25 |
29 |
26 |
27 |
28 |
30 |
38 |
39 |
40 | `);
41 |
42 | /**
43 | * Main template used for handling administrative functionality for customizing the
44 | * Auth UI configuration.
45 | */
46 | const admin = handlebars.compile(`
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
58 |
55 |
56 |
57 |
59 |
69 |
84 |
85 |
86 | `);
87 |
88 | export {
89 | main,
90 | admin,
91 | };
92 |
--------------------------------------------------------------------------------
/authui-container/server/utils/error.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2020 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | export interface ErrorResponse {
16 | error: {
17 | code: number;
18 | message: string;
19 | status?: string;
20 | };
21 | }
22 |
23 | export const ERROR_MAP: {[key: string]: ErrorResponse} = {
24 | INVALID_ARGUMENT: {
25 | error: {
26 | code: 400,
27 | message: 'Client specified an invalid argument.',
28 | status: 'INVALID_ARGUMENT',
29 | },
30 | },
31 | FAILED_PRECONDITION: {
32 | error: {
33 | code: 400,
34 | message: 'Request can not be executed in the current system state.',
35 | status: 'FAILED_PRECONDITION',
36 | },
37 | },
38 | OUT_OF_RANGE: {
39 | error: {
40 | code: 400,
41 | message: 'Client specified an invalid range.',
42 | status: 'OUT_OF_RANGE',
43 | },
44 | },
45 | UNAUTHENTICATED: {
46 | error: {
47 | code: 401,
48 | message: 'Request not authenticated due to missing, invalid, or expired OAuth token.',
49 | status: 'UNAUTHENTICATED',
50 | },
51 | },
52 | PERMISSION_DENIED: {
53 | error: {
54 | code: 403,
55 | message: 'Client does not have sufficient permission.',
56 | status: 'PERMISSION_DENIED',
57 | },
58 | },
59 | NOT_FOUND: {
60 | error: {
61 | code: 404,
62 | message: 'A specified resource is not found, or the request is rejected by undisclosed reasons.',
63 | status: 'NOT_FOUND',
64 | },
65 | },
66 | ABORTED: {
67 | error: {
68 | code: 409,
69 | message: 'Concurrency conflict, such as read-modify-write conflict.',
70 | status: 'ABORTED',
71 | },
72 | },
73 | ALREADY_EXISTS: {
74 | error: {
75 | code: 409,
76 | message: 'The resource that a client tried to create already exists.',
77 | status: 'ALREADY_EXISTS',
78 | },
79 | },
80 | RESOURCE_EXHAUSTED: {
81 | error: {
82 | code: 429,
83 | message: 'Either out of resource quota or reaching rate limiting.',
84 | status: 'RESOURCE_EXHAUSTED',
85 | },
86 | },
87 | CANCELLED: {
88 | error: {
89 | code: 499,
90 | message: 'Request cancelled by the client.',
91 | status: 'CANCELLED',
92 | },
93 | },
94 | DATA_LOSS: {
95 | error: {
96 | code: 500,
97 | message: 'Unrecoverable data loss or data corruption. ',
98 | status: 'DATA_LOSS',
99 | },
100 | },
101 | UNKNOWN: {
102 | error: {
103 | code: 500,
104 | message: 'Unknown server error.',
105 | status: 'UNKNOWN',
106 | },
107 | },
108 | INTERNAL: {
109 | error: {
110 | code: 500,
111 | message: 'Internal server error.',
112 | status: 'INTERNAL',
113 | },
114 | },
115 | NOT_IMPLEMENTED: {
116 | error: {
117 | code: 501,
118 | message: 'API method not implemented by the server.',
119 | status: 'NOT_IMPLEMENTED',
120 | },
121 | },
122 | UNAVAILABLE: {
123 | error: {
124 | code: 503,
125 | message: 'Service unavailable.',
126 | status: 'UNAVAILABLE',
127 | },
128 | },
129 | DEADLINE_EXCEEDED: {
130 | error: {
131 | code: 504,
132 | message: 'Request deadline exceeded.',
133 | status: 'DEADLINE_EXCEEDED',
134 | },
135 | },
136 | };
137 |
--------------------------------------------------------------------------------
/authui-container/src/admin.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2020 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import '../node_modules/bootstrap/dist/css/bootstrap.min.css';
16 | import '../node_modules/firebaseui/dist/firebaseui.css';
17 | import '../public/style.css';
18 | import './polyfill';
19 | import $ = require('jquery');
20 | (window as any).$ = (window as any).jQuery = $;
21 |
22 | import { AdminUi } from './admin-ui';
23 | import { onDomReady } from './utils/index';
24 |
25 | // The query selector where the admin UI will be rendered.
26 | const UI_ELEMENT_SELECTOR = '#admin-container';
27 |
28 | // When document is ready, initialize and render the AdminUi.
29 | onDomReady(document)
30 | .then(() => {
31 | $('.toast').toast('hide');
32 | const ui = new AdminUi(UI_ELEMENT_SELECTOR, () => {
33 | $('.toast').toast('show');
34 | });
35 | return ui.render();
36 | });
--------------------------------------------------------------------------------
/authui-container/src/polyfill.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2020 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | // Polyfills for IE 11.
16 | // tslint:disable-next-line:no-var-requires
17 | require('@babel/polyfill');
18 | // tslint:disable-next-line:no-var-requires
19 | const entries = require('object.entries');
20 | // tslint:disable-next-line:no-var-requires
21 | const values = require('object.values');
22 |
23 | // from:https://github.com/jserz/js_piece/blob/master/DOM/ChildNode/remove()/remove().md
24 | ((arr) => {
25 | arr.forEach((item) => {
26 | if (item.hasOwnProperty('remove')) {
27 | return;
28 | }
29 | Object.defineProperty(item, 'remove', {
30 | configurable: true,
31 | enumerable: true,
32 | writable: true,
33 | value: function remove() {
34 | this.parentNode.removeChild(this);
35 | }
36 | });
37 | });
38 | })([Element.prototype, CharacterData.prototype, DocumentType.prototype]);
39 |
40 | // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/includes
41 | if (!String.prototype.includes) {
42 | String.prototype.includes = function(search: any, start = 0) {
43 | 'use strict';
44 |
45 | if (search instanceof RegExp) {
46 | throw TypeError('first argument must not be a RegExp');
47 | }
48 | return this.indexOf(search, start) !== -1;
49 | };
50 | }
51 |
52 | (() => {
53 | // https://stackoverflow.com/questions/19345392/why-arent-my-parameters-getting-passed-through-to-a-dispatched-event/
54 | if ((window.document as any).documentMode) {
55 | function CustomEvent(event: any, params: any) {
56 | params = params || {bubbles: false, cancelable: false, detail: undefined};
57 | const evt = document.createEvent('CustomEvent');
58 | evt.initCustomEvent(event, params.bubbles, params.cancelable, params.detail);
59 | return evt;
60 | }
61 |
62 | CustomEvent.prototype = (window as any).Event.prototype;
63 |
64 | (window as any).CustomEvent = CustomEvent;
65 |
66 | // Map.prototype.values() not provided in IE11.
67 | // tslint:disable-next-line
68 | window.Map = require('es6-map/polyfill');
69 | }
70 | })();
71 |
72 | if (!(Object as any).values) {
73 | values.shim();
74 | }
75 |
76 | if (!(Object as any).entries) {
77 | entries.shim();
78 | }
79 |
--------------------------------------------------------------------------------
/authui-container/src/script.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import '../node_modules/bootstrap/dist/css/bootstrap.min.css';
16 | import '../node_modules/firebaseui/dist/firebaseui.css';
17 | import '../public/style.css';
18 | import './polyfill';
19 |
20 | import { SignInUi } from './sign-in-ui';
21 | import { onDomReady } from './utils/index';
22 |
23 | // The query selector where then sign-in UI will be rendered.
24 | const UI_ELEMENT_SELECTOR = '#firebaseui-container';
25 |
26 | // When document is ready, initialize and render the SignInUi.
27 | onDomReady(document)
28 | .then(() => {
29 | const ui = new SignInUi(UI_ELEMENT_SELECTOR);
30 | return ui.render();
31 | });
32 |
--------------------------------------------------------------------------------
/authui-container/src/utils/FirebaseWrapper.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2023 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | // tslint:disable-next-line:no-submodule-imports
16 | import { initializeApp } from 'firebase/app';
17 | // tslint:disable-next-line:no-submodule-imports
18 | import { getAuth, getRedirectResult, reauthenticateWithPopup, signInWithRedirect } from 'firebase/auth';
19 | import { getCredentialFromResult } from './index';
20 | // This wrapper is primarily used in order to stub these methods during testing with sinon
21 | // Sinon does not allow stubbing standalone functions. See https://github.com/sinonjs/sinon/issues/562
22 | const firebaseWrapper = {
23 | _initializeApp: ((config) => {
24 | return initializeApp(config)
25 | }),
26 |
27 | _getAuth: ((app) => {
28 | return getAuth(app);
29 | }),
30 | _getRedirectResult: ((auth) => {
31 | return getRedirectResult(auth);
32 | }),
33 | _getCredentialFromResult: ((auth) => {
34 | return getCredentialFromResult(auth)
35 | }),
36 | _reauthenticateWithPopup: ((user, provider) => {
37 | return reauthenticateWithPopup(user, provider);
38 | }),
39 | _signInWithRedirect: ((auth, provider) => {
40 | return signInWithRedirect(auth, provider);
41 | })
42 | };
43 |
44 | export default firebaseWrapper;
--------------------------------------------------------------------------------
/authui-container/src/utils/browser.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2020 Google Inc.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | /**
18 | * Enums for Browser name.
19 | */
20 | export enum BrowserName {
21 | Android = 'Android',
22 | Blackberry = 'Blackberry',
23 | Edge = 'Edge',
24 | Firefox = 'Firefox',
25 | IE = 'IE',
26 | IEMobile = 'IEMobile',
27 | Opera = 'Opera',
28 | Other = 'Other',
29 | Chrome = 'Chrome',
30 | Safari = 'Safari',
31 | Silk = 'Silk',
32 | Webos = 'Webos',
33 | }
34 |
35 | /**
36 | * @param userAgent The navigator user agent string.
37 | * @return The browser name, eg Safari, Firefox, etc.
38 | */
39 | export function getBrowserName(userAgent?: string): string {
40 | const ua = (userAgent || getUserAgentString()).toLowerCase();
41 | if (ua.indexOf('opera/') !== -1 ||
42 | ua.indexOf('opr/') !== -1 ||
43 | ua.indexOf('opios/') !== -1) {
44 | return BrowserName.Opera;
45 | } else if (ua.indexOf('iemobile') !== -1) {
46 | // Windows phone IEMobile browser.
47 | return BrowserName.IEMobile;
48 | } else if (ua.indexOf('msie') !== -1 ||
49 | ua.indexOf('trident/') !== -1) {
50 | return BrowserName.IE;
51 | } else if (ua.indexOf('edge/') !== -1) {
52 | return BrowserName.Edge;
53 | } else if (ua.indexOf('firefox/') !== -1) {
54 | return BrowserName.Firefox;
55 | } else if (ua.indexOf('silk/') !== -1) {
56 | return BrowserName.Silk;
57 | } else if (ua.indexOf('blackberry') !== -1) {
58 | // Blackberry browser.
59 | return BrowserName.Blackberry;
60 | } else if (ua.indexOf('webos') !== -1) {
61 | // WebOS default browser.
62 | return BrowserName.Webos;
63 | } else if (ua.indexOf('safari/') !== -1 &&
64 | ua.indexOf('chrome/') === -1 &&
65 | ua.indexOf('crios/') === -1 &&
66 | ua.indexOf('android') === -1) {
67 | return BrowserName.Safari;
68 | } else if ((ua.indexOf('chrome/') !== -1 ||
69 | ua.indexOf('crios/') !== -1) &&
70 | ua.indexOf('edge/') === -1) {
71 | return BrowserName.Chrome;
72 | } else if (ua.indexOf('android') !== -1) {
73 | // Android stock browser.
74 | return BrowserName.Android;
75 | } else {
76 | // Most modern browsers have name/version at end of user agent string.
77 | const re = new RegExp('([a-zA-Z\\d\\.]+)\/[a-zA-Z\\d\\.]*$');
78 | const matches = userAgent.match(re);
79 | if (matches && matches.length === 2) {
80 | return matches[1];
81 | }
82 | }
83 | return BrowserName.Other;
84 | }
85 |
86 | /**
87 | * @return The user agent string reported by the environment, or the
88 | * empty string if not available.
89 | */
90 | function getUserAgentString(): string {
91 | return (window && window.navigator && window.navigator.userAgent) || '';
92 | }
93 |
94 | /**
95 | * Detects whether browser is running on a mobile device.
96 | *
97 | * @param userAgent The navigator user agent.
98 | * @return True if the browser is running on a mobile device.
99 | */
100 | export function isMobileBrowser(userAgent?: string): boolean {
101 | const ua = userAgent || getUserAgentString();
102 | const uaLower = ua.toLowerCase();
103 | if (uaLower.match(/android/) ||
104 | uaLower.match(/webos/) ||
105 | uaLower.match(/iphone|ipad|ipod/) ||
106 | uaLower.match(/blackberry/) ||
107 | uaLower.match(/windows phone/) ||
108 | uaLower.match(/iemobile/)) {
109 | return true;
110 | }
111 | return false;
112 | }
113 |
--------------------------------------------------------------------------------
/authui-container/src/utils/index.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2020 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import {isNonNullObject} from './validator';
16 | // tslint:disable-next-line:no-submodule-imports
17 | import { UserCredential, GoogleAuthProvider } from 'firebase/auth';
18 | /**
19 | * Defines a new read-only property directly on an object and returns the object.
20 | *
21 | * @param obj The object on which to define the property.
22 | * @param prop The name of the property to be defined or modified.
23 | * @param value The value associated with the property.
24 | */
25 | export function addReadonlyGetter(obj: object, prop: string, value: any): void {
26 | Object.defineProperty(obj, prop, {
27 | value,
28 | // Make this property read-only.
29 | writable: false,
30 | // Include this property during enumeration of obj's properties.
31 | enumerable: true,
32 | });
33 | }
34 |
35 | /**
36 | * Removes entries in an object whose values are undefined and returns the same
37 | * object. This only removes the top-level undefined fields.
38 | *
39 | * @param obj The object whose undefined fields are to be removed.
40 | * @return The same object with undefined fields removed.
41 | */
42 | export function removeUndefinedFields
60 |
68 |
61 | Success
62 |
65 |
66 |
67 |
26 |
Welcome to the IAP External Identities sample app
27 |
28 |
59 |
29 | {{#if photoURL}}
30 |
54 |
31 | 
32 |
33 | {{/if}}
34 | {{sub}}
35 | {{displayName}}
36 |
37 | {{email}} (
38 | {{#if emailVerified}}
39 | Verified
40 | {{else}}
41 | Unverified
42 | {{/if}}
43 | )
44 |
45 | {{tenandId}}
46 |
47 |
49 | {{gcipClaims}}
48 |
50 |
52 |
53 | {{iapClaims}}
51 |
55 |
56 |
57 |
58 |
60 |
61 |
62 |
63 | `);
64 |
65 | module.exports = {
66 | main,
67 | };
68 |
--------------------------------------------------------------------------------
/sample/app/server/verify-iap-jwt.js:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | const jwt = require('jsonwebtoken');
16 | const request = require('request');
17 |
18 | /** IAP signed JWT algorithm. */
19 | const ALGORITHM = 'ES256';
20 | /** IAP signed JWT issuer URL. */
21 | const ISSUER = 'https://cloud.google.com/iap';
22 | /** IAP public keys URL. */
23 | const PUBLIC_KEY_URL = 'https://www.gstatic.com/iap/verify/public_key';
24 |
25 | /** Defines the IAP JWT verifier. */
26 | class IapJwtVerifier {
27 | /**
28 | * Initializes an IAP JWT verifier.
29 | * @param {string} projectId
30 | * @param {string} projectNumber
31 | * @constructor
32 | */
33 | constructor(projectId, projectNumber) {
34 | /** @private {string} The project ID. */
35 | this.projectId = projectId;
36 | /** @private {string} The project number. */
37 | this.projectNumber = projectNumber;
38 | };
39 |
40 | /**
41 | * Verifies the IAP JWT.
42 | * @param {string} jwtToken The signed IAP JWT token to verify.
43 | * @return {Promise} The decoded payload of the verified JWT.
44 | */
45 | verify(jwtToken) {
46 | let header;
47 | let payload;
48 | return Promise.resolve().then(() => {
49 | // For GAE: /projects/PROJECT_NUMBER/apps/PROJECT_ID
50 | const aud = `/projects/${this.projectNumber}/apps/${this.projectId}`;
51 | const fullDecodedToken = jwt.decode(jwtToken, {
52 | complete: true,
53 | });
54 | header = fullDecodedToken && fullDecodedToken.header;
55 | payload = fullDecodedToken && fullDecodedToken.payload;
56 |
57 | if (!fullDecodedToken) {
58 | throw new Error('Decoding the JWT failed.');
59 | } else if (typeof header.kid === 'undefined') {
60 | throw new Error('IAP JWT has no "kid" claim.');
61 | } else if (header.alg !== ALGORITHM) {
62 | throw new Error(`IAP JWT has incorrect algorithm. Expected ${ALGORITHM} algorithm but got ${header.alg}`);
63 | } else if (payload.aud !== aud) {
64 | throw new Error(`IAP JWT has incorrect audience. Expected ${aud} but got ${payload.aud}`);
65 | } else if (payload.iss !== ISSUER) {
66 | throw new Error(`IAP JWT has incorrect issuer. Expected ${ISSUER} algorithm but got ${payload.iss}`);
67 | } else if (typeof payload.sub !== 'string' || !payload.sub) {
68 | throw new Error('IAP JWT has no valid "sub".')
69 | }
70 | return this.fetchPublicKey(header.kid);
71 | }).then((publicKey) => {
72 | return this.verifyJwtSignatureWithKey(jwtToken, publicKey);
73 | });
74 | }
75 |
76 | /**
77 | * @param {string} The kid whose public cert is to be returned.
78 | * @return {Promise} A promise that resolves with the public key that the provided kid maps to.
79 | * @private
80 | */
81 | fetchPublicKey(kid) {
82 | if (typeof this.publicKeys !== 'undefined' &&
83 | this.publicKeys.hasOwnProperty(kid)) {
84 | return Promise.resolve(this.publicKeys[kid]);
85 | }
86 | return new Promise((resolve, reject) => {
87 | request({
88 | url: PUBLIC_KEY_URL,
89 | json: true
90 | }, (error, response, body) => {
91 | if (!error && response.statusCode === 200) {
92 | // Cache public keys.
93 | this.publicKeys = body;
94 | if (this.publicKeys.hasOwnProperty(kid)) {
95 | // Return the corresponding key.
96 | resolve(body[kid]);
97 | } else {
98 | reject('IAP JWT has "kid" claim which does not correspond to a known public key.');
99 | }
100 | } else {
101 | reject(error);
102 | }
103 | });
104 | });
105 | }
106 |
107 | /**
108 | * Verifies the IAP token signature using the provided key.
109 | * @param {string} jwtToken The IAP token.
110 | * @param {string} publicKey The corresponding public key.
111 | * @return {Promise} A promise that resolves with the decoded JWT claims.
112 | * @private
113 | */
114 | verifyJwtSignatureWithKey(jwtToken, publicKey) {
115 | return new Promise((resolve, reject) => {
116 | jwt.verify(jwtToken, publicKey, {
117 | algorithms: [ALGORITHM],
118 | }, (error, decodedToken) => {
119 | if (error) {
120 | if (error.name === 'TokenExpiredError') {
121 | return reject(new Error('IAP JWT is expired'));
122 | } else if (error.name === 'JsonWebTokenError') {
123 | return reject(new Error('IAP JWT has invalid signature'));
124 | }
125 | return reject(new Error(error.message));
126 | } else {
127 | resolve(decodedToken);
128 | }
129 | });
130 | });
131 | }
132 | }
133 |
134 | module.exports = IapJwtVerifier;
135 |
--------------------------------------------------------------------------------
/sample/app/styles/styles.css:
--------------------------------------------------------------------------------
1 | * {
2 | box-sizing: border-box;
3 | }
4 |
5 | body {
6 | margin: 0;
7 | }
8 |
9 | #container {
10 | max-width: 700px;
11 | margin: 0 auto;
12 | text-align: center;
13 | }
14 |
15 | .clearfix {
16 | clear: both;
17 | }
18 |
19 | .hidden {
20 | display: none;
21 | }
22 |
23 | #user-info {
24 | border: 1px solid #CCC;
25 | clear: both;
26 | margin: 0 auto 20px;
27 | max-width: 700px;
28 | padding: 10px;
29 | text-align: left;
30 | }
31 |
32 | #photo-container {
33 | background-color: #EEE;
34 | border: 1px solid #CCC;
35 | float: left;
36 | height: 80px;
37 | margin-right: 10px;
38 | width: 80px;
39 | }
40 |
41 | #photo {
42 | height: 80px;
43 | margin: 0;
44 | width: 80px;
45 | }
46 |
47 | .item-on-same-line {
48 | float: left;
49 | padding-right: 20px;
50 | }
51 |
52 | .claims {
53 | overflow: auto;
54 | }
55 |
56 | @media (max-width: 300px) {
57 | #photo-container,
58 | #photo {
59 | height: 40px;
60 | width: 40px;
61 | }
62 | }
--------------------------------------------------------------------------------
/sample/authui-firebaseui/README.md:
--------------------------------------------------------------------------------
1 | # Configuring IAP with a Single Federated non-Google Provider Using FirebaseUI
2 |
3 | This sample walks you through deploying an App Engine flexible environment
4 | application and securing it with
5 | [Cloud Identity-Aware Proxy](https://cloud.google.com/iap/docs/external-identities)
6 | (Cloud IAP) external identities, powered by
7 | [Google Cloud Identity Platform](https://cloud.google.com/identity-platform/)
8 | (GCIP). This sample will also work for a GCE or GKE IAP resource.
9 |
10 | More specifically, this quickstart sample demonstrates using a federated provider
11 | like Facebook to sign in to an IAP gated resource (GAE app). The same flow can be
12 | applied for other federated providers (SAML, OIDC, OAuth, etc) with minimal
13 | adjustments to the code.
14 |
15 | This quickstart works for single project level IdP or single tenant level IdP.
16 |
17 | ## Table of Contents
18 |
19 | 1. [Dependencies](#dependencies)
20 | 2. [Prerequisite](#prerequisite)
21 | 3. [Enable GCIP](#enable-gcip)
22 | 4. [Deploy the authentication page](#deploy-the-authentication-page)
23 | 5. [Deploy to App Engine Flexible Environment](#deploy-to-app-engine-flexible-environment)
24 | 6. [Enable IAP](#enable-iap)
25 | 7. [Test Access](#test-access)
26 |
27 | ## Dependencies
28 |
29 | To set up a development environment to build the sample from source, you must
30 | have the following installed:
31 |
32 | - Node.js (>= 8.0.0)
33 | - npm (should be included with Node.js)
34 |
35 | Download the sample application source code and its dependencies with:
36 |
37 | ```bash
38 | git clone https://github.com/GoogleCloudPlatform/iap-gcip-web-toolkit.git
39 | cd iap-gcip-web-toolkit/sample/app
40 | npm install
41 | ```
42 |
43 | ## Prerequisite
44 | Create your project in the [Cloud Console](https://console.cloud.google.com).
45 |
46 | You will need to create the GAE app, IAP and GCIP projects in the same Google
47 | Cloud project. You cannot use cross project external identities with IAP.
48 |
49 | ## Enable Identity Platform
50 |
51 | In order to use non-Google identities with IAP, Google Cloud Identity Platform
52 | needs to be enabled. For this quickstart, Facebook provider needs to be configured
53 | for this project. Go to the Identity Platform
54 | [Cloud Console](https://console.cloud.google.com/customer-identity/providers/)
55 | page to configure it.
56 |
57 | OAuth callback URL should be set as instructed:
58 | `https://firebase-project-id.firebaseapp.com/__/auth/handler`
59 |
60 | [Multi-tenancy](https://cloud.google.com/identity-platform/docs/multi-tenancy-quickstart)
61 | is not required for this sample. However, the IdP can also be configured on
62 | the tenant too for this quickstart. In that case, only one tenant should be
63 | associated with the IAP resource.
64 |
65 | ## Deploy the authentication page
66 |
67 | Note that it is not a requirement to have the same Firebase Hosting project
68 | as your GCIP project. It is only done here for convenience. Firebase Hosting
69 | is merely used as a static file hosting service here. However, if a different
70 | project is used, the Firebase hosting domain has to be whitelisted in the GCIP
71 | list of authorized domains.
72 |
73 | Install all dependencies for the sample `AuthUI` in `iap-gcip-web-toolkit` repo.
74 |
75 | ```bash
76 | cd sample/authui-firebaseui
77 | npm install
78 | ```
79 |
80 | (Optional) If you want to use a different provider (eg.
81 | [SAML](https://cloud.google.com/identity-platform/docs/how-to-enable-application-for-saml)
82 | or
83 | [OIDC](https://cloud.google.com/identity-platform/docs/how-to-enable-application-for-oidc)),
84 | change the following line in `sample/authui-firebaseui/src/script.ts`:
85 |
86 | ```javascript
87 | // ...
88 | signInOptions: [
89 | // Replace Facebook if you want to use a different IdP.
90 | // FacebookAuthProvider.PROVIDER_ID,
91 | {
92 | // Copy provider ID from the Cloud Console.
93 | provider: 'saml.myProvider', // or 'oidc.myProvider', etc.
94 | }
95 | ],
96 | // ...
97 | ```
98 |
99 | Install the Firebase command line tool with `npm install -g firebase-tools` (See
100 | [docs](https://firebase.google.com/docs/cli/#setup)).
101 |
102 | Deploy the sample app to one of your own Firebase Hosting instance:
103 |
104 | ```bash
105 | firebase use --add
106 | ```
107 |
108 | Select the project you have created in the prerequisite, and type in `default` or
109 | any other name as the alias to use for this project.
110 |
111 | To deploy the authentication UI to production, in the same directory
112 | `sample/authui-firebaseui`, run:
113 |
114 | ```bash
115 | npm run deploy
116 | ```
117 |
118 | This will deploy the authentication UI to:
119 | `https://firebase-project-id.firebaseapp.com`
120 |
121 | You can use this URL as your authentication URL when configuring IAP.
122 |
123 | ## Deploy to App Engine Flexible Environment
124 |
125 | Follow the instructions to [deploy your GAE application](../app/README.md).
126 |
127 | ## Enable IAP
128 |
129 | - Go to the
130 | [IAP Cloud Console page](https://console.cloud.google.com/security/iap).
131 | - If you don‘t already have an active project, you'll be prompted to
132 | select the project you want to secure with Cloud IAP. Select the project
133 | where your GAE IAP resource is configured. The same project that was used
134 | to configure GCIP must be used for enabling IAP.
135 | - On the **Identity-Aware Proxy** page, under **HTTP Resource**, find the
136 | GAE app you want to restrict access to. The **Published** column shows the
137 | URL of the app. To turn on Cloud IAP for the app, click the **Switch**
138 | icon in the IAP column.
139 | - Toggle the switch on. This will display the IAM side panel.
140 | - To enable external identities, select the "Use external identities for
141 | authorization". Doing so will remove all existing access from the resource.
142 | The previous settings would be restored if you revert to IAM.
143 | - If you have not already enabled GCIP, you will be prompted to do so.
144 | - Identity Platform can now be configured for the selected resource. The
145 | following information needs to be provided in the Identity Platform panel
146 | - Authentication URL: This is the URL noted above. IAP will redirect to this
147 | address for unauthenticated requests to the current resource. This page needs
148 | to be configured to handle authentication. Follow the instructions above to
149 | configure that page.
150 | - Facebook should already be configured for this GCIP project. Select the
151 | project level Facebook IdP in the permissions section. If the IdP was
152 | configured on a GCIP tenant, the corresponding tenant should be selected
153 | instead from the list of tenants.
154 | - Click **SAVE** and you are now ready to use external identities with IAP.
155 |
156 | ## Test access
157 |
158 | - Go to `https://[YOUR_PROJECT_ID].appspot.com`. You should be redirected to
159 | Facebook to sign in.
160 | - After sign-in, you should be redirected back to the original app and your
161 | user's profile populated and displayed.
162 | - Click **Sign Out** link. You should be redirected back to Facebook to sign in.
163 |
--------------------------------------------------------------------------------
/sample/authui-firebaseui/database.rules.json:
--------------------------------------------------------------------------------
1 | {
2 | "rules": {
3 | ".read": false,
4 | ".write": false
5 | }
6 | }
--------------------------------------------------------------------------------
/sample/authui-firebaseui/firebase.json:
--------------------------------------------------------------------------------
1 | {
2 | "database": {
3 | "rules": "database.rules.json"
4 | },
5 | "hosting": {
6 | "public": "public",
7 | "ignore": [
8 | "firebase.json",
9 | "**/.*",
10 | "**/node_modules/**"
11 | ],
12 | "rewrites": [
13 | {
14 | "source": "**",
15 | "destination": "/index.html"
16 | }
17 | ],
18 | "headers": [
19 | {
20 | "source": "/**",
21 | "headers": [
22 | {
23 | "key": "Cache-Control",
24 | "value": "no-cache, no-store, must-revalidate"
25 | }
26 | ]
27 | }
28 | ]
29 | }
30 | }
--------------------------------------------------------------------------------
/sample/authui-firebaseui/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "iap-external-identities-authentication-quickstart",
3 | "version": "0.0.0",
4 | "description": "Quickstart for IAP external identities Authentication UI with FirebaseUI",
5 | "author": "Google",
6 | "license": "Apache-2.0",
7 | "scripts": {
8 | "preinstall": "cd ../.. && npm install",
9 | "bundle": "webpack --config webpack.config.js",
10 | "prestart": "npm run bundle",
11 | "start": "firebase serve",
12 | "deploy": "npm run prestart && firebase deploy"
13 | },
14 | "devDependencies": {
15 | "@babel/cli": "^7.10.5",
16 | "@babel/core": "^7.10.5",
17 | "@babel/plugin-proposal-class-properties": "^7.10.4",
18 | "@babel/preset-env": "^7.10.4",
19 | "@babel/register": "^7.10.5",
20 | "babel-loader": "^8.1.0",
21 | "bootstrap": "4.5.0",
22 | "css-loader": "3.6.0",
23 | "file-loader": "6.0.0",
24 | "firebase": "^9.8.3",
25 | "firebase-tools": "^9.21.0",
26 | "firebaseui": "^6.0.0",
27 | "gcip-iap": "^1.0.1",
28 | "handlebars": "^4.7.6",
29 | "jquery": "^3.5.1",
30 | "popper.js": "^1.16.1",
31 | "promise-polyfill": "^8.1.3",
32 | "semistandard": "^14.2.2",
33 | "style-loader": "^1.2.1",
34 | "ts-loader": "^8.2.0",
35 | "url-loader": "^4.1.0",
36 | "url-polyfill": "^1.1.10",
37 | "webpack": "^4.43.0",
38 | "webpack-cli": "^3.3.12",
39 | "whatwg-fetch": "^3.2.0"
40 | },
41 | "engines": {
42 | "node": ">=10"
43 | }
44 | }
45 |
--------------------------------------------------------------------------------
/sample/authui-firebaseui/public/404.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 | Page Not Found
7 |
8 |
23 |
24 |
25 | IAP External IDs Quickstart
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
--------------------------------------------------------------------------------
/sample/authui-firebaseui/public/style.css:
--------------------------------------------------------------------------------
1 | /** Override FirebaseUI styles. */
2 | @keyframes fadeIn {
3 | 0% {
4 | opacity: 0;
5 | }
6 | 90% {
7 | opacity: 0;
8 | }
9 | 100% {
10 | opacity: 1;
11 | }
12 | }
13 |
14 | .firebaseui-id-page-spinner {
15 | animation: 3s fadeIn;
16 | }
17 | /** End of overrides. */
18 |
--------------------------------------------------------------------------------
/sample/authui-firebaseui/src/script.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import '../node_modules/bootstrap/dist/css/bootstrap.min.css';
16 | import '../node_modules/firebaseui/dist/firebaseui.css';
17 | import '../public/style.css';
18 |
19 | // Import Firebase dependencies.
20 | import {FacebookAuthProvider} from 'firebase/auth';
21 | // Import FirebaseUI dependencies.
22 | import * as firebaseui from 'firebaseui';
23 | // Import GCIP/IAP module.
24 | import * as ciap from 'gcip-iap';
25 |
26 | /** @return Whether the current browser is Safari. */
27 | function isSafari(): boolean {
28 | const userAgent = navigator.userAgent.toLowerCase();
29 | return userAgent.indexOf('safari/') !== -1 &&
30 | userAgent.indexOf('chrome/') === -1 &&
31 | userAgent.indexOf('crios/') === -1 &&
32 | userAgent.indexOf('android/') === -1;
33 | }
34 |
35 | // The list of UI configs for each supported tenant.
36 | const tenantsConfig = {
37 | // Project level IdPs flow.
38 | '*': {
39 | displayName: 'My Organization',
40 | signInOptions: [
41 | FacebookAuthProvider.PROVIDER_ID,
42 | ],
43 | // Do not trigger immediate redirect in Safari without some user
44 | // interaction.
45 | immediateFederatedRedirect: !isSafari(),
46 | },
47 | };
48 |
49 | // Fetch configuration via reserved Firebase Hosting URL.
50 | fetch('/__/firebase/init.json').then((response) => {
51 | return response.json();
52 | }).then((config) => {
53 | const configs = {};
54 | configs[config.apiKey] = {
55 | authDomain: config.authDomain,
56 | displayMode: 'optionsFirst',
57 | tenants: tenantsConfig,
58 | };
59 | // This will handle the underlying handshake for sign-in, sign-out,
60 | // token refresh, safe redirect to callback URL, etc.
61 | const handler = new firebaseui.auth.FirebaseUiHandler(
62 | '#firebaseui-container', configs);
63 | const ciapInstance = new ciap.Authentication(handler);
64 | ciapInstance.start();
65 | });
66 |
--------------------------------------------------------------------------------
/sample/authui-firebaseui/tsconfig.json:
--------------------------------------------------------------------------------
1 | {
2 | "compilerOptions": {
3 | "target": "es5",
4 | "noImplicitAny": false,
5 | "sourceMap": true,
6 | "skipLibCheck": true,
7 | "lib": ["dom", "es2015", "es2015.promise"],
8 | "outDir": "lib",
9 | "rootDir": "."
10 | },
11 | "files": [
12 | "src/script.ts"
13 | ],
14 | "include": [
15 | "src/**/*"
16 | ],
17 | "exclude": [
18 | "node_modules"
19 | ]
20 | }
21 |
--------------------------------------------------------------------------------
/sample/authui-firebaseui/webpack.config.js:
--------------------------------------------------------------------------------
1 | /**
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for t`he specific language governing permissions and
14 | * limitations under the License.
15 | */
16 | 'use strict';
17 |
18 | const path = require('path');
19 |
20 | const config = {
21 | context: __dirname,
22 | entry: {
23 | 'script': './src/script.ts',
24 | },
25 | output: {
26 | filename: '[name].js',
27 | path: path.resolve(__dirname, './public'),
28 | },
29 | resolve: {
30 | extensions: ['.js', '.ts'],
31 | alias: {
32 | 'promise-polyfill': path.resolve(__dirname, './node_modules/promise-polyfill/'),
33 | 'url-polyfill': path.resolve(__dirname, './node_modules/url-polyfill/'),
34 | 'whatwg-fetch': path.resolve(__dirname, './node_modules/whatwg-fetch/'),
35 | },
36 | },
37 | stats: {
38 | colors: true,
39 | reasons: true,
40 | chunks: true,
41 | },
42 | module: {
43 | rules: [
44 | {
45 | test: /\.js$/,
46 | loader: 'babel-loader',
47 | exclude: /node_modules/
48 | },
49 | {
50 | test: /\.ts$/,
51 | loader: 'ts-loader',
52 | exclude: /node_modules/
53 | },
54 | {
55 | test: /\.css$/,
56 | use: ['style-loader', 'css-loader']
57 | },
58 | {
59 | test: /\.(png|woff|woff2|eot|ttf|svg)$/,
60 | loader: 'url-loader?limit=100000'
61 | }
62 | ]
63 | },
64 | mode: 'none',
65 | optimization: {
66 | minimize: true
67 | }
68 | }
69 |
70 | module.exports = config;
71 |
--------------------------------------------------------------------------------
/sample/authui-react/.env:
--------------------------------------------------------------------------------
1 | SKIP_PREFLIGHT_CHECK=true
--------------------------------------------------------------------------------
/sample/authui-react/database.rules.json:
--------------------------------------------------------------------------------
1 | {
2 | "rules": {
3 | ".read": false,
4 | ".write": false
5 | }
6 | }
--------------------------------------------------------------------------------
/sample/authui-react/firebase.json:
--------------------------------------------------------------------------------
1 | {
2 | "database": {
3 | "rules": "database.rules.json"
4 | },
5 | "hosting": {
6 | "public": "build",
7 | "ignore": [
8 | "firebase.json",
9 | "**/.*",
10 | "**/node_modules/**"
11 | ],
12 | "rewrites": [
13 | {
14 | "source": "**",
15 | "destination": "/index.html"
16 | }
17 | ],
18 | "headers": [
19 | {
20 | "source": "/**",
21 | "headers": [
22 | {
23 | "key": "Cache-Control",
24 | "value": "no-cache, no-store, must-revalidate"
25 | }
26 | ]
27 | }
28 | ]
29 | }
30 | }
--------------------------------------------------------------------------------
/sample/authui-react/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "iap-external-identities-authentication-ui-react",
3 | "version": "0.0.0",
4 | "description": "React-based Authentication UI for IAP external identities",
5 | "author": "Google",
6 | "license": "Apache-2.0",
7 | "dependencies": {
8 | "@types/bootstrap": "^4.5.0",
9 | "@types/jest": "26.0.5",
10 | "@types/node": "14.0.24",
11 | "@types/react": "16.9.43",
12 | "@types/react-dom": "16.9.8",
13 | "@types/react-router": "^5.1.8",
14 | "@types/react-router-dom": "^5.1.5",
15 | "bootstrap": "^4.5.0",
16 | "firebase": "^9.8.3",
17 | "firebaseui": "^6.0.0",
18 | "gcip-iap": "^1.0.1",
19 | "jquery": "^3.5.1",
20 | "react": "^16.13.1",
21 | "react-dom": "^16.13.1",
22 | "react-router": "^5.2.0",
23 | "react-router-dom": "^5.2.0",
24 | "react-scripts": "5.0.1",
25 | "typescript": "3.9.7",
26 | "url-polyfill": "^1.1.10",
27 | "webpack": "4.42.0",
28 | "webpack-dev-server": "^3.11.0",
29 | "whatwg-fetch": "^3.2.0"
30 | },
31 | "scripts": {
32 | "preinstall": "cd ../.. && npm install",
33 | "react-start": "react-scripts start",
34 | "start": "react-scripts build && firebase serve",
35 | "deploy": "react-scripts build && firebase deploy",
36 | "build": "react-scripts build"
37 | },
38 | "eslintConfig": {
39 | "extends": "react-app"
40 | },
41 | "browserslist": {
42 | "production": [
43 | ">0.2%",
44 | "not dead",
45 | "not op_mini all"
46 | ],
47 | "development": [
48 | "last 1 chrome version",
49 | "last 1 firefox version",
50 | "last 1 safari version"
51 | ]
52 | },
53 | "engines": {
54 | "node": ">=10"
55 | }
56 | }
57 |
--------------------------------------------------------------------------------
/sample/authui-react/public/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
11 |
15 |
16 |
25 | Authentication UI for IAP external identities
26 |
27 |
28 |
29 |
30 |
40 |
41 |
42 |
--------------------------------------------------------------------------------
/sample/authui-react/public/manifest.json:
--------------------------------------------------------------------------------
1 | {
2 | "short_name": "Auth UI for IAP external ids",
3 | "name": "Authentication UI for IAP external identities",
4 | "start_url": ".",
5 | "display": "standalone",
6 | "theme_color": "#000000",
7 | "background_color": "#ffffff"
8 | }
9 |
--------------------------------------------------------------------------------
/sample/authui-react/public/robots.txt:
--------------------------------------------------------------------------------
1 | # https://www.robotstxt.org/robotstxt.html
2 | User-agent: *
3 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/alert.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | export interface AlertParameters {
17 | message?: string;
18 | code?: string;
19 | retry?: () => void;
20 | }
21 |
22 | export class Alert extends React.Component {
23 | render(): JSX.Element {
24 | return (
25 |
26 | {this.props.message &&
27 |
35 | );
36 | }
37 | }
38 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/navbar.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | export interface NavbarParameters {
17 | link?: string;
18 | originalUrl?: string;
19 | }
20 |
21 | export class Navbar extends React.Component {
22 | render(): JSX.Element {
23 | return (
24 |
25 |
39 |
62 |
63 | );
64 | }
65 | }
66 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/privacypolicy.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | const PrivacyPolicy: React.FC = () => {
17 | return (
18 |
19 |
22 | );
23 | }
24 |
25 | export default PrivacyPolicy;
26 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/progressbar.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | const ProgressBar: React.FC = () => {
17 | return (
18 |
23 |
31 | );
32 | }
33 |
34 | export default AppRouter;
35 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/selecttenant.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | export interface SelectTenantParameters {
17 | tenants: Array<{
18 | tenantId: string;
19 | tenantDisplayName: string;
20 | }>;
21 | onSelectTenant: (tenantId: string) => void;
22 | }
23 |
24 | export class SelectTenant extends React.Component {
25 | render(): JSX.Element {
26 | return (
27 | {
25 | constructor(props: SignInParameters) {
26 | super(props);
27 | this.state = {
28 | email: '',
29 | };
30 | }
31 |
32 | handleChange = (event: any) => {
33 | this.setState({
34 | email: event.target.value,
35 | });
36 | };
37 |
38 | render(): JSX.Element {
39 | return (
40 | {
22 | constructor(props: SignInWithEmailParameters) {
23 | super(props);
24 | this.state = {
25 | password: '',
26 | };
27 | }
28 |
29 | handleChange = (event: any) => {
30 | this.setState({
31 | password: event.target.value,
32 | });
33 | };
34 |
35 | render(): JSX.Element {
36 | return (
37 | {
27 | constructor(props: SignUpWithEmailParameters) {
28 | super(props);
29 | this.state = {
30 | password: '',
31 | };
32 | }
33 |
34 | handlePasswordChange = (event: any) => {
35 | this.setState({
36 | displayName: this.state.displayName,
37 | password: event.target.value,
38 | });
39 | };
40 |
41 | handleDisplayNameChange = (event: any) => {
42 | this.setState({
43 | displayName: event.target.value,
44 | password: this.state.password,
45 | });
46 | };
47 |
48 | handleSignUpWithEmailAndPassword = () => {
49 | this.props.onSignUpWithEmailAndPassword(
50 | this.state.displayName || '', this.state.password);
51 | };
52 |
53 | render(): JSX.Element {
54 | return (
55 |
21 |
28 | `,
29 | })
30 | export class AlertComponent {
31 | @Input() public code?: string;
32 | @Input() public message?: string;
33 | @Input() public retry?: () => any;
34 |
35 | /** Triggers the retry if the error is recoverable. */
36 | public runRetry() {
37 | if (this.retry) {
38 | (this.retry as any)();
39 | }
40 | }
41 | }
42 |
--------------------------------------------------------------------------------
/sample/authui/src/app/app.module.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import {NgModule} from '@angular/core';
16 | import {RouterModule, Routes} from '@angular/router';
17 | import {BrowserModule} from '@angular/platform-browser';
18 | import {SelectTenantComponent} from './selecttenant.component';
19 | import {SignInComponent} from './signin.component';
20 | import {SignInWithEmailComponent} from './signinwithemail.component';
21 | import {SignUpWithEmailComponent} from './signupwithemail.component';
22 | import {SignOutComponent} from './signout.component';
23 | import {AlertComponent} from './alert.component';
24 | import {ProgressBarComponent} from './progressbar.component';
25 | import {NavBarComponent} from './navbar.component';
26 | import {PageNotFoundComponent} from './pagenotfound.component';
27 | import {FirebaseUiComponent} from './firebaseui.component';
28 | import {RootComponent} from './root.component';
29 | import {PrivacyPolicyComponent} from './privacypolicy.component';
30 | import {AppComponent} from './app.component';
31 |
32 | const appRoutes: Routes = [
33 | { path: '', component: FirebaseUiComponent },
34 | { path: 'custom', component: AppComponent },
35 | { path: 'tos', component: PrivacyPolicyComponent },
36 | { path: 'privacypolicy', component: PrivacyPolicyComponent },
37 | { path: '**', component: PageNotFoundComponent },
38 | ];
39 |
40 | @NgModule({
41 | imports: [
42 | BrowserModule,
43 | RouterModule.forRoot(
44 | appRoutes,
45 | {
46 | enableTracing: false,
47 | },
48 | ),
49 | ],
50 | declarations: [
51 | AppComponent, NavBarComponent, SelectTenantComponent, SignInComponent,
52 | SignInWithEmailComponent, SignUpWithEmailComponent, SignOutComponent,
53 | AlertComponent, ProgressBarComponent, PageNotFoundComponent,
54 | FirebaseUiComponent, RootComponent, PrivacyPolicyComponent,
55 | ],
56 | entryComponents: [
57 | AppComponent, NavBarComponent, SelectTenantComponent, SignInComponent,
58 | SignInWithEmailComponent, SignUpWithEmailComponent, SignOutComponent,
59 | AlertComponent, ProgressBarComponent, PageNotFoundComponent,
60 | FirebaseUiComponent, RootComponent, PrivacyPolicyComponent,
61 | ],
62 | bootstrap: [
63 | RootComponent,
64 | ],
65 | })
66 | export class AppModule {}
67 |
--------------------------------------------------------------------------------
/sample/authui/src/app/firebaseui.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component } from '@angular/core';
16 | // Import Firebase dependencies.
17 | // tslint:disable-next-line:no-submodule-imports
18 | import { EmailAuthProvider, GoogleAuthProvider, FacebookAuthProvider } from 'firebase/auth';
19 | // Import FirebaseUI dependencies.
20 | import * as firebaseui from 'firebaseui';
21 | // Import GCIP/IAP module.
22 | import * as ciap from 'gcip-iap';
23 |
24 | // The list of UI configs for each supported tenant.
25 | const tenantsConfig = {
26 | // Project-level IdPs flow.
27 | _: {
28 | displayName: 'My Organization',
29 | signInOptions: [
30 | EmailAuthProvider.PROVIDER_ID,
31 | GoogleAuthProvider.PROVIDER_ID,
32 | FacebookAuthProvider.PROVIDER_ID,
33 | ],
34 | tosUrl: '/tos',
35 | privacyPolicyUrl: '/privacypolicy',
36 | },
37 |
38 | /*
39 | Single tenant flow.
40 | Maps to tenants in a sample project. Find the tenants from your project and populate it here.
41 | */
42 | 'tenant-a-l41js': {
43 | displayName: 'My Company',
44 | signInOptions: [
45 | EmailAuthProvider.PROVIDER_ID,
46 | {
47 | provider: 'saml.okta-cicp-app',
48 | providerName: 'SAML',
49 | buttonColor: '#4666FF',
50 | iconUrl: 'https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/anonymous.png',
51 | },
52 | GoogleAuthProvider.PROVIDER_ID,
53 | FacebookAuthProvider.PROVIDER_ID,
54 | ],
55 | signInFlow: 'redirect',
56 | // A boolean which determines whether to immediately redirect to the provider's site or
57 | // instead show the default 'Sign in with Provider' button when there is only a single
58 | // federated provider in signInOptions. In order for this option to take effect, the
59 | // signInOptions must only hold a single federated provider (like 'google.com') and
60 | // signInFlow must be set to 'redirect'.
61 | immediateFederatedRedirect: false,
62 | tosUrl: '/tos',
63 | privacyPolicyUrl: '/privacypolicy',
64 | },
65 | /*
66 | Multiple tenants flow.
67 | Maps to tenants in a sample project. Find the tenants from your project and populate it here.
68 | */
69 | 'tenant-a-omli0': {
70 | displayName: 'Company A',
71 | buttonColor: '#007bff',
72 | iconUrl: 'https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/anonymous.png',
73 | signInOptions: [
74 | EmailAuthProvider.PROVIDER_ID,
75 | GoogleAuthProvider.PROVIDER_ID,
76 | {
77 | provider: 'saml.okta-cicp-app',
78 | providerName: 'SAML',
79 | buttonColor: '#4666FF',
80 | iconUrl: 'https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/anonymous.png',
81 | },
82 | ],
83 | tosUrl: '/tos',
84 | privacyPolicyUrl: '/privacypolicy',
85 | },
86 | 'tenant-b-9t9qm': {
87 | displayName: 'Company B',
88 | buttonColor: '#007bff',
89 | iconUrl: 'https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/anonymous.png',
90 | signInOptions: [
91 | EmailAuthProvider.PROVIDER_ID,
92 | {
93 | provider: 'saml.okta-cicp-app',
94 | providerName: 'SAML',
95 | buttonColor: '#4666FF',
96 | iconUrl: 'https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/anonymous.png',
97 | },
98 | ],
99 | tosUrl: '/tos',
100 | privacyPolicyUrl: '/privacypolicy',
101 | },
102 | 'tenant-c-hhtch': {
103 | displayName: 'Company C',
104 | buttonColor: '#007bff',
105 | iconUrl: 'https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/anonymous.png',
106 | signInOptions: [
107 | EmailAuthProvider.PROVIDER_ID,
108 | ],
109 | tosUrl: '/tos',
110 | privacyPolicyUrl: '/privacypolicy',
111 | },
112 | 'tenant-d-9x6ia': {
113 | displayName: 'Company D',
114 | buttonColor: '#007bff',
115 | iconUrl: 'https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/anonymous.png',
116 | signInOptions: [
117 | EmailAuthProvider.PROVIDER_ID,
118 | ],
119 | tosUrl: '/tos',
120 | privacyPolicyUrl: '/privacypolicy',
121 | },
122 | };
123 |
124 | @Component({
125 | selector: 'firebaseui',
126 | template: `
127 | Authentication UI for IAP external identities
5 |
6 |
7 |
26 |
30 |
31 |
32 |
--------------------------------------------------------------------------------
/sample/authui-firebaseui/public/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | 404
27 |Page Not Found
28 |The specified file was not found on this website. Please check the URL for mistakes and try again.
29 |
28 | Error {this.props.code} - {this.props.message}
29 | {!!this.props.retry &&
30 | Try again
31 | }
32 |
33 | }
34 | Term of Service
20 | Privacy Policy
21 |
19 |
23 | );
24 | }
25 |
26 | export default ProgressBar;
27 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/root.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 | import { BrowserRouter as Router, Route } from 'react-router-dom';
16 | import App from './app';
17 | import FirebaseUi from './firebaseui';
18 | import PrivacyPolicy from './privacypolicy';
19 |
20 | const AppRouter: React.FC = () => {
21 | return (
22 |
20 | Loading...
21 |
22 |
24 |
25 |
30 |
28 |
51 | );
52 | }
53 | }
54 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/signin.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | export interface SignInParameters {
17 | saml: boolean;
18 | onSignInWithSaml: () => boolean;
19 | onSignInWithGoogle: () => boolean;
20 | onSignInWithFacebook: () => boolean;
21 | onSignInWithEmail: (email: string) => boolean;
22 | }
23 |
24 | export class SignIn extends React.Component
29 | Authentication UI for IAP external identities
30 |
31 |
32 |
50 | Select Company
33 | 49 |
41 |
95 | );
96 | }
97 | }
98 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/signinwithemail.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | export interface SignInWithEmailParameters {
17 | email: string;
18 | onSignInWithEmailAndPassword: (password: string) => boolean;
19 | }
20 |
21 | export class SignInWithEmail extends React.Component
42 | Authentication UI for IAP external identities
43 |
44 |
45 |
94 | Sign in
46 | 93 |
38 |
65 | );
66 | }
67 | }
68 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/signout.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | const SignOut: React.FC = () => {
17 | return (
18 |
39 | Authentication UI for IAP external identities
40 |
41 |
42 |
64 | Sign in
43 | 63 |
19 | Success! You are now signed out.
20 |
21 | );
22 | }
23 |
24 | export default SignOut;
25 |
--------------------------------------------------------------------------------
/sample/authui-react/src/components/signupwithemail.tsx:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 | import React from 'react';
15 |
16 | export interface SignUpWithEmailParameters {
17 | email: string;
18 | onSignUpWithEmailAndPassword: (displayName: string, password: string) => boolean;
19 | }
20 |
21 | interface SignUpWithEmailState {
22 | password: string;
23 | displayName?: string;
24 | }
25 |
26 | export class SignUpWithEmail extends React.Component
56 |
93 | );
94 | }
95 | }
96 |
--------------------------------------------------------------------------------
/sample/authui-react/src/index.css:
--------------------------------------------------------------------------------
1 | .main-container {
2 | max-width: 600px;
3 | margin: 0 auto;
4 | }
5 |
6 | .padded-div {
7 | padding: 10px;
8 | }
9 |
10 | .heading-center {
11 | text-align: center;
12 | justify-content: center;
13 | }
14 |
15 | .hidden {
16 | display: none;
17 | }
18 |
19 | /** https://stackoverflow.com/questions/23584120/line-before-and-after-title-over-image */
20 | h3.line-through {
21 | color: #777777;
22 | font-size: 1.0rem;
23 | font-weight: 400;
24 | margin: .7em auto;
25 | overflow: hidden;
26 | text-align: center;
27 | width: 100%;
28 | }
29 |
30 | h3.line-through:before, h3.line-through:after {
31 | border-bottom: 1px solid rgba(0,0,0,.125);
32 | content: "";
33 | display: inline-block;
34 | margin: 0 .5em 0 -55%;
35 | vertical-align: middle;
36 | width: 50%;
37 | }
38 |
39 | h3.line-through:after {
40 | margin: 0 -55% 0 .5em;
41 | }
42 |
--------------------------------------------------------------------------------
/sample/authui-react/src/index.tsx:
--------------------------------------------------------------------------------
1 | /*!
2 | * Copyright 2019 Google Inc.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | import React from 'react';
18 | import ReactDOM from 'react-dom';
19 | import './index.css';
20 | import AppRouter from './components/root';
21 | import * as serviceWorker from './serviceWorker';
22 |
23 | ReactDOM.render(
57 | Authentication UI for IAP external identities
58 |
59 |
60 |
92 | Sign up
61 | 91 |
22 | Error {{code}} - {{message}}
23 |
24 | Try again.
25 |
26 |
27 |
128 |
129 |
133 |
134 |
135 | `,
136 | })
137 |
138 | export class FirebaseUiComponent {
139 | public title?: string;
140 | constructor() {
141 | // Fetch configuration via reserved Firebase Hosting URL.
142 | fetch('/__/firebase/init.json').then((response) => {
143 | return response.json();
144 | }).then((config) => {
145 | const configs = {};
146 | configs[config.apiKey] = {
147 | authDomain: config.authDomain,
148 | callbacks: {
149 | // The callback to trigger when the tenant selection page
150 | // is shown.
151 | selectTenantUiShown: () => {
152 | this.title = 'Select Employer';
153 | },
154 | // The callback to trigger when the tenant selection page
155 | // is hidden.
156 | selectTenantUiHidden: () => {
157 | this.title = null;
158 | },
159 | // The callback to trigger when the sign-in page
160 | // is shown.
161 | signInUiShown: (tenantId) => {
162 | const configKey = tenantId ? tenantId : '_';
163 | this.title = tenantsConfig[configKey].displayName;
164 | },
165 | beforeSignInSuccess: (user) => {
166 | // Do additional processing on user before sign-in is
167 | // complete.
168 | return Promise.resolve(user);
169 | },
170 | },
171 | displayMode: 'optionsFirst',
172 | // The terms of service URL and privacy policy URL for the page
173 | // where the user selects a tenant or enters an email for tenant/provider
174 | // matching.
175 | tosUrl: '/tos',
176 | privacyPolicyUrl: '/privacypolicy',
177 | tenants: tenantsConfig,
178 | };
179 | // This will handle the underlying handshake for sign-in, sign-out,
180 | // token refresh, safe redirect to callback URL, etc.
181 | const handler = new firebaseui.auth.FirebaseUiHandler(
182 | '#firebaseui-container', configs);
183 | const ciapInstance = new ciap.Authentication(handler);
184 | ciapInstance.start();
185 | });
186 | }
187 | }
188 |
--------------------------------------------------------------------------------
/sample/authui/src/app/navbar.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component, Input } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'navbar',
19 | template: `
20 |
32 |
33 |
56 | `,
57 | })
58 | export class NavBarComponent {
59 | @Input() public originalUrl: string;
60 | @Input() public link: string;
61 |
62 | constructor() {
63 | // On get original URL button click, call getOriginalURL() and populate the
64 | // result in the opened modal.
65 | }
66 |
67 | /** Displays the dialog with the original URL. */
68 | public showModal() {
69 | $('#originalUrlModal').modal('show');
70 | }
71 | }
72 |
--------------------------------------------------------------------------------
/sample/authui/src/app/pagenotfound.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'page-not-found',
19 | template: `
20 |
87 | 130 | {{title}} 131 |
132 |
88 |
95 | `,
96 | })
97 | export class PageNotFoundComponent {}
98 |
--------------------------------------------------------------------------------
/sample/authui/src/app/privacypolicy.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'privacy-policy',
19 | template: `
20 | 404
89 |Page Not Found
90 |91 | The specified file was not found on this website. 92 | Please check the URL for mistakes and try again. 93 |
94 |Term of Service
21 | Privacy Policy
22 | `,
23 | })
24 | export class PrivacyPolicyComponent {}
25 |
--------------------------------------------------------------------------------
/sample/authui/src/app/progressbar.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'progress-bar',
19 | template: `
20 |
21 |
25 | `,
26 | })
27 | export class ProgressBarComponent {
28 | }
29 |
--------------------------------------------------------------------------------
/sample/authui/src/app/root.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'root',
19 | template: `
20 |
22 | Loading...
23 |
24 |
21 |
42 | `,
43 | })
44 | export class SelectTenantComponent {
45 | @Input() public tenants: Array<{tenantId: string, tenantDisplayName: string}>;
46 | @Input() public onclick: (tenantId: string) => void;
47 | }
48 |
--------------------------------------------------------------------------------
/sample/authui/src/app/signin.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component, Input } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'sign-in',
19 | template: `
20 |
22 | Authentication UI for IAP external identities
23 |
24 |
25 |
41 | Select Company
26 | 40 |
21 |
69 | `,
70 | })
71 | export class SignInComponent {
72 | @Input() public saml: boolean;
73 | @Input() public onSignInWithSaml: () => boolean;
74 | @Input() public onSignInWithGoogle: () => boolean;
75 | @Input() public onSignInWithFacebook: () => boolean;
76 | @Input() public onSignInWithEmail: (email: string) => boolean;
77 | }
78 |
--------------------------------------------------------------------------------
/sample/authui/src/app/signinwithemail.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component, Input } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'sign-in-with-email',
19 | template: `
20 |
22 | Authentication UI for IAP external identities
23 |
24 |
25 |
68 | Sign in
26 | 67 |
21 |
43 | `,
44 | })
45 | export class SignInWithEmailComponent {
46 | @Input() public email: string;
47 | @Input() public onSignInWithEmailAndPassword: (password: string) => boolean;
48 | }
49 |
--------------------------------------------------------------------------------
/sample/authui/src/app/signout.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'sign-out',
19 | template: `
20 |
22 | Authentication UI for IAP external identities
23 |
24 |
25 |
42 | Sign in
26 | 41 |
21 | Success! You are now signed out.
22 |
23 | `,
24 | })
25 | export class SignOutComponent {
26 | }
27 |
--------------------------------------------------------------------------------
/sample/authui/src/app/signupwithemail.component.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | import { Component, Input } from '@angular/core';
16 |
17 | @Component({
18 | selector: 'sign-up-with-email',
19 | template: `
20 |
21 |
51 | `,
52 | })
53 | export class SignUpWithEmailComponent {
54 | @Input() public email: string;
55 | @Input() public onSignUpWithEmailAndPassword: (displayName: string, password: string) => boolean;
56 | }
57 |
--------------------------------------------------------------------------------
/sample/authui/src/environments/environment.prod.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | export const environment = {
16 | production: true,
17 | };
18 |
--------------------------------------------------------------------------------
/sample/authui/src/environments/environment.ts:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2019 Google Inc. All Rights Reserved.
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
5 | * in compliance with the License. You may obtain a copy of the License at
6 | *
7 | * http://www.apache.org/licenses/LICENSE-2.0
8 | *
9 | * Unless required by applicable law or agreed to in writing, software distributed under the
10 | * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
11 | * express or implied. See the License for the specific language governing permissions and
12 | * limitations under the License.
13 | */
14 |
15 | // This file can be replaced during build by using the `fileReplacements` array.
16 | // `ng build --prod` replaces `environment.ts` with `environment.prod.ts`.
17 | // The list of file replacements can be found in `angular.json`.
18 |
19 | export const environment = {
20 | production: false,
21 | };
22 |
--------------------------------------------------------------------------------
/sample/authui/src/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
22 | Authentication UI for IAP external identities
23 |
24 |
25 |
50 |