mirror of
https://github.com/cwinfo/powerdns-admin.git
synced 2025-01-10 04:15:40 +00:00
Working on first-round updates for the authentication settings view.
This commit is contained in:
Matt Scott
parent
bd94c97486
commit
0e94e18485
@ -53,7 +53,7 @@
|
|||||||
OAuth</a>
|
OAuth</a>
|
||||||
</li>
|
</li>
|
||||||
<li class="nav-item">
|
<li class="nav-item">
|
||||||
<a class="nav-link" href="#tabs-github" data-toggle="pill" role="tab">Github
|
<a class="nav-link" href="#tabs-github" data-toggle="pill" role="tab">GitHub
|
||||||
OAuth</a>
|
OAuth</a>
|
||||||
</li>
|
</li>
|
||||||
<li class="nav-item">
|
<li class="nav-item">
|
||||||
@ -68,6 +68,8 @@
|
|||||||
<div class="tab-content">
|
<div class="tab-content">
|
||||||
|
|
||||||
<div class="tab-pane active" id="tabs-general">
|
<div class="tab-pane active" id="tabs-general">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-12 col-sm-6 col-lg-4">
|
||||||
<form role="form" method="post">
|
<form role="form" method="post">
|
||||||
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
||||||
<input type="hidden" value="general" name="config_tab"/>
|
<input type="hidden" value="general" name="config_tab"/>
|
||||||
@ -81,19 +83,34 @@
|
|||||||
name="local_db_enabled"
|
name="local_db_enabled"
|
||||||
class="checkbox"
|
class="checkbox"
|
||||||
{% if SETTING.get('local_db_enabled') %}checked{% endif %}>
|
{% if SETTING.get('local_db_enabled') %}checked{% endif %}>
|
||||||
<label for="local_db_enabled">Local DB Authentication</label>
|
<label for="local_db_enabled">Local DB
|
||||||
|
Authentication</label>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<input type="checkbox" id="signup_enabled" name="signup_enabled"
|
<input type="checkbox" id="signup_enabled"
|
||||||
|
name="signup_enabled"
|
||||||
class="checkbox"
|
class="checkbox"
|
||||||
{% if SETTING.get('signup_enabled') %}checked{% endif %}>
|
{% if SETTING.get('signup_enabled') %}checked{% endif %}>
|
||||||
<label for="signup_enabled">Allow users to sign up</label>
|
<label for="signup_enabled">Allow users to sign
|
||||||
|
up</label>
|
||||||
</div>
|
</div>
|
||||||
<button type="submit" class="btn btn-primary">Save</button>
|
<button type="submit" class="btn btn-primary">Save</button>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
</form>
|
</form>
|
||||||
</div>
|
</div>
|
||||||
|
<div class="col-12 col-sm-6 col-lg-8">
|
||||||
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">Settings Help</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
|
<p>Fill in all the fields in the left form.</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
<!-- /.tab-pane -->
|
<!-- /.tab-pane -->
|
||||||
|
|
||||||
<div class="tab-pane" id="tabs-ldap">
|
<div class="tab-pane" id="tabs-ldap">
|
||||||
@ -117,7 +134,6 @@
|
|||||||
</div>
|
</div>
|
||||||
<div class="card-body">
|
<div class="card-body">
|
||||||
<fieldset>
|
<fieldset>
|
||||||
<legend>GENERAL</legend>
|
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<input type="checkbox" id="ldap_enabled"
|
<input type="checkbox" id="ldap_enabled"
|
||||||
name="ldap_enabled"
|
name="ldap_enabled"
|
||||||
@ -382,7 +398,7 @@
|
|||||||
<div class="col-12 col-sm-6 col-lg-8">
|
<div class="col-12 col-sm-6 col-lg-8">
|
||||||
<div class="card">
|
<div class="card">
|
||||||
<div class="card-header">
|
<div class="card-header">
|
||||||
<h3 class="card-title">LDAP Settings Help</h3>
|
<h3 class="card-title">Settings Help</h3>
|
||||||
</div>
|
</div>
|
||||||
<div class="card-body">
|
<div class="card-body">
|
||||||
<dl class="dl-horizontal">
|
<dl class="dl-horizontal">
|
||||||
@ -532,7 +548,6 @@
|
|||||||
keep
|
keep
|
||||||
their existing associations and their current
|
their existing associations and their current
|
||||||
Role.
|
Role.
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
</ul>
|
</ul>
|
||||||
</dd>
|
</dd>
|
||||||
@ -546,15 +561,17 @@
|
|||||||
|
|
||||||
<div class="tab-pane" id="tabs-google">
|
<div class="tab-pane" id="tabs-google">
|
||||||
<div class="row">
|
<div class="row">
|
||||||
<div class="col-4">
|
<div class="col-12 col-sm-6 col-lg-4">
|
||||||
<div class="card">
|
|
||||||
<div class="card-body">
|
|
||||||
<form role="form" method="post" data-toggle="validator">
|
<form role="form" method="post" data-toggle="validator">
|
||||||
<input type="hidden" name="_csrf_token"
|
<input type="hidden" name="_csrf_token"
|
||||||
value="{{ csrf_token() }}">
|
value="{{ csrf_token() }}">
|
||||||
<input type="hidden" value="google" name="config_tab"/>
|
<input type="hidden" value="google" name="config_tab"/>
|
||||||
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">Google OAuth Settings</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
<fieldset>
|
<fieldset>
|
||||||
<legend>GENERAL</legend>
|
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<input type="checkbox" id="google_oauth_enabled"
|
<input type="checkbox" id="google_oauth_enabled"
|
||||||
name="google_oauth_enabled" class="checkbox"
|
name="google_oauth_enabled" class="checkbox"
|
||||||
@ -632,14 +649,14 @@
|
|||||||
class="btn btn-primary float-right">Save
|
class="btn btn-primary float-right">Save
|
||||||
</button>
|
</button>
|
||||||
</div>
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
</form>
|
</form>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
<div class="col-12 col-sm-6 col-lg-8">
|
||||||
</div>
|
|
||||||
<div class="col-8">
|
|
||||||
<div class="card">
|
<div class="card">
|
||||||
<div class="card-header">
|
<div class="card-header">
|
||||||
<h3 class="card-title">Help</h3>
|
<h3 class="card-title">Settings Help</h3>
|
||||||
</div>
|
</div>
|
||||||
<div class="card-body">
|
<div class="card-body">
|
||||||
<p>Fill in all the fields in the left form.</p>
|
<p>Fill in all the fields in the left form.</p>
|
||||||
@ -655,12 +672,16 @@
|
|||||||
|
|
||||||
<div class="tab-pane" id="tabs-github">
|
<div class="tab-pane" id="tabs-github">
|
||||||
<div class="row">
|
<div class="row">
|
||||||
<div class="col-4">
|
<div class="col-12 col-sm-6 col-lg-4">
|
||||||
<form role="form" method="post" data-toggle="validator">
|
<form role="form" method="post" data-toggle="validator">
|
||||||
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
||||||
<input type="hidden" value="github" name="config_tab"/>
|
<input type="hidden" value="github" name="config_tab"/>
|
||||||
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">GitHub OAuth Settings</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
<fieldset>
|
<fieldset>
|
||||||
<legend>GENERAL</legend>
|
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<input type="checkbox" id="github_oauth_enabled"
|
<input type="checkbox" id="github_oauth_enabled"
|
||||||
name="github_oauth_enabled" class="checkbox"
|
name="github_oauth_enabled" class="checkbox"
|
||||||
@ -678,9 +699,11 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="github_oauth_secret">Client secret</label>
|
<label for="github_oauth_secret">Client
|
||||||
|
secret</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="github_oauth_secret" id="github_oauth_secret"
|
name="github_oauth_secret"
|
||||||
|
id="github_oauth_secret"
|
||||||
placeholder="Github OAuth client secret"
|
placeholder="Github OAuth client secret"
|
||||||
data-error="Please input Client secret"
|
data-error="Please input Client secret"
|
||||||
value="{{ SETTING.get('github_oauth_secret') }}">
|
value="{{ SETTING.get('github_oauth_secret') }}">
|
||||||
@ -692,7 +715,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="github_oauth_scope">Scope</label>
|
<label for="github_oauth_scope">Scope</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="github_oauth_scope" id="github_oauth_scope"
|
name="github_oauth_scope"
|
||||||
|
id="github_oauth_scope"
|
||||||
placeholder="e.g. email"
|
placeholder="e.g. email"
|
||||||
data-error="Please input scope"
|
data-error="Please input scope"
|
||||||
value="{{ SETTING.get('github_oauth_scope') }}">
|
value="{{ SETTING.get('github_oauth_scope') }}">
|
||||||
@ -701,14 +725,16 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="github_oauth_api_url">API URL</label>
|
<label for="github_oauth_api_url">API URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="github_oauth_api_url" id="github_oauth_api_url"
|
name="github_oauth_api_url"
|
||||||
|
id="github_oauth_api_url"
|
||||||
placeholder="e.g. https://api.github.com/user"
|
placeholder="e.g. https://api.github.com/user"
|
||||||
data-error="Please input API URL"
|
data-error="Please input API URL"
|
||||||
value="{{ SETTING.get('github_oauth_api_url') }}">
|
value="{{ SETTING.get('github_oauth_api_url') }}">
|
||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="github_oauth_token_url">Token URL</label>
|
<label for="github_oauth_token_url">Token
|
||||||
|
URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="github_oauth_token_url"
|
name="github_oauth_token_url"
|
||||||
id="github_oauth_token_url"
|
id="github_oauth_token_url"
|
||||||
@ -730,32 +756,46 @@
|
|||||||
</div>
|
</div>
|
||||||
</fieldset>
|
</fieldset>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<button type="submit" class="btn btn-flat btn-primary">Save
|
<button type="submit" class="btn btn-flat btn-primary">
|
||||||
|
Save
|
||||||
</button>
|
</button>
|
||||||
</div>
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
</form>
|
</form>
|
||||||
</div>
|
</div>
|
||||||
<div class="col-8">
|
<div class="col-12 col-sm-6 col-lg-8">
|
||||||
<legend>Help</legend>
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">Settings Help</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
<p>Fill in all the fields in the left form.</p>
|
<p>Fill in all the fields in the left form.</p>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
<!-- /.tab-pane -->
|
<!-- /.tab-pane -->
|
||||||
|
|
||||||
<div class="tab-pane" id="tabs-azure">
|
<div class="tab-pane" id="tabs-azure">
|
||||||
<div class="row">
|
<div class="row">
|
||||||
<div class="col-4">
|
<div class="col-12 col-sm-6 col-lg-4">
|
||||||
<form role="form" method="post" data-toggle="validator">
|
<form role="form" method="post" data-toggle="validator">
|
||||||
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
||||||
<input type="hidden" value="azure" name="config_tab"/>
|
<input type="hidden" value="azure" name="config_tab"/>
|
||||||
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">Microsoft OAuth Settings</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
<fieldset>
|
<fieldset>
|
||||||
<legend>GENERAL</legend>
|
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<input type="checkbox" id="azure_oauth_enabled"
|
<input type="checkbox" id="azure_oauth_enabled"
|
||||||
name="azure_oauth_enabled" class="checkbox"
|
name="azure_oauth_enabled" class="checkbox"
|
||||||
{% if SETTING.get('azure_oauth_enabled') %}checked{% endif %}>
|
{% if SETTING.get('azure_oauth_enabled') %}checked{% endif %}>
|
||||||
<label for="azure_oauth_enabled">Enable Microsoft Azure
|
<label for="azure_oauth_enabled">Enable Microsoft
|
||||||
|
Azure
|
||||||
OAuth</label>
|
OAuth</label>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
@ -768,9 +808,11 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_oauth_secret">Client secret</label>
|
<label for="azure_oauth_secret">Client
|
||||||
|
secret</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_oauth_secret" id="azure_oauth_secret"
|
name="azure_oauth_secret"
|
||||||
|
id="azure_oauth_secret"
|
||||||
placeholder="Azure OAuth client secret"
|
placeholder="Azure OAuth client secret"
|
||||||
data-error="Please input Client secret"
|
data-error="Please input Client secret"
|
||||||
value="{{ SETTING.get('azure_oauth_secret') }}">
|
value="{{ SETTING.get('azure_oauth_secret') }}">
|
||||||
@ -782,7 +824,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_oauth_scope">Scope</label>
|
<label for="azure_oauth_scope">Scope</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_oauth_scope" id="azure_oauth_scope"
|
name="azure_oauth_scope"
|
||||||
|
id="azure_oauth_scope"
|
||||||
placeholder="e.g. email"
|
placeholder="e.g. email"
|
||||||
data-error="Please input scope - e.g. User.Read"
|
data-error="Please input scope - e.g. User.Read"
|
||||||
value="{{ SETTING.get('azure_oauth_scope') }}">
|
value="{{ SETTING.get('azure_oauth_scope') }}">
|
||||||
@ -791,7 +834,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_oauth_api_url">API URL</label>
|
<label for="azure_oauth_api_url">API URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_oauth_api_url" id="azure_oauth_api_url"
|
name="azure_oauth_api_url"
|
||||||
|
id="azure_oauth_api_url"
|
||||||
placeholder="e.g. https://graph.microsoft.com/v1.0/"
|
placeholder="e.g. https://graph.microsoft.com/v1.0/"
|
||||||
data-error="Please input API URL"
|
data-error="Please input API URL"
|
||||||
value="{{ SETTING.get('azure_oauth_api_url') }}">
|
value="{{ SETTING.get('azure_oauth_api_url') }}">
|
||||||
@ -808,7 +852,8 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_oauth_authorize_url">Authorize URL</label>
|
<label for="azure_oauth_authorize_url">Authorize
|
||||||
|
URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_oauth_authorize_url"
|
name="azure_oauth_authorize_url"
|
||||||
id="azure_oauth_authorize_url"
|
id="azure_oauth_authorize_url"
|
||||||
@ -841,16 +886,19 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_admin_group">Admin group</label>
|
<label for="azure_admin_group">Admin group</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_admin_group" id="azure_admin_group"
|
name="azure_admin_group"
|
||||||
|
id="azure_admin_group"
|
||||||
placeholder="e.g. 00000000-0000-0000-0000-000000000000"
|
placeholder="e.g. 00000000-0000-0000-0000-000000000000"
|
||||||
data-error="Please input the ID for Admin group"
|
data-error="Please input the ID for Admin group"
|
||||||
value="{{ SETTING.get('azure_admin_group') }}">
|
value="{{ SETTING.get('azure_admin_group') }}">
|
||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_operator_group">Operator group</label>
|
<label for="azure_operator_group">Operator
|
||||||
|
group</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_operator_group" id="azure_operator_group"
|
name="azure_operator_group"
|
||||||
|
id="azure_operator_group"
|
||||||
placeholder="e.g. 00000000-0000-0000-0000-000000000000"
|
placeholder="e.g. 00000000-0000-0000-0000-000000000000"
|
||||||
data-error="Please input the ID for Operator group"
|
data-error="Please input the ID for Operator group"
|
||||||
value="{{ SETTING.get('azure_operator_group') }}">
|
value="{{ SETTING.get('azure_operator_group') }}">
|
||||||
@ -869,12 +917,14 @@
|
|||||||
<fieldset>
|
<fieldset>
|
||||||
<legend>AZURE GROUP ACCOUNT SYNC/CREATION</legend>
|
<legend>AZURE GROUP ACCOUNT SYNC/CREATION</legend>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_group_accounts_enabled">Status</label>
|
<label
|
||||||
|
for="azure_group_accounts_enabled">Status</label>
|
||||||
<div class="radio">
|
<div class="radio">
|
||||||
<label>
|
<label>
|
||||||
<input type="radio"
|
<input type="radio"
|
||||||
name="azure_group_accounts_enabled"
|
name="azure_group_accounts_enabled"
|
||||||
id="azure_group_accounts_off" value="OFF"
|
id="azure_group_accounts_off"
|
||||||
|
value="OFF"
|
||||||
{% if not SETTING.get('azure_group_accounts_enabled') %}checked{% endif %}>
|
{% if not SETTING.get('azure_group_accounts_enabled') %}checked{% endif %}>
|
||||||
OFF
|
OFF
|
||||||
</label>
|
</label>
|
||||||
@ -882,14 +932,16 @@
|
|||||||
<label>
|
<label>
|
||||||
<input type="radio"
|
<input type="radio"
|
||||||
name="azure_group_accounts_enabled"
|
name="azure_group_accounts_enabled"
|
||||||
id="azure_group_accounts_on" value="ON"
|
id="azure_group_accounts_on"
|
||||||
|
value="ON"
|
||||||
{% if SETTING.get('azure_group_accounts_enabled') %}checked{% endif %}>
|
{% if SETTING.get('azure_group_accounts_enabled') %}checked{% endif %}>
|
||||||
ON
|
ON
|
||||||
</label>
|
</label>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_group_accounts_name">Azure group name
|
<label for="azure_group_accounts_name">Azure group
|
||||||
|
name
|
||||||
claim</label>
|
claim</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_group_accounts_name"
|
name="azure_group_accounts_name"
|
||||||
@ -900,7 +952,8 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_group_accounts_name_re">Azure group name
|
<label for="azure_group_accounts_name_re">Azure
|
||||||
|
group name
|
||||||
claim regex</label>
|
claim regex</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_group_accounts_name_re"
|
name="azure_group_accounts_name_re"
|
||||||
@ -911,7 +964,8 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_group_accounts_description">Azure group
|
<label for="azure_group_accounts_description">Azure
|
||||||
|
group
|
||||||
description claim</label>
|
description claim</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_group_accounts_description"
|
name="azure_group_accounts_description"
|
||||||
@ -922,7 +976,8 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="azure_group_accounts_name_re">Azure group name
|
<label for="azure_group_accounts_name_re">Azure
|
||||||
|
group name
|
||||||
description regex</label>
|
description regex</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="azure_group_accounts_description_re"
|
name="azure_group_accounts_description_re"
|
||||||
@ -934,54 +989,78 @@
|
|||||||
</div>
|
</div>
|
||||||
</fieldset>
|
</fieldset>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<button type="submit" class="btn btn-flat btn-primary">Save
|
<button type="submit" class="btn btn-flat btn-primary">
|
||||||
|
Save
|
||||||
</button>
|
</button>
|
||||||
</div>
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
</form>
|
</form>
|
||||||
</div>
|
</div>
|
||||||
<div class="col-8">
|
<div class="col-12 col-sm-6 col-lg-8">
|
||||||
<legend>Help</legend>
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">Settings Help</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
<p>Fill in all the fields in the left form.</p>
|
<p>Fill in all the fields in the left form.</p>
|
||||||
<p>You first need to define an Application Registration in your Azure
|
<p>You first need to define an Application Registration in your
|
||||||
Active Directory, with the appropriate HTTPS URL for this endpoint,
|
Azure
|
||||||
|
Active Directory, with the appropriate HTTPS URL for this
|
||||||
|
endpoint,
|
||||||
and with the appropriate rights, as explained in the
|
and with the appropriate rights, as explained in the
|
||||||
documentation.</p>
|
documentation.</p>
|
||||||
<p>
|
<p>
|
||||||
<ul>
|
<ul>
|
||||||
<li>Under the Azure Active Directory, select App Registrations, and
|
<li>Under the Azure Active Directory, select App
|
||||||
create a new one. Give it any name you want, and the Redirect
|
Registrations, and
|
||||||
|
create a new one. Give it any name you want, and the
|
||||||
|
Redirect
|
||||||
URI shoule be type 'Web' and of the format <b>https://powerdnsadmin/azure/authorized</b>
|
URI shoule be type 'Web' and of the format <b>https://powerdnsadmin/azure/authorized</b>
|
||||||
(replace the host name approriately).
|
(replace the host name approriately).
|
||||||
</li>
|
</li>
|
||||||
<li>Select the newly-created registration</li>
|
<li>Select the newly-created registration</li>
|
||||||
<li>On the Overview page, the Application ID is your new Client ID
|
<li>On the Overview page, the Application ID is your new
|
||||||
|
Client ID
|
||||||
to use with PowerDNS-Admin
|
to use with PowerDNS-Admin
|
||||||
</li>
|
</li>
|
||||||
<li>On the Overview page, make a note of your Directory/Tenant ID -
|
<li>On the Overview page, make a note of your
|
||||||
|
Directory/Tenant ID -
|
||||||
you need it for the API URLs later
|
you need it for the API URLs later
|
||||||
</li>
|
</li>
|
||||||
<li>Ensure Access Tokens are enabled in the Authentication section
|
<li>Ensure Access Tokens are enabled in the Authentication
|
||||||
|
section
|
||||||
</li>
|
</li>
|
||||||
<li>Under Certificates and Secrets, create a new Client Secret. Note
|
<li>Under Certificates and Secrets, create a new Client
|
||||||
|
Secret. Note
|
||||||
this secret as it is the new Client Secret to use with
|
this secret as it is the new Client Secret to use with
|
||||||
PowerDNS-Admin
|
PowerDNS-Admin
|
||||||
</li>
|
</li>
|
||||||
<li>Under API Permissions, you need to add permissions. Add
|
<li>Under API Permissions, you need to add permissions. Add
|
||||||
permissions for Graph API, Delegated. Add: email, openid,
|
permissions for Graph API, Delegated. Add: email,
|
||||||
profile, GroupMember.Read, User.Read and possibly User.Read.All.
|
openid,
|
||||||
You then need to grant admin approval for your organisation.
|
profile, GroupMember.Read, User.Read and possibly
|
||||||
|
User.Read.All.
|
||||||
|
You then need to grant admin approval for your
|
||||||
|
organisation.
|
||||||
</li>
|
</li>
|
||||||
<li>For the Scope, use <b>User.Read openid mail profile</b></li>
|
<li>For the Scope, use <b>User.Read openid mail profile</b>
|
||||||
<li>Replace the [tenantID] in the default URLs for authorize and
|
</li>
|
||||||
|
<li>Replace the [tenantID] in the default URLs for authorize
|
||||||
|
and
|
||||||
token with your Tenant ID.
|
token with your Tenant ID.
|
||||||
</li>
|
</li>
|
||||||
</ul>
|
</ul>
|
||||||
</p>
|
</p>
|
||||||
<p>If <b>AZURE GROUP ACCOUNT SYNC/CREATION</b> is enabled, Accounts will
|
<p>If <b>AZURE GROUP ACCOUNT SYNC/CREATION</b> is enabled,
|
||||||
be created automatically based on group membership. If an Account
|
Accounts will
|
||||||
exists, an authenticated user with group membership is added to the
|
be created automatically based on group membership. If an
|
||||||
|
Account
|
||||||
|
exists, an authenticated user with group membership is added
|
||||||
|
to the
|
||||||
Account</p>
|
Account</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@ -989,17 +1068,22 @@
|
|||||||
|
|
||||||
<div class="tab-pane" id="tabs-oidc">
|
<div class="tab-pane" id="tabs-oidc">
|
||||||
<div class="row">
|
<div class="row">
|
||||||
<div class="col-4">
|
<div class="col-12 col-sm-6 col-lg-4">
|
||||||
<form role="form" method="post" data-toggle="validator">
|
<form role="form" method="post" data-toggle="validator">
|
||||||
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
<input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
|
||||||
<input type="hidden" value="oidc" name="config_tab"/>
|
<input type="hidden" value="oidc" name="config_tab"/>
|
||||||
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">OpenID Connect OAuth Settings</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
<fieldset>
|
<fieldset>
|
||||||
<legend>GENERAL</legend>
|
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<input type="checkbox" id="oidc_oauth_enabled"
|
<input type="checkbox" id="oidc_oauth_enabled"
|
||||||
name="oidc_oauth_enabled" class="checkbox"
|
name="oidc_oauth_enabled" class="checkbox"
|
||||||
{% if SETTING.get('oidc_oauth_enabled') %}checked{% endif %}>
|
{% if SETTING.get('oidc_oauth_enabled') %}checked{% endif %}>
|
||||||
<label for="oidc_oauth_enabled">Enable OpenID Connect
|
<label for="oidc_oauth_enabled">Enable OpenID
|
||||||
|
Connect
|
||||||
OAuth</label>
|
OAuth</label>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
@ -1014,7 +1098,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_secret">Client secret</label>
|
<label for="oidc_oauth_secret">Client secret</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_secret" id="oidc_oauth_secret"
|
name="oidc_oauth_secret"
|
||||||
|
id="oidc_oauth_secret"
|
||||||
placeholder="OIDC OAuth client secret"
|
placeholder="OIDC OAuth client secret"
|
||||||
data-error="Please input Client secret"
|
data-error="Please input Client secret"
|
||||||
value="{{ SETTING.get('oidc_oauth_secret') }}">
|
value="{{ SETTING.get('oidc_oauth_secret') }}">
|
||||||
@ -1032,7 +1117,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_api_url">API URL</label>
|
<label for="oidc_oauth_api_url">API URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_api_url" id="oidc_oauth_api_url"
|
name="oidc_oauth_api_url"
|
||||||
|
id="oidc_oauth_api_url"
|
||||||
placeholder="e.g. https://api.oidc.com/user"
|
placeholder="e.g. https://api.oidc.com/user"
|
||||||
data-error="Please input API URL"
|
data-error="Please input API URL"
|
||||||
value="{{ SETTING.get('oidc_oauth_api_url') }}">
|
value="{{ SETTING.get('oidc_oauth_api_url') }}">
|
||||||
@ -1041,14 +1127,16 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_token_url">Token URL</label>
|
<label for="oidc_oauth_token_url">Token URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_token_url" id="oidc_oauth_token_url"
|
name="oidc_oauth_token_url"
|
||||||
|
id="oidc_oauth_token_url"
|
||||||
placeholder="e.g. https://oidc.com/login/oauth/access_token"
|
placeholder="e.g. https://oidc.com/login/oauth/access_token"
|
||||||
data-error="Please input Token URL"
|
data-error="Please input Token URL"
|
||||||
value="{{ SETTING.get('oidc_oauth_token_url') }}">
|
value="{{ SETTING.get('oidc_oauth_token_url') }}">
|
||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_authorize_url">Authorize URL</label>
|
<label for="oidc_oauth_authorize_url">Authorize
|
||||||
|
URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_authorize_url"
|
name="oidc_oauth_authorize_url"
|
||||||
id="oidc_oauth_authorize_url"
|
id="oidc_oauth_authorize_url"
|
||||||
@ -1058,7 +1146,8 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_logout_url">Logout URL</label>
|
<label for="oidc_oauth_logout_url">Logout
|
||||||
|
URL</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_logout_url"
|
name="oidc_oauth_logout_url"
|
||||||
id="oidc_oauth_logout_url"
|
id="oidc_oauth_logout_url"
|
||||||
@ -1073,7 +1162,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_username">Username</label>
|
<label for="oidc_oauth_username">Username</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_username" id="oidc_oauth_username"
|
name="oidc_oauth_username"
|
||||||
|
id="oidc_oauth_username"
|
||||||
placeholder="e.g. preferred_username"
|
placeholder="e.g. preferred_username"
|
||||||
data-error="Please input Username claim"
|
data-error="Please input Username claim"
|
||||||
value="{{ SETTING.get('oidc_oauth_username') }}">
|
value="{{ SETTING.get('oidc_oauth_username') }}">
|
||||||
@ -1082,7 +1172,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_firstname">First Name</label>
|
<label for="oidc_oauth_firstname">First Name</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_firstname" id="oidc_oauth_firstname"
|
name="oidc_oauth_firstname"
|
||||||
|
id="oidc_oauth_firstname"
|
||||||
placeholder="e.g. given_name"
|
placeholder="e.g. given_name"
|
||||||
data-error="Please input First Name claim"
|
data-error="Please input First Name claim"
|
||||||
value="{{ SETTING.get('oidc_oauth_firstname') }}">
|
value="{{ SETTING.get('oidc_oauth_firstname') }}">
|
||||||
@ -1091,7 +1182,8 @@
|
|||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_last_name">Last Name</label>
|
<label for="oidc_oauth_last_name">Last Name</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_last_name" id="oidc_oauth_last_name"
|
name="oidc_oauth_last_name"
|
||||||
|
id="oidc_oauth_last_name"
|
||||||
placeholder="e.g. family_name"
|
placeholder="e.g. family_name"
|
||||||
data-error="Please input Last Name claim"
|
data-error="Please input Last Name claim"
|
||||||
value="{{ SETTING.get('oidc_oauth_last_name') }}">
|
value="{{ SETTING.get('oidc_oauth_last_name') }}">
|
||||||
@ -1121,7 +1213,8 @@
|
|||||||
<span class="help-block with-errors"></span>
|
<span class="help-block with-errors"></span>
|
||||||
</div>
|
</div>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<label for="oidc_oauth_account_description_property">Autoprovision
|
<label
|
||||||
|
for="oidc_oauth_account_description_property">Autoprovision
|
||||||
Account Description property</label>
|
Account Description property</label>
|
||||||
<input type="text" class="form-control"
|
<input type="text" class="form-control"
|
||||||
name="oidc_oauth_account_description_property"
|
name="oidc_oauth_account_description_property"
|
||||||
@ -1133,17 +1226,26 @@
|
|||||||
</div>
|
</div>
|
||||||
</fieldset>
|
</fieldset>
|
||||||
<div class="form-group">
|
<div class="form-group">
|
||||||
<button type="submit" class="btn btn-flat btn-primary">Save
|
<button type="submit" class="btn btn-flat btn-primary">
|
||||||
|
Save
|
||||||
</button>
|
</button>
|
||||||
</div>
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
</form>
|
</form>
|
||||||
</div>
|
</div>
|
||||||
<div class="col-8">
|
<div class="col-12 col-sm-6 col-lg-8">
|
||||||
<legend>Help</legend>
|
<div class="card">
|
||||||
|
<div class="card-header">
|
||||||
|
<h3 class="card-title">Settings Help</h3>
|
||||||
|
</div>
|
||||||
|
<div class="card-body">
|
||||||
<p>Fill in all the fields in the left form.</p>
|
<p>Fill in all the fields in the left form.</p>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
<!-- /.tab-pane -->
|
<!-- /.tab-pane -->
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user