': 'object', + 'description': 'Arbitrary json.', + }, + } + + @require_repo_admin + @nickname('listBuildTriggerSubdirs') + @validate_json_request('BuildTriggerSubdirRequest') + def post(self, namespace, repository, trigger_uuid): + """ List the subdirectories available for the specified build trigger and source. """ + try: + trigger = model.get_build_trigger(namespace, repository, trigger_uuid) + except model.InvalidBuildTriggerException: + raise NotFound() + + handler = BuildTriggerBase.get_trigger_for_service(trigger.service.name) + user_permission = UserAdminPermission(trigger.connected_user.username) + if user_permission.can(): + new_config_dict = request.get_json() + + try: + subdirs = handler.list_build_subdirs(trigger.auth_token, new_config_dict) + return { + 'subdir': subdirs, + 'status': 'success' + } + except EmptyRepositoryException as exc: + return { + 'status': 'error', + 'message': exc.msg + } + else: + raise Unauthorized() + + +@resource('/v1/repository//trigger//activate') +@internal_only +class BuildTriggerActivate(RepositoryParamResource): + """ Custom verb for activating a build trigger once all required information has been collected. + """ + schemas = { + 'BuildTriggerActivateRequest': { + 'id': 'BuildTriggerActivateRequest', + 'type': 'object', + 'description': 'Arbitrary json.', + }, + } + + @require_repo_admin + @nickname('activateBuildTrigger') + @validate_json_request('BuildTriggerActivateRequest') + def post(self, namespace, repository, trigger_uuid): + """ Activate the specified build trigger. """ + try: + trigger = model.get_build_trigger(namespace, repository, trigger_uuid) + except model.InvalidBuildTriggerException: + raise NotFound() + + handler = BuildTriggerBase.get_trigger_for_service(trigger.service.name) + existing_config_dict = get_trigger_config(trigger) + if handler.is_active(existing_config_dict): + raise InvalidRequest('Trigger config is not sufficient for activation.') + + user_permission = UserAdminPermission(trigger.connected_user.username) + if user_permission.can(): + new_config_dict = request.get_json() + + token_name = 'Build Trigger: %s' % trigger.service.name + token = model.create_delegate_token(namespace, repository, token_name, + 'write') + + try: + repository_path = '%s/%s' % (trigger.repository.namespace, + trigger.repository.name) + path = url_for('webhooks.build_trigger_webhook', + repository=repository_path, trigger_uuid=trigger.uuid) + authed_url = _prepare_webhook_url(app.config['URL_SCHEME'], '$token', + token.code, app.config['URL_HOST'], + path) + + final_config = handler.activate(trigger.uuid, authed_url, + trigger.auth_token, new_config_dict) + except TriggerActivationException as exc: + token.delete_instance() + raise request_error(message=exc.message) + + # Save the updated config. + trigger.config = json.dumps(final_config) + trigger.write_token = token + trigger.save() + + # Log the trigger setup. + repo = model.get_repository(namespace, repository) + log_action('setup_repo_trigger', namespace, + {'repo': repository, 'namespace': namespace, + 'trigger_id': trigger.uuid, 'service': trigger.service.name, + 'config': final_config}, repo=repo) + + return trigger_view(trigger) + else: + raise Unauthorized() + + +@resource('/v1/repository//trigger//start') +class ActivateBuildTrigger(RepositoryParamResource): + """ Custom verb to manually activate a build trigger. """ + + @require_repo_admin + @nickname('manuallyStartBuildTrigger') + def post(self, namespace, repository, trigger_uuid): + """ Manually start a build from the specified trigger. """ + try: + trigger = model.get_build_trigger(namespace, repository, trigger_uuid) + except model.InvalidBuildTriggerException: + raise NotFound() + + handler = BuildTriggerBase.get_trigger_for_service(trigger.service.name) + config_dict = get_trigger_config(trigger) + if not handler.is_active(config_dict): + raise InvalidRequest('Trigger is not active.') + + specs = handler.manual_start(trigger.auth_token, config_dict) + dockerfile_id, tags, name, subdir = specs + + repo = model.get_repository(namespace, repository) + + build_request = start_build(repo, dockerfile_id, tags, name, subdir, True) + + resp = build_status_view(build_request, True) + repo_string = '%s/%s' % (namespace, repository) + headers = { + 'Location': api.url_for(RepositoryBuildStatus, repository=repo_string, + build_uuid=build_request.uuid), + } + return resp, 201, headers + + +@resource('/v1/repository//trigger//builds') +class TriggerBuildList(RepositoryParamResource): + """ Resource to represent builds that were activated from the specified trigger. """ + @require_repo_admin + @parse_args + @query_param('limit', 'The maximum number of builds to return', type=int, default=5) + @nickname('listTriggerRecentBuilds') + def get(self, args, namespace, repository, trigger_uuid): + """ List the builds started by the specified trigger. """ + limit = args['limit'] + builds = list(model.list_trigger_builds(namespace, repository, + trigger_uuid, limit)) + return { + 'builds': [build_status_view(build, True) for build in builds] + } + + +@resource('/v1/repository//trigger//sources') +@internal_only +class BuildTriggerSources(RepositoryParamResource): + """ Custom verb to fetch the list of build sources for the trigger config. """ + @require_repo_admin + @nickname('listTriggerBuildSources') + def get(self, namespace, repository, trigger_uuid): + """ List the build sources for the trigger configuration thus far. """ + try: + trigger = model.get_build_trigger(namespace, repository, trigger_uuid) + except model.InvalidBuildTriggerException: + raise NotFound() + + user_permission = UserAdminPermission(trigger.connected_user.username) + if user_permission.can(): + trigger_handler = BuildTriggerBase.get_trigger_for_service(trigger.service.name) + + return { + 'sources': trigger_handler.list_build_sources(trigger.auth_token) + } + else: + raise Unauthorized() diff --git a/endpoints/api/user.py b/endpoints/api/user.py new file mode 100644 index 000000000..ba245209c --- /dev/null +++ b/endpoints/api/user.py @@ -0,0 +1,450 @@ +import logging +import stripe +import json + +from flask import request +from flask.ext.login import logout_user +from flask.ext.principal import identity_changed, AnonymousIdentity + +from app import app +from endpoints.api import (ApiResource, nickname, resource, validate_json_request, request_error, + log_action, internal_only, NotFound, require_user_admin, + InvalidToken, require_scope, format_date) +from endpoints.api.subscribe import subscribe +from endpoints.common import common_login +from data import model +from data.plans import get_plan +from auth.permissions import (AdministerOrganizationPermission, CreateRepositoryPermission, + UserAdminPermission, UserReadPermission) +from auth.auth_context import get_authenticated_user +from auth import scopes +from util.gravatar import compute_hash +from util.email import (send_confirmation_email, send_recovery_email, + send_change_email) + + +logger = logging.getLogger(__name__) + + +def user_view(user): + def org_view(o): + admin_org = AdministerOrganizationPermission(o.username) + return { + 'name': o.username, + 'gravatar': compute_hash(o.email), + 'is_org_admin': admin_org.can(), + 'can_create_repo': admin_org.can() or CreateRepositoryPermission(o.username).can(), + 'preferred_namespace': not (o.stripe_id is None) + } + + organizations = model.get_user_organizations(user.username) + + def login_view(login): + return { + 'service': login.service.name, + 'service_identifier': login.service_ident, + } + + logins = model.list_federated_logins(user) + + user_response = { + 'verified': user.verified, + 'anonymous': False, + 'username': user.username, + 'email': user.email, + 'gravatar': compute_hash(user.email), + } + + user_admin = UserAdminPermission(user.username) + if user_admin.can(): + user_response.update({ + 'organizations': [org_view(o) for o in organizations], + 'logins': [login_view(login) for login in logins], + 'can_create_repo': True, + 'invoice_email': user.invoice_email, + 'preferred_namespace': not (user.stripe_id is None), + }) + + return user_response + + +def notification_view(notification): + return { + 'organization': notification.target.username if notification.target.organization else None, + 'kind': notification.kind.name, + 'created': format_date(notification.created), + 'metadata': json.loads(notification.metadata_json), + } + + +@resource('/v1/user/') +class User(ApiResource): + """ Operations related to users. """ + schemas = { + 'NewUser': { + 'id': 'NewUser', + 'type': 'object', + 'description': 'Fields which must be specified for a new user.', + 'required': [ + 'username', + 'password', + 'email', + ], + 'properties': { + 'username': { + 'type': 'string', + 'description': 'The user\'s username', + }, + 'password': { + 'type': 'string', + 'description': 'The user\'s password', + }, + 'email': { + 'type': 'string', + 'description': 'The user\'s email address', + }, + } + }, + 'UpdateUser': { + 'id': 'UpdateUser', + 'type': 'object', + 'description': 'Fields which can be updated in a user.', + 'properties': { + 'password': { + 'type': 'string', + 'description': 'The user\'s password', + }, + 'invoice_email': { + 'type': 'boolean', + 'description': 'Whether the user desires to receive an invoice email.', + }, + 'email': { + 'type': 'string', + 'description': 'The user\'s email address', + }, + }, + }, + } + + @require_scope(scopes.READ_USER) + @nickname('getLoggedInUser') + def get(self): + """ Get user information for the authenticated user. """ + user = get_authenticated_user() + if user is None or user.organization or not UserReadPermission(user.username).can(): + raise InvalidToken("Requires authentication", payload={'session_required': False}) + + return user_view(user) + + @require_user_admin + @nickname('changeUserDetails') + @internal_only + @validate_json_request('UpdateUser') + def put(self): + """ Update a users details such as password or email. """ + user = get_authenticated_user() + user_data = request.get_json() + + try: + if 'password' in user_data: + logger.debug('Changing password for user: %s', user.username) + log_action('account_change_password', user.username) + model.change_password(user, user_data['password']) + + if 'invoice_email' in user_data: + logger.debug('Changing invoice_email for user: %s', user.username) + model.change_invoice_email(user, user_data['invoice_email']) + + if 'email' in user_data and user_data['email'] != user.email: + new_email = user_data['email'] + if model.find_user_by_email(new_email): + # Email already used. + raise request_error(message='E-mail address already used') + + logger.debug('Sending email to change email address for user: %s', + user.username) + code = model.create_confirm_email_code(user, new_email=new_email) + send_change_email(user.username, user_data['email'], code.code) + + except model.InvalidPasswordException, ex: + raise request_error(exception=ex) + + return user_view(user) + + @nickname('createNewUser') + @internal_only + @validate_json_request('NewUser') + def post(self): + """ Create a new user. """ + user_data = request.get_json() + + existing_user = model.get_user(user_data['username']) + if existing_user: + raise request_error(message='The username already exists') + + try: + new_user = model.create_user(user_data['username'], user_data['password'], + user_data['email']) + code = model.create_confirm_email_code(new_user) + send_confirmation_email(new_user.username, new_user.email, code.code) + return 'Created', 201 + except model.DataModelException as ex: + raise request_error(exception=ex) + +@resource('/v1/user/private') +@internal_only +class PrivateRepositories(ApiResource): + """ Operations dealing with the available count of private repositories. """ + @require_user_admin + @nickname('getUserPrivateAllowed') + def get(self): + """ Get the number of private repos this user has, and whether they are allowed to create more. + """ + user = get_authenticated_user() + private_repos = model.get_private_repo_count(user.username) + repos_allowed = 0 + + if user.stripe_id: + cus = stripe.Customer.retrieve(user.stripe_id) + if cus.subscription: + plan = get_plan(cus.subscription.plan.id) + if plan: + repos_allowed = plan['privateRepos'] + + return { + 'privateCount': private_repos, + 'privateAllowed': (private_repos < repos_allowed) + } + + +def conduct_signin(username_or_email, password): + needs_email_verification = False + invalid_credentials = False + + verified = model.verify_user(username_or_email, password) + if verified: + if common_login(verified): + return {'success': True} + else: + needs_email_verification = True + + else: + invalid_credentials = True + + return { + 'needsEmailVerification': needs_email_verification, + 'invalidCredentials': invalid_credentials, + }, 403 + + +@resource('/v1/user/convert') +@internal_only +class ConvertToOrganization(ApiResource): + """ Operations for converting a user to an organization. """ + schemas = { + 'ConvertUser': { + 'id': 'ConvertUser', + 'type': 'object', + 'description': 'Information required to convert a user to an organization.', + 'required': [ + 'adminUser', + 'adminPassword', + 'plan', + ], + 'properties': { + 'adminUser': { + 'type': 'string', + 'description': 'The user who will become an org admin\'s username', + }, + 'adminPassword': { + 'type': 'string', + 'description': 'The user who will become an org admin\'s password', + }, + 'plan': { + 'type': 'string', + 'description': 'The plan to which the organizatino should be subscribed', + }, + }, + }, + } + + @require_user_admin + @nickname('convertUserToOrganization') + @validate_json_request('ConvertUser') + def post(self): + """ Convert the user to an organization. """ + user = get_authenticated_user() + convert_data = request.get_json() + + # Ensure that the new admin user is the not user being converted. + admin_username = convert_data['adminUser'] + if admin_username == user.username: + raise request_error(reason='invaliduser', + message='The admin user is not valid') + + # Ensure that the sign in credentials work. + admin_password = convert_data['adminPassword'] + if not model.verify_user(admin_username, admin_password): + raise request_error(reason='invaliduser', + message='The admin user credentials are not valid') + + # Subscribe the organization to the new plan. + plan = convert_data['plan'] + subscribe(user, plan, None, True) # Require business plans + + # Convert the user to an organization. + model.convert_user_to_organization(user, model.get_user(admin_username)) + log_action('account_convert', user.username) + + # And finally login with the admin credentials. + return conduct_signin(admin_username, admin_password) + + +@resource('/v1/signin') +@internal_only +class Signin(ApiResource): + """ Operations for signing in the user. """ + schemas = { + 'SigninUser': { + 'id': 'SigninUser', + 'type': 'object', + 'description': 'Information required to sign in a user.', + 'required': [ + 'username', + 'password', + ], + 'properties': { + 'username': { + 'type': 'string', + 'description': 'The user\'s username', + }, + 'password': { + 'type': 'string', + 'description': 'The user\'s password', + }, + }, + }, + } + + @nickname('signinUser') + @validate_json_request('SigninUser') + def post(self): + """ Sign in the user with the specified credentials. """ + signin_data = request.get_json() + if not signin_data: + raise NotFound() + + username = signin_data['username'] + password = signin_data['password'] + + return conduct_signin(username, password) + + +@resource('/v1/signout') +@internal_only +class Signout(ApiResource): + """ Resource for signing out users. """ + @nickname('logout') + def post(self): + """ Request that the current user be signed out. """ + logout_user() + identity_changed.send(app, identity=AnonymousIdentity()) + return {'success': True} + + +@resource("/v1/recovery") +@internal_only +class Recovery(ApiResource): + """ Resource for requesting a password recovery email. """ + schemas = { + 'RequestRecovery': { + 'id': 'RequestRecovery', + 'type': 'object', + 'description': 'Information required to sign in a user.', + 'required': [ + 'email', + ], + 'properties': { + 'email': { + 'type': 'string', + 'description': 'The user\'s email address', + }, + }, + }, + } + + @nickname('requestRecoveryEmail') + @validate_json_request('RequestRecovery') + def post(self): + """ Request a password recovery email.""" + email = request.get_json()['email'] + code = model.create_reset_password_email_code(email) + send_recovery_email(email, code.code) + return 'Created', 201 + + +@resource('/v1/user/notifications') +@internal_only +class UserNotificationList(ApiResource): + @require_user_admin + @nickname('listUserNotifications') + def get(self): + notifications = model.list_notifications(get_authenticated_user()) + return { + 'notifications': [notification_view(notification) for notification in notifications] + } + + +def authorization_view(access_token): + oauth_app = access_token.application + return { + 'application': { + 'name': oauth_app.name, + 'description': oauth_app.description, + 'url': oauth_app.application_uri, + 'gravatar': compute_hash(oauth_app.gravatar_email or oauth_app.organization.email), + 'organization': { + 'name': oauth_app.organization.username, + 'gravatar': compute_hash(oauth_app.organization.email) + } + }, + 'scopes': scopes.get_scope_information(access_token.scope), + 'uuid': access_token.uuid + } + +@resource('/v1/user/authorizations') +@internal_only +class UserAuthorizationList(ApiResource): + @require_user_admin + @nickname('listUserAuthorizations') + def get(self): + access_tokens = model.oauth.list_access_tokens_for_user(get_authenticated_user()) + + return { + 'authorizations': [authorization_view(token) for token in access_tokens] + } + + +@resource('/v1/user/authorizations/') +@internal_only +class UserAuthorization(ApiResource): + @require_user_admin + @nickname('getUserAuthorization') + def get(self, access_token_uuid): + access_token = model.oauth.lookup_access_token_for_user(get_authenticated_user(), + access_token_uuid) + if not access_token: + raise NotFound() + + return authorization_view(access_token) + + @require_user_admin + @nickname('deleteUserAuthorization') + def delete(self, access_token_uuid): + access_token = model.oauth.lookup_access_token_for_user(get_authenticated_user(), + access_token_uuid) + if not access_token: + raise NotFound() + + access_token.delete_instance(recursive=True, delete_nullable=True) + return 'Deleted', 204 diff --git a/endpoints/api/webhook.py b/endpoints/api/webhook.py new file mode 100644 index 000000000..b38d7ec43 --- /dev/null +++ b/endpoints/api/webhook.py @@ -0,0 +1,77 @@ +import json + +from flask import request + +from endpoints.api import (RepositoryParamResource, nickname, resource, require_repo_admin, + log_action, validate_json_request, api, NotFound) +from data import model + + +def webhook_view(webhook): + return { + 'public_id': webhook.public_id, + 'parameters': json.loads(webhook.parameters), + } + + +@resource('/v1/repository//webhook/') +class WebhookList(RepositoryParamResource): + """ Resource for dealing with listing and creating webhooks. """ + schemas = { + 'WebhookCreateRequest': { + 'id': 'WebhookCreateRequest', + 'type': 'object', + 'description': 'Arbitrary json.', + }, + } + + @require_repo_admin + @nickname('createWebhook') + @validate_json_request('WebhookCreateRequest') + def post(self, namespace, repository): + """ Create a new webhook for the specified repository. """ + repo = model.get_repository(namespace, repository) + webhook = model.create_webhook(repo, request.get_json()) + resp = webhook_view(webhook) + repo_string = '%s/%s' % (namespace, repository) + headers = { + 'Location': api.url_for(Webhook, repository=repo_string, public_id=webhook.public_id), + } + log_action('add_repo_webhook', namespace, + {'repo': repository, 'webhook_id': webhook.public_id}, + repo=repo) + return resp, 201, headers + + @require_repo_admin + @nickname('listWebhooks') + def get(self, namespace, repository): + """ List the webhooks for the specified repository. """ + webhooks = model.list_webhooks(namespace, repository) + return { + 'webhooks': [webhook_view(webhook) for webhook in webhooks] + } + + +@resource('/v1/repository//webhook/') +class Webhook(RepositoryParamResource): + """ Resource for dealing with specific webhooks. """ + @require_repo_admin + @nickname('getWebhook') + def get(self, namespace, repository, public_id): + """ Get information for the specified webhook. """ + try: + webhook = model.get_webhook(namespace, repository, public_id) + except model.InvalidWebhookException: + raise NotFound() + + return webhook_view(webhook) + + @require_repo_admin + @nickname('deleteWebhook') + def delete(self, namespace, repository, public_id): + """ Delete the specified webhook. """ + model.delete_webhook(namespace, repository, public_id) + log_action('delete_repo_webhook', namespace, + {'repo': repository, 'webhook_id': public_id}, + repo=model.get_repository(namespace, repository)) + return 'No Content', 204 diff --git a/endpoints/callbacks.py b/endpoints/callbacks.py new file mode 100644 index 000000000..0f110c098 --- /dev/null +++ b/endpoints/callbacks.py @@ -0,0 +1,133 @@ +import logging + +from flask import request, redirect, url_for, Blueprint +from flask.ext.login import current_user + +from endpoints.common import render_page_template, common_login +from app import app, mixpanel +from data import model +from util.names import parse_repository_name +from util.http import abort +from auth.permissions import AdministerRepositoryPermission +from auth.auth import require_session_login + + +logger = logging.getLogger(__name__) + +client = app.config['HTTPCLIENT'] + + +callback = Blueprint('callback', __name__) + + +def exchange_github_code_for_token(code): + code = request.args.get('code') + payload = { + 'client_id': app.config['GITHUB_CLIENT_ID'], + 'client_secret': app.config['GITHUB_CLIENT_SECRET'], + 'code': code, + } + headers = { + 'Accept': 'application/json' + } + + get_access_token = client.post(app.config['GITHUB_TOKEN_URL'], + params=payload, headers=headers) + + token = get_access_token.json()['access_token'] + return token + + +def get_github_user(token): + token_param = { + 'access_token': token, + } + get_user = client.get(app.config['GITHUB_USER_URL'], params=token_param) + + return get_user.json() + + +@callback.route('/github/callback', methods=['GET']) +def github_oauth_callback(): + error = request.args.get('error', None) + if error: + return render_page_template('githuberror.html', error_message=error) + + token = exchange_github_code_for_token(request.args.get('code')) + user_data = get_github_user(token) + + username = user_data['login'] + github_id = user_data['id'] + + v3_media_type = { + 'Accept': 'application/vnd.github.v3' + } + + token_param = { + 'access_token': token, + } + get_email = client.get(app.config['GITHUB_USER_EMAILS'], params=token_param, + headers=v3_media_type) + + # We will accept any email, but we prefer the primary + found_email = None + for user_email in get_email.json(): + found_email = user_email['email'] + if user_email['primary']: + break + + to_login = model.verify_federated_login('github', github_id) + if not to_login: + # try to create the user + try: + to_login = model.create_federated_user(username, found_email, 'github', + github_id) + + # Success, tell mixpanel + mixpanel.track(to_login.username, 'register', {'service': 'github'}) + + state = request.args.get('state', None) + if state: + logger.debug('Aliasing with state: %s' % state) + mixpanel.alias(to_login.username, state) + + except model.DataModelException, ex: + return render_page_template('githuberror.html', error_message=ex.message) + + if common_login(to_login): + return redirect(url_for('web.index')) + + return render_page_template('githuberror.html') + + +@callback.route('/github/callback/attach', methods=['GET']) +@require_session_login +def github_oauth_attach(): + token = exchange_github_code_for_token(request.args.get('code')) + user_data = get_github_user(token) + github_id = user_data['id'] + user_obj = current_user.db_user() + model.attach_federated_login(user_obj, 'github', github_id) + return redirect(url_for('web.user')) + + +@callback.route('/github/callback/trigger/', methods=['GET']) +@require_session_login +@parse_repository_name +def attach_github_build_trigger(namespace, repository): + permission = AdministerRepositoryPermission(namespace, repository) + if permission.can(): + token = exchange_github_code_for_token(request.args.get('code')) + repo = model.get_repository(namespace, repository) + if not repo: + msg = 'Invalid repository: %s/%s' % (namespace, repository) + abort(404, message=msg) + + trigger = model.create_build_trigger(repo, 'github', token, current_user.db_user()) + admin_path = '%s/%s/%s' % (namespace, repository, 'admin') + full_url = '%s%s%s' % (url_for('web.repository', path=admin_path), '?tab=trigger&new_trigger=', + trigger.uuid) + logger.debug('Redirecting to full url: %s' % full_url) + return redirect(full_url) + + abort(403) diff --git a/endpoints/common.py b/endpoints/common.py index 64dfd5e4f..4a8c03eb9 100644 --- a/endpoints/common.py +++ b/endpoints/common.py @@ -1,18 +1,41 @@ import logging -import os -import base64 +import urlparse +import json +import string -from flask import request, abort, session, make_response +from flask import make_response, render_template, request from flask.ext.login import login_user, UserMixin from flask.ext.principal import identity_changed +from random import SystemRandom from data import model +from data.queue import dockerfile_build_queue from app import app, login_manager from auth.permissions import QuayDeferredPermissionUser +from auth import scopes +from endpoints.api.discovery import swagger_route_data +from werkzeug.routing import BaseConverter logger = logging.getLogger(__name__) +route_data = None + +class RepoPathConverter(BaseConverter): + regex = '[\.a-zA-Z0-9_\-]+/[\.a-zA-Z0-9_\-]+' + weight = 200 + +app.url_map.converters['repopath'] = RepoPathConverter + + +def get_route_data(): + global route_data + if route_data: + return route_data + + route_data = swagger_route_data(include_internal=True, compact=True) + return route_data + def truthy_param(param): return param not in {False, 'false', 'False', '0', 'FALSE', '', 'null'} @@ -20,9 +43,10 @@ def truthy_param(param): @login_manager.user_loader def load_user(username): - logger.debug('Loading user: %s' % username) + logger.debug('User loader loading deferred user: %s' % username) return _LoginWrappedDBUser(username) + class _LoginWrappedDBUser(UserMixin): def __init__(self, db_username, db_user=None): @@ -47,7 +71,7 @@ class _LoginWrappedDBUser(UserMixin): def common_login(db_user): if login_user(_LoginWrappedDBUser(db_user.username, db_user)): logger.debug('Successfully signed in as: %s' % db_user.username) - new_identity = QuayDeferredPermissionUser(db_user.username, 'username') + new_identity = QuayDeferredPermissionUser(db_user.username, 'username', {scopes.DIRECT_LOGIN}) identity_changed.send(app, identity=new_identity) return True else: @@ -58,19 +82,68 @@ def common_login(db_user): @app.errorhandler(model.DataModelException) def handle_dme(ex): logger.exception(ex) - return make_response(ex.message, 400) + return make_response(json.dumps({'message': ex.message}), 400) -@app.errorhandler(KeyError) -def handle_dme_key_error(ex): - logger.exception(ex) - return make_response('Invalid key: %s' % ex.message, 400) +def random_string(): + random = SystemRandom() + return ''.join([random.choice(string.ascii_uppercase + string.digits) for _ in range(8)]) + +def render_page_template(name, **kwargs): + resp = make_response(render_template(name, route_data=json.dumps(get_route_data()), + cache_buster=random_string(), **kwargs)) + resp.headers['X-FRAME-OPTIONS'] = 'DENY' + return resp -def generate_csrf_token(): - if '_csrf_token' not in session: - session['_csrf_token'] = base64.b64encode(os.urandom(48)) +def check_repository_usage(user_or_org, plan_found): + private_repos = model.get_private_repo_count(user_or_org.username) + repos_allowed = plan_found['privateRepos'] - return session['_csrf_token'] + if private_repos > repos_allowed: + model.create_notification('over_private_usage', user_or_org, {'namespace': user_or_org.username}) + else: + model.delete_notifications_by_kind(user_or_org, 'over_private_usage') -app.jinja_env.globals['csrf_token'] = generate_csrf_token + +def start_build(repository, dockerfile_id, tags, build_name, subdir, manual, + trigger=None): + host = urlparse.urlparse(request.url).netloc + repo_path = '%s/%s/%s' % (host, repository.namespace, repository.name) + + token = model.create_access_token(repository, 'write') + logger.debug('Creating build %s with repo %s tags %s and dockerfile_id %s', + build_name, repo_path, tags, dockerfile_id) + + job_config = { + 'docker_tags': tags, + 'repository': repo_path, + 'build_subdir': subdir, + } + build_request = model.create_repository_build(repository, token, job_config, + dockerfile_id, build_name, + trigger) + + dockerfile_build_queue.put(json.dumps({ + 'build_uuid': build_request.uuid, + 'namespace': repository.namespace, + 'repository': repository.name, + }), retries_remaining=1) + + metadata = { + 'repo': repository.name, + 'namespace': repository.namespace, + 'fileid': dockerfile_id, + 'manual': manual, + } + + if trigger: + metadata['trigger_id'] = trigger.uuid + metadata['config'] = json.loads(trigger.config) + metadata['service'] = trigger.service.name + + model.log_action('build_dockerfile', repository.namespace, + ip=request.remote_addr, metadata=metadata, + repository=repository) + + return build_request diff --git a/endpoints/csrf.py b/endpoints/csrf.py new file mode 100644 index 000000000..7fa8194bc --- /dev/null +++ b/endpoints/csrf.py @@ -0,0 +1,40 @@ +import logging +import os +import base64 + +from flask import session, request +from functools import wraps + +from app import app +from auth.auth_context import get_validated_oauth_token +from util.http import abort + + +logger = logging.getLogger(__name__) + + +def generate_csrf_token(): + if '_csrf_token' not in session: + session['_csrf_token'] = base64.b64encode(os.urandom(48)) + + return session['_csrf_token'] + + +def csrf_protect(func): + @wraps(func) + def wrapper(*args, **kwargs): + oauth_token = get_validated_oauth_token() + if oauth_token is None and request.method != "GET" and request.method != "HEAD": + token = session.get('_csrf_token', None) + found_token = request.values.get('_csrf_token', None) + + if not token or token != found_token: + msg = 'CSRF Failure. Session token was %s and request token was %s' + logger.error(msg, token, found_token) + abort(403, message='CSRF token was invalid or missing.') + + return func(*args, **kwargs) + return wrapper + + +app.jinja_env.globals['csrf_token'] = generate_csrf_token \ No newline at end of file diff --git a/endpoints/index.py b/endpoints/index.py index 549bcfec8..480c9e636 100644 --- a/endpoints/index.py +++ b/endpoints/index.py @@ -6,16 +6,16 @@ from flask import request, make_response, jsonify, session, Blueprint from functools import wraps from collections import OrderedDict -from data import model, userevent +from data import model +from data.model import oauth from data.queue import webhook_queue from app import mixpanel, app from auth.auth import process_auth -from auth.auth_context import get_authenticated_user, get_validated_token +from auth.auth_context import get_authenticated_user, get_validated_token, get_validated_oauth_token from util.names import parse_repository_name from util.email import send_confirmation_email -from auth.permissions import (ModifyRepositoryPermission, UserPermission, - ReadRepositoryPermission, - CreateRepositoryPermission) +from auth.permissions import (ModifyRepositoryPermission, UserAdminPermission, + ReadRepositoryPermission, CreateRepositoryPermission) from util.http import abort @@ -79,6 +79,13 @@ def create_user(): except model.InvalidTokenException: abort(400, 'Invalid access token.', issue='invalid-access-token') + elif username == '$oauthtoken': + validated = oauth.validate_access_token(password) + if validated is not None: + return success + else: + abort(400, 'Invalid oauth access token.', issue='invalid-oauth-access-token') + elif '+' in username: try: model.verify_robot(username, password) @@ -115,7 +122,12 @@ def create_user(): @index.route('/users/', methods=['GET']) @process_auth def get_user(): - if get_authenticated_user(): + if get_validated_oauth_token(): + return jsonify({ + 'username': '$oauthtoken', + 'email': None, + }) + elif get_authenticated_user(): return jsonify({ 'username': get_authenticated_user().username, 'email': get_authenticated_user().email, @@ -131,7 +143,7 @@ def get_user(): @index.route('/users//', methods=['PUT']) @process_auth def update_user(username): - permission = UserPermission(username) + permission = UserAdminPermission(username) if permission.can(): update_request = request.get_json() @@ -214,7 +226,14 @@ def create_repository(namespace, repository): 'namespace': namespace } - if get_authenticated_user(): + if get_validated_oauth_token(): + mixpanel.track(username, 'push_repo', extra_params) + + oauth_token = get_validated_oauth_token() + metadata['oauth_token_id'] = oauth_token.id + metadata['oauth_token_application_id'] = oauth_token.application.client_id + metadata['oauth_token_application'] = oauth_token.application.name + elif get_authenticated_user(): username = get_authenticated_user().username mixpanel.track(username, 'push_repo', extra_params) @@ -230,7 +249,7 @@ def create_repository(namespace, repository): event = app.config['USER_EVENTS'].get_event(username) event.publish_event_data('docker-cli', user_data) - else: + elif get_validated_token(): mixpanel.track(get_validated_token().code, 'push_repo', extra_params) metadata['token'] = get_validated_token().friendly_name metadata['token_code'] = get_validated_token().code @@ -333,7 +352,13 @@ def get_repository_images(namespace, repository): 'repo': repository, 'namespace': namespace, } - if get_authenticated_user(): + + if get_validated_oauth_token(): + oauth_token = get_validated_oauth_token() + metadata['oauth_token_id'] = oauth_token.id + metadata['oauth_token_application_id'] = oauth_token.application.client_id + metadata['oauth_token_application'] = oauth_token.application.name + elif get_authenticated_user(): metadata['username'] = get_authenticated_user().username elif get_validated_token(): metadata['token'] = get_validated_token().friendly_name diff --git a/endpoints/realtime.py b/endpoints/realtime.py index a4df130aa..7dfd1768d 100644 --- a/endpoints/realtime.py +++ b/endpoints/realtime.py @@ -1,71 +1,52 @@ import logging -import redis import json -from functools import wraps -from flask import request, make_response, Blueprint, abort, Response -from flask.ext.login import current_user, logout_user -from data import model, userevent -from app import app +from flask import request, Blueprint, abort, Response +from flask.ext.login import current_user +from data import userevent +from auth.auth import require_session_login logger = logging.getLogger(__name__) realtime = Blueprint('realtime', __name__) -def api_login_required(f): - @wraps(f) - def decorated_view(*args, **kwargs): - if not current_user.is_authenticated(): - abort(401) - - if (current_user and current_user.db_user() and - current_user.db_user().organization): - abort(401) - - if (current_user and current_user.db_user() and - current_user.db_user().robot): - abort(401) - - return f(*args, **kwargs) - return decorated_view - @realtime.route("/user/") -@api_login_required +@require_session_login def index(): - debug_template = """ - - - - -

Server sent events

-
- - - + + + """ - return(debug_template) + return(debug_template) @realtime.route("/user/test") -@api_login_required +@require_session_login def user_test(): evt = userevent.UserEvent('logs.quay.io', current_user.db_user().username) evt.publish_event_data('test', {'foo': 2}) return 'OK' @realtime.route("/user/subscribe") -@api_login_required +@require_session_login def user_subscribe(): def wrapper(listener): for event_id, data in listener.event_stream(): diff --git a/endpoints/registry.py b/endpoints/registry.py index 51bb7219e..9727d5ccb 100644 --- a/endpoints/registry.py +++ b/endpoints/registry.py @@ -2,7 +2,7 @@ import logging import json from flask import (make_response, request, session, Response, redirect, - Blueprint) + Blueprint, abort as flask_abort) from functools import wraps from datetime import datetime from time import time @@ -259,7 +259,7 @@ def get_image_json(namespace, repository, image_id, headers): data = store.get_content(store.image_json_path(namespace, repository, image_id, uuid)) except IOError: - abort(404, message='Image data not found') + flask_abort(404) try: size = store.get_size(store.image_layer_path(namespace, repository, diff --git a/endpoints/trigger.py b/endpoints/trigger.py new file mode 100644 index 000000000..82a3284ab --- /dev/null +++ b/endpoints/trigger.py @@ -0,0 +1,286 @@ +import logging +import io +import os.path +import zipfile + +from github import Github, UnknownObjectException, GithubException +from tempfile import SpooledTemporaryFile + +from app import app + + +user_files = app.config['USERFILES'] +client = app.config['HTTPCLIENT'] + + +logger = logging.getLogger(__name__) + + +ZIPBALL = 'application/zip' +CHUNK_SIZE = 512 * 1024 + + +class BuildArchiveException(Exception): + pass + +class InvalidServiceException(Exception): + pass + +class TriggerActivationException(Exception): + pass + +class TriggerDeactivationException(Exception): + pass + +class ValidationRequestException(Exception): + pass + +class EmptyRepositoryException(Exception): + pass + + +class BuildTrigger(object): + def __init__(self): + pass + + def list_build_sources(self, auth_token): + """ + Take the auth information for the specific trigger type and load the + list of build sources(repositories). + """ + raise NotImplementedError + + def list_build_subdirs(self, auth_token, config): + """ + Take the auth information and the specified config so far and list all of + the possible subdirs containing dockerfiles. + """ + raise NotImplementedError + + def handle_trigger_request(self, request, auth_token, config): + """ + Transform the incoming request data into a set of actions. Returns a tuple + of usefiles resource id, docker tags, build name, and resource subdir. + """ + raise NotImplementedError + + def is_active(self, config): + """ + Returns True if the current build trigger is active. Inactive means further + setup is needed. + """ + raise NotImplementedError + + def activate(self, trigger_uuid, standard_webhook_url, auth_token, config): + """ + Activates the trigger for the service, with the given new configuration. + Returns new configuration that should be stored if successful. + """ + raise NotImplementedError + + def deactivate(self, auth_token, config): + """ + Deactivates the trigger for the service, removing any hooks installed in + the remote service. Returns the new config that should be stored if this + trigger is going to be re-activated. + """ + raise NotImplementedError + + def manual_start(self, auth_token, config): + """ + Manually creates a repository build for this trigger. + """ + raise NotImplementedError + + @classmethod + def service_name(cls): + """ + Particular service implemented by subclasses. + """ + raise NotImplementedError + + @classmethod + def get_trigger_for_service(cls, service): + for subc in cls.__subclasses__(): + if subc.service_name() == service: + return subc() + + raise InvalidServiceException('Unable to find service: %s' % service) + + +def raise_unsupported(): + raise io.UnsupportedOperation + + +class GithubBuildTrigger(BuildTrigger): + @staticmethod + def _get_client(auth_token): + return Github(auth_token, client_id=app.config['GITHUB_CLIENT_ID'], + client_secret=app.config['GITHUB_CLIENT_SECRET']) + + @classmethod + def service_name(cls): + return 'github' + + def is_active(self, config): + return 'hook_id' in config + + def activate(self, trigger_uuid, standard_webhook_url, auth_token, config): + new_build_source = config['build_source'] + gh_client = self._get_client(auth_token) + + try: + to_add_webhook = gh_client.get_repo(new_build_source) + except UnknownObjectException: + msg = 'Unable to find GitHub repository for source: %s' + raise TriggerActivationException(msg % new_build_source) + + webhook_config = { + 'url': standard_webhook_url, + 'content_type': 'json', + } + + try: + hook = to_add_webhook.create_hook('web', webhook_config) + config['hook_id'] = hook.id + config['master_branch'] = to_add_webhook.master_branch + except GithubException: + msg = 'Unable to create webhook on repository: %s' + raise TriggerActivationException(msg % new_build_source) + + return config + + def deactivate(self, auth_token, config): + gh_client = self._get_client(auth_token) + + try: + repo = gh_client.get_repo(config['build_source']) + to_delete = repo.get_hook(config['hook_id']) + to_delete.delete() + except GithubException: + msg = 'Unable to remove hook: %s' % config['hook_id'] + raise TriggerDeactivationException(msg) + + config.pop('hook_id', None) + + return config + + + def list_build_sources(self, auth_token): + gh_client = self._get_client(auth_token) + usr = gh_client.get_user() + + personal = { + 'personal': True, + 'repos': [repo.full_name for repo in usr.get_repos()], + 'info': { + 'name': usr.login, + 'avatar_url': usr.avatar_url, + } + } + + repos_by_org = [personal] + + for org in usr.get_orgs(): + repo_list = [] + for repo in org.get_repos(type='member'): + repo_list.append(repo.full_name) + + repos_by_org.append({ + 'personal': False, + 'repos': repo_list, + 'info': { + 'name': org.name, + 'avatar_url': org.avatar_url + } + }) + + return repos_by_org + + def list_build_subdirs(self, auth_token, config): + gh_client = self._get_client(auth_token) + source = config['build_source'] + + try: + repo = gh_client.get_repo(source) + default_commit = repo.get_branch(repo.master_branch or 'master').commit + commit_tree = repo.get_git_tree(default_commit.sha, recursive=True) + + return [os.path.dirname(elem.path) for elem in commit_tree.tree + if (elem.type == u'blob' and + os.path.basename(elem.path) == u'Dockerfile')] + except GithubException: + msg = 'Unable to list contents of repository: %s' % source + raise EmptyRepositoryException(msg) + + @staticmethod + def _prepare_build(config, repo, commit_sha, build_name, ref): + # Prepare the download and upload URLs + archive_link = repo.get_archive_link('zipball', commit_sha) + download_archive = client.get(archive_link, stream=True) + + zipball_subdir = '' + with SpooledTemporaryFile(CHUNK_SIZE) as zipball: + for chunk in download_archive.iter_content(CHUNK_SIZE): + zipball.write(chunk) + + # Pull out the name of the subdir that GitHub generated + with zipfile.ZipFile(zipball) as archive: + zipball_subdir = archive.namelist()[0] + + dockerfile_id = user_files.store_file(zipball, ZIPBALL) + + logger.debug('Successfully prepared job') + + # compute the tag(s) + branch = ref.split('/')[-1] + tags = {branch} + if branch == repo.master_branch: + tags.add('latest') + logger.debug('Pushing to tags: %s' % tags) + + # compute the subdir + repo_subdir = config['subdir'] + joined_subdir = os.path.join(zipball_subdir, repo_subdir) + logger.debug('Final subdir: %s' % joined_subdir) + + return dockerfile_id, list(tags), build_name, joined_subdir + + @staticmethod + def get_display_name(sha): + return sha[0:7] + + def handle_trigger_request(self, request, auth_token, config): + payload = request.get_json() + + if 'zen' in payload: + raise ValidationRequestException() + + logger.debug('Payload %s', payload) + ref = payload['ref'] + commit_sha = payload['head_commit']['id'] + short_sha = GithubBuildTrigger.get_display_name(commit_sha) + + gh_client = self._get_client(auth_token) + + repo_full_name = '%s/%s' % (payload['repository']['owner']['name'], + payload['repository']['name']) + repo = gh_client.get_repo(repo_full_name) + + logger.debug('Github repo: %s', repo) + + return GithubBuildTrigger._prepare_build(config, repo, commit_sha, + short_sha, ref) + + def manual_start(self, auth_token, config): + source = config['build_source'] + subdir = config['subdir'] + + gh_client = self._get_client(auth_token) + repo = gh_client.get_repo(source) + master = repo.get_branch(repo.master_branch) + master_sha = master.commit.sha + short_sha = GithubBuildTrigger.get_display_name(master_sha) + ref = 'refs/heads/%s' % repo.master_branch + + return self._prepare_build(config, repo, master_sha, short_sha, ref) diff --git a/endpoints/web.py b/endpoints/web.py index cc56eeac6..02d0ffd50 100644 --- a/endpoints/web.py +++ b/endpoints/web.py @@ -1,43 +1,44 @@ import logging -import requests import stripe +import os -from flask import (abort, redirect, request, url_for, render_template, - make_response, Response, Blueprint) -from flask.ext.login import login_required, current_user +from flask import (abort, redirect, request, url_for, make_response, Response, + Blueprint) +from flask.ext.login import current_user from urlparse import urlparse from data import model -from app import app, mixpanel +from data.model.oauth import DatabaseAuthorizationProvider +from app import app from auth.permissions import AdministerOrganizationPermission from util.invoice import renderInvoiceToPdf from util.seo import render_snapshot from util.cache import no_cache -from endpoints.api import get_route_data -from endpoints.common import common_login - +from endpoints.common import common_login, render_page_template +from endpoints.csrf import csrf_protect, generate_csrf_token +from util.names import parse_repository_name +from util.gravatar import compute_hash +from auth import scopes logger = logging.getLogger(__name__) web = Blueprint('web', __name__) - -def render_page_template(name, **kwargs): - - resp = make_response(render_template(name, route_data=get_route_data(), - **kwargs)) - resp.headers['X-FRAME-OPTIONS'] = 'DENY' - return resp +STATUS_TAGS = app.config['STATUS_TAGS'] @web.route('/', methods=['GET'], defaults={'path': ''}) -@web.route('/repository/', methods=['GET']) @web.route('/organization/', methods=['GET']) @no_cache def index(path): return render_page_template('index.html') +@web.route('/500', methods=['GET']) +def internal_error_display(): + return render_page_template('500.html') + + @web.route('/snapshot', methods=['GET']) @web.route('/snapshot/', methods=['GET']) @web.route('/snapshot/', methods=['GET']) @@ -106,9 +107,10 @@ def new(): return index('') -@web.route('/repository/') +@web.route('/repository/', defaults={'path': ''}) +@web.route('/repository/', methods=['GET']) @no_cache -def repository(): +def repository(path): return index('') @@ -179,97 +181,6 @@ def receipt(): abort(404) -def exchange_github_code_for_token(code): - code = request.args.get('code') - payload = { - 'client_id': app.config['GITHUB_CLIENT_ID'], - 'client_secret': app.config['GITHUB_CLIENT_SECRET'], - 'code': code, - } - headers = { - 'Accept': 'application/json' - } - - get_access_token = requests.post(app.config['GITHUB_TOKEN_URL'], - params=payload, headers=headers) - - token = get_access_token.json()['access_token'] - return token - - -def get_github_user(token): - token_param = { - 'access_token': token, - } - get_user = requests.get(app.config['GITHUB_USER_URL'], params=token_param) - - return get_user.json() - - -@web.route('/oauth2/github/callback', methods=['GET']) -def github_oauth_callback(): - error = request.args.get('error', None) - if error: - return render_page_template('githuberror.html', error_message=error) - - token = exchange_github_code_for_token(request.args.get('code')) - user_data = get_github_user(token) - - username = user_data['login'] - github_id = user_data['id'] - - v3_media_type = { - 'Accept': 'application/vnd.github.v3' - } - - token_param = { - 'access_token': token, - } - get_email = requests.get(app.config['GITHUB_USER_EMAILS'], - params=token_param, headers=v3_media_type) - - # We will accept any email, but we prefer the primary - found_email = None - for user_email in get_email.json(): - found_email = user_email['email'] - if user_email['primary']: - break - - to_login = model.verify_federated_login('github', github_id) - if not to_login: - # try to create the user - try: - to_login = model.create_federated_user(username, found_email, 'github', - github_id) - - # Success, tell mixpanel - mixpanel.track(to_login.username, 'register', {'service': 'github'}) - - state = request.args.get('state', None) - if state: - logger.debug('Aliasing with state: %s' % state) - mixpanel.alias(to_login.username, state) - - except model.DataModelException, ex: - return render_page_template('githuberror.html', error_message=ex.message) - - if common_login(to_login): - return redirect(url_for('web.index')) - - return render_page_template('githuberror.html') - - -@web.route('/oauth2/github/callback/attach', methods=['GET']) -@login_required -def github_oauth_attach(): - token = exchange_github_code_for_token(request.args.get('code')) - user_data = get_github_user(token) - github_id = user_data['id'] - user_obj = current_user.db_user() - model.attach_federated_login(user_obj, 'github', github_id) - return redirect(url_for('web.user')) - - @web.route('/confirm', methods=['GET']) def confirm_email(): code = request.values['code'] @@ -297,3 +208,134 @@ def confirm_recovery(): return redirect(url_for('web.user')) else: abort(403) + + +@web.route('/repository//status', methods=['GET']) +@parse_repository_name +@no_cache +def build_status_badge(namespace, repository): + token = request.args.get('token', None) + is_public = model.repository_is_public(namespace, repository) + if not is_public: + repo = model.get_repository(namespace, repository) + if not repo or token != repo.badge_token: + abort(404) + + # Lookup the tags for the repository. + tags = model.list_repository_tags(namespace, repository) + is_empty = len(list(tags)) == 0 + build = model.get_recent_repository_build(namespace, repository) + + if not is_empty and (not build or build.phase == 'complete'): + status_name = 'ready' + elif build and build.phase == 'error': + status_name = 'failed' + elif build and build.phase != 'complete': + status_name = 'building' + else: + status_name = 'none' + + response = make_response(STATUS_TAGS[status_name]) + response.content_type = 'image/svg+xml' + return response + + +class FlaskAuthorizationProvider(DatabaseAuthorizationProvider): + def get_authorized_user(self): + return current_user.db_user() + + def _make_response(self, body='', headers=None, status_code=200): + return make_response(body, status_code, headers) + + +@web.route('/oauth/authorizeapp', methods=['POST']) +@csrf_protect +def authorize_application(): + if not current_user.is_authenticated(): + abort(401) + return + + provider = FlaskAuthorizationProvider() + client_id = request.form.get('client_id', None) + redirect_uri = request.form.get('redirect_uri', None) + scope = request.form.get('scope', None) + + # Add the access token. + return provider.get_token_response('token', client_id, redirect_uri, scope=scope) + + +@web.route('/oauth/denyapp', methods=['POST']) +@csrf_protect +def deny_application(): + if not current_user.is_authenticated(): + abort(401) + return + + provider = FlaskAuthorizationProvider() + client_id = request.form.get('client_id', None) + redirect_uri = request.form.get('redirect_uri', None) + scope = request.form.get('scope', None) + + # Add the access token. + return provider.get_auth_denied_response('token', client_id, redirect_uri, scope=scope) + + +@web.route('/oauth/authorize', methods=['GET']) +@no_cache +def request_authorization_code(): + provider = FlaskAuthorizationProvider() + response_type = request.args.get('response_type', 'code') + client_id = request.args.get('client_id', None) + redirect_uri = request.args.get('redirect_uri', None) + scope = request.args.get('scope', None) + + if (not current_user.is_authenticated() or + not provider.validate_has_scopes(client_id, current_user.db_user().username, scope)): + if not provider.validate_redirect_uri(client_id, redirect_uri): + current_app = provider.get_application_for_client_id(client_id) + if not current_app: + abort(404) + + return provider._make_redirect_error_response(current_app.redirect_uri, 'redirect_uri_mismatch') + + # Load the scope information. + scope_info = scopes.get_scope_information(scope) + if not scope_info: + abort(404) + return + + # Load the application information. + oauth_app = provider.get_application_for_client_id(client_id) + oauth_app_view = { + 'name': oauth_app.name, + 'description': oauth_app.description, + 'url': oauth_app.application_uri, + 'organization': { + 'name': oauth_app.organization.username, + 'gravatar': compute_hash(oauth_app.organization.email) + } + } + + # Show the authorization page. + return render_page_template('oauthorize.html', scopes=scope_info, application=oauth_app_view, + enumerate=enumerate, client_id=client_id, redirect_uri=redirect_uri, + scope=scope, csrf_token_val=generate_csrf_token()) + + if response_type == 'token': + return provider.get_token_response(response_type, client_id, redirect_uri, scope=scope) + else: + return provider.get_authorization_code(response_type, client_id, redirect_uri, scope=scope) + + +@web.route('/oauth/access_token', methods=['POST']) +@no_cache +def exchange_code_for_token(): + grant_type = request.form.get('grant_type', None) + client_id = request.form.get('client_id', None) + client_secret = request.form.get('client_secret', None) + redirect_uri = request.form.get('redirect_uri', None) + code = request.form.get('code', None) + scope = request.form.get('scope', None) + + provider = FlaskAuthorizationProvider() + return provider.get_token(grant_type, client_id, client_secret, redirect_uri, code, scope=scope) diff --git a/endpoints/webhooks.py b/endpoints/webhooks.py index 5a6c0ad3d..d92e7095e 100644 --- a/endpoints/webhooks.py +++ b/endpoints/webhooks.py @@ -1,18 +1,26 @@ import logging import stripe +import json from flask import request, make_response, Blueprint from data import model -from app import app +from data.queue import dockerfile_build_queue +from auth.auth import process_auth +from auth.permissions import ModifyRepositoryPermission from util.invoice import renderInvoiceToHtml from util.email import send_invoice_email +from util.names import parse_repository_name +from util.http import abort +from endpoints.trigger import BuildTrigger, ValidationRequestException +from endpoints.common import start_build logger = logging.getLogger(__name__) webhooks = Blueprint('webhooks', __name__) + @webhooks.route('/stripe', methods=['POST']) def stripe_webhook(): request_data = request.get_json() @@ -36,3 +44,38 @@ def stripe_webhook(): send_invoice_email(user.email, invoice_html) return make_response('Okay') + + +@webhooks.route('/push//trigger/', + methods=['POST']) +@process_auth +@parse_repository_name +def build_trigger_webhook(namespace, repository, trigger_uuid): + logger.debug('Webhook received for %s/%s with uuid %s', namespace, + repository, trigger_uuid) + permission = ModifyRepositoryPermission(namespace, repository) + if permission.can(): + try: + trigger = model.get_build_trigger(namespace, repository, trigger_uuid) + except model.InvalidBuildTriggerException: + abort(404) + + handler = BuildTrigger.get_trigger_for_service(trigger.service.name) + + logger.debug('Passing webhook request to handler %s', handler) + config_dict = json.loads(trigger.config) + try: + specs = handler.handle_trigger_request(request, trigger.auth_token, + config_dict) + dockerfile_id, tags, name, subdir = specs + + except ValidationRequestException: + # This was just a validation request, we don't need to build anything + return make_response('Okay') + + repo = model.get_repository(namespace, repository) + start_build(repo, dockerfile_id, tags, name, subdir, False, trigger) + + return make_response('Okay') + + abort(403) diff --git a/initdb.py b/initdb.py index eba642754..52bb5833e 100644 --- a/initdb.py +++ b/initdb.py @@ -9,6 +9,7 @@ from peewee import (SqliteDatabase, create_model_tables, drop_model_tables, from data.database import * from data import model +from data.model import oauth from app import app @@ -182,6 +183,8 @@ def initialize_database(): Visibility.create(name='private') LoginService.create(name='github') LoginService.create(name='quayrobot') + + BuildTriggerService.create(name='github') LogEntryKind.create(name='account_change_plan') LogEntryKind.create(name='account_change_cc') @@ -207,6 +210,7 @@ def initialize_database(): LogEntryKind.create(name='add_repo_webhook') LogEntryKind.create(name='delete_repo_webhook') LogEntryKind.create(name='set_repo_description') + LogEntryKind.create(name='build_dockerfile') LogEntryKind.create(name='org_create_team') @@ -220,6 +224,19 @@ def initialize_database(): LogEntryKind.create(name='modify_prototype_permission') LogEntryKind.create(name='delete_prototype_permission') + LogEntryKind.create(name='setup_repo_trigger') + LogEntryKind.create(name='delete_repo_trigger') + + LogEntryKind.create(name='create_application') + LogEntryKind.create(name='update_application') + LogEntryKind.create(name='delete_application') + LogEntryKind.create(name='reset_application_client_secret') + + NotificationKind.create(name='password_required') + NotificationKind.create(name='over_private_usage') + + NotificationKind.create(name='test_notification') + def wipe_database(): logger.debug('Wiping all data from the DB.') @@ -257,6 +274,9 @@ def populate_database(): new_user_4.verified = True new_user_4.save() + new_user_5 = model.create_user('unverified', 'password', 'no5@thanks.com') + new_user_5.save() + reader = model.create_user('reader', 'password', 'no1@thanks.com') reader.verified = True reader.save() @@ -265,6 +285,8 @@ def populate_database(): outside_org.verified = True outside_org.save() + model.create_notification('test_notification', new_user_1, metadata={'some': 'value'}) + __generate_repository(new_user_4, 'randomrepo', 'Random repo repository.', False, [], (4, [], ['latest', 'prod'])) @@ -308,9 +330,24 @@ def populate_database(): False, [], (0, [], None)) token = model.create_access_token(building, 'write') - tag = 'ci.devtable.com:5000/%s/%s' % (building.namespace, building.name) - build = model.create_repository_build(building, token, '701dcc3724fb4f2ea6c31400528343cd', - tag, 'build-name') + + trigger = model.create_build_trigger(building, 'github', '123authtoken', + new_user_1) + trigger.config = json.dumps({ + 'build_source': 'jakedt/testconnect', + 'subdir': '', + }) + trigger.save() + + repo = 'ci.devtable.com:5000/%s/%s' % (building.namespace, building.name) + job_config = { + 'repository': repo, + 'docker_tags': ['latest'], + 'build_subdir': '', + } + build = model.create_repository_build(building, token, job_config, + '701dcc3724fb4f2ea6c31400528343cd', + 'build-name', trigger) build.uuid = 'deadbeef-dead-beef-dead-beefdeadbeef' build.save() @@ -319,6 +356,15 @@ def populate_database(): org.stripe_id = TEST_STRIPE_ID org.save() + oauth.create_application(org, 'Some Test App', 'http://localhost:8000', 'http://localhost:8000/o2c.html', + client_id='deadbeef') + + oauth.create_application(org, 'Some Other Test App', 'http://quay.io', 'http://localhost:8000/o2c.html', + client_id='deadpork', + description = 'This is another test application') + + model.oauth.create_access_token_for_testing(new_user_1, 'deadbeef', 'repo:admin') + model.create_robot('neworgrobot', org) owners = model.get_organization_team('buynlarge', 'owners') @@ -423,6 +469,12 @@ def populate_database(): timestamp=today, metadata={'token_code': 'somecode', 'repo': 'orgrepo'}) + model.log_action('build_dockerfile', new_user_1.username, repository=building, + timestamp=today, + metadata={'repo': 'building', 'namespace': new_user_1.username, + 'trigger_id': trigger.uuid, 'config': json.loads(trigger.config), + 'service': trigger.service.name}) + if __name__ == '__main__': app.config['LOGGING_CONFIG']() initialize_database() diff --git a/requirements-nover.txt b/requirements-nover.txt index 5b1ef8841..39142b7c5 100644 --- a/requirements-nover.txt +++ b/requirements-nover.txt @@ -22,4 +22,8 @@ logstash_formatter redis hiredis git+https://github.com/dotcloud/docker-py.git -loremipsum \ No newline at end of file +loremipsum +pygithub +flask-restful +jsonschema +git+https://github.com/NateFerrero/oauth2lib.git \ No newline at end of file diff --git a/requirements.txt b/requirements.txt index 8d9670b67..2d26ab24b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,45 +1,51 @@ APScheduler==2.1.2 Flask==0.10.1 -Flask-Login==0.2.9 +Flask-Login==0.2.10 Flask-Mail==0.9.0 Flask-Principal==0.4.0 +Flask-RESTful==0.2.12 Jinja2==2.7.2 -MarkupSafe==0.18 -Pillow==2.3.0 +MarkupSafe==0.19 +Pillow==2.3.1 +PyGithub==1.24.1 PyMySQL==0.6.1 Werkzeug==0.9.4 +aniso8601==0.82 argparse==1.2.1 beautifulsoup4==4.3.2 blinker==1.3 -boto==2.24.0 +boto==2.27.0 distribute==0.6.34 git+https://github.com/dotcloud/docker-py.git -ecdsa==0.10 +ecdsa==0.11 gevent==1.0 greenlet==0.4.2 gunicorn==18.0 hiredis==0.1.2 html5lib==1.0b3 itsdangerous==0.23 +jsonschema==2.3.0 lockfile==0.9.1 logstash-formatter==0.5.8 loremipsum==1.0.2 -marisa-trie==0.5.1 -mixpanel-py==3.1.1 +marisa-trie==0.6 +mixpanel-py==3.1.2 mock==1.0.1 -paramiko==1.12.1 -peewee==2.2.0 +git+https://github.com/NateFerrero/oauth2lib.git +paramiko==1.13.0 +peewee==2.2.2 py-bcrypt==0.4 pyPdf==1.13 pycrypto==2.6.1 python-daemon==1.6 python-dateutil==2.2 -python-digitalocean==0.6 +python-digitalocean==0.7 +pytz==2014.2 redis==2.9.1 reportlab==2.7 requests==2.2.1 -six==1.5.2 -stripe==1.12.0 +six==1.6.1 +stripe==1.12.2 websocket-client==0.11.0 wsgiref==0.1.2 xhtml2pdf==0.0.5 diff --git a/screenshots/screenshots.js b/screenshots/screenshots.js index 9999eb8a8..fbef4ac01 100644 --- a/screenshots/screenshots.js +++ b/screenshots/screenshots.js @@ -15,8 +15,9 @@ var isDebug = !!options['d']; var rootUrl = isDebug ? 'http://localhost:5000/' : 'https://quay.io/'; var repo = isDebug ? 'complex' : 'r0'; -var org = isDebug ? 'buynlarge' : 'quay' -var orgrepo = 'orgrepo' +var org = isDebug ? 'buynlarge' : 'devtable' +var orgrepo = isDebug ? 'buynlarge/orgrepo' : 'quay/testconnect2'; +var buildrepo = isDebug ? 'devtable/building' : 'quay/testconnect2'; var outputDir = "screenshots/"; @@ -32,8 +33,16 @@ casper.on("page.error", function(msg, trace) { }); casper.start(rootUrl + 'signin', function () { + this.wait(1000); +}); + +casper.thenClick('.accordion-toggle[data-target="#collapseSignin"]', function() { + this.wait(1000); +}); + +casper.then(function () { this.fill('.form-signin', { - 'username': 'devtable', + 'username': isDebug ? 'devtable' : 'quaydemo', 'password': isDebug ? 'password': 'C>K98%y"_=54x"<', }, false); }); @@ -43,6 +52,7 @@ casper.thenClick('.form-signin button[type=submit]', function() { }); casper.then(function() { + this.waitForSelector('.fa-lock'); this.log('Generating user home screenshot.'); }); @@ -150,12 +160,25 @@ casper.then(function() { this.log('Generating oganization repository admin screenshot.'); }); -casper.thenOpen(rootUrl + 'repository/' + org + '/' + orgrepo + '/admin', function() { - this.waitForText('outsideorg') +casper.thenOpen(rootUrl + 'repository/' + orgrepo + '/admin', function() { + this.waitForText('Robot Account') }); casper.then(function() { this.capture(outputDir + 'org-repo-admin.png'); }); + +casper.then(function() { + this.log('Generating build history screenshot.'); +}); + +casper.thenOpen(rootUrl + 'repository/' + buildrepo + '/build', function() { + this.waitForText('Starting'); +}); + +casper.then(function() { + this.capture(outputDir + 'build-history.png'); +}); + casper.run(); diff --git a/static/css/quay.css b/static/css/quay.css index 83627f35f..fb89ca9f1 100644 --- a/static/css/quay.css +++ b/static/css/quay.css @@ -9,7 +9,74 @@ } } +.notification-view-element { + cursor: pointer; + margin-bottom: 10px; + border-bottom: 1px solid #eee; + padding-bottom: 10px; + position: relative; + max-width: 320px; +} + +.notification-view-element .orginfo { + margin-top: 8px; + float: left; +} + +.notification-view-element .orginfo .orgname { + font-size: 12px; + color: #aaa; +} + +.notification-view-element .circle { + position: absolute; + top: 14px; + left: 0px; + + width: 12px; + height: 12px; + display: inline-block; + border-radius: 50%; +} + +.notification-view-element .datetime { + margin-top: 16px; + font-size: 12px; + color: #aaa; + text-align: right; +} + +.notification-view-element .message { + margin-bottom: 4px; +} + +.notification-view-element .container { + padding: 10px; + border-radius: 6px; + margin-left: 16px; +} + +.notification-view-element .container:hover { + background: rgba(66, 139, 202, 0.1); +} + +.dockerfile-path { + margin-top: 10px; + padding: 20px; + padding-bottom: 0px; + font-family: Consolas, "Lucida Console", Monaco, monospace; + font-size: 14px; +} + +.dockerfile-path:before { + content: "\f15b"; + font-family: FontAwesome; + margin-right: 8px; + font-size: 18px; +} + .dockerfile-view { + margin-top: 10px; margin: 20px; padding: 20px; background: #F7F6F6; @@ -282,21 +349,6 @@ i.toggle-icon:hover { vertical-align: middle; } -#copyClipboard { - cursor: pointer; -} - -#copyClipboard.zeroclipboard-is-hover { - background: #428bca; - color: white; -} - -#clipboardCopied.hovering { - position: absolute; - right: 0px; - top: 40px; -} - .content-container { padding-bottom: 70px; } @@ -506,7 +558,22 @@ i.toggle-icon:hover { min-width: 200px; } -.user-notification { +.notification-primary { + background: #428bca; + color: white; +} + +.notification-info { + color: black; + background: #d9edf7; +} + +.notification-warning { + color: #8a6d3b; + background: #fcf8e3; +} + +.notification-error { background: red; } @@ -775,11 +842,20 @@ i.toggle-icon:hover { margin-bottom: 16px; } +.new-repo .section-title { + float: right; + color: #aaa; +} + .new-repo .repo-option { margin: 6px; margin-top: 16px; } +.new-repo .repo-option label { + font-weight: normal; +} + .new-repo .repo-option i { font-size: 18px; padding-left: 10px; @@ -1596,10 +1672,17 @@ p.editable:hover i { } .repo .empty-description { - max-width: 600px; padding: 6px; } +.repo .empty-description pre:last-child { + margin-bottom: 0px; +} + +.repo .empty-description .panel-default { + margin-top: 20px; +} + .repo dl.dl-horizontal dt { width: 80px; padding-right: 10px; @@ -1710,7 +1793,38 @@ p.editable:hover i { margin-top: 28px; } -#clipboardCopied { +.copy-box-element { + position: relative; +} + +.global-zeroclipboard-container embed { + cursor: pointer; +} + +#copyClipboard.zeroclipboard-is-hover, .copy-box-element .zeroclipboard-is-hover { + background: #428bca; + color: white; + cursor: pointer !important; +} + +#clipboardCopied.hovering, .copy-box-element .hovering { + position: absolute; + right: 0px; + top: 40px; + pointer-events: none; + z-index: 100; +} + +.copy-box-element .id-container { + display: inline-block; + vertical-align: middle; +} + +.copy-box-element input { + background-color: white !important; +} + +#clipboardCopied, .clipboard-copied-message { font-size: 0.8em; display: inline-block; margin-right: 10px; @@ -1721,7 +1835,7 @@ p.editable:hover i { border-radius: 4px; } -#clipboardCopied.animated { +#clipboardCopied.animated, .clipboard-copied-message { -webkit-animation: fadeOut 4s ease-in-out 0s 1 forwards; -moz-animation: fadeOut 4s ease-in-out 0s 1 forwards; -ms-animation: fadeOut 4s ease-in-out 0s 1 forwards; @@ -2037,6 +2151,13 @@ p.editable:hover i { left: 4px; } +.repo-admin .right-controls { + text-align: right; + margin-top: 10px; + padding-top: 10px; + border-top: 1px solid #eee; +} + .repo-admin .right-info { font-size: 11px; margin-top: 10px; @@ -2205,16 +2326,16 @@ p.editable:hover i { padding-right: 6px; } -.delete-ui { +.delete-ui-element { outline: none; } -.delete-ui i { +.delete-ui-element i { cursor: pointer; vertical-align: middle; } -.delete-ui .delete-ui-button { +.delete-ui-element .delete-ui-button { display: inline-block; vertical-align: middle; color: white; @@ -2230,15 +2351,15 @@ p.editable:hover i { transition: width 500ms ease-in-out; } -.delete-ui .delete-ui-button button { +.delete-ui-element .delete-ui-button button { padding: 4px; } -.delete-ui:focus i { +.delete-ui-element:focus i { visibility: hidden; } -.delete-ui:focus .delete-ui-button { +.delete-ui-element:focus .delete-ui-button { width: 60px; } @@ -2812,7 +2933,7 @@ p.editable:hover i { margin-bottom: 10px; } -.create-org .step-container .description { +.form-group .description { margin-top: 10px; display: block; color: #888; @@ -2820,7 +2941,7 @@ p.editable:hover i { margin-left: 10px; } -.create-org .form-group input { +.form-group.nested input { margin-top: 10px; margin-left: 10px; } @@ -2927,9 +3048,10 @@ p.editable:hover i { .tt-suggestion { display: block; padding: 3px 20px; + cursor: pointer; } -.tt-suggestion.tt-is-under-cursor { +.tt-suggestion.tt-cursor { color: #fff; background-color: #0081c2; background-image: -moz-linear-gradient(top, #0088cc, #0077b3); @@ -2941,10 +3063,17 @@ p.editable:hover i { filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff0088cc', endColorstr='#ff0077b3', GradientType=0) } -.tt-suggestion.tt-is-under-cursor a { +.tt-suggestion.tt-cursor a { color: #fff; } +.tt-empty { + padding: 10px; + font-size: 12px; + color: #aaa; + white-space: nowrap; +} + .tt-suggestion p { margin: 0; } @@ -3380,4 +3509,216 @@ pre.command:before { .label.MAINTAINER { border-color: #aaa !important; +} + +.dropdown-select { + margin: 10px; + position: relative; +} + +.dropdown-select .dropdown-select-icon { + position: absolute; + top: 6px; + left: 6px; + z-index: 2; + display: none; +} + +.dropdown-select .dropdown-select-icon.fa { + top: 10px; + left: 8px; + font-size: 20px; +} + +.dropdown-select .dropdown-select-icon.none-icon { + color: #ccc; + display: inline; +} + +.dropdown-select.has-item .dropdown-select-icon { + display: inline; +} + +.dropdown-select.has-item .dropdown-select-icon.none-icon { + display: none; +} + +.dropdown-select .lookahead-input { + padding-left: 32px; +} + +.dropdown-select .twitter-typeahead { + display: block !important; +} + +.dropdown-select .twitter-typeahead .tt-hint { + padding-left: 32px; +} + +.dropdown-select .dropdown { + position: absolute; + right: 0px; + top: 0px; +} + +.dropdown-select .dropdown button.dropdown-toggle { + border-top-left-radius: 0px; + border-bottom-left-radius: 0px; +} + +.trigger-setup-github-element .github-org-icon { + width: 20px; + margin-right: 8px; + vertical-align: middle; +} + +.trigger-setup-github-element li.github-repo-listing i { + margin-right: 10px; + margin-left: 6px; +} + +.trigger-setup-github-element li.github-org-header { + padding-left: 6px; +} + +.slideinout { + -webkit-transition:0.5s all; + transition:0.5s linear all; + opacity: 1; + + position: relative; + + height: 100px; + opacity: 1; +} + +.slideinout.ng-hide { + opacity: 0; + height: 0px; +} + +.slideinout.ng-hide-add, .slideinout.ng-hide-remove { + display: block !important; +} + +.auth-header > img { + float: left; + margin-top: 8px; + margin-right: 20px; +} + +.auth-header { + padding-bottom: 10px; + border-bottom: 1px solid #eee; + margin-bottom: 10px; +} + +.auth-scopes .reason { + margin-top: 20px; + margin-bottom: 20px; + font-size: 18px; +} + +.auth-scopes ul { + margin-top: 10px; + list-style: none; +} + +.auth-scopes li { + display: block; +} + +.auth-scopes .scope { + max-width: 500px; +} + +.auth-scopes .scope-container:last-child { + border-bottom: 0px; +} + +.auth-scopes .panel-default { + border: 0px; + margin-bottom: 0px; + padding-bottom: 10px; + box-shadow: none; +} + +.auth-scopes .panel-default:last-child { + border-bottom: 0px; +} + +.auth-scopes .panel-heading { + border: 0px; + background: transparent; +} + +.auth-scopes .scope .title { + min-width: 300px; + cursor: pointer; + display: inline-block; +} + +.auth-scopes .scope .title a { + color: #444; +} + +.auth-scopes .scope .description { + padding: 10px; +} + +.auth-scopes .scope i { + margin-right: 10px; + margin-top: 2px; +} + +.auth-scopes .scope i.fa-lg { + font-size: 24px; +} + +.auth-scopes .title i.arrow:before { + content: "\f0d7"; +} + +.auth-scopes .title.collapsed i.arrow:before { + content: "\f0da" !important; +} + +.auth-container .button-bar form { + display: inline-block; +} + +.auth-container .button-bar { + margin-top: 10px; + padding-top: 10px; + border-top: 1px solid #eee; +} + +.auth-container .button-bar button { + margin: 6px; +} + +.manage-application #oauth td { + padding: 6px; + padding-bottom: 20px; +} + +.manage-application .button-bar { + margin-top: 10px; + padding-top: 20px; + border-top: 1px solid #eee; +} + +.auth-info .by:before { + content: "by"; + margin-right: 4px; +} + +.auth-info .by { + color: #aaa; + font-size: 12px; +} + +.auth-info .scope { + cursor: pointer; + margin-right: 4px; } \ No newline at end of file diff --git a/static/directives/application-info.html b/static/directives/application-info.html new file mode 100644 index 000000000..bbaf56454 --- /dev/null +++ b/static/directives/application-info.html @@ -0,0 +1,12 @@ +
+
+ +

{{ application.name }}

+

+ {{ application.organization.name }} +

+
+
+ {{ application.description || '(No Description)' }} +
+
diff --git a/static/directives/application-manager.html b/static/directives/application-manager.html new file mode 100644 index 000000000..df870d7a5 --- /dev/null +++ b/static/directives/application-manager.html @@ -0,0 +1,24 @@ +
+ + +
+
+ + Create New Application + +
+ + + + + + + + + + + +
Application NameApplication URI
{{ app.name }}{{ app.application_uri }}
+
+ +
diff --git a/static/directives/application-reference-dialog.html b/static/directives/application-reference-dialog.html new file mode 100644 index 000000000..364cf6113 --- /dev/null +++ b/static/directives/application-reference-dialog.html @@ -0,0 +1,15 @@ + diff --git a/static/directives/application-reference.html b/static/directives/application-reference.html new file mode 100644 index 000000000..0f61c5dc2 --- /dev/null +++ b/static/directives/application-reference.html @@ -0,0 +1,4 @@ + + + {{ title }} + diff --git a/static/directives/copy-box.html b/static/directives/copy-box.html new file mode 100644 index 000000000..204bd3a57 --- /dev/null +++ b/static/directives/copy-box.html @@ -0,0 +1,14 @@ +
+
+
+ + + + +
+
+ + +
diff --git a/static/directives/delete-ui.html b/static/directives/delete-ui.html new file mode 100644 index 000000000..d04e840f0 --- /dev/null +++ b/static/directives/delete-ui.html @@ -0,0 +1,4 @@ + + + + diff --git a/static/directives/dropdown-select-icon.html b/static/directives/dropdown-select-icon.html new file mode 100644 index 000000000..8fc5d79b6 --- /dev/null +++ b/static/directives/dropdown-select-icon.html @@ -0,0 +1 @@ + diff --git a/static/directives/dropdown-select-menu.html b/static/directives/dropdown-select-menu.html new file mode 100644 index 000000000..4d6c453f0 --- /dev/null +++ b/static/directives/dropdown-select-menu.html @@ -0,0 +1 @@ +
    diff --git a/static/directives/dropdown-select.html b/static/directives/dropdown-select.html new file mode 100644 index 000000000..d24cd531e --- /dev/null +++ b/static/directives/dropdown-select.html @@ -0,0 +1,13 @@ +
    +
    +
    + +
    +
    + +
    +
    +
    +
    diff --git a/static/directives/header-bar.html b/static/directives/header-bar.html index 21b42cbcb..1a6ade0b7 100644 --- a/static/directives/header-bar.html +++ b/static/directives/header-bar.html @@ -1,10 +1,7 @@
    - @@ -39,11 +36,14 @@ {{ user.username }} - - {{ (user.askForPassword ? 1 : 0) + (overPlan ? 1 : 0) }} + {{ notificationService.notifications.length }} @@ -51,8 +51,16 @@
  • Account Settings - - {{ (user.askForPassword ? 1 : 0) + (overPlan ? 1 : 0) }} + +
    • +
  • + + Notifications + + {{ notificationService.notifications.length }}
    • diff --git a/static/directives/logs-view.html b/static/directives/logs-view.html index d6405d342..1c3a796ae 100644 --- a/static/directives/logs-view.html +++ b/static/directives/logs-view.html @@ -6,9 +6,9 @@ From - + to - + @@ -42,7 +42,7 @@ Description Date/Time - User/Token + User/Token/App @@ -53,14 +53,24 @@ {{ log.datetime }} - + +
    + +
    +
    on behalf of
    +
    + +
    +     + - + {{ log.metadata.token }} - + (anonymous) diff --git a/static/directives/notification-bar.html b/static/directives/notification-bar.html new file mode 100644 index 000000000..5d25a40b4 --- /dev/null +++ b/static/directives/notification-bar.html @@ -0,0 +1,15 @@ + diff --git a/static/directives/notification-view.html b/static/directives/notification-view.html new file mode 100644 index 000000000..6327a5df8 --- /dev/null +++ b/static/directives/notification-view.html @@ -0,0 +1,11 @@ +
    +
    +
    +
    +
    + + {{ notification.organization }} +
    +
    {{ parseDate(notification.created) | date:'medium'}}
    +
    +
    diff --git a/static/directives/popup-input-button.html b/static/directives/popup-input-button.html index 005c037bc..4ff6dce77 100644 --- a/static/directives/popup-input-button.html +++ b/static/directives/popup-input-button.html @@ -1,5 +1,6 @@ - diff --git a/static/directives/popup-input-dialog.html b/static/directives/popup-input-dialog.html index 6632b1999..8bff8c185 100644 --- a/static/directives/popup-input-dialog.html +++ b/static/directives/popup-input-dialog.html @@ -1,4 +1,4 @@ -
    - +
    diff --git a/static/directives/prototype-manager.html b/static/directives/prototype-manager.html index 53567e1ac..26cec48c8 100644 --- a/static/directives/prototype-manager.html +++ b/static/directives/prototype-manager.html @@ -48,10 +48,7 @@ - - - - + diff --git a/static/directives/resource-view.html b/static/directives/resource-view.html index 7763fa52a..0952bf2f4 100644 --- a/static/directives/resource-view.html +++ b/static/directives/resource-view.html @@ -1,7 +1,5 @@
    - +
    {{ errorMessage }}
    diff --git a/static/directives/robots-manager.html b/static/directives/robots-manager.html index 68a2ed08a..c696937d2 100644 --- a/static/directives/robots-manager.html +++ b/static/directives/robots-manager.html @@ -24,10 +24,7 @@ - - - - + diff --git a/static/directives/tag-specific-images-view.html b/static/directives/tag-specific-images-view.html index 1a5f3a19b..0035947e9 100644 --- a/static/directives/tag-specific-images-view.html +++ b/static/directives/tag-specific-images-view.html @@ -5,7 +5,8 @@ ng-class="getImageListingClasses(image)"> - + {{ image.id.substr(0, 12) }}
    diff --git a/static/directives/trigger-description.html b/static/directives/trigger-description.html new file mode 100644 index 000000000..2a081aa69 --- /dev/null +++ b/static/directives/trigger-description.html @@ -0,0 +1,23 @@ + + + + Push to GitHub repository {{ trigger.config.build_source }} + +
    + Dockerfile: + + //Dockerfile + + +
    +     + + Unknown + +     diff --git a/static/directives/trigger-setup-github.html b/static/directives/trigger-setup-github.html new file mode 100644 index 000000000..9b0e194ab --- /dev/null +++ b/static/directives/trigger-setup-github.html @@ -0,0 +1,61 @@ +
    +
    + + Loading Repository List +
    +
    +
    Please choose the GitHub repository that will trigger the build:
    + + +
    + + + + + + +
    + + +
    +
    Dockerfile Location:
    +
    + + + + + + + +
    + + +
    + Warning: No Dockerfiles were found in {{ currentRepo.repo }} +
    +
    + {{ locationError }} +
    +
    + Note: The folder does not currently exist or contain a Dockerfile +
    +
    + +
    +
    diff --git a/static/directives/user-setup.html b/static/directives/user-setup.html index 34f2a0b78..d7cc12cbd 100644 --- a/static/directives/user-setup.html +++ b/static/directives/user-setup.html @@ -3,7 +3,7 @@

    - + Sign In

    diff --git a/static/img/500/background.svg b/static/img/500/background.svg new file mode 100644 index 000000000..711fc05c0 --- /dev/null +++ b/static/img/500/background.svg @@ -0,0 +1,35 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/static/img/500/ship.svg b/static/img/500/ship.svg new file mode 100644 index 000000000..3330d4720 --- /dev/null +++ b/static/img/500/ship.svg @@ -0,0 +1,99 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/static/img/500/water.svg b/static/img/500/water.svg new file mode 100644 index 000000000..2c85ebc62 --- /dev/null +++ b/static/img/500/water.svg @@ -0,0 +1,39 @@ + + + + + + + + + + + + + + + diff --git a/static/img/build-history.png b/static/img/build-history.png new file mode 100644 index 000000000..794d58cb0 Binary files /dev/null and b/static/img/build-history.png differ diff --git a/static/img/org-admin.png b/static/img/org-admin.png index c069d0f5f..831d21a22 100644 Binary files a/static/img/org-admin.png and b/static/img/org-admin.png differ diff --git a/static/img/org-logs.png b/static/img/org-logs.png index a87bc87ec..d9dd7ace4 100644 Binary files a/static/img/org-logs.png and b/static/img/org-logs.png differ diff --git a/static/img/org-repo-admin.png b/static/img/org-repo-admin.png index 1b700a0f3..e41c798ad 100644 Binary files a/static/img/org-repo-admin.png and b/static/img/org-repo-admin.png differ diff --git a/static/img/org-repo-list.png b/static/img/org-repo-list.png index efedac965..0198cad9e 100644 Binary files a/static/img/org-repo-list.png and b/static/img/org-repo-list.png differ diff --git a/static/img/org-teams.png b/static/img/org-teams.png index b8778639b..975b0f1af 100644 Binary files a/static/img/org-teams.png and b/static/img/org-teams.png differ diff --git a/static/img/repo-admin.png b/static/img/repo-admin.png index 0e7c73422..891cdfc37 100644 Binary files a/static/img/repo-admin.png and b/static/img/repo-admin.png differ diff --git a/static/img/repo-changes.png b/static/img/repo-changes.png index 9fce92e42..bb1ad0e43 100644 Binary files a/static/img/repo-changes.png and b/static/img/repo-changes.png differ diff --git a/static/img/repo-view.png b/static/img/repo-view.png index 57ce983c7..aacbc65c3 100644 Binary files a/static/img/repo-view.png and b/static/img/repo-view.png differ diff --git a/static/img/user-home.png b/static/img/user-home.png index 886a59d52..d42afc9c1 100644 Binary files a/static/img/user-home.png and b/static/img/user-home.png differ diff --git a/static/js/app.js b/static/js/app.js index 550230624..ae9433521 100644 --- a/static/js/app.js +++ b/static/js/app.js @@ -102,9 +102,89 @@ function getMarkedDown(string) { return Markdown.getSanitizingConverter().makeHtml(string || ''); } -quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angular-tour', 'restangular', 'angularMoment', 'angulartics', /*'angulartics.google.analytics',*/ 'angulartics.mixpanel', '$strap.directives', 'ngCookies', 'ngSanitize', 'angular-md5', 'pasvaz.bindonce', 'ansiToHtml'], function($provide, cfpLoadingBarProvider) { +quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angular-tour', 'restangular', 'angularMoment', 'angulartics', /*'angulartics.google.analytics',*/ 'angulartics.mixpanel', 'mgcrea.ngStrap', 'ngCookies', 'ngSanitize', 'angular-md5', 'pasvaz.bindonce', 'ansiToHtml', 'ngAnimate'], function($provide, cfpLoadingBarProvider) { cfpLoadingBarProvider.includeSpinner = false; + /** + * Specialized wrapper around array which provides a toggle() method for viewing the contents of the + * array in a manner that is asynchronously filled in over a short time period. This prevents long + * pauses in the UI for ngRepeat's when the array is significant in size. + */ + $provide.factory('AngularViewArray', ['$interval', function($interval) { + var ADDTIONAL_COUNT = 50; + + function _ViewArray() { + this.isVisible = false; + this.visibleEntries = null; + this.hasEntries = false; + this.entries = []; + + this.timerRef_ = null; + this.currentIndex_ = 0; + } + + _ViewArray.prototype.push = function(elem) { + this.entries.push(elem); + this.hasEntries = true; + + if (this.isVisible) { + this.setVisible(true); + } + }; + + _ViewArray.prototype.toggle = function() { + this.setVisible(!this.isVisible); + }; + + _ViewArray.prototype.setVisible = function(newState) { + this.isVisible = newState; + + this.visibleEntries = []; + this.currentIndex_ = 0; + + if (newState) { + this.showAdditionalEntries_(); + this.startTimer_(); + } else { + this.stopTimer_(); + } + }; + + _ViewArray.prototype.showAdditionalEntries_ = function() { + var i = 0; + for (i = this.currentIndex_; i < (this.currentIndex_ + ADDTIONAL_COUNT) && i < this.entries.length; ++i) { + this.visibleEntries.push(this.entries[i]); + } + + this.currentIndex_ = i; + if (this.currentIndex_ >= this.entries.length) { + this.stopTimer_(); + } + }; + + _ViewArray.prototype.startTimer_ = function() { + var that = this; + this.timerRef_ = $interval(function() { + that.showAdditionalEntries_(); + }, 10); + }; + + _ViewArray.prototype.stopTimer_ = function() { + if (this.timerRef_) { + $interval.cancel(this.timerRef_); + this.timerRef_ = null; + } + }; + + var service = { + 'create': function() { + return new _ViewArray(); + } + }; + + return service; + }]); + $provide.factory('UtilService', ['$sanitize', function($sanitize) { var utilService = {}; @@ -121,6 +201,78 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu return utilService; }]); + + $provide.factory('TriggerDescriptionBuilder', ['UtilService', '$sanitize', function(UtilService, $sanitize) { + var builderService = {}; + + builderService.getDescription = function(name, config) { + switch (name) { + case 'github': + var source = $sanitize(UtilService.textToSafeHtml(config['build_source'])); + var desc = ' Push to Github Repository '; + desc += '' + source + ''; + desc += '
    Dockerfile folder: //' + UtilService.textToSafeHtml(config['subdir']); + return desc; + + default: + return 'Unknown'; + } + }; + + return builderService; + }]); + + $provide.factory('StringBuilderService', ['$sce', function($sce) { + var stringBuilderService = {}; + + stringBuilderService.buildString = function(value_or_func, metadata) { + var fieldIcons = { + 'username': 'user', + 'activating_username': 'user', + 'delegate_user': 'user', + 'delegate_team': 'group', + 'team': 'group', + 'token': 'key', + 'repo': 'hdd-o', + 'robot': 'wrench', + 'tag': 'tag', + 'role': 'th-large', + 'original_role': 'th-large', + 'application_name': 'cloud', + 'image': 'archive', + 'original_image': 'archive', + 'client_id': 'chain' + }; + + var description = value_or_func; + if (typeof description != 'string') { + description = description(metadata); + } + + for (var key in metadata) { + if (metadata.hasOwnProperty(key)) { + var value = metadata[key] != null ? metadata[key].toString() : '(Unknown)'; + if (key.indexOf('image') >= 0) { + value = value.substr(0, 12); + } + var markedDown = getMarkedDown(value); + markedDown = markedDown.substr('

    '.length, markedDown.length - '

    '.length); + + var icon = fieldIcons[key]; + if (icon) { + markedDown = '' + markedDown; + } + + description = description.replace('{' + key + '}', '' + markedDown + ''); + } + } + return $sce.trustAsHtml(description.replace('\n', '
    ')); + }; + + return stringBuilderService; + }]); + + $provide.factory('ImageMetadataService', ['UtilService', function(UtilService) { var metadataService = {}; metadataService.getFormattedCommand = function(image) { @@ -191,43 +343,22 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu return resource; }; - var formatMethodName = function(endpointName) { - var formatted = ''; - for (var i = 0; i < endpointName.length; ++i) { - var c = endpointName[i]; - if (c == '_') { - c = endpointName[i + 1].toUpperCase(); - i++; - } - - formatted += c; - } - - return formatted; - }; - var buildUrl = function(path, parameters) { - // We already have /api/ on the URLs, so remove them from the paths. - path = path.substr('/api/'.length, path.length); + // We already have /api/v1/ on the URLs, so remove them from the paths. + path = path.substr('/api/v1/'.length, path.length); var url = ''; for (var i = 0; i < path.length; ++i) { var c = path[i]; - if (c == '<') { - var end = path.indexOf('>', i); + if (c == '{') { + var end = path.indexOf('}', i); var varName = path.substr(i + 1, end - i - 1); - var colon = varName.indexOf(':'); - var isPathVar = false; - if (colon > 0) { - isPathVar = true; - varName = varName.substr(colon + 1); - } if (!parameters[varName]) { throw new Error('Missing parameter: ' + varName); } - url += isPathVar ? parameters[varName] : encodeURI(parameters[varName]); + url += parameters[varName]; i = end; continue; } @@ -238,15 +369,41 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu return url; }; - var getGenericMethodName = function(userMethodName) { - return formatMethodName(userMethodName.replace('_user', '')); + var getGenericOperationName = function(userOperationName) { + return userOperationName.replace('User', ''); }; - var buildMethodsForEndpoint = function(endpoint) { - var method = endpoint.methods[0].toLowerCase(); - var methodName = formatMethodName(endpoint['name']); - apiService[methodName] = function(opt_options, opt_parameters, opt_background) { - var one = Restangular.one(buildUrl(endpoint['path'], opt_parameters)); + var getMatchingUserOperationName = function(orgOperationName, method, userRelatedResource) { + if (userRelatedResource) { + var operations = userRelatedResource['operations']; + for (var i = 0; i < operations.length; ++i) { + var operation = operations[i]; + if (operation['method'].toLowerCase() == method) { + return operation['nickname']; + } + } + } + + throw new Error('Could not find user operation matching org operation: ' + orgOperationName); + }; + + var buildMethodsForEndpointResource = function(endpointResource, resourceMap) { + var name = endpointResource['name']; + var operations = endpointResource['operations']; + for (var i = 0; i < operations.length; ++i) { + var operation = operations[i]; + buildMethodsForOperation(operation, endpointResource, resourceMap); + } + }; + + var buildMethodsForOperation = function(operation, resource, resourceMap) { + var method = operation['method'].toLowerCase(); + var operationName = operation['nickname']; + var path = resource['path']; + + // Add the operation itself. + apiService[operationName] = function(opt_options, opt_parameters, opt_background) { + var one = Restangular.one(buildUrl(path, opt_parameters)); if (opt_background) { one.withHttpConfig({ 'ignoreLoadingBar': true @@ -255,36 +412,50 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu return one['custom' + method.toUpperCase()](opt_options); }; + // If the method for the operation is a GET, add an operationAsResource method. if (method == 'get') { - apiService[methodName + 'AsResource'] = function(opt_parameters, opt_background) { - return getResource(buildUrl(endpoint['path'], opt_parameters), opt_background); + apiService[operationName + 'AsResource'] = function(opt_parameters, opt_background) { + return getResource(buildUrl(path, opt_parameters), opt_background); }; } - if (endpoint['user_method']) { - apiService[getGenericMethodName(endpoint['user_method'])] = function(orgname, opt_options, opt_parameters, opt_background) { + // If the resource has a user-related resource, then make a generic operation for this operation + // that can call both the user and the organization versions of the operation, depending on the + // parameters given. + if (resource['quayUserRelated']) { + var userOperationName = getMatchingUserOperationName(operationName, method, resourceMap[resource['quayUserRelated']]); + var genericOperationName = getGenericOperationName(userOperationName); + apiService[genericOperationName] = function(orgname, opt_options, opt_parameters, opt_background) { if (orgname) { if (orgname.name) { orgname = orgname.name; } var params = jQuery.extend({'orgname' : orgname}, opt_parameters || {}, opt_background); - return apiService[methodName](opt_options, params); + return apiService[operationName](opt_options, params); } else { - return apiService[formatMethodName(endpoint['user_method'])](opt_options, opt_parameters, opt_background); + return apiService[userOperationName](opt_options, opt_parameters, opt_background); } }; } }; - // Construct the methods for each API endpoint. if (!window.__endpoints) { return apiService; } + var resourceMap = {}; + + // Build the map of resource names to their objects. for (var i = 0; i < window.__endpoints.length; ++i) { - var endpoint = window.__endpoints[i]; - buildMethodsForEndpoint(endpoint); + var endpointResource = window.__endpoints[i]; + resourceMap[endpointResource['name']] = endpointResource; + } + + // Construct the methods for each API endpoint. + for (var i = 0; i < window.__endpoints.length; ++i) { + var endpointResource = window.__endpoints[i]; + buildMethodsForEndpointResource(endpointResource, resourceMap); } return apiService; @@ -311,13 +482,13 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu return cookieService; }]); - $provide.factory('UserService', ['ApiService', 'CookieService', function(ApiService, CookieService) { + $provide.factory('UserService', ['ApiService', 'CookieService', '$rootScope', + function(ApiService, CookieService, $rootScope) { var userResponse = { verified: false, anonymous: true, username: null, email: null, - askForPassword: false, organizations: [], logins: [] } @@ -338,7 +509,7 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu }; userService.load = function(opt_callback) { - ApiService.getLoggedInUser().then(function(loadedUser) { + var handleUserResponse = function(loadedUser) { userResponse = loadedUser; if (!userResponse.anonymous) { @@ -368,6 +539,12 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu if (opt_callback) { opt_callback(); } + }; + + ApiService.getLoggedInUser().then(function(loadedUser) { + handleUserResponse(loadedUser); + }, function() { + handleUserResponse({'anonymous': true}); }); }; @@ -409,12 +586,110 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu return userResponse; }; + // Update the user in the root scope. + userService.updateUserIn($rootScope); + // Load the user the first time. userService.load(); return userService; }]); + $provide.factory('NotificationService', ['$rootScope', '$interval', 'UserService', 'ApiService', 'StringBuilderService', 'PlanService', 'UserService', + function($rootScope, $interval, UserService, ApiService, StringBuilderService, PlanService, UserService) { + var notificationService = { + 'user': null, + 'notifications': [], + 'notificationClasses': [], + 'notificationSummaries': [] + }; + + var pollTimerHandle = null; + + var notificationKinds = { + 'test_notification': { + 'level': 'primary', + 'message': 'This notification is a long message for testing', + 'page': '/about/' + }, + 'password_required': { + 'level': 'error', + 'message': 'In order to begin pushing and pulling repositories to Quay.io, a password must be set for your account', + 'page': '/user?tab=password' + }, + 'over_private_usage': { + 'level': 'error', + 'message': 'Namespace {namespace} is over its allowed private repository count. ' + + '

    Please upgrade your plan to avoid disruptions in service.', + 'page': function(metadata) { + var organization = UserService.getOrganization(metadata['namespace']); + if (organization) { + return '/organization/' + metadata['namespace'] + '/admin'; + } else { + return '/user'; + } + } + } + }; + + notificationService.getPage = function(notification) { + var page = notificationKinds[notification['kind']]['page']; + if (typeof page != 'string') { + page = page(notification['metadata']); + } + return page; + }; + + notificationService.getMessage = function(notification) { + var kindInfo = notificationKinds[notification['kind']]; + return StringBuilderService.buildString(kindInfo['message'], notification['metadata']); + }; + + notificationService.getClass = function(notification) { + return 'notification-' + notificationKinds[notification['kind']]['level']; + }; + + notificationService.getClasses = function(notifications) { + var classes = []; + for (var i = 0; i < notifications.length; ++i) { + var notification = notifications[i]; + classes.push(notificationService.getClass(notification)); + } + return classes.join(' '); + }; + + notificationService.update = function() { + var user = UserService.currentUser(); + if (!user || user.anonymous) { + return; + } + + ApiService.listUserNotifications().then(function(resp) { + notificationService.notifications = resp['notifications']; + notificationService.notificationClasses = notificationService.getClasses(notificationService.notifications); + }); + }; + + notificationService.reset = function() { + $interval.cancel(pollTimerHandle); + pollTimerHandle = $interval(notificationService.update, 5 * 60 * 1000 /* five minutes */); + }; + + // Watch for plan changes and update. + PlanService.registerListener(this, function(plan) { + notificationService.reset(); + notificationService.update(); + }); + + // Watch for user changes and update. + $rootScope.$watch(function() { return UserService.currentUser(); }, function(currentUser) { + notificationService.reset(); + notificationService.update(); + }); + + return notificationService; + }]); + $provide.factory('KeyService', ['$location', function($location) { var keyService = {} @@ -422,6 +697,10 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu keyService['stripePublishableKey'] = 'pk_live_P5wLU0vGdHnZGyKnXlFG4oiu'; keyService['githubClientId'] = '5a8c08b06c48d89d4d1e'; keyService['githubRedirectUri'] = 'https://quay.io/oauth2/github/callback'; + } else if($location.host() === 'staging.quay.io') { + keyService['stripePublishableKey'] = 'pk_live_P5wLU0vGdHnZGyKnXlFG4oiu'; + keyService['githubClientId'] = '4886304accbc444f0471'; + keyService['githubRedirectUri'] = 'https://staging.quay.io/oauth2/github/callback'; } else { keyService['stripePublishableKey'] = 'pk_test_uEDHANKm9CHCvVa2DLcipGRh'; keyService['githubClientId'] = 'cfbc4aca88e5c1b40679'; @@ -484,7 +763,7 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu planService.handleNotedPlan = function() { var planId = planService.getAndResetNotedPlan(); - if (!planId) { return; } + if (!planId) { return false; } UserService.load(function() { if (UserService.currentUser().anonymous) { @@ -499,6 +778,8 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu } }); }); + + return true; }; planService.getAndResetNotedPlan = function() { @@ -575,10 +856,6 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu planService.getPlans(function(plans) { for (var i = 0; i < plans.length; i++) { var plan = plans[i]; - if (isBusiness && !planService.isOrgCompatible(plan)) { - continue; - } - if (plan.privateRepos >= privateCount) { callback(plan); return; @@ -586,7 +863,7 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu } callback(null); - }); + }, /* include personal */!isBusiness); }; planService.getSubscription = function(orgname, success, failure) { @@ -818,12 +1095,14 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'angu when('/organization/:orgname/admin', {templateUrl: '/static/partials/org-admin.html', controller: OrgAdminCtrl, reloadOnSearch: false}). when('/organization/:orgname/teams/:teamname', {templateUrl: '/static/partials/team-view.html', controller: TeamViewCtrl}). when('/organization/:orgname/logs/:membername', {templateUrl: '/static/partials/org-member-logs.html', controller: OrgMemberLogsCtrl}). + when('/organization/:orgname/application/:clientid', {templateUrl: '/static/partials/manage-application.html', + controller: ManageApplicationCtrl, reloadOnSearch: false}). when('/v1/', {title: 'Activation information', templateUrl: '/static/partials/v1-page.html', controller: V1Ctrl}). when('/', {title: 'Hosted Private Docker Registry', templateUrl: '/static/partials/landing.html', controller: LandingCtrl}). otherwise({redirectTo: '/'}); }]). config(function(RestangularProvider) { - RestangularProvider.setBaseUrl('/api/'); + RestangularProvider.setBaseUrl('/api/v1/'); }); @@ -879,6 +1158,68 @@ quayApp.directive('entityReference', function () { }); +quayApp.directive('applicationInfo', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/application-info.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + 'application': '=application' + }, + controller: function($scope, $element, ApiService) { + + } + }; + return directiveDefinitionObject; +}); + + +quayApp.directive('applicationReference', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/application-reference.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + 'title': '=title', + 'clientId': '=clientId' + }, + controller: function($scope, $element, ApiService, $modal) { + $scope.showAppDetails = function() { + var params = { + 'client_id': $scope.clientId + }; + + ApiService.getApplicationInformation(null, params).then(function(resp) { + $scope.applicationInfo = resp; + $modal({ + title: 'Application Information', + scope: $scope, + template: '/static/directives/application-reference-dialog.html', + show: true + }); + }, function() { + bootbox.dialog({ + "message": 'The application could not be found; it might have been deleted.', + "title": "Cannot find application", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + } + }; + return directiveDefinitionObject; +}); + + quayApp.directive('markdownView', function () { var directiveDefinitionObject = { priority: 0, @@ -940,6 +1281,55 @@ quayApp.directive('repoCircle', function () { }); +quayApp.directive('copyBox', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/copy-box.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + 'value': '=value', + 'hoveringMessage': '=hoveringMessage' + }, + controller: function($scope, $element, $rootScope) { + var number = $rootScope.__copyBoxIdCounter || 0; + $rootScope.__copyBoxIdCounter = number + 1; + $scope.inputId = "copy-box-input-" + number; + + var button = $($element).find('.input-group-addon'); + var input = $($element).find('input'); + + input.attr('id', $scope.inputId); + button.attr('data-clipboard-target', $scope.inputId); + + var clip = new ZeroClipboard($(button), { 'moviePath': 'static/lib/ZeroClipboard.swf' }); + clip.on('complete', function(e) { + var message = $(this.parentNode.parentNode.parentNode).find('.clipboard-copied-message')[0]; + + // Resets the animation. + var elem = message; + elem.style.display = 'none'; + elem.classList.remove('animated'); + + // Show the notification. + setTimeout(function() { + elem.style.display = 'inline-block'; + elem.classList.add('animated'); + }, 10); + + // Reset the notification. + setTimeout(function() { + elem.style.display = 'none'; + }, 5000); + }); + } + }; + return directiveDefinitionObject; +}); + + + quayApp.directive('userSetup', function () { var directiveDefinitionObject = { priority: 0, @@ -986,7 +1376,7 @@ quayApp.directive('signinForm', function () { 'signInStarted': '&signInStarted', 'signedIn': '&signedIn' }, - controller: function($scope, $location, $timeout, ApiService, KeyService, UserService) { + controller: function($scope, $location, $timeout, ApiService, KeyService, UserService, CookieService) { $scope.showGithub = function() { $scope.markStarted(); @@ -995,6 +1385,10 @@ quayApp.directive('signinForm', function () { $scope.mixpanelDistinctIdClause = "&state=" + encodeURIComponent(mixpanel.get_distinct_id()); } + // Save the redirect URL in a cookie so that we can redirect back after GitHub returns to us. + var redirectURL = $scope.redirectUrl || window.location.toString(); + CookieService.putPermanent('quay.redirectAfterLoad', redirectURL); + // Needed to ensure that UI work done by the started callback is finished before the location // changes. $timeout(function() { @@ -1027,7 +1421,7 @@ quayApp.directive('signinForm', function () { // Note: The timeout of 500ms is needed to ensure dialogs containing sign in // forms get removed before the location changes. $timeout(function() { - if ($scope.redirectUrl == $location.path()) { + if ($scope.redirectUrl == $location.path()) { return; } $location.path($scope.redirectUrl ? $scope.redirectUrl : '/'); @@ -1260,7 +1654,7 @@ quayApp.directive('logsView', function () { 'repository': '=repository', 'performer': '=performer' }, - controller: function($scope, $element, $sce, Restangular, ApiService) { + controller: function($scope, $element, $sce, Restangular, ApiService, TriggerDescriptionBuilder, StringBuilderService) { $scope.loading = true; $scope.logs = null; $scope.kindsAllowed = null; @@ -1324,7 +1718,14 @@ quayApp.directive('logsView', function () { 'add_repo_webhook': 'Add webhook in repository {repo}', 'delete_repo_webhook': 'Delete webhook in repository {repo}', 'set_repo_description': 'Change description for repository {repo}: {description}', - 'build_dockerfile': 'Build image from Dockerfile for repository {repo}', + 'build_dockerfile': function(metadata) { + if (metadata.trigger_id) { + var triggerDescription = TriggerDescriptionBuilder.getDescription( + metadata['service'], metadata['config']); + return 'Build image from Dockerfile for repository {repo} triggered by ' + triggerDescription; + } + return 'Build image from Dockerfile for repository {repo}'; + }, 'org_create_team': 'Create team: {team}', 'org_delete_team': 'Delete team: {team}', 'org_add_team_member': 'Add member {member} to team {team}', @@ -1351,7 +1752,22 @@ quayApp.directive('logsView', function () { } else if (metadata.delegate_team) { return 'Delete default permission: {role} for {delegate_team}' + defaultPermSuffix(metadata); } - } + }, + 'setup_repo_trigger': function(metadata) { + var triggerDescription = TriggerDescriptionBuilder.getDescription( + metadata['service'], metadata['config']); + return 'Setup build trigger - ' + triggerDescription; + }, + 'delete_repo_trigger': function(metadata) { + var triggerDescription = TriggerDescriptionBuilder.getDescription( + metadata['service'], metadata['config']); + return 'Delete build trigger - ' + triggerDescription; + }, + 'create_application': 'Create application {application_name} with client ID {client_id}', + 'update_application': 'Update application to {application_name} for client ID {client_id}', + 'delete_application': 'Delete application {application_name} with client ID {client_id}', + 'reset_application_client_secret': 'Reset the Client Secret of application {application_name} ' + + 'with client ID {client_id}' }; var logKinds = { @@ -1385,7 +1801,13 @@ quayApp.directive('logsView', function () { 'org_set_team_role': 'Change team permission', 'create_prototype_permission': 'Create default permission', 'modify_prototype_permission': 'Modify default permission', - 'delete_prototype_permission': 'Delete default permission' + 'delete_prototype_permission': 'Delete default permission', + 'setup_repo_trigger': 'Setup build trigger', + 'delete_repo_trigger': 'Delete build trigger', + 'create_application': 'Create Application', + 'update_application': 'Update Application', + 'delete_application': 'Delete Application', + 'reset_application_client_secret': 'Reset Client Secret' }; var getDateString = function(date) { @@ -1432,7 +1854,7 @@ quayApp.directive('logsView', function () { var loadLogs = Restangular.one(url); loadLogs.customGET().then(function(resp) { - $scope.logsPath = '/api/' + url; + $scope.logsPath = '/api/v1/' + url; if (!$scope.chart) { $scope.chart = new LogUsageChart(logKinds); @@ -1460,49 +1882,9 @@ quayApp.directive('logsView', function () { return $scope.chart.getColor(kind); }; - $scope.getDescription = function(log) { - var fieldIcons = { - 'username': 'user', - 'activating_username': 'user', - 'delegate_user': 'user', - 'delegate_team': 'group', - 'team': 'group', - 'token': 'key', - 'repo': 'hdd-o', - 'robot': 'wrench', - 'tag': 'tag', - 'role': 'th-large', - 'original_role': 'th-large', - 'image': 'archive', - 'original_image': 'archive' - }; - + $scope.getDescription = function(log) { log.metadata['_ip'] = log.ip ? log.ip : null; - - var description = logDescriptions[log.kind] || log.kind; - if (typeof description != 'string') { - description = description(log.metadata); - } - - for (var key in log.metadata) { - if (log.metadata.hasOwnProperty(key)) { - var value = log.metadata[key] != null ? log.metadata[key].toString() : '(Unknown)'; - if (key.indexOf('image') >= 0) { - value = value.substr(0, 12); - } - - var markedDown = getMarkedDown(value); - markedDown = markedDown.substr('

    '.length, markedDown.length - '

    '.length); - - var icon = fieldIcons[key]; - if (icon) { - markedDown = '' + markedDown; - } - - description = description.replace('{' + key + '}', '' + markedDown + ''); - } - } - return $sce.trustAsHtml(description.replace('\n', '
    ')); + return StringBuilderService.buildString(logDescriptions[log.kind] || log.kind, log.metadata); }; $scope.$watch('organization', update); @@ -1518,6 +1900,72 @@ quayApp.directive('logsView', function () { return directiveDefinitionObject; }); + +quayApp.directive('applicationManager', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/application-manager.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + 'organization': '=organization', + 'visible': '=visible' + }, + controller: function($scope, $element, ApiService) { + $scope.loading = false; + + $scope.createApplication = function(appName) { + if (!appName) { return; } + + var params = { + 'orgname': $scope.organization.name + }; + + var data = { + 'name': appName + }; + + ApiService.createOrganizationApplication(data, params).then(function(resp) { + $scope.applications.push(resp); + }, function(resp) { + bootbox.dialog({ + "message": resp['message'] || 'The application could not be created', + "title": "Cannot create application", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + + var update = function() { + if (!$scope.organization || !$scope.visible) { return; } + if ($scope.loading) { return; } + + $scope.loading = true; + + var params = { + 'orgname': $scope.organization.name + }; + + ApiService.getOrganizationApplications(null, params).then(function(resp) { + $scope.loading = false; + $scope.applications = resp['applications']; + }); + }; + + $scope.$watch('organization', update); + $scope.$watch('visible', update); + } + }; + return directiveDefinitionObject; +}); + + quayApp.directive('robotsManager', function () { var directiveDefinitionObject = { priority: 0, @@ -1695,11 +2143,14 @@ quayApp.directive('prototypeManager', function () { }; var data = { - 'activating_user': $scope.newForWholeOrg ? null : $scope.activatingForNew, 'delegate': $scope.delegateForNew, 'role': $scope.newRole }; + if (!$scope.newForWholeOrg) { + data['activating_user'] = $scope.activatingForNew; + } + ApiService.createOrganizationPrototypePermission(data, params).then(function(resp) { $scope.prototypes.push(resp); $scope.loading = false; @@ -1764,6 +2215,31 @@ quayApp.directive('prototypeManager', function () { }); +quayApp.directive('deleteUi', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/delete-ui.html', + replace: false, + transclude: true, + restrict: 'C', + scope: { + 'deleteTitle': '=deleteTitle', + 'buttonTitle': '=buttonTitle', + 'performDelete': '&performDelete' + }, + controller: function($scope, $element) { + $scope.buttonTitleInternal = $scope.buttonTitle || 'Delete'; + + $element.children().attr('tabindex', 0); + $scope.focus = function() { + $element[0].firstChild.focus(); + }; + } + }; + return directiveDefinitionObject; +}); + + quayApp.directive('popupInputButton', function () { var directiveDefinitionObject = { priority: 0, @@ -1782,7 +2258,7 @@ quayApp.directive('popupInputButton', function () { var box = $('#input-box'); box[0].value = ''; box.focus(); - }, 10); + }, 40); }; $scope.getRegexp = function(pattern) { @@ -1927,11 +2403,10 @@ quayApp.directive('repoSearch', function () { ++searchToken; }, true); - var element = $($element[0].childNodes[0]); - element.typeahead({ + var repoHound = new Bloodhound({ name: 'repositories', remote: { - url: '/api/find/repository?query=%QUERY', + url: '/api/v1/find/repository?query=%QUERY', replace: function (url, uriEncodedQuery) { url = url.replace('%QUERY', uriEncodedQuery); url += '&cb=' + searchToken; @@ -1950,22 +2425,36 @@ quayApp.directive('repoSearch', function () { return datums; } }, - template: function (datum) { - template = '
    '; - template += '' - template += '' + datum.repo.namespace +'/' + datum.repo.name + '' - if (datum.repo.description) { - template += '' + getFirstTextLine(datum.repo.description) + '' - } + datumTokenizer: function(d) { + return Bloodhound.tokenizers.whitespace(d.val); + }, + queryTokenizer: Bloodhound.tokenizers.whitespace + }); + repoHound.initialize(); - template += '
    ' - return template; + var element = $($element[0].childNodes[0]); + element.typeahead({ 'highlight': true }, { + source: repoHound.ttAdapter(), + templates: { + 'suggestion': function (datum) { + template = '
    '; + template += '' + template += '' + datum.repo.namespace +'/' + datum.repo.name + '' + if (datum.repo.description) { + template += '' + getFirstTextLine(datum.repo.description) + '' + } + + template += '
    ' + return template; + } } }); element.on('typeahead:selected', function (e, datum) { - element.typeahead('setQuery', ''); - document.location = '/repository/' + datum.repo.namespace + '/' + datum.repo.name; + element.typeahead('val', ''); + $scope.$apply(function() { + $location.path('/repository/' + datum.repo.namespace + '/' + datum.repo.name); + }); }); } }; @@ -1983,26 +2472,12 @@ quayApp.directive('headerBar', function () { restrict: 'C', scope: { }, - controller: function($scope, $element, $location, UserService, PlanService, ApiService) { - $scope.overPlan = false; - - var checkOverPlan = function() { - if ($scope.user.anonymous) { - $scope.overPlan = false; - return; - } - - ApiService.getUserPrivateCount().then(function(resp) { - $scope.overPlan = resp.privateCount > resp.reposAllowed; - }); - }; - - // Monitor any user changes and place the current user into the scope. - UserService.updateUserIn($scope, checkOverPlan); + controller: function($scope, $element, $location, UserService, PlanService, ApiService, NotificationService) { + $scope.notificationService = NotificationService; + + // Monitor any user changes and place the current user into the scope. + UserService.updateUserIn($scope); - // Monitor any plan changes. - PlanService.registerListener(this, checkOverPlan); - $scope.signout = function() { ApiService.logout().then(function() { UserService.load(); @@ -2132,7 +2607,7 @@ quayApp.directive('entitySearch', function () { }; $scope.setEntityInternal = function(entity) { - $(input).typeahead('setQuery', $scope.isPersistent ? entity.name : ''); + $(input).typeahead('val', $scope.isPersistent ? entity.name : ''); if ($scope.isPersistent) { $scope.currentEntity = entity; @@ -2145,11 +2620,10 @@ quayApp.directive('entitySearch', function () { number++; - var input = $element[0].firstChild.firstChild; - $(input).typeahead({ + var entitySearchB = new Bloodhound({ name: 'entities' + number, remote: { - url: '/api/entities/%QUERY', + url: '/api/v1/entities/%QUERY', replace: function (url, uriEncodedQuery) { var namespace = $scope.namespace || ''; url = url.replace('%QUERY', uriEncodedQuery); @@ -2172,24 +2646,57 @@ quayApp.directive('entitySearch', function () { return datums; } }, - template: function (datum) { - template = '
    '; - if (datum.entity.kind == 'user' && !datum.entity.is_robot) { - template += ''; - } else if (datum.entity.kind == 'user' && datum.entity.is_robot) { - template += ''; - } else if (datum.entity.kind == 'team') { - template += ''; - } - template += '' + datum.value + ''; - - if (datum.entity.is_org_member === false && datum.entity.kind == 'user') { - template += ''; - } - - template += '
    '; - return template; + datumTokenizer: function(d) { + return Bloodhound.tokenizers.whitespace(d.val); }, + queryTokenizer: Bloodhound.tokenizers.whitespace + }); + entitySearchB.initialize(); + + var counter = 0; + var input = $element[0].firstChild.firstChild; + $(input).typeahead({ + 'highlight': true + }, { + source: entitySearchB.ttAdapter(), + templates: { + 'empty': function(info) { + // Only display the empty dialog if the server load has finished. + if (info.resultKind == 'remote') { + var val = $(input).val(); + if (!val) { + return null; + } + + if (val.indexOf('@') > 0) { + return '
    A Quay.io username (not an e-mail address) must be specified
    '; + } + + var robots = $scope.isOrganization ? ', robot accounts' : ''; + var teams = ($scope.includeTeams && $scope.isOrganization) ? ' or teams' : ''; + return '
    No matching Quay.io users' + robots + teams + ' found
    '; + } + + return null; + }, + 'suggestion': function (datum) { + template = '
    '; + if (datum.entity.kind == 'user' && !datum.entity.is_robot) { + template += ''; + } else if (datum.entity.kind == 'user' && datum.entity.is_robot) { + template += ''; + } else if (datum.entity.kind == 'team') { + template += ''; + } + template += '' + datum.value + ''; + + if (datum.entity.is_org_member === false && datum.entity.kind == 'user') { + template += ''; + } + + template += '
    '; + return template; + }} }); $(input).on('input', function(e) { @@ -2207,7 +2714,7 @@ quayApp.directive('entitySearch', function () { }); $scope.$watch('clearNow', function() { - $(input).typeahead('setQuery', ''); + $(input).typeahead('val', ''); $scope.clearEntityInternal(); }); @@ -2579,6 +3086,317 @@ quayApp.directive('buildLogError', function () { }); +quayApp.directive('triggerDescription', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/trigger-description.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + 'trigger': '=trigger', + 'short': '=short' + }, + controller: function($scope, $element) { + } + }; + return directiveDefinitionObject; +}); + + +quayApp.directive('dropdownSelect', function ($compile) { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/dropdown-select.html', + replace: true, + transclude: true, + restrict: 'C', + scope: { + 'selectedItem': '=selectedItem', + 'placeholder': '=placeholder', + 'lookaheadItems': '=lookaheadItems', + 'handleItemSelected': '&handleItemSelected', + 'handleInput': '&handleInput' + }, + controller: function($scope, $element, $rootScope) { + if (!$rootScope.__dropdownSelectCounter) { + $rootScope.__dropdownSelectCounter = 1; + } + + $scope.placeholder = $scope.placeholder || ''; + $scope.internalItem = null; + + // Setup lookahead. + var input = $($element).find('.lookahead-input'); + + $scope.$watch('selectedItem', function(item) { + if ($scope.selectedItem == $scope.internalItem) { + // The item has already been set due to an internal action. + return; + } + + if ($scope.selectedItem != null) { + $(input).val(item.toString()); + } else { + $(input).val(''); + } + }); + + $scope.$watch('lookaheadItems', function(items) { + $(input).off(); + if (!items) { + return; + } + + var formattedItems = []; + for (var i = 0; i < items.length; ++i) { + var formattedItem = items[i]; + if (typeof formattedItem == 'string') { + formattedItem = { + 'value': formattedItem + }; + } + formattedItems.push(formattedItem); + } + + var dropdownHound = new Bloodhound({ + name: 'dropdown-items-' + $rootScope.__dropdownSelectCounter, + local: formattedItems, + datumTokenizer: function(d) { + return Bloodhound.tokenizers.whitespace(d.val || d.value || ''); + }, + queryTokenizer: Bloodhound.tokenizers.whitespace + }); + dropdownHound.initialize(); + + $(input).typeahead({}, { + source: dropdownHound.ttAdapter(), + templates: { + 'suggestion': function (datum) { + template = datum['template'] ? datum['template'](datum) : datum['value']; + return template; + } + } + }); + + $(input).on('input', function(e) { + $scope.$apply(function() { + $scope.internalItem = null; + $scope.selectedItem = null; + if ($scope.handleInput) { + $scope.handleInput({'input': $(input).val()}); + } + }); + }); + + $(input).on('typeahead:selected', function(e, datum) { + $scope.$apply(function() { + $scope.internalItem = datum['item'] || datum['value']; + $scope.selectedItem = datum['item'] || datum['value']; + if ($scope.handleItemSelected) { + $scope.handleItemSelected({'datum': datum}); + } + }); + }); + + $rootScope.__dropdownSelectCounter++; + }); + }, + link: function(scope, element, attrs) { + var transcludedBlock = element.find('div.transcluded'); + var transcludedElements = transcludedBlock.children(); + + var iconContainer = element.find('div.dropdown-select-icon-transclude'); + var menuContainer = element.find('div.dropdown-select-menu-transclude'); + + angular.forEach(transcludedElements, function(elem) { + if (angular.element(elem).hasClass('dropdown-select-icon')) { + iconContainer.append(elem); + } else if (angular.element(elem).hasClass('dropdown-select-menu')) { + menuContainer.replaceWith(elem); + } + }); + + transcludedBlock.remove(); + } + }; + return directiveDefinitionObject; +}); + + +quayApp.directive('dropdownSelectIcon', function () { + var directiveDefinitionObject = { + priority: 1, + require: '^dropdownSelect', + templateUrl: '/static/directives/dropdown-select-icon.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + }, + controller: function($scope, $element) { + } + }; + return directiveDefinitionObject; +}); + + +quayApp.directive('dropdownSelectMenu', function () { + var directiveDefinitionObject = { + priority: 1, + require: '^dropdownSelect', + templateUrl: '/static/directives/dropdown-select-menu.html', + replace: true, + transclude: true, + restrict: 'C', + scope: { + }, + controller: function($scope, $element) { + } + }; + return directiveDefinitionObject; +}); + + +quayApp.directive('triggerSetupGithub', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/trigger-setup-github.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + 'repository': '=repository', + 'trigger': '=trigger' + }, + controller: function($scope, $element, ApiService) { + $scope.setupReady = false; + $scope.loading = true; + + $scope.handleLocationInput = function(location) { + $scope.trigger['config']['subdir'] = location || ''; + $scope.isInvalidLocation = $scope.locations.indexOf(location) < 0; + }; + + $scope.handleLocationSelected = function(datum) { + $scope.setLocation(datum['value']); + }; + + $scope.setLocation = function(location) { + $scope.currentLocation = location; + $scope.trigger['config']['subdir'] = location || ''; + $scope.isInvalidLocation = false; + }; + + $scope.selectRepo = function(repo, org) { + $scope.currentRepo = { + 'repo': repo, + 'avatar_url': org['info']['avatar_url'], + 'toString': function() { + return this.repo; + } + }; + }; + + $scope.selectRepoInternal = function(currentRepo) { + if (!currentRepo) { + $scope.trigger.$ready = false; + return; + } + + var params = { + 'repository': $scope.repository.namespace + '/' + $scope.repository.name, + 'trigger_uuid': $scope.trigger['id'] + }; + + var repo = currentRepo['repo']; + $scope.trigger['config'] = { + 'build_source': repo, + 'subdir': '' + }; + + // Lookup the possible Dockerfile locations. + $scope.locations = null; + if (repo) { + ApiService.listBuildTriggerSubdirs($scope.trigger['config'], params).then(function(resp) { + if (resp['status'] == 'error') { + $scope.locationError = resp['message'] || 'Could not load Dockerfile locations'; + $scope.locations = null; + $scope.trigger.$ready = false; + $scope.isInvalidLocation = false; + return; + } + + $scope.locationError = null; + $scope.locations = resp['subdir'] || []; + $scope.trigger.$ready = true; + + if ($scope.locations.length > 0) { + $scope.setLocation($scope.locations[0]); + } else { + $scope.currentLocation = null; + $scope.isInvalidLocation = resp['subdir'].indexOf('') < 0; + } + }, function(resp) { + $scope.locationError = resp['message'] || 'Could not load Dockerfile locations'; + $scope.locations = null; + $scope.trigger.$ready = false; + $scope.isInvalidLocation = false; + }); + } + }; + + var setupTypeahead = function() { + var repos = []; + for (var i = 0; i < $scope.orgs.length; ++i) { + var org = $scope.orgs[i]; + var orepos = org['repos']; + for (var j = 0; j < orepos.length; ++j) { + var repoValue = { + 'repo': orepos[j], + 'avatar_url': org['info']['avatar_url'], + 'toString': function() { + return this.repo; + } + }; + var datum = { + 'name': orepos[j], + 'org': org, + 'value': orepos[j], + 'title': orepos[j], + 'item': repoValue + }; + repos.push(datum); + } + } + + $scope.repoLookahead = repos; + }; + + var loadSources = function() { + var params = { + 'repository': $scope.repository.namespace + '/' + $scope.repository.name, + 'trigger_uuid': $scope.trigger.id + }; + + ApiService.listTriggerBuildSources(null, params).then(function(resp) { + $scope.orgs = resp['sources']; + setupTypeahead(); + $scope.loading = false; + }); + }; + + loadSources(); + + $scope.$watch('currentRepo', function(repo) { + $scope.selectRepoInternal(repo); + }); + } + }; + return directiveDefinitionObject; +}); + + quayApp.directive('buildLogCommand', function () { var directiveDefinitionObject = { priority: 0, @@ -2735,6 +3553,9 @@ quayApp.directive('buildMessage', function () { controller: function($scope, $element) { $scope.getBuildMessage = function (phase) { switch (phase) { + case 'cannot_load': + return 'Cannot load build status - Please report this error'; + case 'starting': case 'initializing': return 'Starting Dockerfile build'; @@ -2789,6 +3610,7 @@ quayApp.directive('buildProgress', function () { case 'initializing': case 'starting': case 'waiting': + case 'cannot_load': return 0; break; } @@ -2801,6 +3623,54 @@ quayApp.directive('buildProgress', function () { }); +quayApp.directive('notificationView', function () { + var directiveDefinitionObject = { + priority: 0, + templateUrl: '/static/directives/notification-view.html', + replace: false, + transclude: false, + restrict: 'C', + scope: { + 'notification': '=notification', + 'parent': '=parent' + }, + controller: function($scope, $element, $location, UserService, NotificationService) { + $scope.getMessage = function(notification) { + return NotificationService.getMessage(notification); + }; + + $scope.getGravatar = function(orgname) { + var organization = UserService.getOrganization(orgname); + return organization['gravatar'] || ''; + }; + + $scope.parseDate = function(dateString) { + return Date.parse(dateString); + }; + + $scope.showNotification = function() { + var url = NotificationService.getPage($scope.notification); + if (url) { + var parts = url.split('?') + $location.path(parts[0]); + + if (parts.length > 1) { + $location.search(parts[1]); + } + + $scope.parent.$hide(); + } + }; + + $scope.getClass = function(notification) { + return NotificationService.getClass(notification); + }; + } + }; + return directiveDefinitionObject; +}); + + quayApp.directive('dockerfileBuildDialog', function () { var directiveDefinitionObject = { priority: 0, @@ -3181,8 +4051,8 @@ quayApp.directive('ngVisible', function () { }; }); -quayApp.run(['$location', '$rootScope', 'Restangular', 'UserService', 'PlanService', '$http', '$timeout', - function($location, $rootScope, Restangular, UserService, PlanService, $http, $timeout) { +quayApp.run(['$location', '$rootScope', 'Restangular', 'UserService', 'PlanService', '$http', '$timeout', 'CookieService', + function($location, $rootScope, Restangular, UserService, PlanService, $http, $timeout, CookieService) { // Handle session security. Restangular.setDefaultRequestParams(['post', 'put', 'remove', 'delete'], {'_csrf_token': window.__token || ''}); @@ -3190,7 +4060,14 @@ quayApp.run(['$location', '$rootScope', 'Restangular', 'UserService', 'PlanServi // Handle session expiration. Restangular.setErrorInterceptor(function(response) { if (response.status == 401) { - $('#sessionexpiredModal').modal({}); + if (response.data['session_required'] == null || response.data['session_required'] === true) { + $('#sessionexpiredModal').modal({}); + return false; + } + } + + if (response.status == 500) { + document.location = '/500'; return false; } @@ -3198,7 +4075,16 @@ quayApp.run(['$location', '$rootScope', 'Restangular', 'UserService', 'PlanServi }); // Check if we need to redirect based on a previously chosen plan. - PlanService.handleNotedPlan(); + var result = PlanService.handleNotedPlan(); + + // Check to see if we need to show a redirection page. + var redirectUrl = CookieService.get('quay.redirectAfterLoad'); + CookieService.clear('quay.redirectAfterLoad'); + + if (!result && redirectUrl && redirectUrl.indexOf(window.location.href) == 0) { + window.location = redirectUrl; + return; + } var changeTab = function(activeTab, opt_timeout) { var checkCount = 0; diff --git a/static/js/controllers.js b/static/js/controllers.js index 85151dd87..b121fbcf4 100644 --- a/static/js/controllers.js +++ b/static/js/controllers.js @@ -638,10 +638,8 @@ function RepoCtrl($scope, $sanitize, Restangular, ImageMetadataService, ApiServi $rootScope.description = jQuery(getFirstTextLine(repo.description)).text() || 'Visualization of images and tags for ' + kind + ' Docker repository: ' + qualifiedRepoName; - // If the repository is marked as building, start monitoring it for changes. - if (repo.is_building) { - startBuildInfoTimer(repo); - } + // Load the builds for this repository. If none are active it will cancel the poll. + startBuildInfoTimer(repo); $('#copyClipboard').clipboardCopy(); }); @@ -672,15 +670,19 @@ function RepoCtrl($scope, $sanitize, Restangular, ImageMetadataService, ApiServi }; ApiService.getRepoBuilds(null, params, true).then(function(resp) { + // Build a filtered list of the builds that are currently running. var runningBuilds = []; for (var i = 0; i < resp.builds.length; ++i) { var build = resp.builds[i]; - if (build.status != 'complete') { + if (build['phase'] != 'complete' && build['phase'] != 'error') { runningBuilds.push(build); } } - $scope.buildsInfo = runningBuilds; + var existingBuilds = $scope.runningBuilds || []; + $scope.runningBuilds = runningBuilds; + $scope.buildHistory = resp.builds; + if (!runningBuilds.length) { // Cancel the build timer. cancelBuildInfoTimer(); @@ -688,8 +690,10 @@ function RepoCtrl($scope, $sanitize, Restangular, ImageMetadataService, ApiServi // Mark the repo as no longer building. $scope.repo.is_building = false; - // Reload the repo information. - loadViewInfo(); + // Reload the repo information if all of the builds recently finished. + if (existingBuilds.length > 0) { + loadViewInfo(); + } } }); }; @@ -798,9 +802,23 @@ function BuildPackageCtrl($scope, Restangular, ApiService, $routeParams, $rootSc // itself (should) be the Dockerfile. if (zipFiles && Object.keys(zipFiles).length) { // Load the dockerfile contents. - var dockerfile = zip.file('Dockerfile'); + var dockerfilePath = 'Dockerfile'; + if ($scope.repobuild['job_config']) { + var dockerfileFolder = ($scope.repobuild['job_config']['build_subdir'] || ''); + if (dockerfileFolder[0] == '/') { + dockerfileFolder = dockerfileFolder.substr(1); + } + if (dockerfileFolder && dockerfileFolder[dockerfileFolder.length - 1] != '/') { + dockerfileFolder += '/'; + } + + dockerfilePath = dockerfileFolder + 'Dockerfile'; + } + + var dockerfile = zip.file(dockerfilePath); if (dockerfile) { $scope.dockerFileContents = dockerfile.asText(); + $scope.dockerFilePath = dockerfilePath; } // Build the zip file tree. @@ -815,21 +833,17 @@ function BuildPackageCtrl($scope, Restangular, ApiService, $routeParams, $rootSc }); } else { $scope.dockerFileContents = response; + $scope.dockerFilePath = 'Dockerfile'; } $scope.loaded = true; }; - var downloadBuildPack = function() { + var downloadBuildPack = function(url) { $scope.downloadProgress = 0; $scope.downloading = true; - ApiService.getRepoBuildArchiveUrl(null, params).then(function(resp) { - startDownload(resp['url']); - }, function() { - $scope.downloading = false; - $scope.downloadError = true; - }); + startDownload(url); }; var startDownload = function(url) { @@ -880,7 +894,7 @@ function BuildPackageCtrl($scope, Restangular, ApiService, $routeParams, $rootSc 'name': name }; - downloadBuildPack(); + downloadBuildPack(resp['archive_url']); return resp; }); }; @@ -888,7 +902,8 @@ function BuildPackageCtrl($scope, Restangular, ApiService, $routeParams, $rootSc getBuildInfo(); } -function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope, $location, $interval, $sanitize, ansi2html) { +function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope, $location, $interval, $sanitize, + ansi2html, AngularViewArray) { var namespace = $routeParams.namespace; var name = $routeParams.name; var pollTimerHandle = null; @@ -904,7 +919,7 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope } }); - $scope.builds = []; + $scope.builds = null; $scope.polling = false; $scope.buildDialogShowCounter = 0; @@ -914,12 +929,16 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope }; $scope.handleBuildStarted = function(newBuild) { - $scope.builds.push(newBuild); + $scope.builds.unshift(newBuild); $scope.setCurrentBuild(newBuild['id'], true); }; $scope.adjustLogHeight = function() { - $('.build-logs').height($(window).height() - 415); + var triggerOffset = 0; + if ($scope.currentBuild && $scope.currentBuild.trigger) { + triggerOffset = 85; + } + $('.build-logs').height($(window).height() - 415 - triggerOffset); }; $scope.askRestartBuild = function(build) { @@ -929,8 +948,14 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope $scope.restartBuild = function(build) { $('#confirmRestartBuildModal').modal('hide'); + var subdirectory = ''; + if (build['job_config']) { + subdirectory = build['job_config']['build_subdir'] || ''; + } + var data = { - 'file_id': build['resource_key'] + 'file_id': build['resource_key'], + 'subdirectory': subdirectory }; var params = { @@ -938,26 +963,18 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope }; ApiService.requestRepoBuild(data, params).then(function(newBuild) { - $scope.builds.push(newBuild); + $scope.builds.unshift(newBuild); $scope.setCurrentBuild(newBuild['id'], true); }); }; $scope.hasLogs = function(container) { - return ((container.logs && container.logs.length) || (container._logs && container._logs.length)); + return container.logs.hasEntries; }; - $scope.toggleLogs = function(container) { - if (container._logs) { - container.logs = container._logs; - container._logs = null; - } else { - container._logs = container.logs; - container.logs = null; - } - }; - $scope.setCurrentBuild = function(buildId, opt_updateURL) { + if (!$scope.builds) { return; } + // Find the build. for (var i = 0; i < $scope.builds.length; ++i) { if ($scope.builds[i].id == buildId) { @@ -1042,17 +1059,13 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope var entry = logs[i]; var type = entry['type'] || 'entry'; if (type == 'command' || type == 'phase' || type == 'error') { - entry['_logs'] = []; + entry['logs'] = AngularViewArray.create(); entry['index'] = startIndex + i; $scope.logEntries.push(entry); - $scope.currentParentEntry = entry; + $scope.currentParentEntry = entry; } else if ($scope.currentParentEntry) { - if ($scope.currentParentEntry['logs']) { - $scope.currentParentEntry['logs'].push(entry); - } else { - $scope.currentParentEntry['_logs'].push(entry); - } + $scope.currentParentEntry['logs'].push(entry); } } }; @@ -1120,7 +1133,7 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope if ($location.search().current) { $scope.setCurrentBuild($location.search().current, false); } else if ($scope.builds.length > 0) { - $scope.setCurrentBuild($scope.builds[$scope.builds.length - 1].id, true); + $scope.setCurrentBuild($scope.builds[0].id, true); } }); }; @@ -1128,7 +1141,7 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope fetchRepository(); } -function RepoAdminCtrl($scope, Restangular, ApiService, $routeParams, $rootScope) { +function RepoAdminCtrl($scope, Restangular, ApiService, KeyService, $routeParams, $rootScope, $location) { var namespace = $routeParams.namespace; var name = $routeParams.name; @@ -1138,6 +1151,33 @@ function RepoAdminCtrl($scope, Restangular, ApiService, $routeParams, $rootScope $scope.permissionCache = {}; + $scope.githubRedirectUri = KeyService.githubRedirectUri; + $scope.githubClientId = KeyService.githubClientId; + + $scope.getBadgeFormat = function(format, repo) { + if (!repo) { return; } + + var imageUrl = 'https://quay.io/repository/' + namespace + '/' + name + '/status'; + if (!$scope.repo.is_public) { + imageUrl += '?token=' + $scope.repo.status_token; + } + + var linkUrl = 'https://quay.io/repository/' + namespace + '/' + name; + + switch (format) { + case 'svg': + return imageUrl; + + case 'md': + return '[![Docker Repository on Quay.io](' + imageUrl + ' "Docker Repository on Quay.io")](' + linkUrl + ')'; + + case 'asciidoc': + return 'image:' + imageUrl + '["Docker Repository on Quay.io", link="' + linkUrl + '"]'; + } + + return ''; + }; + $scope.buildEntityForPermission = function(name, permission, kind) { var key = name + ':' + kind; if ($scope.permissionCache[key]) { @@ -1196,7 +1236,7 @@ function RepoAdminCtrl($scope, Restangular, ApiService, $routeParams, $rootScope }; var permissionPost = Restangular.one(getRestUrl('repository', namespace, name, 'permissions', kind, entityName)); - permissionPost.customPOST(permission).then(function(result) { + permissionPost.customPUT(permission).then(function(result) { $scope.permissions[kind][entityName] = result; }, function(result) { $('#cannotchangeModal').modal({}); @@ -1358,6 +1398,130 @@ function RepoAdminCtrl($scope, Restangular, ApiService, $routeParams, $rootScope }); }; + $scope.showBuild = function(buildInfo) { + $location.path('/repository/' + namespace + '/' + name + '/build'); + $location.search('current', buildInfo.id); + }; + + $scope.loadTriggerBuildHistory = function(trigger) { + trigger.$loadingHistory = true; + + var params = { + 'repository': namespace + '/' + name, + 'trigger_uuid': trigger.id, + 'limit': 3 + }; + + ApiService.listTriggerRecentBuilds(null, params).then(function(resp) { + trigger.$builds = resp['builds']; + trigger.$loadingHistory = false; + }); + }; + + $scope.loadTriggers = function() { + var params = { + 'repository': namespace + '/' + name + }; + + $scope.triggersResource = ApiService.listBuildTriggersAsResource(params).get(function(resp) { + $scope.triggers = resp.triggers; + + // Check to see if we need to setup any trigger. + var newTriggerId = $routeParams.new_trigger; + if (newTriggerId) { + for (var i = 0; i < $scope.triggers.length; ++i) { + var trigger = $scope.triggers[i]; + if (trigger['id'] == newTriggerId && !trigger['is_active']) { + $scope.setupTrigger(trigger); + break; + } + } + } + + return $scope.triggers; + }); + }; + + $scope.setupTrigger = function(trigger) { + $scope.triggerSetupReady = false; + $scope.currentSetupTrigger = trigger; + $('#setupTriggerModal').modal({}); + $('#setupTriggerModal').on('hidden.bs.modal', function () { + $scope.$apply(function() { + $scope.cancelSetupTrigger(); + }); + }); + }; + + $scope.finishSetupTrigger = function(trigger) { + $('#setupTriggerModal').modal('hide'); + $scope.currentSetupTrigger = null; + + var params = { + 'repository': namespace + '/' + name, + 'trigger_uuid': trigger.id + }; + + ApiService.activateBuildTrigger(trigger['config'], params).then(function(resp) { + trigger['is_active'] = true; + }, function(resp) { + $scope.triggers.splice($scope.triggers.indexOf(trigger), 1); + bootbox.dialog({ + "message": resp['data']['message'] || 'The build trigger setup could not be completed', + "title": "Could not activate build trigger", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + + $scope.cancelSetupTrigger = function() { + if (!$scope.currentSetupTrigger) { return; } + + $('#setupTriggerModal').modal('hide'); + $scope.deleteTrigger($scope.currentSetupTrigger); + $scope.currentSetupTrigger = null; + }; + + $scope.startTrigger = function(trigger) { + var params = { + 'repository': namespace + '/' + name, + 'trigger_uuid': trigger.id + }; + + ApiService.manuallyStartBuildTrigger(null, params).then(function(resp) { + window.console.log(resp); + var url = '/repository/' + namespace + '/' + name + '/build?current=' + resp['id']; + document.location = url; + }, function(resp) { + bootbox.dialog({ + "message": resp['message'] || 'The build could not be started', + "title": "Could not start build", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + + $scope.deleteTrigger = function(trigger) { + var params = { + 'repository': namespace + '/' + name, + 'trigger_uuid': trigger.id + }; + + ApiService.deleteBuildTrigger(null, params).then(function(resp) { + $scope.triggers.splice($scope.triggers.indexOf(trigger), 1); + }); + }; + var fetchTokens = function() { var params = { 'repository': namespace + '/' + name @@ -1421,7 +1585,6 @@ function UserAdminCtrl($scope, $timeout, $location, ApiService, PlanService, Use } UserService.updateUserIn($scope, function(user) { - $scope.askForPassword = user.askForPassword; $scope.cuser = jQuery.extend({}, user); for (var i = 0; i < $scope.cuser.logins.length; i++) { @@ -1447,12 +1610,42 @@ function UserAdminCtrl($scope, $timeout, $location, ApiService, PlanService, Use $scope.org = {}; $scope.githubRedirectUri = KeyService.githubRedirectUri; $scope.githubClientId = KeyService.githubClientId; + $scope.authorizedApps = null; $('.form-change').popover(); $scope.logsShown = 0; $scope.invoicesShown = 0; + $scope.loadAuthedApps = function() { + if ($scope.authorizedApps) { return; } + + ApiService.listUserAuthorizations().then(function(resp) { + $scope.authorizedApps = resp['authorizations']; + }); + }; + + $scope.deleteAccess = function(accessTokenInfo) { + var params = { + 'access_token_uuid': accessTokenInfo['uuid'] + }; + + ApiService.deleteUserAuthorization(null, params).then(function(resp) { + $scope.authorizedApps.splice($scope.authorizedApps.indexOf(accessTokenInfo), 1); + }, function(resp) { + bootbox.dialog({ + "message": resp.message || 'Could not revoke authorization', + "title": "Cannot revoke authorization", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + $scope.loadLogs = function() { if (!$scope.hasPaidBusinessPlan) { return; } $scope.logsShown++; @@ -1518,7 +1711,8 @@ function UserAdminCtrl($scope, $timeout, $location, ApiService, PlanService, Use $scope.sentEmail = $scope.cuser.email; // Reset the form. - $scope.cuser.repeatEmail = ''; + delete $scope.cuser['repeatEmail']; + $scope.changeEmailForm.$setPristine(); }, function(result) { $scope.updatingUser = false; @@ -1540,8 +1734,9 @@ function UserAdminCtrl($scope, $timeout, $location, ApiService, PlanService, Use $scope.changePasswordSuccess = true; // Reset the form - $scope.cuser.password = ''; - $scope.cuser.repeatPassword = ''; + delete $scope.cuser['password'] + delete $scope.cuser['repeatPassword'] + $scope.changePasswordForm.$setPristine(); // Reload the user. @@ -1614,6 +1809,16 @@ function ImageViewCtrl($scope, $routeParams, $rootScope, $timeout, ApiService, I }, 10); }; + var fetchRepository = function() { + var params = { + 'repository': namespace + '/' + name + }; + + ApiService.getRepoAsResource(params).get(function(repo) { + $scope.repo = repo; + }); + }; + var fetchImage = function() { var params = { 'repository': namespace + '/' + name, @@ -1621,10 +1826,13 @@ function ImageViewCtrl($scope, $routeParams, $rootScope, $timeout, ApiService, I }; $scope.image = ApiService.getImageAsResource(params).get(function(image) { - $scope.repo = { - 'name': name, - 'namespace': namespace - }; + if (!$scope.repo) { + $scope.repo = { + 'name': name, + 'namespace': namespace, + 'is_public': true + }; + } $rootScope.title = 'View Image - ' + image.id; $rootScope.description = 'Viewing docker image ' + image.id + ' under repository ' + namespace + '/' + name + @@ -1665,6 +1873,9 @@ function ImageViewCtrl($scope, $routeParams, $rootScope, $timeout, ApiService, I }); }; + // Fetch the repository. + fetchRepository(); + // Fetch the image. fetchImage(); } @@ -1673,13 +1884,16 @@ function V1Ctrl($scope, $location, UserService) { UserService.updateUserIn($scope); } -function NewRepoCtrl($scope, $location, $http, $timeout, UserService, ApiService, PlanService) { +function NewRepoCtrl($scope, $location, $http, $timeout, UserService, ApiService, PlanService, KeyService) { UserService.updateUserIn($scope); + $scope.githubRedirectUri = KeyService.githubRedirectUri; + $scope.githubClientId = KeyService.githubClientId; + $scope.repo = { 'is_public': 1, 'description': '', - 'initialize': false + 'initialize': '' }; // Watch the namespace on the repo. If it changes, we update the plan and the public/private @@ -1691,37 +1905,14 @@ function NewRepoCtrl($scope, $location, $http, $timeout, UserService, ApiService var isUserNamespace = (namespace == $scope.user.username); - $scope.checkingPlan = true; $scope.planRequired = null; $scope.isUserNamespace = isUserNamespace; - if (isUserNamespace) { - // Load the user's subscription information in case they want to create a private - // repository. - ApiService.getUserPrivateCount().then(function(resp) { - if (resp.privateCount + 1 > resp.reposAllowed) { - PlanService.getMinimumPlan(resp.privateCount + 1, false, function(minimum) { - $scope.planRequired = minimum; - }); - } + // Determine whether private repositories are allowed for the namespace. + checkPrivateAllowed(); - $scope.checkingPlan = false; - }, function() { - $scope.planRequired = {}; - $scope.checkingPlan = false; - }); - } else { - ApiService.getOrganizationPrivateAllowed(null, {'orgname': namespace}).then(function(resp) { - $scope.planRequired = resp.privateAllowed ? null : {}; - $scope.checkingPlan = false; - }, function() { - $scope.planRequired = {}; - $scope.checkingPlan = false; - }); - - // Auto-set to private repo. - $scope.repo.is_public = '0'; - } + // Default to private repos for organizations. + $scope.repo.is_public = isUserNamespace ? '1' : '0'; }); $scope.changeNamespace = function(namespace) { @@ -1771,12 +1962,20 @@ function NewRepoCtrl($scope, $location, $http, $timeout, UserService, ApiService $scope.creating = false; $scope.created = created; - // Repository created. Start the upload process if applicable. - if ($scope.repo.initialize) { + // Start the upload process if applicable. + if ($scope.repo.initialize == 'dockerfile' || $scope.repo.initialize == 'zipfile') { $scope.createdForBuild = created; return; } + // Conduct the Github redirect if applicable. + if ($scope.repo.initialize == 'github') { + window.location = 'https://github.com/login/oauth/authorize?client_id=' + $scope.githubClientId + + '&scope=repo,user:email&redirect_uri=' + $scope.githubRedirectUri + '/trigger/' + + repo.namespace + '/' + repo.name; + return; + } + // Otherwise, redirect to the repo page. $location.path('/repository/' + created.namespace + '/' + created.name); }, function(result) { @@ -1800,7 +1999,35 @@ function NewRepoCtrl($scope, $location, $http, $timeout, UserService, ApiService } }; - PlanService.changePlan($scope, null, $scope.planRequired.stripeId, callbacks); + var namespace = $scope.isUserNamespace ? null : $scope.repo.namespace; + PlanService.changePlan($scope, namespace, $scope.planRequired.stripeId, callbacks); + }; + + var checkPrivateAllowed = function() { + if (!$scope.repo || !$scope.repo.namespace) { return; } + + $scope.checkingPlan = true; + + var isUserNamespace = $scope.isUserNamespace; + ApiService.getPrivateAllowed(isUserNamespace ? null : $scope.repo.namespace).then(function(resp) { + $scope.checkingPlan = false; + + if (resp['privateAllowed']) { + $scope.planRequired = null; + return; + } + + if (resp['privateCount'] == null) { + // Organization where we are not the admin. + $scope.planRequired = {}; + return; + } + + // Otherwise, lookup the matching plan. + PlanService.getMinimumPlan(resp['privateCount'] + 1, !isUserNamespace, function(minimum) { + $scope.planRequired = minimum; + }); + }); }; var subscribedToPlan = function(sub) { @@ -1810,16 +2037,7 @@ function NewRepoCtrl($scope, $location, $http, $timeout, UserService, ApiService PlanService.getPlan(sub.plan, function(subscribedPlan) { $scope.subscribedPlan = subscribedPlan; $scope.planRequired = null; - - // Check to see if the current plan allows for an additional private repository to - // be created. - var privateAllowed = $scope.subscription.usedPrivateRepos < $scope.subscribedPlan.privateRepos; - if (!privateAllowed) { - // If not, find the minimum repository that does. - PlanService.getMinimumPlan($scope.subscription.usedPrivateRepos + 1, !$scope.isUserNamespace, function(minimum) { - $scope.planRequired = minimum; - }); - } + checkPrivateAllowed(); }); }; } @@ -1933,12 +2151,17 @@ function OrgAdminCtrl($rootScope, $scope, $timeout, Restangular, $routeParams, U $scope.invoiceLoading = true; $scope.logsShown = 0; $scope.invoicesShown = 0; + $scope.applicationsShown = 0; $scope.changingOrganization = false; $scope.loadLogs = function() { $scope.logsShown++; }; + $scope.loadApplications = function() { + $scope.applicationsShown++; + }; + $scope.loadInvoices = function() { $scope.invoicesShown++; }; @@ -2223,4 +2446,132 @@ function OrgMemberLogsCtrl($scope, $routeParams, $rootScope, $timeout, Restangul // Load the org info and the member info. loadOrganization(); loadMemberInfo(); +} + + +function ManageApplicationCtrl($scope, $routeParams, $rootScope, $location, $timeout, ApiService) { + var orgname = $routeParams.orgname; + var clientId = $routeParams.clientid; + + $scope.updating = false; + + $scope.askResetClientSecret = function() { + $('#resetSecretModal').modal({}); + }; + + $scope.askDelete = function() { + $('#deleteAppModal').modal({}); + }; + + $scope.deleteApplication = function() { + var params = { + 'orgname': orgname, + 'client_id': clientId + }; + + $('#deleteAppModal').modal('hide'); + + ApiService.deleteOrganizationApplication(null, params).then(function(resp) { + $timeout(function() { + $location.path('/organization/' + orgname + '/admin'); + }, 500); + }, function(resp) { + bootbox.dialog({ + "message": resp.message || 'Could not delete application', + "title": "Cannot delete application", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + + $scope.updateApplication = function() { + $scope.updating = true; + var params = { + 'orgname': orgname, + 'client_id': clientId + }; + + if (!$scope.application['description']) { + delete $scope.application['description']; + } + + if (!$scope.application['gravatar_email']) { + delete $scope.application['gravatar_email']; + } + + ApiService.updateOrganizationApplication($scope.application, params).then(function(resp) { + $scope.application = resp; + $scope.updating = false; + }, function(resp) { + $scope.updating = false; + bootbox.dialog({ + "message": resp.message || 'Could not update application', + "title": "Cannot update application", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + + $scope.resetClientSecret = function() { + var params = { + 'orgname': orgname, + 'client_id': clientId + }; + + $('#resetSecretModal').modal('hide'); + + ApiService.resetOrganizationApplicationClientSecret(null, params).then(function(resp) { + $scope.application = resp; + }, function(resp) { + bootbox.dialog({ + "message": resp.message || 'Could not reset client secret', + "title": "Cannot reset client secret", + "buttons": { + "close": { + "label": "Close", + "className": "btn-primary" + } + } + }); + }); + }; + + var loadOrganization = function() { + $scope.orgResource = ApiService.getOrganizationAsResource({'orgname': orgname}).get(function(org) { + $scope.organization = org; + return org; + }); + }; + + var loadApplicationInfo = function() { + var params = { + 'orgname': orgname, + 'client_id': clientId + }; + + $scope.appResource = ApiService.getOrganizationApplicationAsResource(params).get(function(resp) { + $scope.application = resp; + + $rootScope.title = 'Manage Application ' + $scope.application.name + ' (' + $scope.orgname + ')'; + $rootScope.description = 'Manage the details of application ' + $scope.application.name + + ' under organization ' + $scope.orgname; + + return resp; + }); + }; + + + // Load the organization and application info. + loadOrganization(); + loadApplicationInfo(); } \ No newline at end of file diff --git a/static/js/graphing.js b/static/js/graphing.js index bcb8c8129..9ae205212 100644 --- a/static/js/graphing.js +++ b/static/js/graphing.js @@ -872,7 +872,8 @@ function FileTreeBase() { * Calculates the dimensions of the tree. */ FileTreeBase.prototype.calculateDimensions_ = function(container) { - var cw = document.getElementById(container).clientWidth; + var containerElm = document.getElementById(container); + var cw = containerElm ? containerElm.clientWidth : 1200; var barHeight = 20; var ch = (this.getNodesHeight() * barHeight) + 40; @@ -1470,7 +1471,7 @@ function LogUsageChart(titleMap) { * Builds the D3-representation of the data. */ LogUsageChart.prototype.buildData_ = function(logs) { - var parseDate = d3.time.format("%a, %d %b %Y %H:%M:%S GMT").parse + var parseDate = d3.time.format("%a, %d %b %Y %H:%M:%S %Z").parse // Build entries for each kind of event that occurred, on each day. We have one // entry per {kind, day} pair. diff --git a/static/lib/angular-motion.min.css b/static/lib/angular-motion.min.css new file mode 100644 index 000000000..ed4b8444d --- /dev/null +++ b/static/lib/angular-motion.min.css @@ -0,0 +1,8 @@ +/** + * angular-motion + * @version v0.3.2 - 2014-02-11 + * @link https://github.com/mgcrea/angular-motion + * @author Olivier Louvignes + * @license MIT License, http://www.opensource.org/licenses/MIT + */ +.am-fade-and-scale{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-fade-and-scale.ng-enter,.am-fade-and-scale.am-fade-and-scale-add,.am-fade-and-scale.ng-hide-remove,.am-fade-and-scale.ng-move{-webkit-animation-name:fadeAndScaleIn;animation-name:fadeAndScaleIn}.am-fade-and-scale.ng-leave,.am-fade-and-scale.am-fade-and-scale-remove,.am-fade-and-scale.ng-hide{-webkit-animation-name:fadeAndScaleOut;animation-name:fadeAndScaleOut}.am-fade-and-scale.ng-enter{visibility:hidden;-webkit-animation-name:fadeAndScaleIn;animation-name:fadeAndScaleIn}.am-fade-and-scale.ng-enter.ng-enter-active{visibility:visible}.am-fade-and-scale.ng-leave{-webkit-animation-name:fadeAndScaleOut;animation-name:fadeAndScaleOut}@-webkit-keyframes fadeAndScaleIn{from{opacity:0;-webkit-transform:scale(0.7);transform:scale(0.7)}to{opacity:1}}@keyframes fadeAndScaleIn{from{opacity:0;-webkit-transform:scale(0.7);transform:scale(0.7)}to{opacity:1}}@-webkit-keyframes fadeAndScaleOut{from{opacity:1}to{opacity:0;-webkit-transform:scale(0.7);transform:scale(0.7)}}@keyframes fadeAndScaleOut{from{opacity:1}to{opacity:0;-webkit-transform:scale(0.7);transform:scale(0.7)}}.am-fade-and-slide-top{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-fade-and-slide-top.am-fade-and-slide-top-add,.am-fade-and-slide-top.ng-hide-remove,.am-fade-and-slide-top.ng-move{-webkit-animation-name:fadeAndSlideFromTop;animation-name:fadeAndSlideFromTop}.am-fade-and-slide-top.am-fade-and-slide-top-remove,.am-fade-and-slide-top.ng-hide{-webkit-animation-name:fadeAndSlideToTop;animation-name:fadeAndSlideToTop}.am-fade-and-slide-top.ng-enter{visibility:hidden;-webkit-animation-name:fadeAndSlideFromTop;animation-name:fadeAndSlideFromTop}.am-fade-and-slide-top.ng-enter.ng-enter-active{visibility:visible}.am-fade-and-slide-top.ng-leave{-webkit-animation-name:fadeAndSlideToTop;animation-name:fadeAndSlideToTop}.am-fade-and-slide-right{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-fade-and-slide-right.am-fade-and-slide-right-add,.am-fade-and-slide-right.ng-hide-remove,.am-fade-and-slide-right.ng-move{-webkit-animation-name:fadeAndSlideFromRight;animation-name:fadeAndSlideFromRight}.am-fade-and-slide-right.am-fade-and-slide-right-remove,.am-fade-and-slide-right.ng-hide{-webkit-animation-name:fadeAndSlideToRight;animation-name:fadeAndSlideToRight}.am-fade-and-slide-right.ng-enter{visibility:hidden;-webkit-animation-name:fadeAndSlideFromRight;animation-name:fadeAndSlideFromRight}.am-fade-and-slide-right.ng-enter.ng-enter-active{visibility:visible}.am-fade-and-slide-right.ng-leave{-webkit-animation-name:fadeAndSlideToRight;animation-name:fadeAndSlideToRight}.am-fade-and-slide-bottom{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-fade-and-slide-bottom.am-fade-and-slide-bottom-add,.am-fade-and-slide-bottom.ng-hide-remove,.am-fade-and-slide-bottom.ng-move{-webkit-animation-name:fadeAndSlideFromBottom;animation-name:fadeAndSlideFromBottom}.am-fade-and-slide-bottom.am-fade-and-slide-bottom-remove,.am-fade-and-slide-bottom.ng-hide{-webkit-animation-name:fadeAndSlideToBottom;animation-name:fadeAndSlideToBottom}.am-fade-and-slide-bottom.ng-enter{visibility:hidden;-webkit-animation-name:fadeAndSlideFromBottom;animation-name:fadeAndSlideFromBottom}.am-fade-and-slide-bottom.ng-enter.ng-enter-active{visibility:visible}.am-fade-and-slide-bottom.ng-leave{-webkit-animation-name:fadeAndSlideToBottom;animation-name:fadeAndSlideToBottom}.am-fade-and-slide-left{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-fade-and-slide-left.am-fade-and-slide-left-add,.am-fade-and-slide-left.ng-hide-remove,.am-fade-and-slide-left.ng-move{-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards;-webkit-animation-name:fadeAndSlideFromLeft;animation-name:fadeAndSlideFromLeft}.am-fade-and-slide-left.am-fade-and-slide-left-remove,.am-fade-and-slide-left.ng-hide{-webkit-animation-name:fadeAndSlideToLeft;animation-name:fadeAndSlideToLeft}.am-fade-and-slide-left.ng-enter{visibility:hidden;-webkit-animation-name:fadeAndSlideFromLeft;animation-name:fadeAndSlideFromLeft}.am-fade-and-slide-left.ng-enter.ng-enter-active{visibility:visible}.am-fade-and-slide-left.ng-leave{-webkit-animation-name:fadeAndSlideToLeft;animation-name:fadeAndSlideToLeft}@-webkit-keyframes fadeAndSlideFromTop{from{opacity:0;-webkit-transform:translateY(-20%);transform:translateY(-20%)}to{opacity:1}}@keyframes fadeAndSlideFromTop{from{opacity:0;-webkit-transform:translateY(-20%);transform:translateY(-20%)}to{opacity:1}}@-webkit-keyframes fadeAndSlideToTop{from{opacity:1}to{opacity:0;-webkit-transform:translateY(-20%);transform:translateY(-20%)}}@keyframes fadeAndSlideToTop{from{opacity:1}to{opacity:0;-webkit-transform:translateY(-20%);transform:translateY(-20%)}}@-webkit-keyframes fadeAndSlideFromRight{from{opacity:0;-webkit-transform:translateX(20%);transform:translateX(20%)}to{opacity:1}}@keyframes fadeAndSlideFromRight{from{opacity:0;-webkit-transform:translateX(20%);transform:translateX(20%)}to{opacity:1}}@-webkit-keyframes fadeAndSlideToRight{from{opacity:1}to{opacity:0;-webkit-transform:translateX(20%);transform:translateX(20%)}}@keyframes fadeAndSlideToRight{from{opacity:1}to{opacity:0;-webkit-transform:translateX(20%);transform:translateX(20%)}}@-webkit-keyframes fadeAndSlideFromBottom{from{opacity:0;-webkit-transform:translateY(20%);transform:translateY(20%)}to{opacity:1}}@keyframes fadeAndSlideFromBottom{from{opacity:0;-webkit-transform:translateY(20%);transform:translateY(20%)}to{opacity:1}}@-webkit-keyframes fadeAndSlideToBottom{from{opacity:1}to{opacity:0;-webkit-transform:translateY(20%);transform:translateY(20%)}}@keyframes fadeAndSlideToBottom{from{opacity:1}to{opacity:0;-webkit-transform:translateY(20%);transform:translateY(20%)}}@-webkit-keyframes fadeAndSlideFromLeft{from{opacity:0;-webkit-transform:translateX(-20%);transform:translateX(-20%)}to{opacity:1}}@keyframes fadeAndSlideFromLeft{from{opacity:0;-webkit-transform:translateX(-20%);transform:translateX(-20%)}to{opacity:1}}@-webkit-keyframes fadeAndSlideToLeft{from{opacity:1}to{opacity:0;-webkit-transform:translateX(-20%);transform:translateX(-20%)}}@keyframes fadeAndSlideToLeft{from{opacity:1}to{opacity:0;-webkit-transform:translateX(-20%);transform:translateX(-20%)}}.am-fade{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:linear;animation-timing-function:linear;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards;opacity:1}.am-fade.am-fade-add,.am-fade.ng-hide-remove,.am-fade.ng-move{-webkit-animation-name:fadeIn;animation-name:fadeIn}.am-fade.am-fade-remove,.am-fade.ng-hide{-webkit-animation-name:fadeOut;animation-name:fadeOut}.am-fade.ng-enter{visibility:hidden;-webkit-animation-name:fadeIn;animation-name:fadeIn}.am-fade.ng-enter.ng-enter-active{visibility:visible}.am-fade.ng-leave{-webkit-animation-name:fadeOut;animation-name:fadeOut}@-webkit-keyframes fadeIn{from{opacity:0}to{opacity:1}}@keyframes fadeIn{from{opacity:0}to{opacity:1}}@-webkit-keyframes fadeOut{from{opacity:1}to{opacity:0}}@keyframes fadeOut{from{opacity:1}to{opacity:0}}.modal-backdrop.am-fade,.aside-backdrop.am-fade{background:rgba(0,0,0,.5);-webkit-animation-duration:.15s;animation-duration:.15s}.am-flip-x{-webkit-animation-duration:.4s;animation-duration:.4s;-webkit-animation-timing-function:ease;animation-timing-function:ease;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-flip-x.am-flip-x-add,.am-flip-x.ng-hide-remove,.am-flip-x.ng-move{-webkit-animation-name:flipInXBounce;animation-name:flipInXBounce}.am-flip-x.am-flip-x-remove,.am-flip-x.ng-hide{-webkit-animation-name:flipOutX;animation-name:flipOutX}.am-flip-x.ng-enter{visibility:hidden;-webkit-animation-name:flipInXBounce;animation-name:flipInXBounce}.am-flip-x.ng-enter.ng-enter-active{visibility:visible}.am-flip-x.ng-leave{-webkit-animation-name:flipOutX;animation-name:flipOutX}.am-flip-x-linear{-webkit-animation-duration:.4s;animation-duration:.4s;-webkit-animation-timing-function:ease;animation-timing-function:ease;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-flip-x-linear.am-flip-x-add,.am-flip-x-linear.ng-hide-remove,.am-flip-x-linear.ng-move{-webkit-animation-name:flipInX;animation-name:flipInX}.am-flip-x-linear.am-flip-x-remove,.am-flip-x-linear.ng-hide{-webkit-animation-name:flipOutX;animation-name:flipOutX}.am-flip-x-linear.ng-enter{visibility:hidden;-webkit-animation-name:flipInX;animation-name:flipInX}.am-flip-x-linear.ng-enter.ng-enter-active{visibility:visible}.am-flip-x-linear.ng-leave{-webkit-animation-name:flipOutX;animation-name:flipOutX}@-webkit-keyframes flipInX{from{opacity:0;-webkit-transform:perspective(400px) rotateX(90deg);transform:perspective(400px) rotateX(90deg)}to{opacity:1;-webkit-transform:perspective(400px) rotateX(0deg);transform:perspective(400px) rotateX(0deg)}}@keyframes flipInX{from{opacity:0;-webkit-transform:perspective(400px) rotateX(90deg);transform:perspective(400px) rotateX(90deg)}to{opacity:1;-webkit-transform:perspective(400px) rotateX(0deg);transform:perspective(400px) rotateX(0deg)}}@-webkit-keyframes flipInXBounce{from{opacity:0;-webkit-transform:perspective(400px) rotateX(90deg);transform:perspective(400px) rotateX(90deg)}40%{-webkit-transform:perspective(400px) rotateX(-10deg);transform:perspective(400px) rotateX(-10deg)}70%{-webkit-transform:perspective(400px) rotateX(10deg);transform:perspective(400px) rotateX(10deg)}to{opacity:1;-webkit-transform:perspective(400px) rotateX(0deg);transform:perspective(400px) rotateX(0deg)}}@keyframes flipInXBounce{from{opacity:0;-webkit-transform:perspective(400px) rotateX(90deg);transform:perspective(400px) rotateX(90deg)}40%{-webkit-transform:perspective(400px) rotateX(-10deg);transform:perspective(400px) rotateX(-10deg)}70%{-webkit-transform:perspective(400px) rotateX(10deg);transform:perspective(400px) rotateX(10deg)}to{opacity:1;-webkit-transform:perspective(400px) rotateX(0deg);transform:perspective(400px) rotateX(0deg)}}@-webkit-keyframes flipOutX{from{opacity:1;-webkit-transform:perspective(400px) rotateX(0deg);transform:perspective(400px) rotateX(0deg)}to{opacity:0;-webkit-transform:perspective(400px) rotateX(90deg);transform:perspective(400px) rotateX(90deg)}}@keyframes flipOutX{from{opacity:1;-webkit-transform:perspective(400px) rotateX(0deg);transform:perspective(400px) rotateX(0deg)}to{opacity:0;-webkit-transform:perspective(400px) rotateX(90deg);transform:perspective(400px) rotateX(90deg)}}.am-slide-top{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-slide-top.am-fade-and-slide-top-add,.am-slide-top.ng-hide-remove,.am-slide-top.ng-move{-webkit-animation-name:slideFromTop;animation-name:slideFromTop}.am-slide-top.am-fade-and-slide-top-remove,.am-slide-top.ng-hide{-webkit-animation-name:slideToTop;animation-name:slideToTop}.am-slide-top.ng-enter{visibility:hidden;-webkit-animation-name:slideFromTop;animation-name:slideFromTop}.am-slide-top.ng-enter.ng-enter-active{visibility:visible}.am-slide-top.ng-leave{-webkit-animation-name:slideToTop;animation-name:slideToTop}.am-slide-right{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-slide-right.am-fade-and-slide-right-add,.am-slide-right.ng-hide-remove,.am-slide-right.ng-move{-webkit-animation-name:slideFromRight;animation-name:slideFromRight}.am-slide-right.am-fade-and-slide-right-remove,.am-slide-right.ng-hide{-webkit-animation-name:slideToRight;animation-name:slideToRight}.am-slide-right.ng-enter{visibility:hidden;-webkit-animation-name:slideFromRight;animation-name:slideFromRight}.am-slide-right.ng-enter.ng-enter-active{visibility:visible}.am-slide-right.ng-leave{-webkit-animation-name:slideToRight;animation-name:slideToRight}.am-slide-bottom{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-slide-bottom.am-fade-and-slide-bottom-add,.am-slide-bottom.ng-hide-remove,.am-slide-bottom.ng-move{-webkit-animation-name:slideFromBottom;animation-name:slideFromBottom}.am-slide-bottom.am-fade-and-slide-bottom-remove,.am-slide-bottom.ng-hide{-webkit-animation-name:slideToBottom;animation-name:slideToBottom}.am-slide-bottom.ng-enter{visibility:hidden;-webkit-animation-name:slideFromBottom;animation-name:slideFromBottom}.am-slide-bottom.ng-enter.ng-enter-active{visibility:visible}.am-slide-bottom.ng-leave{-webkit-animation-name:slideToBottom;animation-name:slideToBottom}.am-slide-left{-webkit-animation-duration:.3s;animation-duration:.3s;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-fill-mode:backwards;animation-fill-mode:backwards}.am-slide-left.am-fade-and-slide-left-add,.am-slide-left.ng-hide-remove,.am-slide-left.ng-move{-webkit-animation-name:slideFromLeft;animation-name:slideFromLeft}.am-slide-left.am-fade-and-slide-left-remove,.am-slide-left.ng-hide{-webkit-animation-name:slideToLeft;animation-name:slideToLeft}.am-slide-left.ng-enter{visibility:hidden;-webkit-animation-name:slideFromLeft;animation-name:slideFromLeft}.am-slide-left.ng-enter.ng-enter-active{visibility:visible}.am-slide-left.ng-leave{-webkit-animation-name:slideToLeft;animation-name:slideToLeft}@-webkit-keyframes slideFromTop{from{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@keyframes slideFromTop{from{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@-webkit-keyframes slideToTop{to{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@keyframes slideToTop{to{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@-webkit-keyframes slideFromRight{from{-webkit-transform:translateX(100%);transform:translateX(100%)}}@keyframes slideFromRight{from{-webkit-transform:translateX(100%);transform:translateX(100%)}}@-webkit-keyframes slideToRight{to{-webkit-transform:translateX(100%);transform:translateX(100%)}}@keyframes slideToRight{to{-webkit-transform:translateX(100%);transform:translateX(100%)}}@-webkit-keyframes slideFromBottom{from{-webkit-transform:translateY(100%);transform:translateY(100%)}}@keyframes slideFromBottom{from{-webkit-transform:translateY(100%);transform:translateY(100%)}}@-webkit-keyframes slideToBottom{to{-webkit-transform:translateY(100%);transform:translateY(100%)}}@keyframes slideToBottom{to{-webkit-transform:translateY(100%);transform:translateY(100%)}}@-webkit-keyframes slideFromLeft{from{-webkit-transform:translateX(-100%);transform:translateX(-100%)}}@keyframes slideFromLeft{from{-webkit-transform:translateX(-100%);transform:translateX(-100%)}}@-webkit-keyframes slideToLeft{to{-webkit-transform:translateX(-100%);transform:translateX(-100%)}}@keyframes slideToLeft{to{-webkit-transform:translateX(-100%);transform:translateX(-100%)}} \ No newline at end of file diff --git a/static/lib/angular-strap.js b/static/lib/angular-strap.js new file mode 100644 index 000000000..44d86bac9 --- /dev/null +++ b/static/lib/angular-strap.js @@ -0,0 +1,3543 @@ +/** + * angular-strap + * @version v2.0.0-rc.4 - 2014-03-07 + * @link http://mgcrea.github.io/angular-strap + * @author Olivier Louvignes (olivier@mg-crea.com) + * @license MIT License, http://www.opensource.org/licenses/MIT + */ +(function (window, document, undefined) { + 'use strict'; + // Source: src/module.js + angular.module('mgcrea.ngStrap', [ + 'mgcrea.ngStrap.modal', + 'mgcrea.ngStrap.aside', + 'mgcrea.ngStrap.alert', + 'mgcrea.ngStrap.button', + 'mgcrea.ngStrap.select', + 'mgcrea.ngStrap.datepicker', + 'mgcrea.ngStrap.timepicker', + 'mgcrea.ngStrap.navbar', + 'mgcrea.ngStrap.tooltip', + 'mgcrea.ngStrap.popover', + 'mgcrea.ngStrap.dropdown', + 'mgcrea.ngStrap.typeahead', + 'mgcrea.ngStrap.scrollspy', + 'mgcrea.ngStrap.affix', + 'mgcrea.ngStrap.tab' + ]); + // Source: src/affix/affix.js + angular.module('mgcrea.ngStrap.affix', ['mgcrea.ngStrap.helpers.dimensions']).provider('$affix', function () { + var defaults = this.defaults = { offsetTop: 'auto' }; + this.$get = [ + '$window', + 'dimensions', + function ($window, dimensions) { + var bodyEl = angular.element($window.document.body); + function AffixFactory(element, config) { + var $affix = {}; + // Common vars + var options = angular.extend({}, defaults, config); + var targetEl = options.target; + // Initial private vars + var reset = 'affix affix-top affix-bottom', initialAffixTop = 0, initialOffsetTop = 0, affixed = null, unpin = null; + var parent = element.parent(); + // Options: custom parent + if (options.offsetParent) { + if (options.offsetParent.match(/^\d+$/)) { + for (var i = 0; i < options.offsetParent * 1 - 1; i++) { + parent = parent.parent(); + } + } else { + parent = angular.element(options.offsetParent); + } + } + // Options: offsets + var offsetTop = 0; + if (options.offsetTop) { + if (options.offsetTop === 'auto') { + options.offsetTop = '+0'; + } + if (options.offsetTop.match(/^[-+]\d+$/)) { + initialAffixTop -= options.offsetTop * 1; + if (options.offsetParent) { + offsetTop = dimensions.offset(parent[0]).top + options.offsetTop * 1; + } else { + offsetTop = dimensions.offset(element[0]).top - dimensions.css(element[0], 'marginTop', true) + options.offsetTop * 1; + } + } else { + offsetTop = options.offsetTop * 1; + } + } + var offsetBottom = 0; + if (options.offsetBottom) { + if (options.offsetParent && options.offsetBottom.match(/^[-+]\d+$/)) { + // add 1 pixel due to rounding problems... + offsetBottom = getScrollHeight() - (dimensions.offset(parent[0]).top + dimensions.height(parent[0])) + options.offsetBottom * 1 + 1; + } else { + offsetBottom = options.offsetBottom * 1; + } + } + $affix.init = function () { + initialOffsetTop = dimensions.offset(element[0]).top + initialAffixTop; + // Bind events + targetEl.on('scroll', this.checkPosition); + targetEl.on('click', this.checkPositionWithEventLoop); + // Both of these checkPosition() calls are necessary for the case where + // the user hits refresh after scrolling to the bottom of the page. + this.checkPosition(); + this.checkPositionWithEventLoop(); + }; + $affix.destroy = function () { + // Unbind events + targetEl.off('scroll', this.checkPosition); + targetEl.off('click', this.checkPositionWithEventLoop); + }; + $affix.checkPositionWithEventLoop = function () { + setTimeout(this.checkPosition, 1); + }; + $affix.checkPosition = function () { + // if (!this.$element.is(':visible')) return + var scrollTop = getScrollTop(); + var position = dimensions.offset(element[0]); + var elementHeight = dimensions.height(element[0]); + // Get required affix class according to position + var affix = getRequiredAffixClass(unpin, position, elementHeight); + // Did affix status changed this last check? + if (affixed === affix) + return; + affixed = affix; + // Add proper affix class + element.removeClass(reset).addClass('affix' + (affix !== 'middle' ? '-' + affix : '')); + if (affix === 'top') { + unpin = null; + element.css('position', options.offsetParent ? '' : 'relative'); + element.css('top', ''); + } else if (affix === 'bottom') { + if (options.offsetUnpin) { + unpin = -(options.offsetUnpin * 1); + } else { + // Calculate unpin threshold when affixed to bottom. + // Hopefully the browser scrolls pixel by pixel. + unpin = position.top - scrollTop; + } + element.css('position', options.offsetParent ? '' : 'relative'); + element.css('top', options.offsetParent ? '' : bodyEl[0].offsetHeight - offsetBottom - elementHeight - initialOffsetTop + 'px'); + } else { + // affix === 'middle' + unpin = null; + element.css('position', 'fixed'); + element.css('top', initialAffixTop + 'px'); + } + }; + // Private methods + function getRequiredAffixClass(unpin, position, elementHeight) { + var scrollTop = getScrollTop(); + var scrollHeight = getScrollHeight(); + if (scrollTop <= offsetTop) { + return 'top'; + } else if (unpin !== null && scrollTop + unpin <= position.top) { + return 'middle'; + } else if (offsetBottom !== null && position.top + elementHeight + initialAffixTop >= scrollHeight - offsetBottom) { + return 'bottom'; + } else { + return 'middle'; + } + } + function getScrollTop() { + return targetEl[0] === $window ? $window.pageYOffset : targetEl[0] === $window; + } + function getScrollHeight() { + return targetEl[0] === $window ? $window.document.body.scrollHeight : targetEl[0].scrollHeight; + } + $affix.init(); + return $affix; + } + return AffixFactory; + } + ]; + }).directive('bsAffix', [ + '$affix', + '$window', + function ($affix, $window) { + return { + restrict: 'EAC', + require: '^?bsAffixTarget', + link: function postLink(scope, element, attr, affixTarget) { + var options = { + scope: scope, + offsetTop: 'auto', + target: affixTarget ? affixTarget.$element : angular.element($window) + }; + angular.forEach([ + 'offsetTop', + 'offsetBottom', + 'offsetParent', + 'offsetUnpin' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + var affix = $affix(element, options); + scope.$on('$destroy', function () { + options = null; + affix = null; + }); + } + }; + } + ]).directive('bsAffixTarget', function () { + return { + controller: [ + '$element', + function ($element) { + this.$element = $element; + } + ] + }; + }); + // Source: src/alert/alert.js + // @BUG: following snippet won't compile correctly + // @TODO: submit issue to core + // ' ' + + angular.module('mgcrea.ngStrap.alert', []).provider('$alert', function () { + var defaults = this.defaults = { + animation: 'am-fade', + prefixClass: 'alert', + placement: null, + template: 'alert/alert.tpl.html', + container: false, + element: null, + backdrop: false, + keyboard: true, + show: true, + duration: false, + type: false + }; + this.$get = [ + '$modal', + '$timeout', + function ($modal, $timeout) { + function AlertFactory(config) { + var $alert = {}; + // Common vars + var options = angular.extend({}, defaults, config); + $alert = $modal(options); + // Support scope as string options [/*title, content, */type] + if (options.type) { + $alert.$scope.type = options.type; + } + // Support auto-close duration + var show = $alert.show; + if (options.duration) { + $alert.show = function () { + show(); + $timeout(function () { + $alert.hide(); + }, options.duration * 1000); + }; + } + return $alert; + } + return AlertFactory; + } + ]; + }).directive('bsAlert', [ + '$window', + '$location', + '$sce', + '$alert', + function ($window, $location, $sce, $alert) { + var requestAnimationFrame = $window.requestAnimationFrame || $window.setTimeout; + return { + restrict: 'EAC', + scope: true, + link: function postLink(scope, element, attr, transclusion) { + // Directive options + var options = { + scope: scope, + element: element, + show: false + }; + angular.forEach([ + 'template', + 'placement', + 'keyboard', + 'html', + 'container', + 'animation', + 'duration' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Support scope as data-attrs + angular.forEach([ + 'title', + 'content', + 'type' + ], function (key) { + attr[key] && attr.$observe(key, function (newValue, oldValue) { + scope[key] = $sce.trustAsHtml(newValue); + }); + }); + // Support scope as an object + attr.bsAlert && scope.$watch(attr.bsAlert, function (newValue, oldValue) { + if (angular.isObject(newValue)) { + angular.extend(scope, newValue); + } else { + scope.content = newValue; + } + }, true); + // Initialize alert + var alert = $alert(options); + // Trigger + element.on(attr.trigger || 'click', alert.toggle); + // Garbage collection + scope.$on('$destroy', function () { + alert.destroy(); + options = null; + alert = null; + }); + } + }; + } + ]); + // Source: src/aside/aside.js + angular.module('mgcrea.ngStrap.aside', ['mgcrea.ngStrap.modal']).provider('$aside', function () { + var defaults = this.defaults = { + animation: 'am-fade-and-slide-right', + prefixClass: 'aside', + placement: 'right', + template: 'aside/aside.tpl.html', + contentTemplate: false, + container: false, + element: null, + backdrop: true, + keyboard: true, + html: false, + show: true + }; + this.$get = [ + '$modal', + function ($modal) { + function AsideFactory(config) { + var $aside = {}; + // Common vars + var options = angular.extend({}, defaults, config); + $aside = $modal(options); + return $aside; + } + return AsideFactory; + } + ]; + }).directive('bsAside', [ + '$window', + '$location', + '$sce', + '$aside', + function ($window, $location, $sce, $aside) { + var requestAnimationFrame = $window.requestAnimationFrame || $window.setTimeout; + return { + restrict: 'EAC', + scope: true, + link: function postLink(scope, element, attr, transclusion) { + // Directive options + var options = { + scope: scope, + element: element, + show: false + }; + angular.forEach([ + 'template', + 'contentTemplate', + 'placement', + 'backdrop', + 'keyboard', + 'html', + 'container', + 'animation' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Support scope as data-attrs + angular.forEach([ + 'title', + 'content' + ], function (key) { + attr[key] && attr.$observe(key, function (newValue, oldValue) { + scope[key] = $sce.trustAsHtml(newValue); + }); + }); + // Support scope as an object + attr.bsAside && scope.$watch(attr.bsAside, function (newValue, oldValue) { + if (angular.isObject(newValue)) { + angular.extend(scope, newValue); + } else { + scope.content = newValue; + } + }, true); + // Initialize aside + var aside = $aside(options); + // Trigger + element.on(attr.trigger || 'click', aside.toggle); + // Garbage collection + scope.$on('$destroy', function () { + aside.destroy(); + options = null; + aside = null; + }); + } + }; + } + ]); + // Source: src/button/button.js + angular.module('mgcrea.ngStrap.button', ['ngAnimate']).provider('$button', function () { + var defaults = this.defaults = { + activeClass: 'active', + toggleEvent: 'click' + }; + this.$get = function () { + return { defaults: defaults }; + }; + }).directive('bsCheckboxGroup', function () { + return { + restrict: 'A', + require: 'ngModel', + compile: function postLink(element, attr) { + element.attr('data-toggle', 'buttons'); + element.removeAttr('ng-model'); + var children = element[0].querySelectorAll('input[type="checkbox"]'); + angular.forEach(children, function (child) { + var childEl = angular.element(child); + childEl.attr('bs-checkbox', ''); + childEl.attr('ng-model', attr.ngModel + '.' + childEl.attr('value')); + }); + } + }; + }).directive('bsCheckbox', [ + '$button', + '$$animateReflow', + function ($button, $$animateReflow) { + var defaults = $button.defaults; + var constantValueRegExp = /^(true|false|\d+)$/; + return { + restrict: 'A', + require: 'ngModel', + link: function postLink(scope, element, attr, controller) { + var options = defaults; + // Support label > input[type="checkbox"] + var isInput = element[0].nodeName === 'INPUT'; + var activeElement = isInput ? element.parent() : element; + var trueValue = angular.isDefined(attr.trueValue) ? attr.trueValue : true; + if (constantValueRegExp.test(attr.trueValue)) { + trueValue = scope.$eval(attr.trueValue); + } + var falseValue = angular.isDefined(attr.falseValue) ? attr.falseValue : false; + if (constantValueRegExp.test(attr.falseValue)) { + falseValue = scope.$eval(attr.falseValue); + } + // Parse exotic values + var hasExoticValues = typeof trueValue !== 'boolean' || typeof falseValue !== 'boolean'; + if (hasExoticValues) { + controller.$parsers.push(function (viewValue) { + // console.warn('$parser', element.attr('ng-model'), 'viewValue', viewValue); + return viewValue ? trueValue : falseValue; + }); + // Fix rendering for exotic values + scope.$watch(attr.ngModel, function (newValue, oldValue) { + controller.$render(); + }); + } + // model -> view + controller.$render = function () { + // console.warn('$render', element.attr('ng-model'), 'controller.$modelValue', typeof controller.$modelValue, controller.$modelValue, 'controller.$viewValue', typeof controller.$viewValue, controller.$viewValue); + var isActive = angular.equals(controller.$modelValue, trueValue); + $$animateReflow(function () { + if (isInput) + element[0].checked = isActive; + activeElement.toggleClass(options.activeClass, isActive); + }); + }; + // view -> model + element.bind(options.toggleEvent, function () { + scope.$apply(function () { + // console.warn('!click', element.attr('ng-model'), 'controller.$viewValue', typeof controller.$viewValue, controller.$viewValue, 'controller.$modelValue', typeof controller.$modelValue, controller.$modelValue); + if (!isInput) { + controller.$setViewValue(!activeElement.hasClass('active')); + } + if (!hasExoticValues) { + controller.$render(); + } + }); + }); + } + }; + } + ]).directive('bsRadioGroup', function () { + return { + restrict: 'A', + require: 'ngModel', + compile: function postLink(element, attr) { + element.attr('data-toggle', 'buttons'); + element.removeAttr('ng-model'); + var children = element[0].querySelectorAll('input[type="radio"]'); + angular.forEach(children, function (child) { + angular.element(child).attr('bs-radio', ''); + angular.element(child).attr('ng-model', attr.ngModel); + }); + } + }; + }).directive('bsRadio', [ + '$button', + '$$animateReflow', + function ($button, $$animateReflow) { + var defaults = $button.defaults; + var constantValueRegExp = /^(true|false|\d+)$/; + return { + restrict: 'A', + require: 'ngModel', + link: function postLink(scope, element, attr, controller) { + var options = defaults; + // Support `label > input[type="radio"]` markup + var isInput = element[0].nodeName === 'INPUT'; + var activeElement = isInput ? element.parent() : element; + var value = constantValueRegExp.test(attr.value) ? scope.$eval(attr.value) : attr.value; + // model -> view + controller.$render = function () { + // console.warn('$render', element.attr('value'), 'controller.$modelValue', typeof controller.$modelValue, controller.$modelValue, 'controller.$viewValue', typeof controller.$viewValue, controller.$viewValue); + var isActive = angular.equals(controller.$modelValue, value); + $$animateReflow(function () { + if (isInput) + element[0].checked = isActive; + activeElement.toggleClass(options.activeClass, isActive); + }); + }; + // view -> model + element.bind(options.toggleEvent, function () { + scope.$apply(function () { + // console.warn('!click', element.attr('value'), 'controller.$viewValue', typeof controller.$viewValue, controller.$viewValue, 'controller.$modelValue', typeof controller.$modelValue, controller.$modelValue); + controller.$setViewValue(value); + controller.$render(); + }); + }); + } + }; + } + ]); + // Source: src/datepicker/datepicker.js + angular.module('mgcrea.ngStrap.datepicker', [ + 'mgcrea.ngStrap.helpers.dateParser', + 'mgcrea.ngStrap.tooltip' + ]).provider('$datepicker', function () { + var defaults = this.defaults = { + animation: 'am-fade', + prefixClass: 'datepicker', + placement: 'bottom-left', + template: 'datepicker/datepicker.tpl.html', + trigger: 'focus', + container: false, + keyboard: true, + html: false, + delay: 0, + useNative: false, + dateType: 'date', + dateFormat: 'shortDate', + strictFormat: false, + autoclose: false, + minDate: -Infinity, + maxDate: +Infinity, + startView: 0, + minView: 0, + startWeek: 0 + }; + this.$get = [ + '$window', + '$document', + '$rootScope', + '$sce', + '$locale', + 'dateFilter', + 'datepickerViews', + '$tooltip', + function ($window, $document, $rootScope, $sce, $locale, dateFilter, datepickerViews, $tooltip) { + var bodyEl = angular.element($window.document.body); + var isTouch = 'createTouch' in $window.document; + var isNative = /(ip(a|o)d|iphone|android)/gi.test($window.navigator.userAgent); + if (!defaults.lang) + defaults.lang = $locale.id; + function DatepickerFactory(element, controller, config) { + var $datepicker = $tooltip(element, angular.extend({}, defaults, config)); + var parentScope = config.scope; + var options = $datepicker.$options; + var scope = $datepicker.$scope; + if (options.startView) + options.startView -= options.minView; + // View vars + var pickerViews = datepickerViews($datepicker); + $datepicker.$views = pickerViews.views; + var viewDate = pickerViews.viewDate; + scope.$mode = options.startView; + var $picker = $datepicker.$views[scope.$mode]; + // Scope methods + scope.$select = function (date) { + $datepicker.select(date); + }; + scope.$selectPane = function (value) { + $datepicker.$selectPane(value); + }; + scope.$toggleMode = function () { + $datepicker.setMode((scope.$mode + 1) % $datepicker.$views.length); + }; + // Public methods + $datepicker.update = function (date) { + // console.warn('$datepicker.update() newValue=%o', date); + if (angular.isDate(date) && !isNaN(date.getTime())) { + $datepicker.$date = date; + $picker.update.call($picker, date); + } + // Build only if pristine + $datepicker.$build(true); + }; + $datepicker.select = function (date, keep) { + // console.warn('$datepicker.select', date, scope.$mode); + if (!angular.isDate(controller.$dateValue)) + controller.$dateValue = new Date(date); + controller.$dateValue.setFullYear(date.getFullYear(), date.getMonth(), date.getDate()); + if (!scope.$mode || keep) { + controller.$setViewValue(controller.$dateValue); + controller.$render(); + if (options.autoclose && !keep) { + $datepicker.hide(true); + } + } else { + angular.extend(viewDate, { + year: date.getFullYear(), + month: date.getMonth(), + date: date.getDate() + }); + $datepicker.setMode(scope.$mode - 1); + $datepicker.$build(); + } + }; + $datepicker.setMode = function (mode) { + // console.warn('$datepicker.setMode', mode); + scope.$mode = mode; + $picker = $datepicker.$views[scope.$mode]; + $datepicker.$build(); + }; + // Protected methods + $datepicker.$build = function (pristine) { + // console.warn('$datepicker.$build() viewDate=%o', viewDate); + if (pristine === true && $picker.built) + return; + if (pristine === false && !$picker.built) + return; + $picker.build.call($picker); + }; + $datepicker.$updateSelected = function () { + for (var i = 0, l = scope.rows.length; i < l; i++) { + angular.forEach(scope.rows[i], updateSelected); + } + }; + $datepicker.$isSelected = function (date) { + return $picker.isSelected(date); + }; + $datepicker.$selectPane = function (value) { + var steps = $picker.steps; + var targetDate = new Date(Date.UTC(viewDate.year + (steps.year || 0) * value, viewDate.month + (steps.month || 0) * value, viewDate.date + (steps.day || 0) * value)); + angular.extend(viewDate, { + year: targetDate.getUTCFullYear(), + month: targetDate.getUTCMonth(), + date: targetDate.getUTCDate() + }); + $datepicker.$build(); + }; + $datepicker.$onMouseDown = function (evt) { + // Prevent blur on mousedown on .dropdown-menu + evt.preventDefault(); + evt.stopPropagation(); + // Emulate click for mobile devices + if (isTouch) { + var targetEl = angular.element(evt.target); + if (targetEl[0].nodeName.toLowerCase() !== 'button') { + targetEl = targetEl.parent(); + } + targetEl.triggerHandler('click'); + } + }; + $datepicker.$onKeyDown = function (evt) { + if (!/(38|37|39|40|13)/.test(evt.keyCode) || evt.shiftKey || evt.altKey) + return; + evt.preventDefault(); + evt.stopPropagation(); + if (evt.keyCode === 13) { + if (!scope.$mode) { + return $datepicker.hide(true); + } else { + return scope.$apply(function () { + $datepicker.setMode(scope.$mode - 1); + }); + } + } + // Navigate with keyboard + $picker.onKeyDown(evt); + parentScope.$digest(); + }; + // Private + function updateSelected(el) { + el.selected = $datepicker.$isSelected(el.date); + } + function focusElement() { + element[0].focus(); + } + // Overrides + var _init = $datepicker.init; + $datepicker.init = function () { + if (isNative && options.useNative) { + element.prop('type', 'date'); + element.css('-webkit-appearance', 'textfield'); + return; + } else if (isTouch) { + element.prop('type', 'text'); + element.attr('readonly', 'true'); + element.on('click', focusElement); + } + _init(); + }; + var _destroy = $datepicker.destroy; + $datepicker.destroy = function () { + if (isNative && options.useNative) { + element.off('click', focusElement); + } + _destroy(); + }; + var _show = $datepicker.show; + $datepicker.show = function () { + _show(); + setTimeout(function () { + $datepicker.$element.on(isTouch ? 'touchstart' : 'mousedown', $datepicker.$onMouseDown); + if (options.keyboard) { + element.on('keydown', $datepicker.$onKeyDown); + } + }); + }; + var _hide = $datepicker.hide; + $datepicker.hide = function (blur) { + $datepicker.$element.off(isTouch ? 'touchstart' : 'mousedown', $datepicker.$onMouseDown); + if (options.keyboard) { + element.off('keydown', $datepicker.$onKeyDown); + } + _hide(blur); + }; + return $datepicker; + } + DatepickerFactory.defaults = defaults; + return DatepickerFactory; + } + ]; + }).directive('bsDatepicker', [ + '$window', + '$parse', + '$q', + '$locale', + 'dateFilter', + '$datepicker', + '$dateParser', + '$timeout', + function ($window, $parse, $q, $locale, dateFilter, $datepicker, $dateParser, $timeout) { + var defaults = $datepicker.defaults; + var isNative = /(ip(a|o)d|iphone|android)/gi.test($window.navigator.userAgent); + var requestAnimationFrame = $window.requestAnimationFrame || $window.setTimeout; + return { + restrict: 'EAC', + require: 'ngModel', + link: function postLink(scope, element, attr, controller) { + // Directive options + var options = { + scope: scope, + controller: controller + }; + angular.forEach([ + 'placement', + 'container', + 'delay', + 'trigger', + 'keyboard', + 'html', + 'animation', + 'template', + 'autoclose', + 'dateType', + 'dateFormat', + 'strictFormat', + 'startWeek', + 'useNative', + 'lang', + 'startView', + 'minView' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Initialize datepicker + if (isNative && options.useNative) + options.dateFormat = 'yyyy-MM-dd'; + var datepicker = $datepicker(element, controller, options); + options = datepicker.$options; + // Observe attributes for changes + angular.forEach([ + 'minDate', + 'maxDate' + ], function (key) { + // console.warn('attr.$observe(%s)', key, attr[key]); + angular.isDefined(attr[key]) && attr.$observe(key, function (newValue) { + // console.warn('attr.$observe(%s)=%o', key, newValue); + if (newValue === 'today') { + var today = new Date(); + datepicker.$options[key] = +new Date(today.getFullYear(), today.getMonth(), today.getDate() + (key === 'maxDate' ? 1 : 0), 0, 0, 0, key === 'minDate' ? 0 : -1); + } else if (angular.isString(newValue) && newValue.match(/^".+"$/)) { + datepicker.$options[key] = +new Date(newValue.substr(1, newValue.length - 2)); + } else { + datepicker.$options[key] = +new Date(newValue); + } + // console.warn(angular.isDate(newValue), newValue); + // Build only if dirty + !isNaN(datepicker.$options[key]) && datepicker.$build(false); + }); + }); + // Watch model for changes + scope.$watch(attr.ngModel, function (newValue, oldValue) { + datepicker.update(controller.$dateValue); + }, true); + var dateParser = $dateParser({ + format: options.dateFormat, + lang: options.lang, + strict: options.strictFormat + }); + // viewValue -> $parsers -> modelValue + controller.$parsers.unshift(function (viewValue) { + // console.warn('$parser("%s"): viewValue=%o', element.attr('ng-model'), viewValue); + // Null values should correctly reset the model value & validity + if (!viewValue) { + controller.$setValidity('date', true); + return; + } + var parsedDate = dateParser.parse(viewValue, controller.$dateValue); + if (!parsedDate || isNaN(parsedDate.getTime())) { + controller.$setValidity('date', false); + } else { + var isValid = parsedDate.getTime() >= options.minDate && parsedDate.getTime() <= options.maxDate; + controller.$setValidity('date', isValid); + // Only update the model when we have a valid date + if (isValid) + controller.$dateValue = parsedDate; + } + if (options.dateType === 'string') { + return dateFilter(viewValue, options.dateFormat); + } else if (options.dateType === 'number') { + return controller.$dateValue.getTime(); + } else if (options.dateType === 'iso') { + return controller.$dateValue.toISOString(); + } else { + return new Date(controller.$dateValue); + } + }); + // modelValue -> $formatters -> viewValue + controller.$formatters.push(function (modelValue) { + // console.warn('$formatter("%s"): modelValue=%o (%o)', element.attr('ng-model'), modelValue, typeof modelValue); + if (angular.isUndefined(modelValue) || modelValue === null) + return; + var date = angular.isDate(modelValue) ? modelValue : new Date(modelValue); + // Setup default value? + // if(isNaN(date.getTime())) { + // var today = new Date(); + // date = new Date(today.getFullYear(), today.getMonth(), today.getDate(), 0, 0, 0, 0); + // } + controller.$dateValue = date; + return controller.$dateValue; + }); + // viewValue -> element + controller.$render = function () { + // console.warn('$render("%s"): viewValue=%o', element.attr('ng-model'), controller.$viewValue); + element.val(!controller.$dateValue || isNaN(controller.$dateValue.getTime()) ? '' : dateFilter(controller.$dateValue, options.dateFormat)); + }; + // Garbage collection + scope.$on('$destroy', function () { + datepicker.destroy(); + options = null; + datepicker = null; + }); + } + }; + } + ]).provider('datepickerViews', function () { + var defaults = this.defaults = { + dayFormat: 'dd', + daySplit: 7 + }; + // Split array into smaller arrays + function split(arr, size) { + var arrays = []; + while (arr.length > 0) { + arrays.push(arr.splice(0, size)); + } + return arrays; + } + this.$get = [ + '$locale', + '$sce', + 'dateFilter', + function ($locale, $sce, dateFilter) { + return function (picker) { + var scope = picker.$scope; + var options = picker.$options; + var weekDaysMin = $locale.DATETIME_FORMATS.SHORTDAY; + var weekDaysLabels = weekDaysMin.slice(options.startWeek).concat(weekDaysMin.slice(0, options.startWeek)); + var weekDaysLabelsHtml = $sce.trustAsHtml('' + weekDaysLabels.join('') + ''); + var startDate = picker.$date || new Date(); + var viewDate = { + year: startDate.getFullYear(), + month: startDate.getMonth(), + date: startDate.getDate() + }; + var timezoneOffset = startDate.getTimezoneOffset() * 60000; + var views = [ + { + format: 'dd', + split: 7, + steps: { month: 1 }, + update: function (date, force) { + if (!this.built || force || date.getFullYear() !== viewDate.year || date.getMonth() !== viewDate.month) { + angular.extend(viewDate, { + year: picker.$date.getFullYear(), + month: picker.$date.getMonth(), + date: picker.$date.getDate() + }); + picker.$build(); + } else if (date.getDate() !== viewDate.date) { + viewDate.date = picker.$date.getDate(); + picker.$updateSelected(); + } + }, + build: function () { + var firstDayOfMonth = new Date(viewDate.year, viewDate.month, 1); + var firstDate = new Date(+firstDayOfMonth - (firstDayOfMonth.getDay() - options.startWeek) * 86400000); + var days = [], day; + for (var i = 0; i < 42; i++) { + // < 7 * 6 + day = new Date(firstDate.getFullYear(), firstDate.getMonth(), firstDate.getDate() + i); + days.push({ + date: day, + label: dateFilter(day, this.format), + selected: picker.$date && this.isSelected(day), + muted: day.getMonth() !== viewDate.month, + disabled: this.isDisabled(day) + }); + } + scope.title = dateFilter(firstDayOfMonth, 'MMMM yyyy'); + scope.labels = weekDaysLabelsHtml; + scope.rows = split(days, this.split); + this.built = true; + }, + isSelected: function (date) { + return picker.$date && date.getFullYear() === picker.$date.getFullYear() && date.getMonth() === picker.$date.getMonth() && date.getDate() === picker.$date.getDate(); + }, + isDisabled: function (date) { + return date.getTime() < options.minDate || date.getTime() > options.maxDate; + }, + onKeyDown: function (evt) { + var actualTime = picker.$date.getTime(); + if (evt.keyCode === 37) + picker.select(new Date(actualTime - 1 * 86400000), true); + else if (evt.keyCode === 38) + picker.select(new Date(actualTime - 7 * 86400000), true); + else if (evt.keyCode === 39) + picker.select(new Date(actualTime + 1 * 86400000), true); + else if (evt.keyCode === 40) + picker.select(new Date(actualTime + 7 * 86400000), true); + } + }, + { + name: 'month', + format: 'MMM', + split: 4, + steps: { year: 1 }, + update: function (date, force) { + if (!this.built || date.getFullYear() !== viewDate.year) { + angular.extend(viewDate, { + year: picker.$date.getFullYear(), + month: picker.$date.getMonth(), + date: picker.$date.getDate() + }); + picker.$build(); + } else if (date.getMonth() !== viewDate.month) { + angular.extend(viewDate, { + month: picker.$date.getMonth(), + date: picker.$date.getDate() + }); + picker.$updateSelected(); + } + }, + build: function () { + var firstMonth = new Date(viewDate.year, 0, 1); + var months = [], month; + for (var i = 0; i < 12; i++) { + month = new Date(viewDate.year, i, 1); + months.push({ + date: month, + label: dateFilter(month, this.format), + selected: picker.$isSelected(month), + disabled: this.isDisabled(month) + }); + } + scope.title = dateFilter(month, 'yyyy'); + scope.labels = false; + scope.rows = split(months, this.split); + this.built = true; + }, + isSelected: function (date) { + return picker.$date && date.getFullYear() === picker.$date.getFullYear() && date.getMonth() === picker.$date.getMonth(); + }, + isDisabled: function (date) { + var lastDate = +new Date(date.getFullYear(), date.getMonth() + 1, 0); + return lastDate < options.minDate || date.getTime() > options.maxDate; + }, + onKeyDown: function (evt) { + var actualMonth = picker.$date.getMonth(); + if (evt.keyCode === 37) + picker.select(picker.$date.setMonth(actualMonth - 1), true); + else if (evt.keyCode === 38) + picker.select(picker.$date.setMonth(actualMonth - 4), true); + else if (evt.keyCode === 39) + picker.select(picker.$date.setMonth(actualMonth + 1), true); + else if (evt.keyCode === 40) + picker.select(picker.$date.setMonth(actualMonth + 4), true); + } + }, + { + name: 'year', + format: 'yyyy', + split: 4, + steps: { year: 12 }, + update: function (date, force) { + if (!this.built || force || parseInt(date.getFullYear() / 20, 10) !== parseInt(viewDate.year / 20, 10)) { + angular.extend(viewDate, { + year: picker.$date.getFullYear(), + month: picker.$date.getMonth(), + date: picker.$date.getDate() + }); + picker.$build(); + } else if (date.getFullYear() !== viewDate.year) { + angular.extend(viewDate, { + year: picker.$date.getFullYear(), + month: picker.$date.getMonth(), + date: picker.$date.getDate() + }); + picker.$updateSelected(); + } + }, + build: function () { + var firstYear = viewDate.year - viewDate.year % (this.split * 3); + var years = [], year; + for (var i = 0; i < 12; i++) { + year = new Date(firstYear + i, 0, 1); + years.push({ + date: year, + label: dateFilter(year, this.format), + selected: picker.$isSelected(year), + disabled: this.isDisabled(year) + }); + } + scope.title = years[0].label + '-' + years[years.length - 1].label; + scope.labels = false; + scope.rows = split(years, this.split); + this.built = true; + }, + isSelected: function (date) { + return picker.$date && date.getFullYear() === picker.$date.getFullYear(); + }, + isDisabled: function (date) { + var lastDate = +new Date(date.getFullYear() + 1, 0, 0); + return lastDate < options.minDate || date.getTime() > options.maxDate; + }, + onKeyDown: function (evt) { + var actualYear = picker.$date.getFullYear(); + if (evt.keyCode === 37) + picker.select(picker.$date.setYear(actualYear - 1), true); + else if (evt.keyCode === 38) + picker.select(picker.$date.setYear(actualYear - 4), true); + else if (evt.keyCode === 39) + picker.select(picker.$date.setYear(actualYear + 1), true); + else if (evt.keyCode === 40) + picker.select(picker.$date.setYear(actualYear + 4), true); + } + } + ]; + return { + views: options.minView ? Array.prototype.slice.call(views, options.minView) : views, + viewDate: viewDate + }; + }; + } + ]; + }); + // Source: src/dropdown/dropdown.js + angular.module('mgcrea.ngStrap.dropdown', ['mgcrea.ngStrap.tooltip']).provider('$dropdown', function () { + var defaults = this.defaults = { + animation: 'am-fade', + prefixClass: 'dropdown', + placement: 'bottom-left', + template: 'dropdown/dropdown.tpl.html', + trigger: 'click', + container: false, + keyboard: true, + html: false, + delay: 0 + }; + this.$get = [ + '$window', + '$rootScope', + '$tooltip', + function ($window, $rootScope, $tooltip) { + var bodyEl = angular.element($window.document.body); + var matchesSelector = Element.prototype.matchesSelector || Element.prototype.webkitMatchesSelector || Element.prototype.mozMatchesSelector || Element.prototype.msMatchesSelector || Element.prototype.oMatchesSelector; + function DropdownFactory(element, config) { + var $dropdown = {}; + // Common vars + var options = angular.extend({}, defaults, config); + var scope = $dropdown.$scope = options.scope && options.scope.$new() || $rootScope.$new(); + $dropdown = $tooltip(element, options); + // Protected methods + $dropdown.$onKeyDown = function (evt) { + if (!/(38|40)/.test(evt.keyCode)) + return; + evt.preventDefault(); + evt.stopPropagation(); + // Retrieve focused index + var items = angular.element($dropdown.$element[0].querySelectorAll('li:not(.divider) a')); + if (!items.length) + return; + var index; + angular.forEach(items, function (el, i) { + if (matchesSelector && matchesSelector.call(el, ':focus')) + index = i; + }); + // Navigate with keyboard + if (evt.keyCode === 38 && index > 0) + index--; + else if (evt.keyCode === 40 && index < items.length - 1) + index++; + else if (angular.isUndefined(index)) + index = 0; + items.eq(index)[0].focus(); + }; + // Overrides + var show = $dropdown.show; + $dropdown.show = function () { + show(); + setTimeout(function () { + options.keyboard && $dropdown.$element.on('keydown', $dropdown.$onKeyDown); + bodyEl.on('click', onBodyClick); + }); + }; + var hide = $dropdown.hide; + $dropdown.hide = function () { + options.keyboard && $dropdown.$element.off('keydown', $dropdown.$onKeyDown); + bodyEl.off('click', onBodyClick); + hide(); + }; + // Private functions + function onBodyClick(evt) { + if (evt.target === element[0]) + return; + return evt.target !== element[0] && $dropdown.hide(); + } + return $dropdown; + } + return DropdownFactory; + } + ]; + }).directive('bsDropdown', [ + '$window', + '$location', + '$sce', + '$dropdown', + function ($window, $location, $sce, $dropdown) { + return { + restrict: 'EAC', + scope: true, + link: function postLink(scope, element, attr, transclusion) { + // Directive options + var options = { scope: scope }; + angular.forEach([ + 'placement', + 'container', + 'delay', + 'trigger', + 'keyboard', + 'html', + 'animation', + 'template' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Support scope as an object + attr.bsDropdown && scope.$watch(attr.bsDropdown, function (newValue, oldValue) { + scope.content = newValue; + }, true); + // Initialize dropdown + var dropdown = $dropdown(element, options); + // Garbage collection + scope.$on('$destroy', function () { + dropdown.destroy(); + options = null; + dropdown = null; + }); + } + }; + } + ]); + // Source: src/helpers/date-parser.js + angular.module('mgcrea.ngStrap.helpers.dateParser', []).provider('$dateParser', [ + '$localeProvider', + function ($localeProvider) { + var proto = Date.prototype; + function isNumeric(n) { + return !isNaN(parseFloat(n)) && isFinite(n); + } + var defaults = this.defaults = { + format: 'shortDate', + strict: false + }; + this.$get = [ + '$locale', + function ($locale) { + var DateParserFactory = function (config) { + var options = angular.extend({}, defaults, config); + var $dateParser = {}; + var regExpMap = { + 'sss': '[0-9]{3}', + 'ss': '[0-5][0-9]', + 's': options.strict ? '[1-5]?[0-9]' : '[0-5][0-9]', + 'mm': '[0-5][0-9]', + 'm': options.strict ? '[1-5]?[0-9]' : '[0-5][0-9]', + 'HH': '[01][0-9]|2[0-3]', + 'H': options.strict ? '[0][1-9]|[1][012]' : '[01][0-9]|2[0-3]', + 'hh': '[0][1-9]|[1][012]', + 'h': options.strict ? '[1-9]|[1][012]' : '[0]?[1-9]|[1][012]', + 'a': 'AM|PM', + 'EEEE': $locale.DATETIME_FORMATS.DAY.join('|'), + 'EEE': $locale.DATETIME_FORMATS.SHORTDAY.join('|'), + 'dd': '[0-2][0-9]{1}|[3][01]{1}', + 'd': options.strict ? '[1-2]?[0-9]{1}|[3][01]{1}' : '[0-2][0-9]{1}|[3][01]{1}', + 'MMMM': $locale.DATETIME_FORMATS.MONTH.join('|'), + 'MMM': $locale.DATETIME_FORMATS.SHORTMONTH.join('|'), + 'MM': '[0][1-9]|[1][012]', + 'M': options.strict ? '[1-9]|[1][012]' : '[0][1-9]|[1][012]', + 'yyyy': '(?:(?:[1]{1}[0-9]{1}[0-9]{1}[0-9]{1})|(?:[2]{1}[0-9]{3}))(?![[0-9]])', + 'yy': '(?:(?:[0-9]{1}[0-9]{1}))(?![[0-9]])' + }; + var setFnMap = { + 'sss': proto.setMilliseconds, + 'ss': proto.setSeconds, + 's': proto.setSeconds, + 'mm': proto.setMinutes, + 'm': proto.setMinutes, + 'HH': proto.setHours, + 'H': proto.setHours, + 'hh': proto.setHours, + 'h': proto.setHours, + 'dd': proto.setDate, + 'd': proto.setDate, + 'a': function (value) { + var hours = this.getHours(); + return this.setHours(value.match(/pm/i) ? hours + 12 : hours); + }, + 'MMMM': function (value) { + return this.setMonth($locale.DATETIME_FORMATS.MONTH.indexOf(value)); + }, + 'MMM': function (value) { + return this.setMonth($locale.DATETIME_FORMATS.SHORTMONTH.indexOf(value)); + }, + 'MM': function (value) { + return this.setMonth(1 * value - 1); + }, + 'M': function (value) { + return this.setMonth(1 * value - 1); + }, + 'yyyy': proto.setFullYear, + 'yy': function (value) { + return this.setFullYear(2000 + 1 * value); + }, + 'y': proto.setFullYear + }; + var regex, setMap; + $dateParser.init = function () { + $dateParser.$format = $locale.DATETIME_FORMATS[options.format] || options.format; + regex = regExpForFormat($dateParser.$format); + setMap = setMapForFormat($dateParser.$format); + }; + $dateParser.isValid = function (date) { + if (angular.isDate(date)) + return !isNaN(date.getTime()); + return regex.test(date); + }; + $dateParser.parse = function (value, baseDate) { + if (angular.isDate(value)) + return value; + var matches = regex.exec(value); + if (!matches) + return false; + var date = baseDate || new Date(0); + for (var i = 0; i < matches.length - 1; i++) { + setMap[i] && setMap[i].call(date, matches[i + 1]); + } + return date; + }; + // Private functions + function setMapForFormat(format) { + var keys = Object.keys(setFnMap), i; + var map = [], sortedMap = []; + // Map to setFn + var clonedFormat = format; + for (i = 0; i < keys.length; i++) { + if (format.split(keys[i]).length > 1) { + var index = clonedFormat.search(keys[i]); + format = format.split(keys[i]).join(''); + if (setFnMap[keys[i]]) + map[index] = setFnMap[keys[i]]; + } + } + // Sort result map + angular.forEach(map, function (v) { + sortedMap.push(v); + }); + return sortedMap; + } + function escapeReservedSymbols(text) { + return text.replace(/\//g, '[\\/]').replace('/-/g', '[-]').replace(/\./g, '[.]').replace(/\\s/g, '[\\s]'); + } + function regExpForFormat(format) { + var keys = Object.keys(regExpMap), i; + var re = format; + // Abstract replaces to avoid collisions + for (i = 0; i < keys.length; i++) { + re = re.split(keys[i]).join('${' + i + '}'); + } + // Replace abstracted values + for (i = 0; i < keys.length; i++) { + re = re.split('${' + i + '}').join('(' + regExpMap[keys[i]] + ')'); + } + format = escapeReservedSymbols(format); + return new RegExp('^' + re + '$', ['i']); + } + $dateParser.init(); + return $dateParser; + }; + return DateParserFactory; + } + ]; + } + ]); + // Source: src/helpers/debounce.js + angular.module('mgcrea.ngStrap.helpers.debounce', []).constant('debounce', function (func, wait, immediate) { + var timeout, args, context, timestamp, result; + return function () { + context = this; + args = arguments; + timestamp = new Date(); + var later = function () { + var last = new Date() - timestamp; + if (last < wait) { + timeout = setTimeout(later, wait - last); + } else { + timeout = null; + if (!immediate) + result = func.apply(context, args); + } + }; + var callNow = immediate && !timeout; + if (!timeout) { + timeout = setTimeout(later, wait); + } + if (callNow) + result = func.apply(context, args); + return result; + }; + }).constant('throttle', function (func, wait, options) { + var context, args, result; + var timeout = null; + var previous = 0; + options || (options = {}); + var later = function () { + previous = options.leading === false ? 0 : new Date(); + timeout = null; + result = func.apply(context, args); + }; + return function () { + var now = new Date(); + if (!previous && options.leading === false) + previous = now; + var remaining = wait - (now - previous); + context = this; + args = arguments; + if (remaining <= 0) { + clearTimeout(timeout); + timeout = null; + previous = now; + result = func.apply(context, args); + } else if (!timeout && options.trailing !== false) { + timeout = setTimeout(later, remaining); + } + return result; + }; + }); + // Source: src/helpers/dimensions.js + angular.module('mgcrea.ngStrap.helpers.dimensions', []).factory('dimensions', [ + '$document', + '$window', + function ($document, $window) { + var jqLite = angular.element; + var fn = {}; + /** + * Test the element nodeName + * @param element + * @param name + */ + var nodeName = fn.nodeName = function (element, name) { + return element.nodeName && element.nodeName.toLowerCase() === name.toLowerCase(); + }; + /** + * Returns the element computed style + * @param element + * @param prop + * @param extra + */ + fn.css = function (element, prop, extra) { + var value; + if (element.currentStyle) { + //IE + value = element.currentStyle[prop]; + } else if (window.getComputedStyle) { + value = window.getComputedStyle(element)[prop]; + } else { + value = element.style[prop]; + } + return extra === true ? parseFloat(value) || 0 : value; + }; + /** + * Provides read-only equivalent of jQuery's offset function: + * @required-by bootstrap-tooltip, bootstrap-affix + * @url http://api.jquery.com/offset/ + * @param element + */ + fn.offset = function (element) { + var boxRect = element.getBoundingClientRect(); + var docElement = element.ownerDocument; + return { + width: element.offsetWidth, + height: element.offsetHeight, + top: boxRect.top + (window.pageYOffset || docElement.documentElement.scrollTop) - (docElement.documentElement.clientTop || 0), + left: boxRect.left + (window.pageXOffset || docElement.documentElement.scrollLeft) - (docElement.documentElement.clientLeft || 0) + }; + }; + /** + * Provides read-only equivalent of jQuery's position function + * @required-by bootstrap-tooltip, bootstrap-affix + * @url http://api.jquery.com/offset/ + * @param element + */ + fn.position = function (element) { + var offsetParentRect = { + top: 0, + left: 0 + }, offsetParentElement, offset; + // Fixed elements are offset from window (parentOffset = {top:0, left: 0}, because it is it's only offset parent + if (fn.css(element, 'position') === 'fixed') { + // We assume that getBoundingClientRect is available when computed position is fixed + offset = element.getBoundingClientRect(); + } else { + // Get *real* offsetParentElement + offsetParentElement = offsetParent(element); + offset = fn.offset(element); + // Get correct offsets + offset = fn.offset(element); + if (!nodeName(offsetParentElement, 'html')) { + offsetParentRect = fn.offset(offsetParentElement); + } + // Add offsetParent borders + offsetParentRect.top += fn.css(offsetParentElement, 'borderTopWidth', true); + offsetParentRect.left += fn.css(offsetParentElement, 'borderLeftWidth', true); + } + // Subtract parent offsets and element margins + return { + width: element.offsetWidth, + height: element.offsetHeight, + top: offset.top - offsetParentRect.top - fn.css(element, 'marginTop', true), + left: offset.left - offsetParentRect.left - fn.css(element, 'marginLeft', true) + }; + }; + /** + * Returns the closest, non-statically positioned offsetParent of a given element + * @required-by fn.position + * @param element + */ + var offsetParent = function offsetParentElement(element) { + var docElement = element.ownerDocument; + var offsetParent = element.offsetParent || docElement; + if (nodeName(offsetParent, '#document')) + return docElement.documentElement; + while (offsetParent && !nodeName(offsetParent, 'html') && fn.css(offsetParent, 'position') === 'static') { + offsetParent = offsetParent.offsetParent; + } + return offsetParent || docElement.documentElement; + }; + /** + * Provides equivalent of jQuery's height function + * @required-by bootstrap-affix + * @url http://api.jquery.com/height/ + * @param element + * @param outer + */ + fn.height = function (element, outer) { + var value = element.offsetHeight; + if (outer) { + value += fn.css(element, 'marginTop', true) + fn.css(element, 'marginBottom', true); + } else { + value -= fn.css(element, 'paddingTop', true) + fn.css(element, 'paddingBottom', true) + fn.css(element, 'borderTopWidth', true) + fn.css(element, 'borderBottomWidth', true); + } + return value; + }; + /** + * Provides equivalent of jQuery's height function + * @required-by bootstrap-affix + * @url http://api.jquery.com/width/ + * @param element + * @param outer + */ + fn.width = function (element, outer) { + var value = element.offsetWidth; + if (outer) { + value += fn.css(element, 'marginLeft', true) + fn.css(element, 'marginRight', true); + } else { + value -= fn.css(element, 'paddingLeft', true) + fn.css(element, 'paddingRight', true) + fn.css(element, 'borderLeftWidth', true) + fn.css(element, 'borderRightWidth', true); + } + return value; + }; + return fn; + } + ]); + // Source: src/helpers/parse-options.js + angular.module('mgcrea.ngStrap.helpers.parseOptions', []).provider('$parseOptions', function () { + var defaults = this.defaults = { regexp: /^\s*(.*?)(?:\s+as\s+(.*?))?(?:\s+group\s+by\s+(.*))?\s+for\s+(?:([\$\w][\$\w]*)|(?:\(\s*([\$\w][\$\w]*)\s*,\s*([\$\w][\$\w]*)\s*\)))\s+in\s+(.*?)(?:\s+track\s+by\s+(.*?))?$/ }; + this.$get = [ + '$parse', + '$q', + function ($parse, $q) { + function ParseOptionsFactory(attr, config) { + var $parseOptions = {}; + // Common vars + var options = angular.extend({}, defaults, config); + $parseOptions.$values = []; + // Private vars + var match, displayFn, valueName, keyName, groupByFn, valueFn, valuesFn; + $parseOptions.init = function () { + $parseOptions.$match = match = attr.match(options.regexp); + displayFn = $parse(match[2] || match[1]), valueName = match[4] || match[6], keyName = match[5], groupByFn = $parse(match[3] || ''), valueFn = $parse(match[2] ? match[1] : valueName), valuesFn = $parse(match[7]); + }; + $parseOptions.valuesFn = function (scope, controller) { + return $q.when(valuesFn(scope, controller)).then(function (values) { + $parseOptions.$values = values ? parseValues(values) : {}; + return $parseOptions.$values; + }); + }; + // Private functions + function parseValues(values) { + return values.map(function (match, index) { + var locals = {}, label, value; + locals[valueName] = match; + label = displayFn(locals); + value = valueFn(locals) || index; + return { + label: label, + value: value + }; + }); + } + $parseOptions.init(); + return $parseOptions; + } + return ParseOptionsFactory; + } + ]; + }); + // Source: src/modal/modal.js + angular.module('mgcrea.ngStrap.modal', ['mgcrea.ngStrap.helpers.dimensions']).provider('$modal', function () { + var defaults = this.defaults = { + animation: 'am-fade', + backdropAnimation: 'am-fade', + prefixClass: 'modal', + placement: 'top', + template: 'modal/modal.tpl.html', + contentTemplate: false, + container: false, + element: null, + backdrop: true, + keyboard: true, + html: false, + show: true + }; + this.$get = [ + '$window', + '$rootScope', + '$compile', + '$q', + '$templateCache', + '$http', + '$animate', + '$timeout', + 'dimensions', + function ($window, $rootScope, $compile, $q, $templateCache, $http, $animate, $timeout, dimensions) { + var forEach = angular.forEach; + var trim = String.prototype.trim; + var requestAnimationFrame = $window.requestAnimationFrame || $window.setTimeout; + var bodyElement = angular.element($window.document.body); + var htmlReplaceRegExp = /ng-bind="/gi; + function ModalFactory(config) { + var $modal = {}; + // Common vars + var options = angular.extend({}, defaults, config); + $modal.$promise = fetchTemplate(options.template); + var scope = $modal.$scope = options.scope && options.scope.$new() || $rootScope.$new(); + if (!options.element && !options.container) { + options.container = 'body'; + } + // Support scope as string options + forEach([ + 'title', + 'content' + ], function (key) { + if (options[key]) + scope[key] = options[key]; + }); + // Provide scope helpers + scope.$hide = function () { + scope.$$postDigest(function () { + $modal.hide(); + }); + }; + scope.$show = function () { + scope.$$postDigest(function () { + $modal.show(); + }); + }; + scope.$toggle = function () { + scope.$$postDigest(function () { + $modal.toggle(); + }); + }; + // Support contentTemplate option + if (options.contentTemplate) { + $modal.$promise = $modal.$promise.then(function (template) { + var templateEl = angular.element(template); + return fetchTemplate(options.contentTemplate).then(function (contentTemplate) { + var contentEl = findElement('[ng-bind="content"]', templateEl[0]).removeAttr('ng-bind').html(contentTemplate); + // Drop the default footer as you probably don't want it if you use a custom contentTemplate + if (!config.template) + contentEl.next().remove(); + return templateEl[0].outerHTML; + }); + }); + } + // Fetch, compile then initialize modal + var modalLinker, modalElement; + var backdropElement = angular.element('
    '); + $modal.$promise.then(function (template) { + if (angular.isObject(template)) + template = template.data; + if (options.html) + template = template.replace(htmlReplaceRegExp, 'ng-bind-html="'); + template = trim.apply(template); + modalLinker = $compile(template); + $modal.init(); + }); + $modal.init = function () { + // Options: show + if (options.show) { + scope.$$postDigest(function () { + $modal.show(); + }); + } + }; + $modal.destroy = function () { + // Remove element + if (modalElement) { + modalElement.remove(); + modalElement = null; + } + if (backdropElement) { + backdropElement.remove(); + backdropElement = null; + } + // Destroy scope + scope.$destroy(); + }; + $modal.show = function () { + var parent = options.container ? findElement(options.container) : null; + var after = options.container ? null : options.element; + // Fetch a cloned element linked from template + modalElement = $modal.$element = modalLinker(scope, function (clonedElement, scope) { + }); + // Set the initial positioning. + modalElement.css({ display: 'block' }).addClass(options.placement); + // Options: animation + if (options.animation) { + if (options.backdrop) { + backdropElement.addClass(options.backdropAnimation); + } + modalElement.addClass(options.animation); + } + if (options.backdrop) { + $animate.enter(backdropElement, bodyElement, null, function () { + }); + } + $animate.enter(modalElement, parent, after, function () { + }); + scope.$isShown = true; + scope.$$phase || scope.$digest(); + // Focus once the enter-animation has started + // Weird PhantomJS bug hack + var el = modalElement[0]; + requestAnimationFrame(function () { + el.focus(); + }); + bodyElement.addClass(options.prefixClass + '-open'); + if (options.animation) { + bodyElement.addClass(options.prefixClass + '-with-' + options.animation); + } + // Bind events + if (options.backdrop) { + modalElement.on('click', hideOnBackdropClick); + backdropElement.on('click', hideOnBackdropClick); + } + if (options.keyboard) { + modalElement.on('keyup', $modal.$onKeyUp); + } + }; + $modal.hide = function () { + $animate.leave(modalElement, function () { + bodyElement.removeClass(options.prefixClass + '-open'); + if (options.animation) { + bodyElement.addClass(options.prefixClass + '-with-' + options.animation); + } + }); + if (options.backdrop) { + $animate.leave(backdropElement, function () { + }); + } + scope.$isShown = false; + scope.$$phase || scope.$digest(); + // Unbind events + if (options.backdrop) { + modalElement.off('click', hideOnBackdropClick); + backdropElement.off('click', hideOnBackdropClick); + } + if (options.keyboard) { + modalElement.off('keyup', $modal.$onKeyUp); + } + }; + $modal.toggle = function () { + scope.$isShown ? $modal.hide() : $modal.show(); + }; + $modal.focus = function () { + modalElement[0].focus(); + }; + // Protected methods + $modal.$onKeyUp = function (evt) { + evt.which === 27 && $modal.hide(); + }; + // Private methods + function hideOnBackdropClick(evt) { + if (evt.target !== evt.currentTarget) + return; + options.backdrop === 'static' ? $modal.focus() : $modal.hide(); + } + return $modal; + } + // Helper functions + function findElement(query, element) { + return angular.element((element || document).querySelectorAll(query)); + } + function fetchTemplate(template) { + return $q.when($templateCache.get(template) || $http.get(template)).then(function (res) { + if (angular.isObject(res)) { + $templateCache.put(template, res.data); + return res.data; + } + return res; + }); + } + return ModalFactory; + } + ]; + }).directive('bsModal', [ + '$window', + '$location', + '$sce', + '$modal', + function ($window, $location, $sce, $modal) { + return { + restrict: 'EAC', + scope: true, + link: function postLink(scope, element, attr, transclusion) { + // Directive options + var options = { + scope: scope, + element: element, + show: false + }; + angular.forEach([ + 'template', + 'contentTemplate', + 'placement', + 'backdrop', + 'keyboard', + 'html', + 'container', + 'animation' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Support scope as data-attrs + angular.forEach([ + 'title', + 'content' + ], function (key) { + attr[key] && attr.$observe(key, function (newValue, oldValue) { + scope[key] = $sce.trustAsHtml(newValue); + }); + }); + // Support scope as an object + attr.bsModal && scope.$watch(attr.bsModal, function (newValue, oldValue) { + if (angular.isObject(newValue)) { + angular.extend(scope, newValue); + } else { + scope.content = newValue; + } + }, true); + // Initialize modal + var modal = $modal(options); + // Trigger + element.on(attr.trigger || 'click', modal.toggle); + // Garbage collection + scope.$on('$destroy', function () { + modal.destroy(); + options = null; + modal = null; + }); + } + }; + } + ]); + // Source: src/navbar/navbar.js + angular.module('mgcrea.ngStrap.navbar', []).provider('$navbar', function () { + var defaults = this.defaults = { + activeClass: 'active', + routeAttr: 'data-match-route', + strict: false + }; + this.$get = function () { + return { defaults: defaults }; + }; + }).directive('bsNavbar', [ + '$window', + '$location', + '$navbar', + function ($window, $location, $navbar) { + var defaults = $navbar.defaults; + return { + restrict: 'A', + link: function postLink(scope, element, attr, controller) { + // Directive options + var options = angular.copy(defaults); + angular.forEach(Object.keys(defaults), function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Watch for the $location + scope.$watch(function () { + return $location.path(); + }, function (newValue, oldValue) { + var liElements = element[0].querySelectorAll('li[' + options.routeAttr + ']'); + angular.forEach(liElements, function (li) { + var liElement = angular.element(li); + var pattern = liElement.attr(options.routeAttr).replace('/', '\\/'); + if (options.strict) { + pattern = '^' + pattern + '$'; + } + var regexp = new RegExp(pattern, ['i']); + if (regexp.test(newValue)) { + liElement.addClass(options.activeClass); + } else { + liElement.removeClass(options.activeClass); + } + }); + }); + } + }; + } + ]); + // Source: src/popover/popover.js + angular.module('mgcrea.ngStrap.popover', ['mgcrea.ngStrap.tooltip']).provider('$popover', function () { + var defaults = this.defaults = { + animation: 'am-fade', + placement: 'right', + template: 'popover/popover.tpl.html', + contentTemplate: false, + trigger: 'click', + keyboard: true, + html: false, + title: '', + content: '', + delay: 0, + container: false + }; + this.$get = [ + '$tooltip', + function ($tooltip) { + function PopoverFactory(element, config) { + // Common vars + var options = angular.extend({}, defaults, config); + var $popover = $tooltip(element, options); + // Support scope as string options [/*title, */content] + if (options.content) { + $popover.$scope.content = options.content; + } + return $popover; + } + return PopoverFactory; + } + ]; + }).directive('bsPopover', [ + '$window', + '$location', + '$sce', + '$popover', + function ($window, $location, $sce, $popover) { + var requestAnimationFrame = $window.requestAnimationFrame || $window.setTimeout; + return { + restrict: 'EAC', + scope: true, + link: function postLink(scope, element, attr) { + // Directive options + var options = { scope: scope }; + angular.forEach([ + 'template', + 'contentTemplate', + 'placement', + 'container', + 'delay', + 'trigger', + 'keyboard', + 'html', + 'animation' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Support scope as data-attrs + angular.forEach([ + 'title', + 'content' + ], function (key) { + attr[key] && attr.$observe(key, function (newValue, oldValue) { + scope[key] = $sce.trustAsHtml(newValue); + angular.isDefined(oldValue) && requestAnimationFrame(function () { + popover && popover.$applyPlacement(); + }); + }); + }); + // Support scope as an object + attr.bsPopover && scope.$watch(attr.bsPopover, function (newValue, oldValue) { + if (angular.isObject(newValue)) { + angular.extend(scope, newValue); + } else { + scope.content = newValue; + } + angular.isDefined(oldValue) && requestAnimationFrame(function () { + popover && popover.$applyPlacement(); + }); + }, true); + // Initialize popover + var popover = $popover(element, options); + // Garbage collection + scope.$on('$destroy', function () { + popover.destroy(); + options = null; + popover = null; + }); + } + }; + } + ]); + // Source: src/scrollspy/scrollspy.js + angular.module('mgcrea.ngStrap.scrollspy', [ + 'mgcrea.ngStrap.helpers.debounce', + 'mgcrea.ngStrap.helpers.dimensions' + ]).provider('$scrollspy', function () { + // Pool of registered spies + var spies = this.$$spies = {}; + var defaults = this.defaults = { + debounce: 150, + throttle: 100, + offset: 100 + }; + this.$get = [ + '$window', + '$document', + '$rootScope', + 'dimensions', + 'debounce', + 'throttle', + function ($window, $document, $rootScope, dimensions, debounce, throttle) { + var windowEl = angular.element($window); + var docEl = angular.element($document.prop('documentElement')); + var bodyEl = angular.element($window.document.body); + // Helper functions + function nodeName(element, name) { + return element[0].nodeName && element[0].nodeName.toLowerCase() === name.toLowerCase(); + } + function ScrollSpyFactory(config) { + // Common vars + var options = angular.extend({}, defaults, config); + if (!options.element) + options.element = bodyEl; + var isWindowSpy = nodeName(options.element, 'body'); + var scrollEl = isWindowSpy ? windowEl : options.element; + var scrollId = isWindowSpy ? 'window' : options.id; + // Use existing spy + if (spies[scrollId]) { + spies[scrollId].$$count++; + return spies[scrollId]; + } + var $scrollspy = {}; + // Private vars + var unbindViewContentLoaded, unbindIncludeContentLoaded; + var trackedElements = $scrollspy.$trackedElements = []; + var sortedElements = []; + var activeTarget; + var debouncedCheckPosition; + var throttledCheckPosition; + var debouncedCheckOffsets; + var viewportHeight; + var scrollTop; + $scrollspy.init = function () { + // Setup internal ref counter + this.$$count = 1; + // Bind events + debouncedCheckPosition = debounce(this.checkPosition, options.debounce); + throttledCheckPosition = throttle(this.checkPosition, options.throttle); + scrollEl.on('click', this.checkPositionWithEventLoop); + windowEl.on('resize', debouncedCheckPosition); + scrollEl.on('scroll', throttledCheckPosition); + debouncedCheckOffsets = debounce(this.checkOffsets, options.debounce); + unbindViewContentLoaded = $rootScope.$on('$viewContentLoaded', debouncedCheckOffsets); + unbindIncludeContentLoaded = $rootScope.$on('$includeContentLoaded', debouncedCheckOffsets); + debouncedCheckOffsets(); + // Register spy for reuse + if (scrollId) { + spies[scrollId] = $scrollspy; + } + }; + $scrollspy.destroy = function () { + // Check internal ref counter + this.$$count--; + if (this.$$count > 0) { + return; + } + // Unbind events + scrollEl.off('click', this.checkPositionWithEventLoop); + windowEl.off('resize', debouncedCheckPosition); + scrollEl.off('scroll', debouncedCheckPosition); + unbindViewContentLoaded(); + unbindIncludeContentLoaded(); + }; + $scrollspy.checkPosition = function () { + // Not ready yet + if (!sortedElements.length) + return; + // Calculate the scroll position + scrollTop = (isWindowSpy ? $window.pageYOffset : scrollEl.prop('scrollTop')) || 0; + // Calculate the viewport height for use by the components + viewportHeight = Math.max($window.innerHeight, docEl.prop('clientHeight')); + // Activate first element if scroll is smaller + if (scrollTop < sortedElements[0].offsetTop && activeTarget !== sortedElements[0].target) { + return $scrollspy.$activateElement(sortedElements[0]); + } + // Activate proper element + for (var i = sortedElements.length; i--;) { + if (angular.isUndefined(sortedElements[i].offsetTop) || sortedElements[i].offsetTop === null) + continue; + if (activeTarget === sortedElements[i].target) + continue; + if (scrollTop < sortedElements[i].offsetTop) + continue; + if (sortedElements[i + 1] && scrollTop > sortedElements[i + 1].offsetTop) + continue; + return $scrollspy.$activateElement(sortedElements[i]); + } + }; + $scrollspy.checkPositionWithEventLoop = function () { + setTimeout(this.checkPosition, 1); + }; + // Protected methods + $scrollspy.$activateElement = function (element) { + if (activeTarget) { + var activeElement = $scrollspy.$getTrackedElement(activeTarget); + if (activeElement) { + activeElement.source.removeClass('active'); + if (nodeName(activeElement.source, 'li') && nodeName(activeElement.source.parent().parent(), 'li')) { + activeElement.source.parent().parent().removeClass('active'); + } + } + } + activeTarget = element.target; + element.source.addClass('active'); + if (nodeName(element.source, 'li') && nodeName(element.source.parent().parent(), 'li')) { + element.source.parent().parent().addClass('active'); + } + }; + $scrollspy.$getTrackedElement = function (target) { + return trackedElements.filter(function (obj) { + return obj.target === target; + })[0]; + }; + // Track offsets behavior + $scrollspy.checkOffsets = function () { + angular.forEach(trackedElements, function (trackedElement) { + var targetElement = document.querySelector(trackedElement.target); + trackedElement.offsetTop = targetElement ? dimensions.offset(targetElement).top : null; + if (options.offset && trackedElement.offsetTop !== null) + trackedElement.offsetTop -= options.offset * 1; + }); + sortedElements = trackedElements.filter(function (el) { + return el.offsetTop !== null; + }).sort(function (a, b) { + return a.offsetTop - b.offsetTop; + }); + debouncedCheckPosition(); + }; + $scrollspy.trackElement = function (target, source) { + trackedElements.push({ + target: target, + source: source + }); + }; + $scrollspy.untrackElement = function (target, source) { + var toDelete; + for (var i = trackedElements.length; i--;) { + if (trackedElements[i].target === target && trackedElements[i].source === source) { + toDelete = i; + break; + } + } + trackedElements = trackedElements.splice(toDelete, 1); + }; + $scrollspy.activate = function (i) { + trackedElements[i].addClass('active'); + }; + // Initialize plugin + $scrollspy.init(); + return $scrollspy; + } + return ScrollSpyFactory; + } + ]; + }).directive('bsScrollspy', [ + '$rootScope', + 'debounce', + 'dimensions', + '$scrollspy', + function ($rootScope, debounce, dimensions, $scrollspy) { + return { + restrict: 'EAC', + link: function postLink(scope, element, attr) { + var options = { scope: scope }; + angular.forEach([ + 'offset', + 'target' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + var scrollspy = $scrollspy(options); + scrollspy.trackElement(options.target, element); + scope.$on('$destroy', function () { + scrollspy.untrackElement(options.target, element); + scrollspy.destroy(); + options = null; + scrollspy = null; + }); + } + }; + } + ]).directive('bsScrollspyList', [ + '$rootScope', + 'debounce', + 'dimensions', + '$scrollspy', + function ($rootScope, debounce, dimensions, $scrollspy) { + return { + restrict: 'A', + compile: function postLink(element, attr) { + var children = element[0].querySelectorAll('li > a[href]'); + angular.forEach(children, function (child) { + var childEl = angular.element(child); + childEl.parent().attr('bs-scrollspy', '').attr('data-target', childEl.attr('href')); + }); + } + }; + } + ]); + // Source: src/select/select.js + angular.module('mgcrea.ngStrap.select', [ + 'mgcrea.ngStrap.tooltip', + 'mgcrea.ngStrap.helpers.parseOptions' + ]).provider('$select', function () { + var defaults = this.defaults = { + animation: 'am-fade', + prefixClass: 'select', + placement: 'bottom-left', + template: 'select/select.tpl.html', + trigger: 'focus', + container: false, + keyboard: true, + html: false, + delay: 0, + multiple: false, + sort: true, + caretHtml: ' ', + placeholder: 'Choose among the following...', + maxLength: 3, + maxLengthHtml: 'selected' + }; + this.$get = [ + '$window', + '$document', + '$rootScope', + '$tooltip', + function ($window, $document, $rootScope, $tooltip) { + var bodyEl = angular.element($window.document.body); + var isTouch = 'createTouch' in $window.document; + function SelectFactory(element, controller, config) { + var $select = {}; + // Common vars + var options = angular.extend({}, defaults, config); + $select = $tooltip(element, options); + var parentScope = config.scope; + var scope = $select.$scope; + scope.$matches = []; + scope.$activeIndex = 0; + scope.$isMultiple = options.multiple; + scope.$activate = function (index) { + scope.$$postDigest(function () { + $select.activate(index); + }); + }; + scope.$select = function (index, evt) { + scope.$$postDigest(function () { + $select.select(index); + }); + }; + scope.$isVisible = function () { + return $select.$isVisible(); + }; + scope.$isActive = function (index) { + return $select.$isActive(index); + }; + // Public methods + $select.update = function (matches) { + scope.$matches = matches; + $select.$updateActiveIndex(); + }; + $select.activate = function (index) { + if (options.multiple) { + scope.$activeIndex.sort(); + $select.$isActive(index) ? scope.$activeIndex.splice(scope.$activeIndex.indexOf(index), 1) : scope.$activeIndex.push(index); + if (options.sort) + scope.$activeIndex.sort(); + } else { + scope.$activeIndex = index; + } + return scope.$activeIndex; + }; + $select.select = function (index) { + var value = scope.$matches[index].value; + $select.activate(index); + if (options.multiple) { + controller.$setViewValue(scope.$activeIndex.map(function (index) { + return scope.$matches[index].value; + })); + } else { + controller.$setViewValue(value); + } + controller.$render(); + if (parentScope) + parentScope.$digest(); + // Hide if single select + if (!options.multiple) { + if (options.trigger === 'focus') + element[0].blur(); + else if ($select.$isShown) + $select.hide(); + } + // Emit event + scope.$emit('$select.select', value, index); + }; + // Protected methods + $select.$updateActiveIndex = function () { + if (controller.$modelValue && scope.$matches.length) { + if (options.multiple && angular.isArray(controller.$modelValue)) { + scope.$activeIndex = controller.$modelValue.map(function (value) { + return $select.$getIndex(value); + }); + } else { + scope.$activeIndex = $select.$getIndex(controller.$modelValue); + } + } else if (scope.$activeIndex >= scope.$matches.length) { + scope.$activeIndex = options.multiple ? [] : 0; + } + }; + $select.$isVisible = function () { + if (!options.minLength || !controller) { + return scope.$matches.length; + } + // minLength support + return scope.$matches.length && controller.$viewValue.length >= options.minLength; + }; + $select.$isActive = function (index) { + if (options.multiple) { + return scope.$activeIndex.indexOf(index) !== -1; + } else { + return scope.$activeIndex === index; + } + }; + $select.$getIndex = function (value) { + var l = scope.$matches.length, i = l; + if (!l) + return; + for (i = l; i--;) { + if (scope.$matches[i].value === value) + break; + } + if (i < 0) + return; + return i; + }; + $select.$onMouseDown = function (evt) { + // Prevent blur on mousedown on .dropdown-menu + evt.preventDefault(); + evt.stopPropagation(); + // Emulate click for mobile devices + if (isTouch) { + var targetEl = angular.element(evt.target); + targetEl.triggerHandler('click'); + } + }; + $select.$onKeyDown = function (evt) { + if (!/(38|40|13)/.test(evt.keyCode)) + return; + evt.preventDefault(); + evt.stopPropagation(); + // Select with enter + if (evt.keyCode === 13) { + return $select.select(scope.$activeIndex); + } + // Navigate with keyboard + if (evt.keyCode === 38 && scope.$activeIndex > 0) + scope.$activeIndex--; + else if (evt.keyCode === 40 && scope.$activeIndex < scope.$matches.length - 1) + scope.$activeIndex++; + else if (angular.isUndefined(scope.$activeIndex)) + scope.$activeIndex = 0; + scope.$digest(); + }; + // Overrides + var _show = $select.show; + $select.show = function () { + _show(); + if (options.multiple) { + $select.$element.addClass('select-multiple'); + } + setTimeout(function () { + $select.$element.on(isTouch ? 'touchstart' : 'mousedown', $select.$onMouseDown); + if (options.keyboard) { + element.on('keydown', $select.$onKeyDown); + } + }); + }; + var _hide = $select.hide; + $select.hide = function () { + $select.$element.off(isTouch ? 'touchstart' : 'mousedown', $select.$onMouseDown); + if (options.keyboard) { + element.off('keydown', $select.$onKeyDown); + } + _hide(); + }; + return $select; + } + SelectFactory.defaults = defaults; + return SelectFactory; + } + ]; + }).directive('bsSelect', [ + '$window', + '$parse', + '$q', + '$select', + '$parseOptions', + function ($window, $parse, $q, $select, $parseOptions) { + var defaults = $select.defaults; + return { + restrict: 'EAC', + require: 'ngModel', + link: function postLink(scope, element, attr, controller) { + // Directive options + var options = { scope: scope }; + angular.forEach([ + 'placement', + 'container', + 'delay', + 'trigger', + 'keyboard', + 'html', + 'animation', + 'template', + 'placeholder', + 'multiple', + 'maxLength', + 'maxLengthHtml' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Add support for select markup + if (element[0].nodeName.toLowerCase() === 'select') { + var inputEl = element; + inputEl.css('display', 'none'); + element = angular.element(''); + inputEl.after(element); + } + // Build proper ngOptions + var parsedOptions = $parseOptions(attr.ngOptions); + // Initialize select + var select = $select(element, controller, options); + // Watch ngOptions values before filtering for changes + var watchedOptions = parsedOptions.$match[7].replace(/\|.+/, '').trim(); + scope.$watch(watchedOptions, function (newValue, oldValue) { + // console.warn('scope.$watch(%s)', watchedOptions, newValue, oldValue); + parsedOptions.valuesFn(scope, controller).then(function (values) { + select.update(values); + controller.$render(); + }); + }, true); + // Watch model for changes + scope.$watch(attr.ngModel, function (newValue, oldValue) { + // console.warn('scope.$watch(%s)', attr.ngModel, newValue, oldValue); + select.$updateActiveIndex(); + }, true); + // Model rendering in view + controller.$render = function () { + // console.warn('$render', element.attr('ng-model'), 'controller.$modelValue', typeof controller.$modelValue, controller.$modelValue, 'controller.$viewValue', typeof controller.$viewValue, controller.$viewValue); + var selected, index; + if (options.multiple && angular.isArray(controller.$modelValue)) { + selected = controller.$modelValue.map(function (value) { + index = select.$getIndex(value); + return angular.isDefined(index) ? select.$scope.$matches[index].label : false; + }).filter(angular.isDefined); + if (selected.length > (options.maxLength || defaults.maxLength)) { + selected = selected.length + ' ' + (options.maxLengthHtml || defaults.maxLengthHtml); + } else { + selected = selected.join(', '); + } + } else { + index = select.$getIndex(controller.$modelValue); + selected = angular.isDefined(index) ? select.$scope.$matches[index].label : false; + } + element.html((selected ? selected : attr.placeholder || defaults.placeholder) + defaults.caretHtml); + }; + // Garbage collection + scope.$on('$destroy', function () { + select.destroy(); + options = null; + select = null; + }); + } + }; + } + ]); + // Source: src/tab/tab.js + angular.module('mgcrea.ngStrap.tab', []).run([ + '$templateCache', + function ($templateCache) { + $templateCache.put('$pane', '{{pane.content}}'); + } + ]).provider('$tab', function () { + var defaults = this.defaults = { + animation: 'am-fade', + template: 'tab/tab.tpl.html' + }; + this.$get = function () { + return { defaults: defaults }; + }; + }).directive('bsTabs', [ + '$window', + '$animate', + '$tab', + function ($window, $animate, $tab) { + var defaults = $tab.defaults; + return { + restrict: 'EAC', + scope: true, + require: '?ngModel', + templateUrl: function (element, attr) { + return attr.template || defaults.template; + }, + link: function postLink(scope, element, attr, controller) { + // Directive options + var options = defaults; + angular.forEach(['animation'], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Require scope as an object + attr.bsTabs && scope.$watch(attr.bsTabs, function (newValue, oldValue) { + scope.panes = newValue; + }, true); + // Add base class + element.addClass('tabs'); + // Support animations + if (options.animation) { + element.addClass(options.animation); + } + scope.active = scope.activePane = 0; + // view -> model + scope.setActive = function (index, ev) { + scope.active = index; + if (controller) { + controller.$setViewValue(index); + } + }; + // model -> view + if (controller) { + controller.$render = function () { + scope.active = controller.$modelValue * 1; + }; + } + } + }; + } + ]); + // Source: src/timepicker/timepicker.js + angular.module('mgcrea.ngStrap.timepicker', [ + 'mgcrea.ngStrap.helpers.dateParser', + 'mgcrea.ngStrap.tooltip' + ]).provider('$timepicker', function () { + var defaults = this.defaults = { + animation: 'am-fade', + prefixClass: 'timepicker', + placement: 'bottom-left', + template: 'timepicker/timepicker.tpl.html', + trigger: 'focus', + container: false, + keyboard: true, + html: false, + delay: 0, + useNative: true, + timeType: 'date', + timeFormat: 'shortTime', + autoclose: false, + minTime: -Infinity, + maxTime: +Infinity, + length: 5, + hourStep: 1, + minuteStep: 5 + }; + this.$get = [ + '$window', + '$document', + '$rootScope', + '$sce', + '$locale', + 'dateFilter', + '$tooltip', + function ($window, $document, $rootScope, $sce, $locale, dateFilter, $tooltip) { + var bodyEl = angular.element($window.document.body); + var isTouch = 'createTouch' in $window.document; + var isNative = /(ip(a|o)d|iphone|android)/gi.test($window.navigator.userAgent); + if (!defaults.lang) + defaults.lang = $locale.id; + function timepickerFactory(element, controller, config) { + var $timepicker = $tooltip(element, angular.extend({}, defaults, config)); + var parentScope = config.scope; + var options = $timepicker.$options; + var scope = $timepicker.$scope; + // View vars + var selectedIndex = 0; + var startDate = controller.$dateValue || new Date(); + var viewDate = { + hour: startDate.getHours(), + meridian: startDate.getHours() < 12, + minute: startDate.getMinutes(), + second: startDate.getSeconds(), + millisecond: startDate.getMilliseconds() + }; + var format = $locale.DATETIME_FORMATS[options.timeFormat] || options.timeFormat; + var formats = /(h+)[:]?(m+)[ ]?(a?)/i.exec(format).slice(1); + // Scope methods + scope.$select = function (date, index) { + $timepicker.select(date, index); + }; + scope.$moveIndex = function (value, index) { + $timepicker.$moveIndex(value, index); + }; + scope.$switchMeridian = function (date) { + $timepicker.switchMeridian(date); + }; + // Public methods + $timepicker.update = function (date) { + // console.warn('$timepicker.update() newValue=%o', date); + if (angular.isDate(date) && !isNaN(date.getTime())) { + $timepicker.$date = date; + angular.extend(viewDate, { + hour: date.getHours(), + minute: date.getMinutes(), + second: date.getSeconds(), + millisecond: date.getMilliseconds() + }); + $timepicker.$build(); + } else if (!$timepicker.$isBuilt) { + $timepicker.$build(); + } + }; + $timepicker.select = function (date, index, keep) { + // console.warn('$timepicker.select', date, scope.$mode); + if (isNaN(controller.$dateValue.getTime())) + controller.$dateValue = new Date(1970, 0, 1); + if (!angular.isDate(date)) + date = new Date(date); + if (index === 0) + controller.$dateValue.setHours(date.getHours()); + else if (index === 1) + controller.$dateValue.setMinutes(date.getMinutes()); + controller.$setViewValue(controller.$dateValue); + controller.$render(); + if (options.autoclose && !keep) { + $timepicker.hide(true); + } + }; + $timepicker.switchMeridian = function (date) { + var hours = (date || controller.$dateValue).getHours(); + controller.$dateValue.setHours(hours < 12 ? hours + 12 : hours - 12); + controller.$render(); + }; + // Protected methods + $timepicker.$build = function () { + // console.warn('$timepicker.$build() viewDate=%o', viewDate); + var i, midIndex = scope.midIndex = parseInt(options.length / 2, 10); + var hours = [], hour; + for (i = 0; i < options.length; i++) { + hour = new Date(1970, 0, 1, viewDate.hour - (midIndex - i) * options.hourStep); + hours.push({ + date: hour, + label: dateFilter(hour, formats[0]), + selected: $timepicker.$date && $timepicker.$isSelected(hour, 0), + disabled: $timepicker.$isDisabled(hour, 0) + }); + } + var minutes = [], minute; + for (i = 0; i < options.length; i++) { + minute = new Date(1970, 0, 1, 0, viewDate.minute - (midIndex - i) * options.minuteStep); + minutes.push({ + date: minute, + label: dateFilter(minute, formats[1]), + selected: $timepicker.$date && $timepicker.$isSelected(minute, 1), + disabled: $timepicker.$isDisabled(minute, 1) + }); + } + var rows = []; + for (i = 0; i < options.length; i++) { + rows.push([ + hours[i], + minutes[i] + ]); + } + scope.rows = rows; + scope.showAM = !!formats[2]; + scope.isAM = ($timepicker.$date || hours[midIndex].date).getHours() < 12; + $timepicker.$isBuilt = true; + }; + $timepicker.$isSelected = function (date, index) { + if (!$timepicker.$date) + return false; + else if (index === 0) { + return date.getHours() === $timepicker.$date.getHours(); + } else if (index === 1) { + return date.getMinutes() === $timepicker.$date.getMinutes(); + } + }; + $timepicker.$isDisabled = function (date, index) { + var selectedTime; + if (index === 0) { + selectedTime = date.getTime() + viewDate.minute * 60000; + } else if (index === 1) { + selectedTime = date.getTime() + viewDate.hour * 3600000; + } + return selectedTime < options.minTime || selectedTime > options.maxTime; + }; + $timepicker.$moveIndex = function (value, index) { + var targetDate; + if (index === 0) { + targetDate = new Date(1970, 0, 1, viewDate.hour + value * options.length, viewDate.minute); + angular.extend(viewDate, { hour: targetDate.getHours() }); + } else if (index === 1) { + targetDate = new Date(1970, 0, 1, viewDate.hour, viewDate.minute + value * options.length * 5); + angular.extend(viewDate, { minute: targetDate.getMinutes() }); + } + $timepicker.$build(); + }; + $timepicker.$onMouseDown = function (evt) { + // Prevent blur on mousedown on .dropdown-menu + if (evt.target.nodeName.toLowerCase() !== 'input') + evt.preventDefault(); + evt.stopPropagation(); + // Emulate click for mobile devices + if (isTouch) { + var targetEl = angular.element(evt.target); + if (targetEl[0].nodeName.toLowerCase() !== 'button') { + targetEl = targetEl.parent(); + } + targetEl.triggerHandler('click'); + } + }; + $timepicker.$onKeyDown = function (evt) { + if (!/(38|37|39|40|13)/.test(evt.keyCode) || evt.shiftKey || evt.altKey) + return; + evt.preventDefault(); + evt.stopPropagation(); + // Close on enter + if (evt.keyCode === 13) + return $timepicker.hide(true); + // Navigate with keyboard + var newDate = new Date($timepicker.$date); + var hours = newDate.getHours(), hoursLength = dateFilter(newDate, 'h').length; + var minutes = newDate.getMinutes(), minutesLength = dateFilter(newDate, 'mm').length; + var lateralMove = /(37|39)/.test(evt.keyCode); + var count = 2 + !!formats[2] * 1; + // Navigate indexes (left, right) + if (lateralMove) { + if (evt.keyCode === 37) + selectedIndex = selectedIndex < 1 ? count - 1 : selectedIndex - 1; + else if (evt.keyCode === 39) + selectedIndex = selectedIndex < count - 1 ? selectedIndex + 1 : 0; + } + // Update values (up, down) + if (selectedIndex === 0) { + if (lateralMove) + return createSelection(0, hoursLength); + if (evt.keyCode === 38) + newDate.setHours(hours - options.hourStep); + else if (evt.keyCode === 40) + newDate.setHours(hours + options.hourStep); + } else if (selectedIndex === 1) { + if (lateralMove) + return createSelection(hoursLength + 1, hoursLength + 1 + minutesLength); + if (evt.keyCode === 38) + newDate.setMinutes(minutes - options.minuteStep); + else if (evt.keyCode === 40) + newDate.setMinutes(minutes + options.minuteStep); + } else if (selectedIndex === 2) { + if (lateralMove) + return createSelection(hoursLength + 1 + minutesLength + 1, hoursLength + 1 + minutesLength + 3); + $timepicker.switchMeridian(); + } + $timepicker.select(newDate, selectedIndex, true); + parentScope.$digest(); + }; + // Private + function createSelection(start, end) { + if (element[0].createTextRange) { + var selRange = element[0].createTextRange(); + selRange.collapse(true); + selRange.moveStart('character', start); + selRange.moveEnd('character', end); + selRange.select(); + } else if (element[0].setSelectionRange) { + element[0].setSelectionRange(start, end); + } else if (angular.isUndefined(element[0].selectionStart)) { + element[0].selectionStart = start; + element[0].selectionEnd = end; + } + } + function focusElement() { + element[0].focus(); + } + // Overrides + var _init = $timepicker.init; + $timepicker.init = function () { + if (isNative && options.useNative) { + element.prop('type', 'time'); + element.css('-webkit-appearance', 'textfield'); + return; + } else if (isTouch) { + element.prop('type', 'text'); + element.attr('readonly', 'true'); + element.on('click', focusElement); + } + _init(); + }; + var _destroy = $timepicker.destroy; + $timepicker.destroy = function () { + if (isNative && options.useNative) { + element.off('click', focusElement); + } + _destroy(); + }; + var _show = $timepicker.show; + $timepicker.show = function () { + _show(); + setTimeout(function () { + $timepicker.$element.on(isTouch ? 'touchstart' : 'mousedown', $timepicker.$onMouseDown); + if (options.keyboard) { + element.on('keydown', $timepicker.$onKeyDown); + } + }); + }; + var _hide = $timepicker.hide; + $timepicker.hide = function (blur) { + $timepicker.$element.off(isTouch ? 'touchstart' : 'mousedown', $timepicker.$onMouseDown); + if (options.keyboard) { + element.off('keydown', $timepicker.$onKeyDown); + } + _hide(blur); + }; + return $timepicker; + } + timepickerFactory.defaults = defaults; + return timepickerFactory; + } + ]; + }).directive('bsTimepicker', [ + '$window', + '$parse', + '$q', + '$locale', + 'dateFilter', + '$timepicker', + '$dateParser', + '$timeout', + function ($window, $parse, $q, $locale, dateFilter, $timepicker, $dateParser, $timeout) { + var defaults = $timepicker.defaults; + var isNative = /(ip(a|o)d|iphone|android)/gi.test($window.navigator.userAgent); + var requestAnimationFrame = $window.requestAnimationFrame || $window.setTimeout; + return { + restrict: 'EAC', + require: 'ngModel', + link: function postLink(scope, element, attr, controller) { + // Directive options + var options = { + scope: scope, + controller: controller + }; + angular.forEach([ + 'placement', + 'container', + 'delay', + 'trigger', + 'keyboard', + 'html', + 'animation', + 'template', + 'autoclose', + 'timeType', + 'timeFormat', + 'useNative', + 'lang' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Initialize timepicker + if (isNative && (options.useNative || defaults.useNative)) + options.timeFormat = 'HH:mm'; + var timepicker = $timepicker(element, controller, options); + options = timepicker.$options; + // Initialize parser + var dateParser = $dateParser({ + format: options.timeFormat, + lang: options.lang + }); + // Observe attributes for changes + angular.forEach([ + 'minTime', + 'maxTime' + ], function (key) { + // console.warn('attr.$observe(%s)', key, attr[key]); + angular.isDefined(attr[key]) && attr.$observe(key, function (newValue) { + if (newValue === 'now') { + timepicker.$options[key] = new Date().setFullYear(1970, 0, 1); + } else if (angular.isString(newValue) && newValue.match(/^".+"$/)) { + timepicker.$options[key] = +new Date(newValue.substr(1, newValue.length - 2)); + } else { + timepicker.$options[key] = dateParser.parse(newValue); + } + !isNaN(timepicker.$options[key]) && timepicker.$build(); + }); + }); + // Watch model for changes + scope.$watch(attr.ngModel, function (newValue, oldValue) { + // console.warn('scope.$watch(%s)', attr.ngModel, newValue, oldValue, controller.$dateValue); + timepicker.update(controller.$dateValue); + }, true); + // viewValue -> $parsers -> modelValue + controller.$parsers.unshift(function (viewValue) { + // console.warn('$parser("%s"): viewValue=%o', element.attr('ng-model'), viewValue); + // Null values should correctly reset the model value & validity + if (!viewValue) { + controller.$setValidity('date', true); + return; + } + var parsedTime = dateParser.parse(viewValue, controller.$dateValue); + if (!parsedTime || isNaN(parsedTime.getTime())) { + controller.$setValidity('date', false); + } else { + var isValid = parsedTime.getTime() >= options.minTime && parsedTime.getTime() <= options.maxTime; + controller.$setValidity('date', isValid); + // Only update the model when we have a valid date + if (isValid) + controller.$dateValue = parsedTime; + } + if (options.timeType === 'string') { + return dateFilter(viewValue, options.timeFormat); + } else if (options.timeType === 'number') { + return controller.$dateValue.getTime(); + } else if (options.timeType === 'iso') { + return controller.$dateValue.toISOString(); + } else { + return controller.$dateValue; + } + }); + // modelValue -> $formatters -> viewValue + controller.$formatters.push(function (modelValue) { + // console.warn('$formatter("%s"): modelValue=%o (%o)', element.attr('ng-model'), modelValue, typeof modelValue); + var date = options.timeType === 'string' ? dateParser.parse(modelValue, controller.$dateValue) : new Date(modelValue); + // Setup default value: next hour? + // if(isNaN(date.getTime())) date = new Date(new Date().setMinutes(0) + 36e5); + controller.$dateValue = date; + return controller.$dateValue; + }); + // viewValue -> element + controller.$render = function () { + // console.warn('$render("%s"): viewValue=%o', element.attr('ng-model'), controller.$viewValue); + element.val(isNaN(controller.$dateValue.getTime()) ? '' : dateFilter(controller.$dateValue, options.timeFormat)); + }; + // Garbage collection + scope.$on('$destroy', function () { + timepicker.destroy(); + options = null; + timepicker = null; + }); + } + }; + } + ]); + // Source: src/tooltip/tooltip.js + angular.module('mgcrea.ngStrap.tooltip', [ + 'ngAnimate', + 'mgcrea.ngStrap.helpers.dimensions' + ]).provider('$tooltip', function () { + var defaults = this.defaults = { + animation: 'am-fade', + prefixClass: 'tooltip', + container: false, + placement: 'top', + template: 'tooltip/tooltip.tpl.html', + contentTemplate: false, + trigger: 'hover focus', + keyboard: false, + html: false, + show: false, + title: '', + type: '', + delay: 0 + }; + this.$get = [ + '$window', + '$rootScope', + '$compile', + '$q', + '$templateCache', + '$http', + '$animate', + '$timeout', + 'dimensions', + '$$animateReflow', + function ($window, $rootScope, $compile, $q, $templateCache, $http, $animate, $timeout, dimensions, $$animateReflow) { + var trim = String.prototype.trim; + var isTouch = 'createTouch' in $window.document; + var htmlReplaceRegExp = /ng-bind="/gi; + function TooltipFactory(element, config) { + var $tooltip = {}; + // Common vars + var options = $tooltip.$options = angular.extend({}, defaults, config); + $tooltip.$promise = fetchTemplate(options.template); + var scope = $tooltip.$scope = options.scope && options.scope.$new() || $rootScope.$new(); + if (options.delay && angular.isString(options.delay)) { + options.delay = parseFloat(options.delay); + } + // Support scope as string options + if (options.title) { + $tooltip.$scope.title = options.title; + } + // Provide scope helpers + scope.$hide = function () { + scope.$$postDigest(function () { + $tooltip.hide(); + }); + }; + scope.$show = function () { + scope.$$postDigest(function () { + $tooltip.show(); + }); + }; + scope.$toggle = function () { + scope.$$postDigest(function () { + $tooltip.toggle(); + }); + }; + $tooltip.$isShown = scope.$isShown = false; + // Private vars + var timeout, hoverState; + // Support contentTemplate option + if (options.contentTemplate) { + $tooltip.$promise = $tooltip.$promise.then(function (template) { + var templateEl = angular.element(template); + return fetchTemplate(options.contentTemplate).then(function (contentTemplate) { + findElement('[ng-bind="content"]', templateEl[0]).removeAttr('ng-bind').html(contentTemplate); + return templateEl[0].outerHTML; + }); + }); + } + // Fetch, compile then initialize tooltip + var tipLinker, tipElement, tipTemplate, tipContainer; + $tooltip.$promise.then(function (template) { + if (angular.isObject(template)) + template = template.data; + if (options.html) + template = template.replace(htmlReplaceRegExp, 'ng-bind-html="'); + template = trim.apply(template); + tipTemplate = template; + tipLinker = $compile(template); + $tooltip.init(); + }); + $tooltip.init = function () { + // Options: delay + if (options.delay && angular.isNumber(options.delay)) { + options.delay = { + show: options.delay, + hide: options.delay + }; + } + // Replace trigger on touch devices ? + // if(isTouch && options.trigger === defaults.trigger) { + // options.trigger.replace(/hover/g, 'click'); + // } + // Options : container + if (options.container === 'self') { + tipContainer = element; + } else if (options.container) { + tipContainer = findElement(options.container); + } + // Options: trigger + var triggers = options.trigger.split(' '); + angular.forEach(triggers, function (trigger) { + if (trigger === 'click') { + element.on('click', $tooltip.toggle); + } else if (trigger !== 'manual') { + element.on(trigger === 'hover' ? 'mouseenter' : 'focus', $tooltip.enter); + element.on(trigger === 'hover' ? 'mouseleave' : 'blur', $tooltip.leave); + trigger !== 'hover' && element.on(isTouch ? 'touchstart' : 'mousedown', $tooltip.$onFocusElementMouseDown); + } + }); + // Options: show + if (options.show) { + scope.$$postDigest(function () { + options.trigger === 'focus' ? element[0].focus() : $tooltip.show(); + }); + } + }; + $tooltip.destroy = function () { + // Unbind events + var triggers = options.trigger.split(' '); + for (var i = triggers.length; i--;) { + var trigger = triggers[i]; + if (trigger === 'click') { + element.off('click', $tooltip.toggle); + } else if (trigger !== 'manual') { + element.off(trigger === 'hover' ? 'mouseenter' : 'focus', $tooltip.enter); + element.off(trigger === 'hover' ? 'mouseleave' : 'blur', $tooltip.leave); + trigger !== 'hover' && element.off(isTouch ? 'touchstart' : 'mousedown', $tooltip.$onFocusElementMouseDown); + } + } + // Remove element + if (tipElement) { + tipElement.remove(); + tipElement = null; + } + // Destroy scope + scope.$destroy(); + }; + $tooltip.enter = function () { + clearTimeout(timeout); + hoverState = 'in'; + if (!options.delay || !options.delay.show) { + return $tooltip.show(); + } + timeout = setTimeout(function () { + if (hoverState === 'in') + $tooltip.show(); + }, options.delay.show); + }; + $tooltip.show = function () { + var parent = options.container ? tipContainer : null; + var after = options.container ? null : element; + // Remove any existing tipElement + if (tipElement) + tipElement.remove(); + // Fetch a cloned element linked from template + tipElement = $tooltip.$element = tipLinker(scope, function (clonedElement, scope) { + }); + // Set the initial positioning. + tipElement.css({ + top: '0px', + left: '0px', + display: 'block' + }).addClass(options.placement); + // Options: animation + if (options.animation) + tipElement.addClass(options.animation); + // Options: type + if (options.type) + tipElement.addClass(options.prefixClass + '-' + options.type); + $animate.enter(tipElement, parent, after, function () { + }); + $tooltip.$isShown = scope.$isShown = true; + scope.$$phase || scope.$digest(); + $$animateReflow($tooltip.$applyPlacement); + // Bind events + if (options.keyboard) { + if (options.trigger !== 'focus') { + $tooltip.focus(); + tipElement.on('keyup', $tooltip.$onKeyUp); + } else { + element.on('keyup', $tooltip.$onFocusKeyUp); + } + } + }; + $tooltip.leave = function () { + clearTimeout(timeout); + hoverState = 'out'; + if (!options.delay || !options.delay.hide) { + return $tooltip.hide(); + } + timeout = setTimeout(function () { + if (hoverState === 'out') { + $tooltip.hide(); + } + }, options.delay.hide); + }; + $tooltip.hide = function (blur) { + if (!$tooltip.$isShown) + return; + $animate.leave(tipElement, function () { + tipElement = null; + }); + $tooltip.$isShown = scope.$isShown = false; + scope.$$phase || scope.$digest(); + // Unbind events + if (options.keyboard) { + tipElement.off('keyup', $tooltip.$onKeyUp); + } + // Allow to blur the input when hidden, like when pressing enter key + if (blur && options.trigger === 'focus') { + return element[0].blur(); + } + }; + $tooltip.toggle = function () { + $tooltip.$isShown ? $tooltip.leave() : $tooltip.enter(); + }; + $tooltip.focus = function () { + tipElement[0].focus(); + }; + // Protected methods + $tooltip.$applyPlacement = function () { + if (!tipElement) + return; + // Get the position of the tooltip element. + var elementPosition = getPosition(); + // Get the height and width of the tooltip so we can center it. + var tipWidth = tipElement.prop('offsetWidth'), tipHeight = tipElement.prop('offsetHeight'); + // Get the tooltip's top and left coordinates to center it with this directive. + var tipPosition = getCalculatedOffset(options.placement, elementPosition, tipWidth, tipHeight); + // Now set the calculated positioning. + tipPosition.top += 'px'; + tipPosition.left += 'px'; + tipElement.css(tipPosition); + }; + $tooltip.$onKeyUp = function (evt) { + evt.which === 27 && $tooltip.hide(); + }; + $tooltip.$onFocusKeyUp = function (evt) { + evt.which === 27 && element[0].blur(); + }; + $tooltip.$onFocusElementMouseDown = function (evt) { + evt.preventDefault(); + evt.stopPropagation(); + // Some browsers do not auto-focus buttons (eg. Safari) + $tooltip.$isShown ? element[0].blur() : element[0].focus(); + }; + // Private methods + function getPosition() { + if (options.container === 'body') { + return dimensions.offset(element[0]); + } else { + return dimensions.position(element[0]); + } + } + function getCalculatedOffset(placement, position, actualWidth, actualHeight) { + var offset; + var split = placement.split('-'); + switch (split[0]) { + case 'right': + offset = { + top: position.top + position.height / 2 - actualHeight / 2, + left: position.left + position.width + }; + break; + case 'bottom': + offset = { + top: position.top + position.height, + left: position.left + position.width / 2 - actualWidth / 2 + }; + break; + case 'left': + offset = { + top: position.top + position.height / 2 - actualHeight / 2, + left: position.left - actualWidth + }; + break; + default: + offset = { + top: position.top - actualHeight, + left: position.left + position.width / 2 - actualWidth / 2 + }; + break; + } + if (!split[1]) { + return offset; + } + // Add support for corners @todo css + if (split[0] === 'top' || split[0] === 'bottom') { + switch (split[1]) { + case 'left': + offset.left = position.left; + break; + case 'right': + offset.left = position.left + position.width - actualWidth; + } + } else if (split[0] === 'left' || split[0] === 'right') { + switch (split[1]) { + case 'top': + offset.top = position.top - actualHeight; + break; + case 'bottom': + offset.top = position.top + position.height; + } + } + return offset; + } + return $tooltip; + } + // Helper functions + function findElement(query, element) { + return angular.element((element || document).querySelectorAll(query)); + } + function fetchTemplate(template) { + return $q.when($templateCache.get(template) || $http.get(template)).then(function (res) { + if (angular.isObject(res)) { + $templateCache.put(template, res.data); + return res.data; + } + return res; + }); + } + return TooltipFactory; + } + ]; + }).directive('bsTooltip', [ + '$window', + '$location', + '$sce', + '$tooltip', + '$$animateReflow', + function ($window, $location, $sce, $tooltip, $$animateReflow) { + return { + restrict: 'EAC', + scope: true, + link: function postLink(scope, element, attr, transclusion) { + // Directive options + var options = { scope: scope }; + angular.forEach([ + 'template', + 'contentTemplate', + 'placement', + 'container', + 'delay', + 'trigger', + 'keyboard', + 'html', + 'animation', + 'type' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Observe scope attributes for change + angular.forEach(['title'], function (key) { + attr[key] && attr.$observe(key, function (newValue, oldValue) { + scope[key] = $sce.trustAsHtml(newValue); + angular.isDefined(oldValue) && $$animateReflow(function () { + tooltip && tooltip.$applyPlacement(); + }); + }); + }); + // Support scope as an object + attr.bsTooltip && scope.$watch(attr.bsTooltip, function (newValue, oldValue) { + if (angular.isObject(newValue)) { + angular.extend(scope, newValue); + } else { + scope.content = newValue; + } + angular.isDefined(oldValue) && $$animateReflow(function () { + tooltip && tooltip.$applyPlacement(); + }); + }, true); + // Initialize popover + var tooltip = $tooltip(element, options); + // Garbage collection + scope.$on('$destroy', function () { + tooltip.destroy(); + options = null; + tooltip = null; + }); + } + }; + } + ]); + // Source: src/typeahead/typeahead.js + angular.module('mgcrea.ngStrap.typeahead', [ + 'mgcrea.ngStrap.tooltip', + 'mgcrea.ngStrap.helpers.parseOptions' + ]).provider('$typeahead', function () { + var defaults = this.defaults = { + animation: 'am-fade', + prefixClass: 'typeahead', + placement: 'bottom-left', + template: 'typeahead/typeahead.tpl.html', + trigger: 'focus', + container: false, + keyboard: true, + html: false, + delay: 0, + minLength: 1, + filter: 'filter', + limit: 6 + }; + this.$get = [ + '$window', + '$rootScope', + '$tooltip', + function ($window, $rootScope, $tooltip) { + var bodyEl = angular.element($window.document.body); + function TypeaheadFactory(element, config) { + var $typeahead = {}; + // Common vars + var options = angular.extend({}, defaults, config); + var controller = options.controller; + $typeahead = $tooltip(element, options); + var parentScope = config.scope; + var scope = $typeahead.$scope; + scope.$matches = []; + scope.$activeIndex = 0; + scope.$activate = function (index) { + scope.$$postDigest(function () { + $typeahead.activate(index); + }); + }; + scope.$select = function (index, evt) { + scope.$$postDigest(function () { + $typeahead.select(index); + }); + }; + scope.$isVisible = function () { + return $typeahead.$isVisible(); + }; + // Public methods + $typeahead.update = function (matches) { + scope.$matches = matches; + if (scope.$activeIndex >= matches.length) { + scope.$activeIndex = 0; + } + }; + $typeahead.activate = function (index) { + scope.$activeIndex = index; + }; + $typeahead.select = function (index) { + var value = scope.$matches[index].value; + if (controller) { + controller.$setViewValue(value); + controller.$render(); + if (parentScope) + parentScope.$digest(); + } + if (options.trigger === 'focus') + element[0].blur(); + else if ($typeahead.$isShown) + $typeahead.hide(); + scope.$activeIndex = 0; + // Emit event + scope.$emit('$typeahead.select', value, index); + }; + // Protected methods + $typeahead.$isVisible = function () { + if (!options.minLength || !controller) { + return !!scope.$matches.length; + } + // minLength support + return scope.$matches.length && angular.isString(controller.$viewValue) && controller.$viewValue.length >= options.minLength; + }; + $typeahead.$onMouseDown = function (evt) { + // Prevent blur on mousedown + evt.preventDefault(); + evt.stopPropagation(); + }; + $typeahead.$onKeyDown = function (evt) { + if (!/(38|40|13)/.test(evt.keyCode)) + return; + evt.preventDefault(); + evt.stopPropagation(); + // Select with enter + if (evt.keyCode === 13) { + return $typeahead.select(scope.$activeIndex); + } + // Navigate with keyboard + if (evt.keyCode === 38 && scope.$activeIndex > 0) + scope.$activeIndex--; + else if (evt.keyCode === 40 && scope.$activeIndex < scope.$matches.length - 1) + scope.$activeIndex++; + else if (angular.isUndefined(scope.$activeIndex)) + scope.$activeIndex = 0; + scope.$digest(); + }; + // Overrides + var show = $typeahead.show; + $typeahead.show = function () { + show(); + setTimeout(function () { + $typeahead.$element.on('mousedown', $typeahead.$onMouseDown); + if (options.keyboard) { + element.on('keydown', $typeahead.$onKeyDown); + } + }); + }; + var hide = $typeahead.hide; + $typeahead.hide = function () { + $typeahead.$element.off('mousedown', $typeahead.$onMouseDown); + if (options.keyboard) { + element.off('keydown', $typeahead.$onKeyDown); + } + hide(); + }; + return $typeahead; + } + TypeaheadFactory.defaults = defaults; + return TypeaheadFactory; + } + ]; + }).directive('bsTypeahead', [ + '$window', + '$parse', + '$q', + '$typeahead', + '$parseOptions', + function ($window, $parse, $q, $typeahead, $parseOptions) { + var defaults = $typeahead.defaults; + return { + restrict: 'EAC', + require: 'ngModel', + link: function postLink(scope, element, attr, controller) { + // Directive options + var options = { + scope: scope, + controller: controller + }; + angular.forEach([ + 'placement', + 'container', + 'delay', + 'trigger', + 'keyboard', + 'html', + 'animation', + 'template', + 'filter', + 'limit', + 'minLength' + ], function (key) { + if (angular.isDefined(attr[key])) + options[key] = attr[key]; + }); + // Build proper ngOptions + var filter = options.filter || defaults.filter; + var limit = options.limit || defaults.limit; + var ngOptions = attr.ngOptions; + if (filter) + ngOptions += ' | ' + filter + ':$viewValue'; + if (limit) + ngOptions += ' | limitTo:' + limit; + var parsedOptions = $parseOptions(ngOptions); + // Initialize typeahead + var typeahead = $typeahead(element, options); + // Watch model for changes + scope.$watch(attr.ngModel, function (newValue, oldValue) { + parsedOptions.valuesFn(scope, controller).then(function (values) { + if (values.length > limit) + values = values.slice(0, limit); + // if(matches.length === 1 && matches[0].value === newValue) return; + typeahead.update(values); + }); + }); + // Garbage collection + scope.$on('$destroy', function () { + typeahead.destroy(); + options = null; + typeahead = null; + }); + } + }; + } + ]); +}(window, document)); \ No newline at end of file diff --git a/static/lib/angular-strap.min.js b/static/lib/angular-strap.min.js index 08b9322ad..c358b9e1c 100644 --- a/static/lib/angular-strap.min.js +++ b/static/lib/angular-strap.min.js @@ -1,8 +1,10 @@ /** - * AngularStrap - Twitter Bootstrap directives for AngularJS - * @version v0.7.5 - 2013-07-21 - * @link http://mgcrea.github.com/angular-strap - * @author Olivier Louvignes + * angular-strap + * @version v2.0.0-rc.4 - 2014-03-07 + * @link http://mgcrea.github.io/angular-strap + * @author Olivier Louvignes (olivier@mg-crea.com) * @license MIT License, http://www.opensource.org/licenses/MIT */ -angular.module("$strap.config",[]).value("$strapConfig",{}),angular.module("$strap.filters",["$strap.config"]),angular.module("$strap.directives",["$strap.config"]),angular.module("$strap",["$strap.filters","$strap.directives","$strap.config"]),angular.module("$strap.directives").directive("bsAlert",["$parse","$timeout","$compile",function(t,e,n){return{restrict:"A",link:function(a,i,o){var r=t(o.bsAlert),s=(r.assign,r(a)),l=function(t){e(function(){i.alert("close")},1*t)};o.bsAlert?a.$watch(o.bsAlert,function(t,e){s=t,i.html((t.title?""+t.title+" ":"")+t.content||""),t.closed&&i.hide(),n(i.contents())(a),(t.type||e.type)&&(e.type&&i.removeClass("alert-"+e.type),t.type&&i.addClass("alert-"+t.type)),angular.isDefined(t.closeAfter)?l(t.closeAfter):o.closeAfter&&l(o.closeAfter),(angular.isUndefined(o.closeButton)||"0"!==o.closeButton&&"false"!==o.closeButton)&&i.prepend('')},!0):((angular.isUndefined(o.closeButton)||"0"!==o.closeButton&&"false"!==o.closeButton)&&i.prepend(''),o.closeAfter&&l(o.closeAfter)),i.addClass("alert").alert(),i.hasClass("fade")&&(i.removeClass("in"),setTimeout(function(){i.addClass("in")}));var u=o.ngRepeat&&o.ngRepeat.split(" in ").pop();i.on("close",function(t){var e;u?(t.preventDefault(),i.removeClass("in"),e=function(){i.trigger("closed"),a.$parent&&a.$parent.$apply(function(){for(var t=u.split("."),e=a.$parent,n=0;t.length>n;++n)e&&(e=e[t[n]]);e&&e.splice(a.$index,1)})},$.support.transition&&i.hasClass("fade")?i.on($.support.transition.end,e):e()):s&&(t.preventDefault(),i.removeClass("in"),e=function(){i.trigger("closed"),a.$apply(function(){s.closed=!0})},$.support.transition&&i.hasClass("fade")?i.on($.support.transition.end,e):e())})}}}]),angular.module("$strap.directives").directive("bsButton",["$parse","$timeout",function(t){return{restrict:"A",require:"?ngModel",link:function(e,n,a,i){if(i){n.parent('[data-toggle="buttons-checkbox"], [data-toggle="buttons-radio"]').length||n.attr("data-toggle","button");var o=!!e.$eval(a.ngModel);o&&n.addClass("active"),e.$watch(a.ngModel,function(t,e){var a=!!t,i=!!e;a!==i?$.fn.button.Constructor.prototype.toggle.call(r):a&&!o&&n.addClass("active")})}n.hasClass("btn")||n.on("click.button.data-api",function(){n.button("toggle")}),n.button();var r=n.data("button");r.toggle=function(){if(!i)return $.fn.button.Constructor.prototype.toggle.call(this);var a=n.parent('[data-toggle="buttons-radio"]');a.length?(n.siblings("[ng-model]").each(function(n,a){t($(a).attr("ng-model")).assign(e,!1)}),e.$digest(),i.$modelValue||(i.$setViewValue(!i.$modelValue),e.$digest())):e.$apply(function(){i.$setViewValue(!i.$modelValue)})}}}}]).directive("bsButtonsCheckbox",["$parse",function(){return{restrict:"A",require:"?ngModel",compile:function(t){t.attr("data-toggle","buttons-checkbox").find("a, button").each(function(t,e){$(e).attr("bs-button","")})}}}]).directive("bsButtonsRadio",["$timeout",function(t){return{restrict:"A",require:"?ngModel",compile:function(e,n){return e.attr("data-toggle","buttons-radio"),n.ngModel||e.find("a, button").each(function(t,e){$(e).attr("bs-button","")}),function(e,n,a,i){i&&(t(function(){n.find("[value]").button().filter('[value="'+i.$viewValue+'"]').addClass("active")}),n.on("click.button.data-api",function(t){e.$apply(function(){i.$setViewValue($(t.target).closest("button").attr("value"))})}),e.$watch(a.ngModel,function(t,i){if(t!==i){var o=n.find('[value="'+e.$eval(a.ngModel)+'"]');o.length&&o.button("toggle")}}))}}}}]),angular.module("$strap.directives").directive("bsButtonSelect",["$parse","$timeout",function(t){return{restrict:"A",require:"?ngModel",link:function(e,n,a,i){var o=t(a.bsButtonSelect);o.assign,i&&(n.text(e.$eval(a.ngModel)),e.$watch(a.ngModel,function(t){n.text(t)}));var r,s,l,u;n.bind("click",function(){r=o(e),s=i?e.$eval(a.ngModel):n.text(),l=r.indexOf(s),u=l>r.length-2?r[0]:r[l+1],e.$apply(function(){n.text(u),i&&i.$setViewValue(u)})})}}}]),angular.module("$strap.directives").directive("bsDatepicker",["$timeout","$strapConfig",function(t,e){var n=/(iP(a|o)d|iPhone)/g.test(navigator.userAgent),a=function a(t){return t=t||"en",{"/":"[\\/]","-":"[-]",".":"[.]"," ":"[\\s]",dd:"(?:(?:[0-2]?[0-9]{1})|(?:[3][01]{1}))",d:"(?:(?:[0-2]?[0-9]{1})|(?:[3][01]{1}))",mm:"(?:[0]?[1-9]|[1][012])",m:"(?:[0]?[1-9]|[1][012])",DD:"(?:"+$.fn.datepicker.dates[t].days.join("|")+")",D:"(?:"+$.fn.datepicker.dates[t].daysShort.join("|")+")",MM:"(?:"+$.fn.datepicker.dates[t].months.join("|")+")",M:"(?:"+$.fn.datepicker.dates[t].monthsShort.join("|")+")",yyyy:"(?:(?:[1]{1}[0-9]{1}[0-9]{1}[0-9]{1})|(?:[2]{1}[0-9]{3}))(?![[0-9]])",yy:"(?:(?:[0-9]{1}[0-9]{1}))(?![[0-9]])"}},i=function i(t,e){var n,i=t,o=a(e);return n=0,angular.forEach(o,function(t,e){i=i.split(e).join("${"+n+"}"),n++}),n=0,angular.forEach(o,function(t){i=i.split("${"+n+"}").join(t),n++}),RegExp("^"+i+"$",["i"])};return{restrict:"A",require:"?ngModel",link:function(t,a,o,r){var s=angular.extend({autoclose:!0},e.datepicker||{}),l=o.dateType||s.type||"date";angular.forEach(["format","weekStart","calendarWeeks","startDate","endDate","daysOfWeekDisabled","autoclose","startView","minViewMode","todayBtn","todayHighlight","keyboardNavigation","language","forceParse"],function(t){angular.isDefined(o[t])&&(s[t]=o[t])});var u=s.language||"en",c=o.dateFormat||s.format||$.fn.datepicker.dates[u]&&$.fn.datepicker.dates[u].format||"mm/dd/yyyy",d=n?"yyyy-mm-dd":c,p=i(d,u);r&&(r.$formatters.unshift(function(t){return"date"===l&&angular.isString(t)&&t?$.fn.datepicker.DPGlobal.parseDate(t,$.fn.datepicker.DPGlobal.parseFormat(c),u):t}),r.$parsers.unshift(function(t){return t?"date"===l&&angular.isDate(t)?(r.$setValidity("date",!0),t):angular.isString(t)&&p.test(t)?(r.$setValidity("date",!0),n?new Date(t):"string"===l?t:$.fn.datepicker.DPGlobal.parseDate(t,$.fn.datepicker.DPGlobal.parseFormat(d),u)):(r.$setValidity("date",!1),void 0):(r.$setValidity("date",!0),null)}),r.$render=function(){if(n){var t=r.$viewValue?$.fn.datepicker.DPGlobal.formatDate(r.$viewValue,$.fn.datepicker.DPGlobal.parseFormat(d),u):"";return a.val(t),t}return r.$viewValue||a.val(""),a.datepicker("update",r.$viewValue)}),n?a.prop("type","date").css("-webkit-appearance","textfield"):(r&&a.on("changeDate",function(e){t.$apply(function(){r.$setViewValue("string"===l?a.val():e.date)})}),a.datepicker(angular.extend(s,{format:d,language:u})),t.$on("$destroy",function(){var t=a.data("datepicker");t&&(t.picker.remove(),a.data("datepicker",null))}),o.$observe("startDate",function(t){a.datepicker("setStartDate",t)}),o.$observe("endDate",function(t){a.datepicker("setEndDate",t)}));var f=a.siblings('[data-toggle="datepicker"]');f.length&&f.on("click",function(){a.prop("disabled")||a.trigger("focus")})}}}]),angular.module("$strap.directives").directive("bsDropdown",["$parse","$compile","$timeout",function(t,e,n){var a=function(t,e){return e||(e=['"]),angular.forEach(t,function(t,n){if(t.divider)return e.splice(n+1,0,'
  • ');var i=""+'"+(t.text||"")+"";t.submenu&&t.submenu.length&&(i+=a(t.submenu).join("\n")),i+="",e.splice(n+1,0,i)}),e};return{restrict:"EA",scope:!0,link:function(i,o,r){var s=t(r.bsDropdown),l=s(i);n(function(){!angular.isArray(l);var t=angular.element(a(l).join(""));t.insertAfter(o),e(o.next("ul.dropdown-menu"))(i)}),o.addClass("dropdown-toggle").attr("data-toggle","dropdown")}}}]),angular.module("$strap.directives").factory("$modal",["$rootScope","$compile","$http","$timeout","$q","$templateCache","$strapConfig",function(t,e,n,a,i,o,r){var s=function s(s){function l(s){var l=angular.extend({show:!0},r.modal,s),u=l.scope?l.scope:t.$new(),c=l.template;return i.when(o.get(c)||n.get(c,{cache:!0}).then(function(t){return t.data})).then(function(t){var n=c.replace(".html","").replace(/[\/|\.|:]/g,"-")+"-"+u.$id,i=$('
    ').attr("id",n).addClass("fade").html(t);return l.modalClass&&i.addClass(l.modalClass),$("body").append(i),a(function(){e(i)(u)}),u.$modal=function(t){i.modal(t)},angular.forEach(["show","hide"],function(t){u[t]=function(){i.modal(t)}}),u.dismiss=u.hide,angular.forEach(["show","shown","hide","hidden"],function(t){i.on(t,function(e){u.$emit("modal-"+t,e)})}),i.on("shown",function(){$("input[autofocus], textarea[autofocus]",i).first().trigger("focus")}),i.on("hidden",function(){l.persist||u.$destroy()}),u.$on("$destroy",function(){i.remove()}),i.modal(l),i})}return new l(s)};return s}]).directive("bsModal",["$q","$modal",function(t,e){return{restrict:"A",scope:!0,link:function(n,a,i){var o={template:n.$eval(i.bsModal),persist:!0,show:!1,scope:n};angular.forEach(["modalClass","backdrop","keyboard"],function(t){angular.isDefined(i[t])&&(o[t]=i[t])}),t.when(e(o)).then(function(t){a.attr("data-target","#"+t.attr("id")).attr("data-toggle","modal")})}}}]),angular.module("$strap.directives").directive("bsNavbar",["$location",function(t){return{restrict:"A",link:function(e,n){e.$watch(function(){return t.path()},function(t){$("li[data-match-route]",n).each(function(e,n){var a=angular.element(n),i=a.attr("data-match-route"),o=RegExp("^"+i+"$",["i"]);o.test(t)?a.addClass("active").find(".collapse.in").collapse("hide"):a.removeClass("active")})})}}}]),angular.module("$strap.directives").directive("bsPopover",["$parse","$compile","$http","$timeout","$q","$templateCache",function(t,e,n,a,i,o){return $("body").on("keyup",function(t){27===t.keyCode&&$(".popover.in").each(function(){$(this).popover("hide")})}),{restrict:"A",scope:!0,link:function(r,s,l){var u=t(l.bsPopover),c=(u.assign,u(r)),d={};angular.isObject(c)&&(d=c),i.when(d.content||o.get(c)||n.get(c,{cache:!0})).then(function(t){angular.isObject(t)&&(t=t.data),l.unique&&s.on("show",function(){$(".popover.in").each(function(){var t=$(this),e=t.data("bs.popover");e&&!e.$element.is(s)&&t.popover("hide")})}),l.hide&&r.$watch(l.hide,function(t,e){t?n.hide():t!==e&&n.show()}),l.show&&r.$watch(l.show,function(t,e){t?a(function(){n.show()}):t!==e&&n.hide()}),s.popover(angular.extend({},d,{content:t,html:!0}));var n=s.data("bs.popover");n.hasContent=function(){return this.getTitle()||t},n.getPosition=function(){var t=$.fn.popover.Constructor.prototype.getPosition.apply(this,arguments);return e(this.$tip)(r),r.$digest(),this.$tip.data("bs.popover",this),t},r.$popover=function(t){n(t)},angular.forEach(["show","hide"],function(t){r[t]=function(){n[t]()}}),r.dismiss=r.hide,angular.forEach(["show","shown","hide","hidden"],function(t){s.on(t,function(e){r.$emit("popover-"+t,e)})})})}}}]),angular.module("$strap.directives").directive("bsSelect",["$timeout",function(t){return{restrict:"A",require:"?ngModel",link:function(e,n,a,i){var o=e.$eval(a.bsSelect)||{};t(function(){n.selectpicker(o),n.next().removeClass("ng-scope")}),i&&e.$watch(a.ngModel,function(t,e){angular.equals(t,e)||n.selectpicker("refresh")})}}}]),angular.module("$strap.directives").directive("bsTabs",["$parse","$compile","$timeout",function(t,e,n){var a='
    ';return{restrict:"A",require:"?ngModel",priority:0,scope:!0,template:a,replace:!0,transclude:!0,compile:function(){return function(e,a,i,o){var r=t(i.bsTabs);r.assign,r(e),e.panes=[];var s,l,u,c=a.find("ul.nav-tabs"),d=a.find("div.tab-content"),p=0;n(function(){d.find("[data-title], [data-tab]").each(function(t){var n=angular.element(this);s="tab-"+e.$id+"-"+t,l=n.data("title")||n.data("tab"),u=!u&&n.hasClass("active"),n.attr("id",s).addClass("tab-pane"),i.fade&&n.addClass("fade"),e.panes.push({id:s,title:l,content:this.innerHTML,active:u})}),e.panes.length&&!u&&(d.find(".tab-pane:first-child").addClass("active"+(i.fade?" in":"")),e.panes[0].active=!0)}),o&&(a.on("show",function(t){var n=$(t.target);e.$apply(function(){o.$setViewValue(n.data("index"))})}),e.$watch(i.ngModel,function(t){angular.isUndefined(t)||(p=t,setTimeout(function(){var e=$(c[0].querySelectorAll("li")[1*t]);e.hasClass("active")||e.children("a").tab("show")}))}))}}}}]),angular.module("$strap.directives").directive("bsTimepicker",["$timeout","$strapConfig",function(t,e){var n="((?:(?:[0-1][0-9])|(?:[2][0-3])|(?:[0-9])):(?:[0-5][0-9])(?::[0-5][0-9])?(?:\\s?(?:am|AM|pm|PM))?)";return{restrict:"A",require:"?ngModel",link:function(a,i,o,r){if(r){i.on("changeTime.timepicker",function(){t(function(){r.$setViewValue(i.val())})});var s=RegExp("^"+n+"$",["i"]);r.$parsers.unshift(function(t){return!t||s.test(t)?(r.$setValidity("time",!0),t):(r.$setValidity("time",!1),void 0)})}i.attr("data-toggle","timepicker"),i.parent().addClass("bootstrap-timepicker"),i.timepicker(e.timepicker||{});var l=i.data("timepicker"),u=i.siblings('[data-toggle="timepicker"]');u.length&&u.on("click",$.proxy(l.showWidget,l))}}}]),angular.module("$strap.directives").directive("bsTooltip",["$parse","$compile",function(t){return{restrict:"A",scope:!0,link:function(e,n,a){var i=t(a.bsTooltip),o=(i.assign,i(e));e.$watch(a.bsTooltip,function(t,e){t!==e&&(o=t)}),a.unique&&n.on("show",function(){$(".tooltip.in").each(function(){var t=$(this),e=t.data("bs.tooltip");e&&!e.$element.is(n)&&t.tooltip("hide")})}),n.tooltip({title:function(){return angular.isFunction(o)?o.apply(null,arguments):o},html:!0});var r=n.data("bs.tooltip");r.show=function(){var t=$.fn.tooltip.Constructor.prototype.show.apply(this,arguments);return this.tip().data("bs.tooltip",this),t},e._tooltip=function(t){n.tooltip(t)},e.hide=function(){n.tooltip("hide")},e.show=function(){n.tooltip("show")},e.dismiss=e.hide}}}]),angular.module("$strap.directives").directive("bsTypeahead",["$parse",function(t){return{restrict:"A",require:"?ngModel",link:function(e,n,a,i){var o=t(a.bsTypeahead),r=(o.assign,o(e));e.$watch(a.bsTypeahead,function(t,e){t!==e&&(r=t)}),n.attr("data-provide","typeahead"),n.typeahead({source:function(){return angular.isFunction(r)?r.apply(null,arguments):r},minLength:a.minLength||1,items:a.items,updater:function(t){return i&&e.$apply(function(){i.$setViewValue(t)}),e.$emit("typeahead-updated",t),t}});var s=n.data("typeahead");s.lookup=function(){var t;return this.query=this.$element.val()||"",this.query.length=d?"top":null!==a&&d+a<=b.top?"middle":null!==u&&b.top+c+n>=e-u?"bottom":"middle"}function h(){return l[0]===b?b.pageYOffset:l[0]===b}function i(){return l[0]===b?b.document.body.scrollHeight:l[0].scrollHeight}var j={},k=angular.extend({},a,f),l=k.target,m="affix affix-top affix-bottom",n=0,o=0,p=null,q=null,r=d.parent();if(k.offsetParent)if(k.offsetParent.match(/^\d+$/))for(var s=0;s<1*k.offsetParent-1;s++)r=r.parent();else r=angular.element(k.offsetParent);var t=0;k.offsetTop&&("auto"===k.offsetTop&&(k.offsetTop="+0"),k.offsetTop.match(/^[-+]\d+$/)?(n-=1*k.offsetTop,t=k.offsetParent?c.offset(r[0]).top+1*k.offsetTop:c.offset(d[0]).top-c.css(d[0],"marginTop",!0)+1*k.offsetTop):t=1*k.offsetTop);var u=0;return k.offsetBottom&&(u=k.offsetParent&&k.offsetBottom.match(/^[-+]\d+$/)?i()-(c.offset(r[0]).top+c.height(r[0]))+1*k.offsetBottom+1:1*k.offsetBottom),j.init=function(){o=c.offset(d[0]).top+n,l.on("scroll",this.checkPosition),l.on("click",this.checkPositionWithEventLoop),this.checkPosition(),this.checkPositionWithEventLoop()},j.destroy=function(){l.off("scroll",this.checkPosition),l.off("click",this.checkPositionWithEventLoop)},j.checkPositionWithEventLoop=function(){setTimeout(this.checkPosition,1)},j.checkPosition=function(){var a=h(),b=c.offset(d[0]),f=c.height(d[0]),i=g(q,b,f);p!==i&&(p=i,d.removeClass(m).addClass("affix"+("middle"!==i?"-"+i:"")),"top"===i?(q=null,d.css("position",k.offsetParent?"":"relative"),d.css("top","")):"bottom"===i?(q=k.offsetUnpin?-(1*k.offsetUnpin):b.top-a,d.css("position",k.offsetParent?"":"relative"),d.css("top",k.offsetParent?"":e[0].offsetHeight-u-f-o+"px")):(q=null,d.css("position","fixed"),d.css("top",n+"px")))},j.init(),j}var e=angular.element(b.document.body);return d}]}).directive("bsAffix",["$affix","$window",function(a,b){return{restrict:"EAC",require:"^?bsAffixTarget",link:function(c,d,e,f){var g={scope:c,offsetTop:"auto",target:f?f.$element:angular.element(b)};angular.forEach(["offsetTop","offsetBottom","offsetParent","offsetUnpin"],function(a){angular.isDefined(e[a])&&(g[a]=e[a])});var h=a(d,g);c.$on("$destroy",function(){g=null,h=null})}}}]).directive("bsAffixTarget",function(){return{controller:["$element",function(a){this.$element=a}]}}),angular.module("mgcrea.ngStrap.alert",[]).provider("$alert",function(){var a=this.defaults={animation:"am-fade",prefixClass:"alert",placement:null,template:"alert/alert.tpl.html",container:!1,element:null,backdrop:!1,keyboard:!0,show:!0,duration:!1,type:!1};this.$get=["$modal","$timeout",function(b,c){function d(d){var e={},f=angular.extend({},a,d);e=b(f),f.type&&(e.$scope.type=f.type);var g=e.show;return f.duration&&(e.show=function(){g(),c(function(){e.hide()},1e3*f.duration)}),e}return d}]}).directive("bsAlert",["$window","$location","$sce","$alert",function(a,b,c,d){a.requestAnimationFrame||a.setTimeout;return{restrict:"EAC",scope:!0,link:function(a,b,e){var f={scope:a,element:b,show:!1};angular.forEach(["template","placement","keyboard","html","container","animation","duration"],function(a){angular.isDefined(e[a])&&(f[a]=e[a])}),angular.forEach(["title","content","type"],function(b){e[b]&&e.$observe(b,function(d){a[b]=c.trustAsHtml(d)})}),e.bsAlert&&a.$watch(e.bsAlert,function(b){angular.isObject(b)?angular.extend(a,b):a.content=b},!0);var g=d(f);b.on(e.trigger||"click",g.toggle),a.$on("$destroy",function(){g.destroy(),f=null,g=null})}}}]),angular.module("mgcrea.ngStrap.aside",["mgcrea.ngStrap.modal"]).provider("$aside",function(){var a=this.defaults={animation:"am-fade-and-slide-right",prefixClass:"aside",placement:"right",template:"aside/aside.tpl.html",contentTemplate:!1,container:!1,element:null,backdrop:!0,keyboard:!0,html:!1,show:!0};this.$get=["$modal",function(b){function c(c){var d={},e=angular.extend({},a,c);return d=b(e)}return c}]}).directive("bsAside",["$window","$location","$sce","$aside",function(a,b,c,d){a.requestAnimationFrame||a.setTimeout;return{restrict:"EAC",scope:!0,link:function(a,b,e){var f={scope:a,element:b,show:!1};angular.forEach(["template","contentTemplate","placement","backdrop","keyboard","html","container","animation"],function(a){angular.isDefined(e[a])&&(f[a]=e[a])}),angular.forEach(["title","content"],function(b){e[b]&&e.$observe(b,function(d){a[b]=c.trustAsHtml(d)})}),e.bsAside&&a.$watch(e.bsAside,function(b){angular.isObject(b)?angular.extend(a,b):a.content=b},!0);var g=d(f);b.on(e.trigger||"click",g.toggle),a.$on("$destroy",function(){g.destroy(),f=null,g=null})}}}]),angular.module("mgcrea.ngStrap.button",["ngAnimate"]).provider("$button",function(){var a=this.defaults={activeClass:"active",toggleEvent:"click"};this.$get=function(){return{defaults:a}}}).directive("bsCheckboxGroup",function(){return{restrict:"A",require:"ngModel",compile:function(a,b){a.attr("data-toggle","buttons"),a.removeAttr("ng-model");var c=a[0].querySelectorAll('input[type="checkbox"]');angular.forEach(c,function(a){var c=angular.element(a);c.attr("bs-checkbox",""),c.attr("ng-model",b.ngModel+"."+c.attr("value"))})}}}).directive("bsCheckbox",["$button","$$animateReflow",function(a,b){var c=a.defaults,d=/^(true|false|\d+)$/;return{restrict:"A",require:"ngModel",link:function(a,e,f,g){var h=c,i="INPUT"===e[0].nodeName,j=i?e.parent():e,k=angular.isDefined(f.trueValue)?f.trueValue:!0;d.test(f.trueValue)&&(k=a.$eval(f.trueValue));var l=angular.isDefined(f.falseValue)?f.falseValue:!1;d.test(f.falseValue)&&(l=a.$eval(f.falseValue));var m="boolean"!=typeof k||"boolean"!=typeof l;m&&(g.$parsers.push(function(a){return a?k:l}),a.$watch(f.ngModel,function(){g.$render()})),g.$render=function(){var a=angular.equals(g.$modelValue,k);b(function(){i&&(e[0].checked=a),j.toggleClass(h.activeClass,a)})},e.bind(h.toggleEvent,function(){a.$apply(function(){i||g.$setViewValue(!j.hasClass("active")),m||g.$render()})})}}}]).directive("bsRadioGroup",function(){return{restrict:"A",require:"ngModel",compile:function(a,b){a.attr("data-toggle","buttons"),a.removeAttr("ng-model");var c=a[0].querySelectorAll('input[type="radio"]');angular.forEach(c,function(a){angular.element(a).attr("bs-radio",""),angular.element(a).attr("ng-model",b.ngModel)})}}}).directive("bsRadio",["$button","$$animateReflow",function(a,b){var c=a.defaults,d=/^(true|false|\d+)$/;return{restrict:"A",require:"ngModel",link:function(a,e,f,g){var h=c,i="INPUT"===e[0].nodeName,j=i?e.parent():e,k=d.test(f.value)?a.$eval(f.value):f.value;g.$render=function(){var a=angular.equals(g.$modelValue,k);b(function(){i&&(e[0].checked=a),j.toggleClass(h.activeClass,a)})},e.bind(h.toggleEvent,function(){a.$apply(function(){g.$setViewValue(k),g.$render()})})}}}]),angular.module("mgcrea.ngStrap.datepicker",["mgcrea.ngStrap.helpers.dateParser","mgcrea.ngStrap.tooltip"]).provider("$datepicker",function(){var a=this.defaults={animation:"am-fade",prefixClass:"datepicker",placement:"bottom-left",template:"datepicker/datepicker.tpl.html",trigger:"focus",container:!1,keyboard:!0,html:!1,delay:0,useNative:!1,dateType:"date",dateFormat:"shortDate",strictFormat:!1,autoclose:!1,minDate:-1/0,maxDate:+1/0,startView:0,minView:0,startWeek:0};this.$get=["$window","$document","$rootScope","$sce","$locale","dateFilter","datepickerViews","$tooltip",function(b,c,d,e,f,g,h,i){function j(b,c,d){function e(a){a.selected=g.$isSelected(a.date)}function f(){b[0].focus()}var g=i(b,angular.extend({},a,d)),j=d.scope,m=g.$options,n=g.$scope;m.startView&&(m.startView-=m.minView);var o=h(g);g.$views=o.views;var p=o.viewDate;n.$mode=m.startView;var q=g.$views[n.$mode];n.$select=function(a){g.select(a)},n.$selectPane=function(a){g.$selectPane(a)},n.$toggleMode=function(){g.setMode((n.$mode+1)%g.$views.length)},g.update=function(a){angular.isDate(a)&&!isNaN(a.getTime())&&(g.$date=a,q.update.call(q,a)),g.$build(!0)},g.select=function(a,b){angular.isDate(c.$dateValue)||(c.$dateValue=new Date(a)),c.$dateValue.setFullYear(a.getFullYear(),a.getMonth(),a.getDate()),!n.$mode||b?(c.$setViewValue(c.$dateValue),c.$render(),m.autoclose&&!b&&g.hide(!0)):(angular.extend(p,{year:a.getFullYear(),month:a.getMonth(),date:a.getDate()}),g.setMode(n.$mode-1),g.$build())},g.setMode=function(a){n.$mode=a,q=g.$views[n.$mode],g.$build()},g.$build=function(a){a===!0&&q.built||(a!==!1||q.built)&&q.build.call(q)},g.$updateSelected=function(){for(var a=0,b=n.rows.length;b>a;a++)angular.forEach(n.rows[a],e)},g.$isSelected=function(a){return q.isSelected(a)},g.$selectPane=function(a){var b=q.steps,c=new Date(Date.UTC(p.year+(b.year||0)*a,p.month+(b.month||0)*a,p.date+(b.day||0)*a));angular.extend(p,{year:c.getUTCFullYear(),month:c.getUTCMonth(),date:c.getUTCDate()}),g.$build()},g.$onMouseDown=function(a){if(a.preventDefault(),a.stopPropagation(),k){var b=angular.element(a.target);"button"!==b[0].nodeName.toLowerCase()&&(b=b.parent()),b.triggerHandler("click")}},g.$onKeyDown=function(a){if(/(38|37|39|40|13)/.test(a.keyCode)&&!a.shiftKey&&!a.altKey){if(a.preventDefault(),a.stopPropagation(),13===a.keyCode)return n.$mode?n.$apply(function(){g.setMode(n.$mode-1)}):g.hide(!0);q.onKeyDown(a),j.$digest()}};var r=g.init;g.init=function(){return l&&m.useNative?(b.prop("type","date"),void b.css("-webkit-appearance","textfield")):(k&&(b.prop("type","text"),b.attr("readonly","true"),b.on("click",f)),void r())};var s=g.destroy;g.destroy=function(){l&&m.useNative&&b.off("click",f),s()};var t=g.show;g.show=function(){t(),setTimeout(function(){g.$element.on(k?"touchstart":"mousedown",g.$onMouseDown),m.keyboard&&b.on("keydown",g.$onKeyDown)})};var u=g.hide;return g.hide=function(a){g.$element.off(k?"touchstart":"mousedown",g.$onMouseDown),m.keyboard&&b.off("keydown",g.$onKeyDown),u(a)},g}var k=(angular.element(b.document.body),"createTouch"in b.document),l=/(ip(a|o)d|iphone|android)/gi.test(b.navigator.userAgent);return a.lang||(a.lang=f.id),j.defaults=a,j}]}).directive("bsDatepicker",["$window","$parse","$q","$locale","dateFilter","$datepicker","$dateParser","$timeout",function(a,b,c,d,e,f,g){{var h=(f.defaults,/(ip(a|o)d|iphone|android)/gi.test(a.navigator.userAgent));a.requestAnimationFrame||a.setTimeout}return{restrict:"EAC",require:"ngModel",link:function(a,b,c,d){var i={scope:a,controller:d};angular.forEach(["placement","container","delay","trigger","keyboard","html","animation","template","autoclose","dateType","dateFormat","strictFormat","startWeek","useNative","lang","startView","minView"],function(a){angular.isDefined(c[a])&&(i[a]=c[a])}),h&&i.useNative&&(i.dateFormat="yyyy-MM-dd");var j=f(b,d,i);i=j.$options,angular.forEach(["minDate","maxDate"],function(a){angular.isDefined(c[a])&&c.$observe(a,function(b){if("today"===b){var c=new Date;j.$options[a]=+new Date(c.getFullYear(),c.getMonth(),c.getDate()+("maxDate"===a?1:0),0,0,0,"minDate"===a?0:-1)}else j.$options[a]=angular.isString(b)&&b.match(/^".+"$/)?+new Date(b.substr(1,b.length-2)):+new Date(b);!isNaN(j.$options[a])&&j.$build(!1)})}),a.$watch(c.ngModel,function(){j.update(d.$dateValue)},!0);var k=g({format:i.dateFormat,lang:i.lang,strict:i.strictFormat});d.$parsers.unshift(function(a){if(!a)return void d.$setValidity("date",!0);var b=k.parse(a,d.$dateValue);if(!b||isNaN(b.getTime()))d.$setValidity("date",!1);else{var c=b.getTime()>=i.minDate&&b.getTime()<=i.maxDate;d.$setValidity("date",c),c&&(d.$dateValue=b)}return"string"===i.dateType?e(a,i.dateFormat):"number"===i.dateType?d.$dateValue.getTime():"iso"===i.dateType?d.$dateValue.toISOString():new Date(d.$dateValue)}),d.$formatters.push(function(a){if(!angular.isUndefined(a)&&null!==a){var b=angular.isDate(a)?a:new Date(a);return d.$dateValue=b,d.$dateValue}}),d.$render=function(){b.val(!d.$dateValue||isNaN(d.$dateValue.getTime())?"":e(d.$dateValue,i.dateFormat))},a.$on("$destroy",function(){j.destroy(),i=null,j=null})}}}]).provider("datepickerViews",function(){function a(a,b){for(var c=[];a.length>0;)c.push(a.splice(0,b));return c}this.defaults={dayFormat:"dd",daySplit:7};this.$get=["$locale","$sce","dateFilter",function(b,c,d){return function(e){var f=e.$scope,g=e.$options,h=b.DATETIME_FORMATS.SHORTDAY,i=h.slice(g.startWeek).concat(h.slice(0,g.startWeek)),j=c.trustAsHtml(''+i.join('')+""),k=e.$date||new Date,l={year:k.getFullYear(),month:k.getMonth(),date:k.getDate()},m=(6e4*k.getTimezoneOffset(),[{format:"dd",split:7,steps:{month:1},update:function(a,b){!this.built||b||a.getFullYear()!==l.year||a.getMonth()!==l.month?(angular.extend(l,{year:e.$date.getFullYear(),month:e.$date.getMonth(),date:e.$date.getDate()}),e.$build()):a.getDate()!==l.date&&(l.date=e.$date.getDate(),e.$updateSelected())},build:function(){for(var b,c=new Date(l.year,l.month,1),h=new Date(+c-864e5*(c.getDay()-g.startWeek)),i=[],k=0;42>k;k++)b=new Date(h.getFullYear(),h.getMonth(),h.getDate()+k),i.push({date:b,label:d(b,this.format),selected:e.$date&&this.isSelected(b),muted:b.getMonth()!==l.month,disabled:this.isDisabled(b)});f.title=d(c,"MMMM yyyy"),f.labels=j,f.rows=a(i,this.split),this.built=!0},isSelected:function(a){return e.$date&&a.getFullYear()===e.$date.getFullYear()&&a.getMonth()===e.$date.getMonth()&&a.getDate()===e.$date.getDate()},isDisabled:function(a){return a.getTime()g.maxDate},onKeyDown:function(a){var b=e.$date.getTime();37===a.keyCode?e.select(new Date(b-864e5),!0):38===a.keyCode?e.select(new Date(b-6048e5),!0):39===a.keyCode?e.select(new Date(b+864e5),!0):40===a.keyCode&&e.select(new Date(b+6048e5),!0)}},{name:"month",format:"MMM",split:4,steps:{year:1},update:function(a){this.built&&a.getFullYear()===l.year?a.getMonth()!==l.month&&(angular.extend(l,{month:e.$date.getMonth(),date:e.$date.getDate()}),e.$updateSelected()):(angular.extend(l,{year:e.$date.getFullYear(),month:e.$date.getMonth(),date:e.$date.getDate()}),e.$build())},build:function(){for(var b,c=(new Date(l.year,0,1),[]),g=0;12>g;g++)b=new Date(l.year,g,1),c.push({date:b,label:d(b,this.format),selected:e.$isSelected(b),disabled:this.isDisabled(b)});f.title=d(b,"yyyy"),f.labels=!1,f.rows=a(c,this.split),this.built=!0},isSelected:function(a){return e.$date&&a.getFullYear()===e.$date.getFullYear()&&a.getMonth()===e.$date.getMonth()},isDisabled:function(a){var b=+new Date(a.getFullYear(),a.getMonth()+1,0);return bg.maxDate},onKeyDown:function(a){var b=e.$date.getMonth();37===a.keyCode?e.select(e.$date.setMonth(b-1),!0):38===a.keyCode?e.select(e.$date.setMonth(b-4),!0):39===a.keyCode?e.select(e.$date.setMonth(b+1),!0):40===a.keyCode&&e.select(e.$date.setMonth(b+4),!0)}},{name:"year",format:"yyyy",split:4,steps:{year:12},update:function(a,b){!this.built||b||parseInt(a.getFullYear()/20,10)!==parseInt(l.year/20,10)?(angular.extend(l,{year:e.$date.getFullYear(),month:e.$date.getMonth(),date:e.$date.getDate()}),e.$build()):a.getFullYear()!==l.year&&(angular.extend(l,{year:e.$date.getFullYear(),month:e.$date.getMonth(),date:e.$date.getDate()}),e.$updateSelected())},build:function(){for(var b,c=l.year-l.year%(3*this.split),g=[],h=0;12>h;h++)b=new Date(c+h,0,1),g.push({date:b,label:d(b,this.format),selected:e.$isSelected(b),disabled:this.isDisabled(b)});f.title=g[0].label+"-"+g[g.length-1].label,f.labels=!1,f.rows=a(g,this.split),this.built=!0},isSelected:function(a){return e.$date&&a.getFullYear()===e.$date.getFullYear()},isDisabled:function(a){var b=+new Date(a.getFullYear()+1,0,0);return bg.maxDate},onKeyDown:function(a){var b=e.$date.getFullYear();37===a.keyCode?e.select(e.$date.setYear(b-1),!0):38===a.keyCode?e.select(e.$date.setYear(b-4),!0):39===a.keyCode?e.select(e.$date.setYear(b+1),!0):40===a.keyCode&&e.select(e.$date.setYear(b+4),!0)}}]);return{views:g.minView?Array.prototype.slice.call(m,g.minView):m,viewDate:l}}}]}),angular.module("mgcrea.ngStrap.dropdown",["mgcrea.ngStrap.tooltip"]).provider("$dropdown",function(){var a=this.defaults={animation:"am-fade",prefixClass:"dropdown",placement:"bottom-left",template:"dropdown/dropdown.tpl.html",trigger:"click",container:!1,keyboard:!0,html:!1,delay:0};this.$get=["$window","$rootScope","$tooltip",function(b,c,d){function e(b,e){function h(a){return a.target!==b[0]?a.target!==b[0]&&i.hide():void 0}{var i={},j=angular.extend({},a,e);i.$scope=j.scope&&j.scope.$new()||c.$new()}i=d(b,j),i.$onKeyDown=function(a){if(/(38|40)/.test(a.keyCode)){a.preventDefault(),a.stopPropagation();var b=angular.element(i.$element[0].querySelectorAll("li:not(.divider) a"));if(b.length){var c;angular.forEach(b,function(a,b){g&&g.call(a,":focus")&&(c=b)}),38===a.keyCode&&c>0?c--:40===a.keyCode&&c1){var g=f.search(c[b]);a=a.split(c[b]).join(""),m[c[b]]&&(d[g]=m[c[b]])}return angular.forEach(d,function(a){e.push(a)}),e}function f(a){return a.replace(/\//g,"[\\/]").replace("/-/g","[-]").replace(/\./g,"[.]").replace(/\\s/g,"[\\s]")}function g(a){var b,c=Object.keys(l),d=a;for(b=0;bj?d=setTimeout(i,b-j):(d=null,c||(h=a.apply(f,e)))},j=c&&!d;return d||(d=setTimeout(i,b)),j&&(h=a.apply(f,e)),h}}).constant("throttle",function(a,b,c){var d,e,f,g=null,h=0;c||(c={});var i=function(){h=c.leading===!1?0:new Date,g=null,f=a.apply(d,e)};return function(){var j=new Date;h||c.leading!==!1||(h=j);var k=b-(j-h);return d=this,e=arguments,0>=k?(clearTimeout(g),g=null,h=j,f=a.apply(d,e)):g||c.trailing===!1||(g=setTimeout(i,k)),f}}),angular.module("mgcrea.ngStrap.helpers.dimensions",[]).factory("dimensions",["$document","$window",function(){var b=(angular.element,{}),c=b.nodeName=function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()};b.css=function(b,c,d){var e;return e=b.currentStyle?b.currentStyle[c]:a.getComputedStyle?a.getComputedStyle(b)[c]:b.style[c],d===!0?parseFloat(e)||0:e},b.offset=function(b){var c=b.getBoundingClientRect(),d=b.ownerDocument;return{width:b.offsetWidth,height:b.offsetHeight,top:c.top+(a.pageYOffset||d.documentElement.scrollTop)-(d.documentElement.clientTop||0),left:c.left+(a.pageXOffset||d.documentElement.scrollLeft)-(d.documentElement.clientLeft||0)}},b.position=function(a){var e,f,g={top:0,left:0};return"fixed"===b.css(a,"position")?f=a.getBoundingClientRect():(e=d(a),f=b.offset(a),f=b.offset(a),c(e,"html")||(g=b.offset(e)),g.top+=b.css(e,"borderTopWidth",!0),g.left+=b.css(e,"borderLeftWidth",!0)),{width:a.offsetWidth,height:a.offsetHeight,top:f.top-g.top-b.css(a,"marginTop",!0),left:f.left-g.left-b.css(a,"marginLeft",!0)}};var d=function(a){var d=a.ownerDocument,e=a.offsetParent||d;if(c(e,"#document"))return d.documentElement;for(;e&&!c(e,"html")&&"static"===b.css(e,"position");)e=e.offsetParent;return e||d.documentElement};return b.height=function(a,c){var d=a.offsetHeight;return c?d+=b.css(a,"marginTop",!0)+b.css(a,"marginBottom",!0):d-=b.css(a,"paddingTop",!0)+b.css(a,"paddingBottom",!0)+b.css(a,"borderTopWidth",!0)+b.css(a,"borderBottomWidth",!0),d},b.width=function(a,c){var d=a.offsetWidth;return c?d+=b.css(a,"marginLeft",!0)+b.css(a,"marginRight",!0):d-=b.css(a,"paddingLeft",!0)+b.css(a,"paddingRight",!0)+b.css(a,"borderLeftWidth",!0)+b.css(a,"borderRightWidth",!0),d},b}]),angular.module("mgcrea.ngStrap.helpers.parseOptions",[]).provider("$parseOptions",function(){var a=this.defaults={regexp:/^\s*(.*?)(?:\s+as\s+(.*?))?(?:\s+group\s+by\s+(.*))?\s+for\s+(?:([\$\w][\$\w]*)|(?:\(\s*([\$\w][\$\w]*)\s*,\s*([\$\w][\$\w]*)\s*\)))\s+in\s+(.*?)(?:\s+track\s+by\s+(.*?))?$/};this.$get=["$parse","$q",function(b,c){function d(d,e){function f(a){return a.map(function(a,b){var c,d,e={};return e[k]=a,c=j(e),d=n(e)||b,{label:c,value:d}})}var g={},h=angular.extend({},a,e);g.$values=[];var i,j,k,l,m,n,o;return g.init=function(){g.$match=i=d.match(h.regexp),j=b(i[2]||i[1]),k=i[4]||i[6],l=i[5],m=b(i[3]||""),n=b(i[2]?i[1]:k),o=b(i[7])},g.valuesFn=function(a,b){return c.when(o(a,b)).then(function(a){return g.$values=a?f(a):{},g.$values})},g.init(),g}return d}]}),angular.module("mgcrea.ngStrap.modal",["mgcrea.ngStrap.helpers.dimensions"]).provider("$modal",function(){var a=this.defaults={animation:"am-fade",backdropAnimation:"am-fade",prefixClass:"modal",placement:"top",template:"modal/modal.tpl.html",contentTemplate:!1,container:!1,element:null,backdrop:!0,keyboard:!0,html:!1,show:!0};this.$get=["$window","$rootScope","$compile","$q","$templateCache","$http","$animate","$timeout","dimensions",function(c,d,e,f,g,h,i){function j(b){function c(a){a.target===a.currentTarget&&("static"===g.backdrop?f.focus():f.hide())}var f={},g=angular.extend({},a,b);f.$promise=l(g.template);var h=f.$scope=g.scope&&g.scope.$new()||d.$new();g.element||g.container||(g.container="body"),m(["title","content"],function(a){g[a]&&(h[a]=g[a])}),h.$hide=function(){h.$$postDigest(function(){f.hide()})},h.$show=function(){h.$$postDigest(function(){f.show()})},h.$toggle=function(){h.$$postDigest(function(){f.toggle()})},g.contentTemplate&&(f.$promise=f.$promise.then(function(a){var c=angular.element(a);return l(g.contentTemplate).then(function(a){var d=k('[ng-bind="content"]',c[0]).removeAttr("ng-bind").html(a);return b.template||d.next().remove(),c[0].outerHTML})}));var j,r,s=angular.element('
    ');return f.$promise.then(function(a){angular.isObject(a)&&(a=a.data),g.html&&(a=a.replace(q,'ng-bind-html="')),a=n.apply(a),j=e(a),f.init()}),f.init=function(){g.show&&h.$$postDigest(function(){f.show()})},f.destroy=function(){r&&(r.remove(),r=null),s&&(s.remove(),s=null),h.$destroy()},f.show=function(){var a=g.container?k(g.container):null,b=g.container?null:g.element;r=f.$element=j(h,function(){}),r.css({display:"block"}).addClass(g.placement),g.animation&&(g.backdrop&&s.addClass(g.backdropAnimation),r.addClass(g.animation)),g.backdrop&&i.enter(s,p,null,function(){}),i.enter(r,a,b,function(){}),h.$isShown=!0,h.$$phase||h.$digest();var d=r[0];o(function(){d.focus()}),p.addClass(g.prefixClass+"-open"),g.animation&&p.addClass(g.prefixClass+"-with-"+g.animation),g.backdrop&&(r.on("click",c),s.on("click",c)),g.keyboard&&r.on("keyup",f.$onKeyUp)},f.hide=function(){i.leave(r,function(){p.removeClass(g.prefixClass+"-open"),g.animation&&p.addClass(g.prefixClass+"-with-"+g.animation)}),g.backdrop&&i.leave(s,function(){}),h.$isShown=!1,h.$$phase||h.$digest(),g.backdrop&&(r.off("click",c),s.off("click",c)),g.keyboard&&r.off("keyup",f.$onKeyUp)},f.toggle=function(){h.$isShown?f.hide():f.show()},f.focus=function(){r[0].focus()},f.$onKeyUp=function(a){27===a.which&&f.hide()},f}function k(a,c){return angular.element((c||b).querySelectorAll(a))}function l(a){return f.when(g.get(a)||h.get(a)).then(function(b){return angular.isObject(b)?(g.put(a,b.data),b.data):b})}var m=angular.forEach,n=String.prototype.trim,o=c.requestAnimationFrame||c.setTimeout,p=angular.element(c.document.body),q=/ng-bind="/gi;return j}]}).directive("bsModal",["$window","$location","$sce","$modal",function(a,b,c,d){return{restrict:"EAC",scope:!0,link:function(a,b,e){var f={scope:a,element:b,show:!1};angular.forEach(["template","contentTemplate","placement","backdrop","keyboard","html","container","animation"],function(a){angular.isDefined(e[a])&&(f[a]=e[a])}),angular.forEach(["title","content"],function(b){e[b]&&e.$observe(b,function(d){a[b]=c.trustAsHtml(d)})}),e.bsModal&&a.$watch(e.bsModal,function(b){angular.isObject(b)?angular.extend(a,b):a.content=b},!0);var g=d(f);b.on(e.trigger||"click",g.toggle),a.$on("$destroy",function(){g.destroy(),f=null,g=null})}}}]),angular.module("mgcrea.ngStrap.navbar",[]).provider("$navbar",function(){var a=this.defaults={activeClass:"active",routeAttr:"data-match-route",strict:!1};this.$get=function(){return{defaults:a}}}).directive("bsNavbar",["$window","$location","$navbar",function(a,b,c){var d=c.defaults;return{restrict:"A",link:function(a,c,e){var f=angular.copy(d);angular.forEach(Object.keys(d),function(a){angular.isDefined(e[a])&&(f[a]=e[a])}),a.$watch(function(){return b.path()},function(a){var b=c[0].querySelectorAll("li["+f.routeAttr+"]");angular.forEach(b,function(b){var c=angular.element(b),d=c.attr(f.routeAttr).replace("/","\\/");f.strict&&(d="^"+d+"$");var e=new RegExp(d,["i"]);e.test(a)?c.addClass(f.activeClass):c.removeClass(f.activeClass)})})}}}]),angular.module("mgcrea.ngStrap.popover",["mgcrea.ngStrap.tooltip"]).provider("$popover",function(){var a=this.defaults={animation:"am-fade",placement:"right",template:"popover/popover.tpl.html",contentTemplate:!1,trigger:"click",keyboard:!0,html:!1,title:"",content:"",delay:0,container:!1};this.$get=["$tooltip",function(b){function c(c,d){var e=angular.extend({},a,d),f=b(c,e);return e.content&&(f.$scope.content=e.content),f}return c}]}).directive("bsPopover",["$window","$location","$sce","$popover",function(a,b,c,d){var e=a.requestAnimationFrame||a.setTimeout;return{restrict:"EAC",scope:!0,link:function(a,b,f){var g={scope:a};angular.forEach(["template","contentTemplate","placement","container","delay","trigger","keyboard","html","animation"],function(a){angular.isDefined(f[a])&&(g[a]=f[a])}),angular.forEach(["title","content"],function(b){f[b]&&f.$observe(b,function(d,f){a[b]=c.trustAsHtml(d),angular.isDefined(f)&&e(function(){h&&h.$applyPlacement()})})}),f.bsPopover&&a.$watch(f.bsPopover,function(b,c){angular.isObject(b)?angular.extend(a,b):a.content=b,angular.isDefined(c)&&e(function(){h&&h.$applyPlacement()})},!0);var h=d(b,g);a.$on("$destroy",function(){h.destroy(),g=null,h=null})}}}]),angular.module("mgcrea.ngStrap.scrollspy",["mgcrea.ngStrap.helpers.debounce","mgcrea.ngStrap.helpers.dimensions"]).provider("$scrollspy",function(){var a=this.$$spies={},c=this.defaults={debounce:150,throttle:100,offset:100};this.$get=["$window","$document","$rootScope","dimensions","debounce","throttle",function(d,e,f,g,h,i){function j(a,b){return a[0].nodeName&&a[0].nodeName.toLowerCase()===b.toLowerCase()}function k(e){var k=angular.extend({},c,e);k.element||(k.element=n);var o=j(k.element,"body"),p=o?l:k.element,q=o?"window":k.id;if(a[q])return a[q].$$count++,a[q];var r,s,t,u,v,w,x,y,z={},A=z.$trackedElements=[],B=[];return z.init=function(){this.$$count=1,u=h(this.checkPosition,k.debounce),v=i(this.checkPosition,k.throttle),p.on("click",this.checkPositionWithEventLoop),l.on("resize",u),p.on("scroll",v),w=h(this.checkOffsets,k.debounce),r=f.$on("$viewContentLoaded",w),s=f.$on("$includeContentLoaded",w),w(),q&&(a[q]=z)},z.destroy=function(){this.$$count--,this.$$count>0||(p.off("click",this.checkPositionWithEventLoop),l.off("resize",u),p.off("scroll",u),r(),s())},z.checkPosition=function(){if(B.length){if(y=(o?d.pageYOffset:p.prop("scrollTop"))||0,x=Math.max(d.innerHeight,m.prop("clientHeight")),yB[a+1].offsetTop))return z.$activateElement(B[a])}},z.checkPositionWithEventLoop=function(){setTimeout(this.checkPosition,1)},z.$activateElement=function(a){if(t){var b=z.$getTrackedElement(t);b&&(b.source.removeClass("active"),j(b.source,"li")&&j(b.source.parent().parent(),"li")&&b.source.parent().parent().removeClass("active"))}t=a.target,a.source.addClass("active"),j(a.source,"li")&&j(a.source.parent().parent(),"li")&&a.source.parent().parent().addClass("active")},z.$getTrackedElement=function(a){return A.filter(function(b){return b.target===a})[0]},z.checkOffsets=function(){angular.forEach(A,function(a){var c=b.querySelector(a.target);a.offsetTop=c?g.offset(c).top:null,k.offset&&null!==a.offsetTop&&(a.offsetTop-=1*k.offset)}),B=A.filter(function(a){return null!==a.offsetTop}).sort(function(a,b){return a.offsetTop-b.offsetTop}),u()},z.trackElement=function(a,b){A.push({target:a,source:b})},z.untrackElement=function(a,b){for(var c,d=A.length;d--;)if(A[d].target===a&&A[d].source===b){c=d;break}A=A.splice(c,1)},z.activate=function(a){A[a].addClass("active")},z.init(),z}var l=angular.element(d),m=angular.element(e.prop("documentElement")),n=angular.element(d.document.body);return k}]}).directive("bsScrollspy",["$rootScope","debounce","dimensions","$scrollspy",function(a,b,c,d){return{restrict:"EAC",link:function(a,b,c){var e={scope:a}; +angular.forEach(["offset","target"],function(a){angular.isDefined(c[a])&&(e[a]=c[a])});var f=d(e);f.trackElement(e.target,b),a.$on("$destroy",function(){f.untrackElement(e.target,b),f.destroy(),e=null,f=null})}}}]).directive("bsScrollspyList",["$rootScope","debounce","dimensions","$scrollspy",function(){return{restrict:"A",compile:function(a){var b=a[0].querySelectorAll("li > a[href]");angular.forEach(b,function(a){var b=angular.element(a);b.parent().attr("bs-scrollspy","").attr("data-target",b.attr("href"))})}}}]),angular.module("mgcrea.ngStrap.select",["mgcrea.ngStrap.tooltip","mgcrea.ngStrap.helpers.parseOptions"]).provider("$select",function(){var a=this.defaults={animation:"am-fade",prefixClass:"select",placement:"bottom-left",template:"select/select.tpl.html",trigger:"focus",container:!1,keyboard:!0,html:!1,delay:0,multiple:!1,sort:!0,caretHtml:' ',placeholder:"Choose among the following...",maxLength:3,maxLengthHtml:"selected"};this.$get=["$window","$document","$rootScope","$tooltip",function(b,c,d,e){function f(b,c,d){var f={},h=angular.extend({},a,d);f=e(b,h);var i=d.scope,j=f.$scope;j.$matches=[],j.$activeIndex=0,j.$isMultiple=h.multiple,j.$activate=function(a){j.$$postDigest(function(){f.activate(a)})},j.$select=function(a){j.$$postDigest(function(){f.select(a)})},j.$isVisible=function(){return f.$isVisible()},j.$isActive=function(a){return f.$isActive(a)},f.update=function(a){j.$matches=a,f.$updateActiveIndex()},f.activate=function(a){return h.multiple?(j.$activeIndex.sort(),f.$isActive(a)?j.$activeIndex.splice(j.$activeIndex.indexOf(a),1):j.$activeIndex.push(a),h.sort&&j.$activeIndex.sort()):j.$activeIndex=a,j.$activeIndex},f.select=function(a){var d=j.$matches[a].value;f.activate(a),c.$setViewValue(h.multiple?j.$activeIndex.map(function(a){return j.$matches[a].value}):d),c.$render(),i&&i.$digest(),h.multiple||("focus"===h.trigger?b[0].blur():f.$isShown&&f.hide()),j.$emit("$select.select",d,a)},f.$updateActiveIndex=function(){c.$modelValue&&j.$matches.length?j.$activeIndex=h.multiple&&angular.isArray(c.$modelValue)?c.$modelValue.map(function(a){return f.$getIndex(a)}):f.$getIndex(c.$modelValue):j.$activeIndex>=j.$matches.length&&(j.$activeIndex=h.multiple?[]:0)},f.$isVisible=function(){return h.minLength&&c?j.$matches.length&&c.$viewValue.length>=h.minLength:j.$matches.length},f.$isActive=function(a){return h.multiple?-1!==j.$activeIndex.indexOf(a):j.$activeIndex===a},f.$getIndex=function(a){var b=j.$matches.length,c=b;if(b){for(c=b;c--&&j.$matches[c].value!==a;);if(!(0>c))return c}},f.$onMouseDown=function(a){if(a.preventDefault(),a.stopPropagation(),g){var b=angular.element(a.target);b.triggerHandler("click")}},f.$onKeyDown=function(a){if(/(38|40|13)/.test(a.keyCode)){if(a.preventDefault(),a.stopPropagation(),13===a.keyCode)return f.select(j.$activeIndex);38===a.keyCode&&j.$activeIndex>0?j.$activeIndex--:40===a.keyCode&&j.$activeIndex'),i.after(b)}var j=e(c.ngOptions),k=d(b,g,h),l=j.$match[7].replace(/\|.+/,"").trim();a.$watch(l,function(){j.valuesFn(a,g).then(function(a){k.update(a),g.$render()})},!0),a.$watch(c.ngModel,function(){k.$updateActiveIndex()},!0),g.$render=function(){var a,d;h.multiple&&angular.isArray(g.$modelValue)?(a=g.$modelValue.map(function(a){return d=k.$getIndex(a),angular.isDefined(d)?k.$scope.$matches[d].label:!1}).filter(angular.isDefined),a=a.length>(h.maxLength||f.maxLength)?a.length+" "+(h.maxLengthHtml||f.maxLengthHtml):a.join(", ")):(d=k.$getIndex(g.$modelValue),a=angular.isDefined(d)?k.$scope.$matches[d].label:!1),b.html((a?a:c.placeholder||f.placeholder)+f.caretHtml)},a.$on("$destroy",function(){k.destroy(),h=null,k=null})}}}]),angular.module("mgcrea.ngStrap.tab",[]).run(["$templateCache",function(a){a.put("$pane","{{pane.content}}")}]).provider("$tab",function(){var a=this.defaults={animation:"am-fade",template:"tab/tab.tpl.html"};this.$get=function(){return{defaults:a}}}).directive("bsTabs",["$window","$animate","$tab",function(a,b,c){var d=c.defaults;return{restrict:"EAC",scope:!0,require:"?ngModel",templateUrl:function(a,b){return b.template||d.template},link:function(a,b,c,e){var f=d;angular.forEach(["animation"],function(a){angular.isDefined(c[a])&&(f[a]=c[a])}),c.bsTabs&&a.$watch(c.bsTabs,function(b){a.panes=b},!0),b.addClass("tabs"),f.animation&&b.addClass(f.animation),a.active=a.activePane=0,a.setActive=function(b){a.active=b,e&&e.$setViewValue(b)},e&&(e.$render=function(){a.active=1*e.$modelValue})}}}]),angular.module("mgcrea.ngStrap.timepicker",["mgcrea.ngStrap.helpers.dateParser","mgcrea.ngStrap.tooltip"]).provider("$timepicker",function(){var a=this.defaults={animation:"am-fade",prefixClass:"timepicker",placement:"bottom-left",template:"timepicker/timepicker.tpl.html",trigger:"focus",container:!1,keyboard:!0,html:!1,delay:0,useNative:!0,timeType:"date",timeFormat:"shortTime",autoclose:!1,minTime:-1/0,maxTime:+1/0,length:5,hourStep:1,minuteStep:5};this.$get=["$window","$document","$rootScope","$sce","$locale","dateFilter","$tooltip",function(b,c,d,e,f,g,h){function i(b,c,d){function e(a,c){if(b[0].createTextRange){var d=b[0].createTextRange();d.collapse(!0),d.moveStart("character",a),d.moveEnd("character",c),d.select()}else b[0].setSelectionRange?b[0].setSelectionRange(a,c):angular.isUndefined(b[0].selectionStart)&&(b[0].selectionStart=a,b[0].selectionEnd=c)}function i(){b[0].focus()}var l=h(b,angular.extend({},a,d)),m=d.scope,n=l.$options,o=l.$scope,p=0,q=c.$dateValue||new Date,r={hour:q.getHours(),meridian:q.getHours()<12,minute:q.getMinutes(),second:q.getSeconds(),millisecond:q.getMilliseconds()},s=f.DATETIME_FORMATS[n.timeFormat]||n.timeFormat,t=/(h+)[:]?(m+)[ ]?(a?)/i.exec(s).slice(1);o.$select=function(a,b){l.select(a,b)},o.$moveIndex=function(a,b){l.$moveIndex(a,b)},o.$switchMeridian=function(a){l.switchMeridian(a)},l.update=function(a){angular.isDate(a)&&!isNaN(a.getTime())?(l.$date=a,angular.extend(r,{hour:a.getHours(),minute:a.getMinutes(),second:a.getSeconds(),millisecond:a.getMilliseconds()}),l.$build()):l.$isBuilt||l.$build()},l.select=function(a,b,d){isNaN(c.$dateValue.getTime())&&(c.$dateValue=new Date(1970,0,1)),angular.isDate(a)||(a=new Date(a)),0===b?c.$dateValue.setHours(a.getHours()):1===b&&c.$dateValue.setMinutes(a.getMinutes()),c.$setViewValue(c.$dateValue),c.$render(),n.autoclose&&!d&&l.hide(!0)},l.switchMeridian=function(a){var b=(a||c.$dateValue).getHours();c.$dateValue.setHours(12>b?b+12:b-12),c.$render()},l.$build=function(){var a,b,c=o.midIndex=parseInt(n.length/2,10),d=[];for(a=0;an.maxTime},l.$moveIndex=function(a,b){var c;0===b?(c=new Date(1970,0,1,r.hour+a*n.length,r.minute),angular.extend(r,{hour:c.getHours()})):1===b&&(c=new Date(1970,0,1,r.hour,r.minute+a*n.length*5),angular.extend(r,{minute:c.getMinutes()})),l.$build()},l.$onMouseDown=function(a){if("input"!==a.target.nodeName.toLowerCase()&&a.preventDefault(),a.stopPropagation(),j){var b=angular.element(a.target);"button"!==b[0].nodeName.toLowerCase()&&(b=b.parent()),b.triggerHandler("click")}},l.$onKeyDown=function(a){if(/(38|37|39|40|13)/.test(a.keyCode)&&!a.shiftKey&&!a.altKey){if(a.preventDefault(),a.stopPropagation(),13===a.keyCode)return l.hide(!0);var b=new Date(l.$date),c=b.getHours(),d=g(b,"h").length,f=b.getMinutes(),h=g(b,"mm").length,i=/(37|39)/.test(a.keyCode),j=2+1*!!t[2];if(i&&(37===a.keyCode?p=1>p?j-1:p-1:39===a.keyCode&&(p=j-1>p?p+1:0)),0===p){if(i)return e(0,d);38===a.keyCode?b.setHours(c-n.hourStep):40===a.keyCode&&b.setHours(c+n.hourStep)}else if(1===p){if(i)return e(d+1,d+1+h);38===a.keyCode?b.setMinutes(f-n.minuteStep):40===a.keyCode&&b.setMinutes(f+n.minuteStep)}else if(2===p){if(i)return e(d+1+h+1,d+1+h+3);l.switchMeridian()}l.select(b,p,!0),m.$digest()}};var u=l.init;l.init=function(){return k&&n.useNative?(b.prop("type","time"),void b.css("-webkit-appearance","textfield")):(j&&(b.prop("type","text"),b.attr("readonly","true"),b.on("click",i)),void u())};var v=l.destroy;l.destroy=function(){k&&n.useNative&&b.off("click",i),v()};var w=l.show;l.show=function(){w(),setTimeout(function(){l.$element.on(j?"touchstart":"mousedown",l.$onMouseDown),n.keyboard&&b.on("keydown",l.$onKeyDown)})};var x=l.hide;return l.hide=function(a){l.$element.off(j?"touchstart":"mousedown",l.$onMouseDown),n.keyboard&&b.off("keydown",l.$onKeyDown),x(a)},l}var j=(angular.element(b.document.body),"createTouch"in b.document),k=/(ip(a|o)d|iphone|android)/gi.test(b.navigator.userAgent);return a.lang||(a.lang=f.id),i.defaults=a,i}]}).directive("bsTimepicker",["$window","$parse","$q","$locale","dateFilter","$timepicker","$dateParser","$timeout",function(a,b,c,d,e,f,g){{var h=f.defaults,i=/(ip(a|o)d|iphone|android)/gi.test(a.navigator.userAgent);a.requestAnimationFrame||a.setTimeout}return{restrict:"EAC",require:"ngModel",link:function(a,b,c,d){var j={scope:a,controller:d};angular.forEach(["placement","container","delay","trigger","keyboard","html","animation","template","autoclose","timeType","timeFormat","useNative","lang"],function(a){angular.isDefined(c[a])&&(j[a]=c[a])}),i&&(j.useNative||h.useNative)&&(j.timeFormat="HH:mm");var k=f(b,d,j);j=k.$options;var l=g({format:j.timeFormat,lang:j.lang});angular.forEach(["minTime","maxTime"],function(a){angular.isDefined(c[a])&&c.$observe(a,function(b){k.$options[a]="now"===b?(new Date).setFullYear(1970,0,1):angular.isString(b)&&b.match(/^".+"$/)?+new Date(b.substr(1,b.length-2)):l.parse(b),!isNaN(k.$options[a])&&k.$build()})}),a.$watch(c.ngModel,function(){k.update(d.$dateValue)},!0),d.$parsers.unshift(function(a){if(!a)return void d.$setValidity("date",!0);var b=l.parse(a,d.$dateValue);if(!b||isNaN(b.getTime()))d.$setValidity("date",!1);else{var c=b.getTime()>=j.minTime&&b.getTime()<=j.maxTime;d.$setValidity("date",c),c&&(d.$dateValue=b)}return"string"===j.timeType?e(a,j.timeFormat):"number"===j.timeType?d.$dateValue.getTime():"iso"===j.timeType?d.$dateValue.toISOString():d.$dateValue}),d.$formatters.push(function(a){var b="string"===j.timeType?l.parse(a,d.$dateValue):new Date(a);return d.$dateValue=b,d.$dateValue}),d.$render=function(){b.val(isNaN(d.$dateValue.getTime())?"":e(d.$dateValue,j.timeFormat))},a.$on("$destroy",function(){k.destroy(),j=null,k=null})}}}]),angular.module("mgcrea.ngStrap.tooltip",["ngAnimate","mgcrea.ngStrap.helpers.dimensions"]).provider("$tooltip",function(){var a=this.defaults={animation:"am-fade",prefixClass:"tooltip",container:!1,placement:"top",template:"tooltip/tooltip.tpl.html",contentTemplate:!1,trigger:"hover focus",keyboard:!1,html:!1,show:!1,title:"",type:"",delay:0};this.$get=["$window","$rootScope","$compile","$q","$templateCache","$http","$animate","$timeout","dimensions","$$animateReflow",function(c,d,e,f,g,h,i,j,k,l){function m(b,c){function f(){return"body"===j.container?k.offset(b[0]):k.position(b[0])}function g(a,b,c,d){var e,f=a.split("-");switch(f[0]){case"right":e={top:b.top+b.height/2-d/2,left:b.left+b.width};break;case"bottom":e={top:b.top+b.height,left:b.left+b.width/2-c/2};break;case"left":e={top:b.top+b.height/2-d/2,left:b.left-c};break;default:e={top:b.top-d,left:b.left+b.width/2-c/2}}if(!f[1])return e;if("top"===f[0]||"bottom"===f[0])switch(f[1]){case"left":e.left=b.left;break;case"right":e.left=b.left+b.width-c}else if("left"===f[0]||"right"===f[0])switch(f[1]){case"top":e.top=b.top-d;break;case"bottom":e.top=b.top+b.height}return e}var h={},j=h.$options=angular.extend({},a,c);h.$promise=o(j.template);var m=h.$scope=j.scope&&j.scope.$new()||d.$new();j.delay&&angular.isString(j.delay)&&(j.delay=parseFloat(j.delay)),j.title&&(h.$scope.title=j.title),m.$hide=function(){m.$$postDigest(function(){h.hide()})},m.$show=function(){m.$$postDigest(function(){h.show()})},m.$toggle=function(){m.$$postDigest(function(){h.toggle()})},h.$isShown=m.$isShown=!1;var s,t;j.contentTemplate&&(h.$promise=h.$promise.then(function(a){var b=angular.element(a);return o(j.contentTemplate).then(function(a){return n('[ng-bind="content"]',b[0]).removeAttr("ng-bind").html(a),b[0].outerHTML})}));var u,v,w,x;return h.$promise.then(function(a){angular.isObject(a)&&(a=a.data),j.html&&(a=a.replace(r,'ng-bind-html="')),a=p.apply(a),w=a,u=e(a),h.init()}),h.init=function(){j.delay&&angular.isNumber(j.delay)&&(j.delay={show:j.delay,hide:j.delay}),"self"===j.container?x=b:j.container&&(x=n(j.container));var a=j.trigger.split(" ");angular.forEach(a,function(a){"click"===a?b.on("click",h.toggle):"manual"!==a&&(b.on("hover"===a?"mouseenter":"focus",h.enter),b.on("hover"===a?"mouseleave":"blur",h.leave),"hover"!==a&&b.on(q?"touchstart":"mousedown",h.$onFocusElementMouseDown))}),j.show&&m.$$postDigest(function(){"focus"===j.trigger?b[0].focus():h.show()})},h.destroy=function(){for(var a=j.trigger.split(" "),c=a.length;c--;){var d=a[c];"click"===d?b.off("click",h.toggle):"manual"!==d&&(b.off("hover"===d?"mouseenter":"focus",h.enter),b.off("hover"===d?"mouseleave":"blur",h.leave),"hover"!==d&&b.off(q?"touchstart":"mousedown",h.$onFocusElementMouseDown))}v&&(v.remove(),v=null),m.$destroy()},h.enter=function(){return clearTimeout(s),t="in",j.delay&&j.delay.show?void(s=setTimeout(function(){"in"===t&&h.show()},j.delay.show)):h.show()},h.show=function(){var a=j.container?x:null,c=j.container?null:b;v&&v.remove(),v=h.$element=u(m,function(){}),v.css({top:"0px",left:"0px",display:"block"}).addClass(j.placement),j.animation&&v.addClass(j.animation),j.type&&v.addClass(j.prefixClass+"-"+j.type),i.enter(v,a,c,function(){}),h.$isShown=m.$isShown=!0,m.$$phase||m.$digest(),l(h.$applyPlacement),j.keyboard&&("focus"!==j.trigger?(h.focus(),v.on("keyup",h.$onKeyUp)):b.on("keyup",h.$onFocusKeyUp))},h.leave=function(){return clearTimeout(s),t="out",j.delay&&j.delay.hide?void(s=setTimeout(function(){"out"===t&&h.hide()},j.delay.hide)):h.hide()},h.hide=function(a){return h.$isShown?(i.leave(v,function(){v=null}),h.$isShown=m.$isShown=!1,m.$$phase||m.$digest(),j.keyboard&&v.off("keyup",h.$onKeyUp),a&&"focus"===j.trigger?b[0].blur():void 0):void 0},h.toggle=function(){h.$isShown?h.leave():h.enter()},h.focus=function(){v[0].focus()},h.$applyPlacement=function(){if(v){var a=f(),b=v.prop("offsetWidth"),c=v.prop("offsetHeight"),d=g(j.placement,a,b,c);d.top+="px",d.left+="px",v.css(d)}},h.$onKeyUp=function(a){27===a.which&&h.hide()},h.$onFocusKeyUp=function(a){27===a.which&&b[0].blur()},h.$onFocusElementMouseDown=function(a){a.preventDefault(),a.stopPropagation(),h.$isShown?b[0].blur():b[0].focus()},h}function n(a,c){return angular.element((c||b).querySelectorAll(a))}function o(a){return f.when(g.get(a)||h.get(a)).then(function(b){return angular.isObject(b)?(g.put(a,b.data),b.data):b})}var p=String.prototype.trim,q="createTouch"in c.document,r=/ng-bind="/gi;return m}]}).directive("bsTooltip",["$window","$location","$sce","$tooltip","$$animateReflow",function(a,b,c,d,e){return{restrict:"EAC",scope:!0,link:function(a,b,f){var g={scope:a};angular.forEach(["template","contentTemplate","placement","container","delay","trigger","keyboard","html","animation","type"],function(a){angular.isDefined(f[a])&&(g[a]=f[a])}),angular.forEach(["title"],function(b){f[b]&&f.$observe(b,function(d,f){a[b]=c.trustAsHtml(d),angular.isDefined(f)&&e(function(){h&&h.$applyPlacement()})})}),f.bsTooltip&&a.$watch(f.bsTooltip,function(b,c){angular.isObject(b)?angular.extend(a,b):a.content=b,angular.isDefined(c)&&e(function(){h&&h.$applyPlacement()})},!0);var h=d(b,g);a.$on("$destroy",function(){h.destroy(),g=null,h=null})}}}]),angular.module("mgcrea.ngStrap.typeahead",["mgcrea.ngStrap.tooltip","mgcrea.ngStrap.helpers.parseOptions"]).provider("$typeahead",function(){var a=this.defaults={animation:"am-fade",prefixClass:"typeahead",placement:"bottom-left",template:"typeahead/typeahead.tpl.html",trigger:"focus",container:!1,keyboard:!0,html:!1,delay:0,minLength:1,filter:"filter",limit:6};this.$get=["$window","$rootScope","$tooltip",function(b,c,d){function e(b,c){var e={},f=angular.extend({},a,c),g=f.controller;e=d(b,f);var h=c.scope,i=e.$scope;i.$matches=[],i.$activeIndex=0,i.$activate=function(a){i.$$postDigest(function(){e.activate(a)})},i.$select=function(a){i.$$postDigest(function(){e.select(a)})},i.$isVisible=function(){return e.$isVisible()},e.update=function(a){i.$matches=a,i.$activeIndex>=a.length&&(i.$activeIndex=0)},e.activate=function(a){i.$activeIndex=a},e.select=function(a){var c=i.$matches[a].value;g&&(g.$setViewValue(c),g.$render(),h&&h.$digest()),"focus"===f.trigger?b[0].blur():e.$isShown&&e.hide(),i.$activeIndex=0,i.$emit("$typeahead.select",c,a)},e.$isVisible=function(){return f.minLength&&g?i.$matches.length&&angular.isString(g.$viewValue)&&g.$viewValue.length>=f.minLength:!!i.$matches.length},e.$onMouseDown=function(a){a.preventDefault(),a.stopPropagation()},e.$onKeyDown=function(a){if(/(38|40|13)/.test(a.keyCode)){if(a.preventDefault(),a.stopPropagation(),13===a.keyCode)return e.select(i.$activeIndex);38===a.keyCode&&i.$activeIndex>0?i.$activeIndex--:40===a.keyCode&&i.$activeIndexj&&(a=a.slice(0,j)),m.update(a)})}),a.$on("$destroy",function(){m.destroy(),h=null,m=null})}}}])}(window,document),function(){"use strict";angular.module("mgcrea.ngStrap.alert").run(["$templateCache",function(a){a.put("alert/alert.tpl.html",'
     
    ')}]),angular.module("mgcrea.ngStrap.aside").run(["$templateCache",function(a){a.put("aside/aside.tpl.html",'')}]),angular.module("mgcrea.ngStrap.datepicker").run(["$templateCache",function(a){a.put("datepicker/datepicker.tpl.html",'
    ')}]),angular.module("mgcrea.ngStrap.dropdown").run(["$templateCache",function(a){a.put("dropdown/dropdown.tpl.html",'')}]),angular.module("mgcrea.ngStrap.modal").run(["$templateCache",function(a){a.put("modal/modal.tpl.html",'')}]),angular.module("mgcrea.ngStrap.popover").run(["$templateCache",function(a){a.put("popover/popover.tpl.html",'

    ')}]),angular.module("mgcrea.ngStrap.select").run(["$templateCache",function(a){a.put("select/select.tpl.html",'')}]),angular.module("mgcrea.ngStrap.tab").run(["$templateCache",function(a){a.put("tab/tab.tpl.html",'
    ')}]),angular.module("mgcrea.ngStrap.timepicker").run(["$templateCache",function(a){a.put("timepicker/timepicker.tpl.html",'
     
     
     
    ')}]),angular.module("mgcrea.ngStrap.tooltip").run(["$templateCache",function(a){a.put("tooltip/tooltip.tpl.html",'
    ')}]),angular.module("mgcrea.ngStrap.typeahead").run(["$templateCache",function(a){a.put("typeahead/typeahead.tpl.html",'
    ')}])}(window,document); +//# sourceMappingURL=angular-strap.min.map \ No newline at end of file diff --git a/static/lib/angular-strap.tpl.min.js b/static/lib/angular-strap.tpl.min.js new file mode 100644 index 000000000..42fcc29ea --- /dev/null +++ b/static/lib/angular-strap.tpl.min.js @@ -0,0 +1,9 @@ +/** + * angular-strap + * @version v2.0.0-rc.4 - 2014-03-07 + * @link http://mgcrea.github.io/angular-strap + * @author Olivier Louvignes (olivier@mg-crea.com) + * @license MIT License, http://www.opensource.org/licenses/MIT + */ +!function(){"use strict";angular.module("mgcrea.ngStrap.alert").run(["$templateCache",function(a){a.put("alert/alert.tpl.html",'
     
    ')}]),angular.module("mgcrea.ngStrap.aside").run(["$templateCache",function(a){a.put("aside/aside.tpl.html",'')}]),angular.module("mgcrea.ngStrap.datepicker").run(["$templateCache",function(a){a.put("datepicker/datepicker.tpl.html",'
    ')}]),angular.module("mgcrea.ngStrap.dropdown").run(["$templateCache",function(a){a.put("dropdown/dropdown.tpl.html",'')}]),angular.module("mgcrea.ngStrap.modal").run(["$templateCache",function(a){a.put("modal/modal.tpl.html",'')}]),angular.module("mgcrea.ngStrap.popover").run(["$templateCache",function(a){a.put("popover/popover.tpl.html",'

    ')}]),angular.module("mgcrea.ngStrap.select").run(["$templateCache",function(a){a.put("select/select.tpl.html",'')}]),angular.module("mgcrea.ngStrap.tab").run(["$templateCache",function(a){a.put("tab/tab.tpl.html",'
    ')}]),angular.module("mgcrea.ngStrap.timepicker").run(["$templateCache",function(a){a.put("timepicker/timepicker.tpl.html",'
     
     
     
    ')}]),angular.module("mgcrea.ngStrap.tooltip").run(["$templateCache",function(a){a.put("tooltip/tooltip.tpl.html",'
    ')}]),angular.module("mgcrea.ngStrap.typeahead").run(["$templateCache",function(a){a.put("typeahead/typeahead.tpl.html",'
    ')}])}(window,document); +//# sourceMappingURL=angular-strap.tpl.min.map \ No newline at end of file diff --git a/static/lib/bootstrap-additions.min.css b/static/lib/bootstrap-additions.min.css new file mode 100644 index 000000000..0328d189e --- /dev/null +++ b/static/lib/bootstrap-additions.min.css @@ -0,0 +1 @@ +.carousel-inner>.item>a>img,.carousel-inner>.item>img,.thumbnail a>img,.thumbnail>img{display:block;max-width:100%;height:auto}.btn-group-lg>.btn{padding:10px 16px;font-size:18px;line-height:1.33;border-radius:6px}.btn-group-sm>.btn{padding:5px 10px;font-size:12px;line-height:1.5;border-radius:3px}.btn-group-xs>.btn{padding:1px 5px;font-size:12px;line-height:1.5;border-radius:3px}.aside .aside-dialog .aside-footer:after,.aside .aside-dialog .aside-footer:before,.btn-group-vertical>.btn-group:after,.btn-group-vertical>.btn-group:before,.btn-toolbar:after,.btn-toolbar:before,.container-fluid:after,.container-fluid:before,.container:after,.container:before,.form-horizontal .form-group:after,.form-horizontal .form-group:before,.modal-footer:after,.modal-footer:before,.nav:after,.nav:before,.navbar-collapse:after,.navbar-collapse:before,.navbar-header:after,.navbar-header:before,.navbar:after,.navbar:before,.pager:after,.pager:before,.panel-body:after,.panel-body:before,.row:after,.row:before{content:" ";display:table}.aside .aside-dialog .aside-footer:after,.btn-group-vertical>.btn-group:after,.btn-toolbar:after,.container-fluid:after,.container:after,.form-horizontal .form-group:after,.modal-footer:after,.nav:after,.navbar-collapse:after,.navbar-header:after,.navbar:after,.pager:after,.panel-body:after,.row:after{clear:both}.alert.top,.alert.top-left,.alert.top-right{position:fixed;top:50px;z-index:1050;margin:20px}.alert.top{right:0;left:0}.alert.top-right{right:0}.alert.top-right .close{padding-left:10px}.alert.top-left{left:0}.alert.top-left .close{padding-right:10px}.aside{z-index:1049;background:#fff;position:fixed;overflow:auto;min-width:320px;top:0;bottom:0}.aside:focus{outline:0}@media (max-width:991px){.aside{min-width:240px}}.aside.left{left:0;right:auto}.aside.right{left:auto;right:0}.aside .aside-dialog .aside-header{border-bottom:1px solid #e5e5e5;min-height:16.43px;padding:6px 15px;background:#428bca;color:#fff}.aside .aside-dialog .aside-header .close{color:#fff;font-size:25px;opacity:.8;padding:4px 8px;margin-right:-8px}.aside .aside-dialog .aside-body{position:relative;padding:20px}.aside .aside-dialog .aside-footer{margin-top:15px;padding:19px 20px 20px;text-align:right;border-top:1px solid #e5e5e5}.aside .aside-dialog .aside-footer .btn+.btn{margin-left:5px;margin-bottom:0}.aside .aside-dialog .aside-footer .btn-group .btn+.btn{margin-left:-1px}.aside .aside-dialog .aside-footer .btn-block+.btn-block{margin-left:0}.aside-backdrop{position:fixed;top:0;right:0;bottom:0;left:0;z-index:1040;background-color:#000}.aside-backdrop.fade{opacity:0;filter:alpha(opacity=0)}.aside-backdrop.in{opacity:.5;filter:alpha(opacity=50)}.aside-backdrop.animation-fade{background:rgba(0,0,0,.5);opacity:1}.callout{margin:20px 0;padding:20px;border-left:3px solid #eee}.callout h4{margin-top:0;margin-bottom:5px}.callout p:last-child{margin-bottom:0}.callout-danger{border-color:#eed3d7;background-color:#fdf7f7}.callout-danger h4{color:#b94a48}.callout-warning{border-color:#faebcc;background-color:#faf8f0}.callout-warning h4{color:#8a6d3b}.callout-info{border-color:#bce8f1;background-color:#f4f8fa}.callout-info h4{color:#34789a}.modal.center .modal-dialog{position:fixed;top:40%;left:50%;min-width:320px;max-width:630px;width:50%;-webkit-transform:translateX(-50%) translateY(-50%);transform:translateX(-50%) translateY(-50%)}[tabindex="-1"]{outline:0}a[ng-click]{cursor:pointer}.popover.top-left{margin-top:-10px}.popover.top-left .arrow{margin-left:-11px;border-bottom-width:0;border-top-color:#999;border-top-color:rgba(0,0,0,.25);bottom:-11px;left:10%}.popover.top-left .arrow:after{content:" ";bottom:1px;margin-left:-10px;border-bottom-width:0;border-top-color:#fff}.popover.top-right{margin-top:-10px}.popover.top-right .arrow{margin-left:-11px;border-bottom-width:0;border-top-color:#999;border-top-color:rgba(0,0,0,.25);bottom:-11px;left:90%}.popover.top-right .arrow:after{content:" ";bottom:1px;margin-left:-10px;border-bottom-width:0;border-top-color:#fff}.popover.bottom-left{margin-top:10px}.popover.bottom-left .arrow{margin-left:-11px;border-top-width:0;border-bottom-color:#999;border-bottom-color:rgba(0,0,0,.25);top:-11px;left:10%}.popover.bottom-left .arrow:after{content:" ";top:1px;margin-left:-10px;border-top-width:0;border-bottom-color:#fff}.popover.bottom-right{margin-top:10px}.popover.bottom-right .arrow{margin-left:-11px;border-top-width:0;border-bottom-color:#999;border-bottom-color:rgba(0,0,0,.25);top:-11px;left:90%}.popover.bottom-right .arrow:after{content:" ";top:1px;margin-left:-10px;border-top-width:0;border-bottom-color:#fff}.tooltip.tooltip-info.top .tooltip-arrow{border-top-color:#d9edf7}.tooltip.tooltip-info.right .tooltip-arrow{border-right-color:#d9edf7}.tooltip.tooltip-info.bottom .tooltip-arrow{border-bottom-color:#d9edf7}.tooltip.tooltip-info.left .tooltip-arrow{border-left-color:#d9edf7}.tooltip.tooltip-info .tooltip-inner{background-color:#d9edf7;border-color:#bce8f1;color:#31708f}.tooltip.tooltip-info .tooltip-inner hr{border-top-color:#a6e1ec}.tooltip.tooltip-info .tooltip-inner .alert-link{color:#245269}.tooltip.tooltip-success.top .tooltip-arrow{border-top-color:#dff0d8}.tooltip.tooltip-success.right .tooltip-arrow{border-right-color:#dff0d8}.tooltip.tooltip-success.bottom .tooltip-arrow{border-bottom-color:#dff0d8}.tooltip.tooltip-success.left .tooltip-arrow{border-left-color:#dff0d8}.tooltip.tooltip-success .tooltip-inner{background-color:#dff0d8;border-color:#d6e9c6;color:#3c763d}.tooltip.tooltip-success .tooltip-inner hr{border-top-color:#c9e2b3}.tooltip.tooltip-success .tooltip-inner .alert-link{color:#2b542c}.tooltip.tooltip-danger.top .tooltip-arrow{border-top-color:#f2dede}.tooltip.tooltip-danger.right .tooltip-arrow{border-right-color:#f2dede}.tooltip.tooltip-danger.bottom .tooltip-arrow{border-bottom-color:#f2dede}.tooltip.tooltip-danger.left .tooltip-arrow{border-left-color:#f2dede}.tooltip.tooltip-danger .tooltip-inner{background-color:#f2dede;border-color:#ebccd1;color:#a94442}.tooltip.tooltip-danger .tooltip-inner hr{border-top-color:#e4b9c0}.tooltip.tooltip-danger .tooltip-inner .alert-link{color:#843534} \ No newline at end of file diff --git a/static/lib/typeahead.bundle.min.js b/static/lib/typeahead.bundle.min.js new file mode 100644 index 000000000..4640c40a5 --- /dev/null +++ b/static/lib/typeahead.bundle.min.js @@ -0,0 +1,7 @@ +/*! + * typeahead.js 0.10.1 + * https://github.com/twitter/typeahead.js + * Copyright 2013 Twitter, Inc. and other contributors; Licensed MIT + */ + +!function(a){var b={isMsie:function(){return/(msie|trident)/i.test(navigator.userAgent)?navigator.userAgent.match(/(msie |rv:)(\d+(.\d+)?)/i)[2]:!1},isBlankString:function(a){return!a||/^\s*$/.test(a)},escapeRegExChars:function(a){return a.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")},isString:function(a){return"string"==typeof a},isNumber:function(a){return"number"==typeof a},isArray:a.isArray,isFunction:a.isFunction,isObject:a.isPlainObject,isUndefined:function(a){return"undefined"==typeof a},bind:a.proxy,each:function(b,c){function d(a,b){return c(b,a)}a.each(b,d)},map:a.map,filter:a.grep,every:function(b,c){var d=!0;return b?(a.each(b,function(a,e){return(d=c.call(null,e,a,b))?void 0:!1}),!!d):d},some:function(b,c){var d=!1;return b?(a.each(b,function(a,e){return(d=c.call(null,e,a,b))?!1:void 0}),!!d):d},mixin:a.extend,getUniqueId:function(){var a=0;return function(){return a++}}(),templatify:function(b){function c(){return String(b)}return a.isFunction(b)?b:c},defer:function(a){setTimeout(a,0)},debounce:function(a,b,c){var d,e;return function(){var f,g,h=this,i=arguments;return f=function(){d=null,c||(e=a.apply(h,i))},g=c&&!d,clearTimeout(d),d=setTimeout(f,b),g&&(e=a.apply(h,i)),e}},throttle:function(a,b){var c,d,e,f,g,h;return g=0,h=function(){g=new Date,e=null,f=a.apply(c,d)},function(){var i=new Date,j=b-(i-g);return c=this,d=arguments,0>=j?(clearTimeout(e),e=null,g=i,f=a.apply(c,d)):e||(e=setTimeout(h,j)),f}},noop:function(){}},c="0.10.1",d=function(){function a(a){this.maxSize=a||100,this.size=0,this.hash={},this.list=new c}function c(){this.head=this.tail=null}function d(a,b){this.key=a,this.val=b,this.prev=this.next=null}return b.mixin(a.prototype,{set:function(a,b){var c,e=this.list.tail;this.size>=this.maxSize&&(this.list.remove(e),delete this.hash[e.key]),(c=this.hash[a])?(c.val=b,this.list.moveToFront(c)):(c=new d(a,b),this.list.add(c),this.hash[a]=c,this.size++)},get:function(a){var b=this.hash[a];return b?(this.list.moveToFront(b),b.val):void 0}}),b.mixin(c.prototype,{add:function(a){this.head&&(a.next=this.head,this.head.prev=a),this.head=a,this.tail=this.tail||a},remove:function(a){a.prev?a.prev.next=a.next:this.head=a.next,a.next?a.next.prev=a.prev:this.tail=a.prev},moveToFront:function(a){this.remove(a),this.add(a)}}),a}(this),e=function(){function a(a){this.prefix=["__",a,"__"].join(""),this.ttlKey="__ttl__",this.keyMatcher=new RegExp("^"+this.prefix)}function c(){return(new Date).getTime()}function d(a){return JSON.stringify(b.isUndefined(a)?null:a)}function e(a){return JSON.parse(a)}var f,g;try{f=window.localStorage,f.setItem("~~~","!"),f.removeItem("~~~")}catch(h){f=null}return g=f&&window.JSON?{_prefix:function(a){return this.prefix+a},_ttlKey:function(a){return this._prefix(a)+this.ttlKey},get:function(a){return this.isExpired(a)&&this.remove(a),e(f.getItem(this._prefix(a)))},set:function(a,e,g){return b.isNumber(g)?f.setItem(this._ttlKey(a),d(c()+g)):f.removeItem(this._ttlKey(a)),f.setItem(this._prefix(a),d(e))},remove:function(a){return f.removeItem(this._ttlKey(a)),f.removeItem(this._prefix(a)),this},clear:function(){var a,b,c=[],d=f.length;for(a=0;d>a;a++)(b=f.key(a)).match(this.keyMatcher)&&c.push(b.replace(this.keyMatcher,""));for(a=c.length;a--;)this.remove(c[a]);return this},isExpired:function(a){var d=e(f.getItem(this._ttlKey(a)));return b.isNumber(d)&&c()>d?!0:!1}}:{get:b.noop,set:b.noop,remove:b.noop,clear:b.noop,isExpired:b.noop},b.mixin(a.prototype,g),a}(),f=function(){function c(b){b=b||{},this._send=b.transport?e(b.transport):a.ajax,this._get=b.rateLimiter?b.rateLimiter(this._get):this._get}function e(c){return function(d,e){function f(a){b.defer(function(){h.resolve(a)})}function g(a){b.defer(function(){h.reject(a)})}var h=a.Deferred();return c(d,e,f,g),h}}var f=0,g={},h=6,i=new d(10);return c.setMaxPendingRequests=function(a){h=a},c.resetCache=function(){i=new d(10)},b.mixin(c.prototype,{_get:function(a,b,c){function d(b){c&&c(b),i.set(a,b)}function e(){f--,delete g[a],k.onDeckRequestArgs&&(k._get.apply(k,k.onDeckRequestArgs),k.onDeckRequestArgs=null)}var j,k=this;(j=g[a])?j.done(d):h>f?(f++,g[a]=this._send(a,b).done(d).always(e)):this.onDeckRequestArgs=[].slice.call(arguments,0)},get:function(a,c,d){var e;return b.isFunction(c)&&(d=c,c={}),(e=i.get(a))?b.defer(function(){d&&d(e)}):this._get(a,c,d),!!e}}),c}(),g=function(){function c(b){b=b||{},b.datumTokenizer&&b.queryTokenizer||a.error("datumTokenizer and queryTokenizer are both required"),this.datumTokenizer=b.datumTokenizer,this.queryTokenizer=b.queryTokenizer,this.datums=[],this.trie=e()}function d(a){return a=b.filter(a,function(a){return!!a}),a=b.map(a,function(a){return a.toLowerCase()})}function e(){return{ids:[],children:{}}}function f(a){for(var b={},c=[],d=0;db[e]?e++:(f.push(a[d]),d++,e++);return f}return b.mixin(c.prototype,{bootstrap:function(a){this.datums=a.datums,this.trie=a.trie},add:function(a){var c=this;a=b.isArray(a)?a:[a],b.each(a,function(a){var f,g;f=c.datums.push(a)-1,g=d(c.datumTokenizer(a)),b.each(g,function(a){var b,d,g;for(b=c.trie,d=a.split("");g=d.shift();)b=b.children[g]||(b.children[g]=e()),b.ids.push(f)})})},get:function(a){var c,e,h=this;return c=d(this.queryTokenizer(a)),b.each(c,function(a){var b,c,d,f;if(e&&0===e.length)return!1;for(b=h.trie,c=a.split("");b&&(d=c.shift());)b=b.children[d];return b&&0===c.length?(f=b.ids.slice(0),void(e=e?g(e,f):f)):(e=[],!1)}),e?b.map(f(e),function(a){return h.datums[a]}):[]},serialize:function(){return{datums:this.datums,trie:this.trie}}}),c}(),h=function(){function d(a){var c=a.local||null;return b.isFunction(c)&&(c=c.call(null)),c}function e(d){var e,f;return f={url:null,thumbprint:"",ttl:864e5,filter:null,ajax:{}},(e=d.prefetch||null)&&(e=b.isString(e)?{url:e}:e,e=b.mixin(f,e),e.thumbprint=c+e.thumbprint,e.ajax.type=e.ajax.type||"GET",e.ajax.dataType=e.ajax.dataType||"json",!e.url&&a.error("prefetch requires url to be set")),e}function f(c){function d(a){return function(c){return b.debounce(c,a)}}function e(a){return function(c){return b.throttle(c,a)}}var f,g;return g={url:null,wildcard:"%QUERY",replace:null,rateLimitBy:"debounce",rateLimitWait:300,send:null,filter:null,ajax:{}},(f=c.remote||null)&&(f=b.isString(f)?{url:f}:f,f=b.mixin(g,f),f.rateLimiter=/^throttle$/i.test(f.rateLimitBy)?e(f.rateLimitWait):d(f.rateLimitWait),f.ajax.type=f.ajax.type||"GET",f.ajax.dataType=f.ajax.dataType||"json",delete f.rateLimitBy,delete f.rateLimitWait,!f.url&&a.error("remote requires url to be set")),f}return{local:d,prefetch:e,remote:f}}(),i=(window.Bloodhound=function(){function c(b){b&&(b.local||b.prefetch||b.remote)||a.error("one of local, prefetch, or remote is required"),this.limit=b.limit||5,this.sorter=d(b.sorter),this.dupDetector=b.dupDetector||i,this.local=h.local(b),this.prefetch=h.prefetch(b),this.remote=h.remote(b),this.cacheKey=this.prefetch?this.prefetch.cacheKey||this.prefetch.url:null,this.index=new g({datumTokenizer:b.datumTokenizer,queryTokenizer:b.queryTokenizer}),this.storage=this.cacheKey?new e(this.cacheKey):null}function d(a){function c(b){return b.sort(a)}function d(a){return a}return b.isFunction(a)?c:d}function i(){return!1}var j;return j={data:"data",protocol:"protocol",thumbprint:"thumbprint"},c.tokenizers={whitespace:function(a){return a.split(/\s+/)},nonword:function(a){return a.split(/\W+/)}},b.mixin(c.prototype,{_loadPrefetch:function(b){function c(a){var c;c=b.filter?b.filter(a):a,f.add(c),f._saveToStorage(f.index.serialize(),b.thumbprint,b.ttl)}var d,e,f=this;return(d=this._readFromStorage(b.thumbprint))?(this.index.bootstrap(d),e=a.Deferred().resolve()):e=a.ajax(b.url,b.ajax).done(c),e},_getFromRemote:function(a,b){function c(a){var c=f.remote.filter?f.remote.filter(a):a;b(c)}var d,e,f=this;return a=a||"",e=encodeURIComponent(a),d=this.remote.replace?this.remote.replace(this.remote.url,a):this.remote.url.replace(this.remote.wildcard,e),this.transport.get(d,this.remote.ajax,c)},_saveToStorage:function(a,b,c){this.storage&&(this.storage.set(j.data,a,c),this.storage.set(j.protocol,location.protocol,c),this.storage.set(j.thumbprint,b,c))},_readFromStorage:function(a){var b,c={};return this.storage&&(c.data=this.storage.get(j.data),c.protocol=this.storage.get(j.protocol),c.thumbprint=this.storage.get(j.thumbprint)),b=c.thumbprint!==a||c.protocol!==location.protocol,c.data&&!b?c.data:null},initialize:function(){function b(){d.add(d.local)}var c,d=this;return c=this.prefetch?this._loadPrefetch(this.prefetch):a.Deferred().resolve(),this.local&&c.done(b),this.transport=this.remote?new f(this.remote):null,this.initialize=function(){return c.promise()},c.promise()},add:function(a){this.index.add(a)},get:function(a,c){function d(a){var d=e.slice(0);b.each(a,function(a){var c;return c=b.some(d,function(b){return f.dupDetector(a,b)}),!c&&d.push(a),d.length
    diff --git a/static/partials/manage-application.html b/static/partials/manage-application.html new file mode 100644 index 000000000..f14aa7a1b --- /dev/null +++ b/static/partials/manage-application.html @@ -0,0 +1,165 @@ +
    +
    + +
    +
    + +
    +
    +
    + +

    {{ application.name || '(Untitled)' }}

    +

    + + {{ organization.name }} +

    +
    +
    +
    + +
    +
    + Warning: There is no OAuth Redirect setup for this application. Please enter it in the Settings tab. +
    +
    + + +
    + +
    + +
    + + +
    +
    + +
    +
    +
    + + +
    The name of the application that is displayed to users
    +
    + +
    + + +
    The URL to which the application will link in the authorization view
    +
    + +
    + + +
    The user friendly description of the application
    +
    + +
    + + +
    An e-mail address representing the Gravatar for the application. See above for the icon.
    +
    + +
    + + +
    Allowed prefix for the application's OAuth redirection/callback URLs
    +
    + +
    + + +
    +
    +
    + + +
    +
    +
    +
    +
    Deleting an application cannot be undone. Any existing users of your application will break!. Here be dragons!
    + +
    +
    +
    +
    + + +
    + + + + + + + + + + + + + + + +
    Client ID: +
    +
    Client Secret: + {{ application.client_secret }} + + +
    +
    +
    + +
    +
    +
    +
    + + + + + + diff --git a/static/partials/new-organization.html b/static/partials/new-organization.html index 05abfe185..be99bae98 100644 --- a/static/partials/new-organization.html +++ b/static/partials/new-organization.html @@ -50,7 +50,7 @@

    Setup the new organization

    -
    +
    This will also be the namespace for your repositories
    -
    +
    @@ -66,7 +66,7 @@
    -
    +
    Choose your organization's plan
    diff --git a/static/partials/new-repo.html b/static/partials/new-repo.html index 7eb73d86b..686073a6b 100644 --- a/static/partials/new-repo.html +++ b/static/partials/new-repo.html @@ -25,13 +25,18 @@ / - + + + + Repository names must match [a-z0-9_-]+
    - Description:
    +
    Repository Description
    +
    @@ -42,13 +47,14 @@
    +
    Repository Visibility
    - + Anyone can see and pull from this repository. You choose who can push.
    @@ -57,62 +63,109 @@
    - + You choose who can see, pull and push from/to this repository.
    -
    +
    - In order to make this repository private, you’ll need to upgrade your plan to - + In order to make this repository private + under your personal namespace + under the organization {{ repo.namespace }}, you will need to upgrade your plan to + {{ planRequired.title }} . This will cost ${{ planRequired.price / 100 }}/month.
    Upgrade now - or did you mean to create this repository + or did you mean to create this repository under {{ user.organizations[0].name }}?
    -
    +
    - This organization has reached its private repository limit. Please contact your administrator. + This organization has reached its private repository limit. Please contact your administrator.
    -
    - -
    - - Automatically populate your repository with a new image constructed from a Dockerfile -
    +
    Initialize repository
    -
    -
    +
    + +
    + + + +
    + + +
    + + + +
    + + +
    + + + +
    + + +
    + + + +
    +
    +
    +
    +
    +
    Upload DockerfileZIP file
    +
    +
    +
    +
    +
    +
    +
    +
    + +
    +
    +
    +
    + You will be redirected to authorize via GitHub once the repository has been created +
    +
    +
    +
    diff --git a/static/partials/org-admin.html b/static/partials/org-admin.html index 99c3f0730..139579aa8 100644 --- a/static/partials/org-admin.html +++ b/static/partials/org-admin.html @@ -12,6 +12,7 @@
  • Members
  • Robot Accounts
  • Default Permissions
    • +
  • Applications
  • Billing
  • Billing History
    • @@ -60,6 +61,11 @@
    + +
    +
    +
    +
    diff --git a/static/partials/repo-admin.html b/static/partials/repo-admin.html index 3bfbae297..6d2fe9665 100644 --- a/static/partials/repo-admin.html +++ b/static/partials/repo-admin.html @@ -18,6 +18,8 @@
    • Permissions
      • +
    • Build Triggers
      • +
    • Status Badge
    • Webhooks
    • Public/Private
    • Delete
      • @@ -33,6 +35,52 @@
      + + +
      +
      +
      Status Badge + +
      +
      +
      + Note: This repository is currently private. Publishing this badge will reveal the status information of your repository (and links may + not work for unregistered users). +
      + + + + + + + + + + + + + + + + + + + + + + + + +
      Image (SVG): +
      +
      Markdown: +
      +
      AsciiDoc: +
      +
      +
      +
      +
      @@ -64,10 +112,7 @@ - - - - + @@ -84,10 +129,7 @@
      - - - - + @@ -132,10 +174,7 @@
    - - - - + @@ -174,10 +213,7 @@ {{ webhook.parameters.url }} - - - - + @@ -206,6 +242,89 @@
    + +
    +
    +
    Build Triggers + +
    + +
    + +
    +
    No build triggers defined for this repository
    + + + + + + + + + + + + + + + +
    Trigger
    +
    + + Setting up trigger +
    +
    +     		+
    + +
      +
      • + + +
    • +
      + +
      +
      • +
    +
    + +
    + + +
    +
    + + + +
    +
    + + +
    +
    + +
    +
    +
    +
    +
    @@ -259,6 +378,30 @@ {{ shownToken.friendlyName }}
    + + + + -
    +
    + +
    + +
    There are no builds for this repository
    @@ -26,7 +30,7 @@
    @@ -41,6 +36,55 @@
    + +
    + + +
    +
    + You have not authorized any external applications +
    +
    +
    + These are the applications you have authorized to view information and perform Quay.io actions on your behalf. +
    + + + + + + + + + + + + + +
    Application NameAuthorized PermissionsRevoke
    + + + {{ authInfo.application.name }} + + + {{ authInfo.application.name }} + + {{ authInfo.application.organization.name }} + + + {{ scopeInfo.scope }} + + + +
    +
    +
    + +
    +
    diff --git a/static/partials/view-repo.html b/static/partials/view-repo.html index 6f8995bf4..d763c1a4a 100644 --- a/static/partials/view-repo.html +++ b/static/partials/view-repo.html @@ -16,11 +16,12 @@
    + bs-tooltip="" + title="{{ runningBuilds.length ? 'Dockerfile Builds Running: ' + (runningBuilds.length) : 'Dockerfile Build' }}" + ng-show="repo.can_write || buildHistory.length">
      @@ -32,9 +33,14 @@ New Dockerfile Build - - -
    • +
    • + + Build Triggers + +
      • + + +
    • @@ -45,7 +51,7 @@ - @@ -63,7 +69,6 @@ Copied to clipboard
    -
    @@ -78,10 +83,21 @@
    - To push images to this repository:

    - 
    sudo docker tag 0u123imageidgoeshere quay.io/{{repo.namespace}}/{{repo.name}}
-sudo docker push quay.io/{{repo.namespace}}/{{repo.name}}
    +
    +
    How to push a new image to this repository:
    +
    + First login to Quay.io (if you have not done so already): + 
    sudo docker login quay.io
    + + Tag an image to this repository: + 
    sudo docker tag 0u123imageidgoeshere quay.io/{{repo.namespace}}/{{repo.name}}
    + + Push the image to this repository: + 
    sudo docker push quay.io/{{repo.namespace}}/{{repo.name}}
    +
    +
    +
    @@ -159,7 +175,7 @@ sudo docker push quay.io/{{repo.namespace}}/{{repo.name}}
    + bs-tooltip="" title="{{ image.size | bytes }}"> {{ image.id.substr(0, 12) }}
    @@ -223,7 +239,8 @@ sudo docker push quay.io/{{repo.namespace}}/{{repo.name}} {{ getFormattedCommand(currentImage) }}
    diff --git a/templates/500.html b/templates/500.html new file mode 100644 index 000000000..65d5dabaf --- /dev/null +++ b/templates/500.html @@ -0,0 +1,91 @@ + + Quay.io - Something went wrong! + + + + + + + + +
    + +

    Something went wrong on our end!

    +

    + We're currently working to fix the problem, but if its persists please feel free to contact us. In the meantime, try a refreshing drink (or just refreshing). +

    +
    + + diff --git a/templates/base.html b/templates/base.html index 151b6035c..59e427da1 100644 --- a/templates/base.html +++ b/templates/base.html @@ -17,7 +17,9 @@ - + + + @@ -39,43 +41,45 @@ - - - + + + + + - - - - - - - - + + + + + + + + + + - - + + - - - - - + + + {% block added_dependencies %} {% endblock %} - - - - + + + +