| 1 | import { ArrowLeft } from "lucide-react"; |
| 2 | import { Form, Link, redirect } from "react-router"; |
| 3 | |
| 4 | import type { Route } from "./+types/token"; |
| 5 | import { page } from "../../lib/meta"; |
| 6 | import { ErrorText, SubmitButton } from "../../components/ui"; |
| 7 | import { TokenForm } from "../../components/token-form"; |
| 8 | import { TokenBadges, TokenCreated, TokenFacts, TokenMeta } from "../../components/token-list"; |
| 9 | import { RegenerateToken } from "../../components/token-regenerate"; |
| 10 | import { changesTo, tokenFromForm, ttlFromForm } from "../../lib/access-tokens"; |
| 11 | import { workspaceRepos, workspaceToken } from "../../lib/access-tokens.server"; |
| 12 | import { identity } from "../../lib/services.server"; |
| 13 | import { assertSameOrigin, getViewer, requireUser, roleIn } from "../../lib/session.server"; |
| 14 | |
| 15 | // One of the workspace's tokens: what it is, and for owners, changing and |
| 16 | // deleting it. Members see it read-only. |
| 17 | |
| 18 | export function meta({ loaderData, params, ...args }: Route.MetaArgs) { |
| 19 | return page(args, { title: `${loaderData?.token.name ?? "Access token"} · ${params.owner} · g1t` }); |
| 20 | } |
| 21 | |
| 22 | export async function loader({ params, context }: Route.LoaderArgs) { |
| 23 | const viewer = getViewer(context); |
| 24 | const slug = params.owner.toLowerCase(); |
| 25 | const owner = roleIn(viewer, slug) === "owner"; |
| 26 | const [token, repos] = await Promise.all([workspaceToken(viewer, slug, params.id), owner ? workspaceRepos(viewer, slug) : []]); |
| 27 | return { slug, owner, token, repos }; |
| 28 | } |
| 29 | |
| 30 | export async function action({ request, params, context }: Route.ActionArgs) { |
| 31 | assertSameOrigin(request); |
| 32 | const user = requireUser(context, request); |
| 33 | const slug = params.owner.toLowerCase(); |
| 34 | const form = await request.formData(); |
| 35 | if (form.get("intent") === "delete") { |
| 36 | const removed = await identity.removeWorkspaceToken(user, slug, params.id); |
| 37 | if (!removed.ok) return { error: removed.error.message, saved: false }; |
| 38 | throw redirect(`/${slug}/-/tokens`); |
| 39 | } |
| 40 | if (form.get("intent") === "regenerate") { |
| 41 | const ttl = ttlFromForm(form); |
| 42 | if (!ttl.ok) return { error: ttl.error, saved: false }; |
| 43 | const made = await identity.regenerateToken(user, params.id, ttl.value, slug); |
| 44 | return made.ok ? { error: null, saved: false, secret: made.value.token, made: made.value.info } : { error: made.error.message, saved: false }; |
| 45 | } |
| 46 | const token = await workspaceToken(user, slug, params.id); |
| 47 | const input = tokenFromForm(form, { editing: true, workspaceOwned: true, owner: slug }); |
| 48 | if (!input.ok) return { error: input.error, saved: false }; |
| 49 | const change = changesTo(token, input.value); |
| 50 | if (Object.keys(change).length === 0) return { error: null, saved: true }; |
| 51 | const updated = await identity.updateToken(user, params.id, change, slug); |
| 52 | return updated.ok ? { error: null, saved: true } : { error: updated.error.message, saved: false }; |
| 53 | } |
| 54 | |
| 55 | export default function WorkspaceTokenPage({ loaderData, actionData }: Route.ComponentProps) { |
| 56 | const { slug, owner, token, repos } = loaderData; |
| 57 | return ( |
| 58 | <section className="max-w-2xl space-y-6"> |
| 59 | <div className="space-y-1.5"> |
| 60 | <Link to={`/${slug}/-/tokens`} className="inline-flex items-center gap-1 text-xs text-muted hover:text-fg"> |
| 61 | <ArrowLeft size={13} /> Access tokens |
| 62 | </Link> |
| 63 | <h2 className="flex flex-wrap items-center gap-2 text-lg font-semibold tracking-tight"> |
| 64 | {token.name} |
| 65 | <TokenBadges token={token} /> |
| 66 | </h2> |
| 67 | {token.description && <p className="text-sm text-muted">{token.description}</p>} |
| 68 | <TokenMeta token={token} /> |
| 69 | </div> |
| 70 | {actionData && "secret" in actionData && actionData.secret && actionData.made && ( |
| 71 | <TokenCreated secret={actionData.secret} token={actionData.made} back={`/${slug}/-/tokens`} /> |
| 72 | )} |
| 73 | {owner ? ( |
| 74 | <> |
| 75 | <Form method="post" key={token.id} className="space-y-6"> |
| 76 | <input type="hidden" name="intent" value="save" /> |
| 77 | <TokenForm workspaceOwned slug={slug} repos={repos} editing={token} /> |
| 78 | <ErrorText>{actionData?.error}</ErrorText> |
| 79 | <div className="flex items-center gap-3"> |
| 80 | <SubmitButton pending="Saving…" match={{ intent: "save" }}> |
| 81 | Save changes |
| 82 | </SubmitButton> |
| 83 | {actionData?.saved && <span className="text-sm text-success">Saved.</span>} |
| 84 | </div> |
| 85 | </Form> |
| 86 | <RegenerateToken name={token.name} /> |
| 87 | <section className="rounded-xl border border-danger/30 p-4"> |
| 88 | <h3 className="text-sm font-medium">Delete this token</h3> |
| 89 | <p className="mt-1 text-xs text-muted">Anything still using it stops working at once.</p> |
| 90 | <Form method="post" className="mt-3"> |
| 91 | <input type="hidden" name="intent" value="delete" /> |
| 92 | <SubmitButton variant="destructive" pending="Deleting…" match={{ intent: "delete" }}> |
| 93 | Delete token |
| 94 | </SubmitButton> |
| 95 | </Form> |
| 96 | </section> |
| 97 | </> |
| 98 | ) : ( |
| 99 | <> |
| 100 | <TokenFacts token={token} /> |
| 101 | <p className="text-sm text-muted">Only owners can change or delete a workspace's tokens.</p> |
| 102 | </> |
| 103 | )} |
| 104 | </section> |
| 105 | ); |
| 106 | } |