+ {report.description} +
+
+ 
+
+
+
+
+Enter your tenant information to continue
+
+ 
-
-
- An awesome README template to jumpstart your projects!
+ A desktop application to administer and troubleshoot IdentityNow
- Explore the docs »
-
-
-
+ Request Feature
-Error Code: %sveltekit.status%
+Error Message: %sveltekit.error.message%
diff --git a/Sveltekit-App/src/hooks.server.ts b/Sveltekit-App/src/hooks.server.ts new file mode 100644 index 0000000..70ee0eb --- /dev/null +++ b/Sveltekit-App/src/hooks.server.ts @@ -0,0 +1,48 @@ +import { + checkIdnSession, + checkSession, + checkToken, + getSession, + getToken, + getTokenDetails, + lastCheckedToken +} from '$lib/utils/oauth'; +import { redirect, type Handle } from '@sveltejs/kit'; + +export const handle: Handle = async ({ event, resolve }) => { + const hasSession = checkSession(event.cookies); + const hasIdnSession = checkIdnSession(event.cookies); + event.locals.hasSession = hasSession; + event.locals.hasIdnSession = hasIdnSession; + + if (hasSession) { + event.locals.session = getSession(event.cookies); + + if (hasIdnSession) { + event.locals.idnSession = await getToken(event.cookies); + const lastToken = lastCheckedToken(event.cookies); + if (lastToken != '' && lastToken === event.locals.idnSession.access_token) { + event.locals.tokenDetails = getTokenDetails(event.cookies); + } else { + event.locals.tokenDetails = await checkToken( + event.locals.session.baseUrl, + event.locals.idnSession.access_token + ); + event.cookies.set('tokenDetails', JSON.stringify(event.locals.tokenDetails), { + path: '/', + httpOnly: false, + secure: false + }); + } + } + } + + if (event.url.pathname.startsWith('/home') || event.url.pathname.startsWith('/api')) { + if (!hasSession || !hasIdnSession) { + redirect(302, '/'); + } + } + + const response = await resolve(event); + return response; +}; diff --git a/src/lib/AnimatedCounter.svelte b/Sveltekit-App/src/lib/Components/AnimatedCounter.svelte similarity index 100% rename from src/lib/AnimatedCounter.svelte rename to Sveltekit-App/src/lib/Components/AnimatedCounter.svelte diff --git a/Sveltekit-App/src/lib/Components/CodeBlockModal.svelte b/Sveltekit-App/src/lib/Components/CodeBlockModal.svelte new file mode 100644 index 0000000..f07ae1b --- /dev/null +++ b/Sveltekit-App/src/lib/Components/CodeBlockModal.svelte @@ -0,0 +1,13 @@ + + +Total Count: {totalCount}
+Name: {cluster?.name || 'Empty'}
+ID: {cluster?.id || 'Empty'}
+ +{#if cluster?.id} + {#await fetch(`/api/sailpoint/cluster/${cluster.id}`)} + + {:then clusterResponse} + {#await clusterResponse.json()} + + {:then clusterInfo} +Pod: {clusterInfo.pod}
+Description: {clusterInfo.description ? clusterInfo.description : 'Empty'}
+CCG Version: {clusterInfo.ccgVersion}
++ Debugging Enabled: + {clusterInfo.configuration.debug === 'true' ? 'True' : 'False'} + +
++ Status: + {clusterInfo.status} + +
++ Alert: + {clusterInfo.alertKey} + +
+Client IDs
+Error: {error.message}
+ {/await} + {:catch error} +Error: {error.message}
+ {/await} +{/if} diff --git a/Sveltekit-App/src/lib/Utils.ts b/Sveltekit-App/src/lib/Utils.ts new file mode 100644 index 0000000..12d3a3b --- /dev/null +++ b/Sveltekit-App/src/lib/Utils.ts @@ -0,0 +1,106 @@ +import { goto } from '$app/navigation'; +import type { ModalSettings, ModalStore } from '@skeletonlabs/skeleton'; + +export function formatDate(date: string | null | undefined) { + if (!date) return 'N/A'; + return new Date(date).toLocaleString(); +} + +export function getLimit(url: URL) { + return url.searchParams.get('limit') || '250'; +} + +export function getFilters(url: URL) { + return url.searchParams.get('filters') || ''; +} + +export function getSorters(url: URL) { + return url.searchParams.get('sorters') || ''; +} + +export function getPage(url: URL) { + return url.searchParams.get('page') || '0'; +} + +export function getPaginationParams(url: URL) { + return { + limit: getLimit(url), + page: getPage(url), + filters: getFilters(url), + sorters: getSorters(url) + }; +} + +type PaginationParams = { + limit: string; + page: string; + filters: string; + sorters: string; +}; + +export function createOnPageChange(params: PaginationParams, path: string) { + return function onPageChange(e: CustomEvent): void { + const urlParams = new URLSearchParams(); + urlParams.set('page', e.detail); + urlParams.set('limit', params.limit); + urlParams.set('sorters', params.sorters); + urlParams.set('filters', params.filters); + + console.log(`${path}?${urlParams.toString()}`); + + goto(`${path}?${urlParams.toString()}`); + }; +} + +export function createOnAmountChange(params: PaginationParams, path: string) { + return function onAmountChange(e: CustomEvent): void { + const urlParams = new URLSearchParams(); + urlParams.set('page', params.page); + urlParams.set('limit', e.detail); + urlParams.set('sorters', params.sorters); + urlParams.set('filters', params.filters); + + console.log(`${path}?${urlParams.toString()}`); + + goto(`${path}?${urlParams.toString()}`); + }; +} + +export function createOnGo(params: PaginationParams, path: string) { + return function onGo(e: KeyboardEvent | MouseEvent): void { + if (e.type !== 'click' && (e as KeyboardEvent).key !== 'Enter') return; + + const urlParams = new URLSearchParams(); + urlParams.set('page', params.page); + urlParams.set('limit', params.limit); + urlParams.set('sorters', params.sorters); + urlParams.set('filters', params.filters); + + console.log(`${path}?${urlParams.toString()}`); + + goto(`${path}?${urlParams.toString()}`); + }; +} + +export function capitalize(s: string) { + if (typeof s !== 'string') return ''; + return s.charAt(0).toUpperCase() + s.slice(1); +} + +export function TriggerCodeModal(object: unknown, modalStore: ModalStore) { + const modal: ModalSettings = { + type: 'component', + component: 'codeBlockModal', + meta: { + code: JSON.stringify(object, null, 4), + language: 'json' + } + }; + + modalStore.trigger(modal); +} + +export function parseInitials(name: string) { + const initials = name.match(/\b(\w)/g) || ['A', 'U']; + return initials.join(''); +} diff --git a/Sveltekit-App/src/lib/reports.ts b/Sveltekit-App/src/lib/reports.ts new file mode 100644 index 0000000..95aa980 --- /dev/null +++ b/Sveltekit-App/src/lib/reports.ts @@ -0,0 +1,30 @@ +export const reports = [ + { + url: '/home/reports/source-account-create-error', + name: 'Source Account Create Error', + description: + 'This report will show all source accounts for which there is a create error associated with the source' + }, + { + url: '/home/reports/inactive-identities-with-access', + name: 'Inactive Identities With Access', + description: + 'This report will show all identities that are inactive but still have access in sources' + }, + { + url: '/home/reports/missing-cloud-life-cycle-state', + name: 'Missing Cloud Life Cycle State', + description: 'This report will show all identities that are missing a cloud life cycle state' + }, + + { + url: '/home/reports/source-owner-configured', + name: 'Source Owner Configured', + description: 'This report will show all sources and their configured owners' + }, + { + url: '/home/reports/source-aggregations', + name: 'Source Aggregations', + description: 'This report will show all sources and their most recent aggregation events' + } +]; diff --git a/Sveltekit-App/src/lib/sailpoint/sdk.ts b/Sveltekit-App/src/lib/sailpoint/sdk.ts new file mode 100644 index 0000000..4f33707 --- /dev/null +++ b/Sveltekit-App/src/lib/sailpoint/sdk.ts @@ -0,0 +1,6 @@ +import { Configuration } from 'sailpoint-api-client'; + +export function createConfiguration(baseUrl: string, token: string) { + const apiConfig = new Configuration({ baseurl: baseUrl, accessToken: token }); + return apiConfig; +} diff --git a/Sveltekit-App/src/lib/sidebar/Sidebar.svelte b/Sveltekit-App/src/lib/sidebar/Sidebar.svelte new file mode 100644 index 0000000..b3923b5 --- /dev/null +++ b/Sveltekit-App/src/lib/sidebar/Sidebar.svelte @@ -0,0 +1,29 @@ + + +{link.name}
+ + {/each} + {/each} +
+ WHOOPS!
a {$page.status} error occurred.
If
+ you believe this is a bug please submit an issue on
+
+ GitHub
+
+
Message:
{$page.error.message}
These links may be helpful:
+Context
+Error Data
+{data?.tokenDetails?.user_name}
+
+ Request
+Response
+| ID | +Name | +Lifecycle State | +Created | +Modified | ++ + + {#each identities as identity} + | |
|---|---|---|---|---|---|---|
|
+ {identity.id} + |
+
+ {identity.name} + |
+
+ {identity.lifecycleState?.stateName} + |
+
+ {identity.emailAddress} + |
+
+ {formatDate(identity.created)} + |
+
+ {formatDate(identity.modified)} + |
+
+
+
+ Open
+
+
+
+ |
+
Alias: {identityData.alias}
+ID: {identityData.id}
+Lifecycle State: {identityData.lifecycleState?.stateName}
+| Name | +Status | +Created | +Target | +Actor | ++ + + {#each identityEvents as event} + |
|---|---|---|---|---|---|
| {event.name} | +{event.status} | +{event.created} | +{event.target?.name} | +{event.actor?.name} | ++ + | +
No Identity Events
+ {/if} + {/await} + {/if} ++ {report.name} +
++ {report.description} +
++ List of all identities that are inactive but still have access in sources +
+No inactive identities with access found
+| Name | +Sources | +Created | +Modified | +Access Count | +Entitlement Count | +Role Count | ++ + + {#each reportData as identity} + |
|---|---|---|---|---|---|---|---|
| + {identity.displayName} + | ++ {identity.accounts?.map((account) => account.source?.name).join(', ')} + | ++ {formatDate(identity.created)} + | ++ {formatDate(identity.modified)} + | ++ {identity.accessCount} + | ++ {identity.entitlementCount} + | ++ {identity.roleCount} + | +
+
+
+ Open
+
+
+
+ |
+
+ Listing of identities that are missing the cloud life cycle state attribute +
+| Name | +Sources | +Created | +Access Count | +Entitlement Count | +Role Count | ++ + + {#each reportData as identity} + |
|---|---|---|---|---|---|---|
| + {identity.displayName} + | ++ {identity.accounts?.map((account) => account.source?.name).join(', ')} + | ++ {formatDate(identity.created)} + | ++ {identity.accessCount} + | ++ {identity.entitlementCount} + | ++ {identity.roleCount} + | +
+
+
+ Open
+
+
+
+ |
+
Listing of Source Account Create Errors
++ No Source Account Create Errors for the last 90 Days +
+| Source | +Failure | +Name | +Count | +Exception | + + + {#each report as row} +
|---|---|---|---|---|
| {row.source} | +{row.failure} | +{row.name} | +{row.failures} | +
+ {row.exception} + |
+
List of sources and their most recent aggregation events
+| Source Name | +Type | +Authoritative | +Account Aggregations | +Entitlement Aggregations | + + + {#each sources as source} +||
|---|---|---|---|---|---|---|
| {source.name} | +{source.type} | ++ {source.authoritative ? 'True' : 'False'} + | + {#await data.eventsMap} +
+
+
+
+ |
+ {:then eventsMap}
+
+
+
+
+
+ |
+ {/await}
+ {#await data.eventsMap}
+
+
+
+
+ |
+ {:then eventsMap}
+
+
+
+
+
+ |
+ {/await}
+
Listing of sources and their configured owners
+| Source Name | +Type | +Modified | +Created | +Owner | ++ + + {#each sources as source} + |
|---|---|---|---|---|---|
| {source.name} | +{source.type} | +{formatDate(source.modified)} | +{formatDate(source.created)} | +{source.owner.name} | ++ + Open Source + + + | +
| ID | +Name | +Description | +Type | +Authoritative | +Healthy | +Delete Threshold | +Owner | ++ + + {#each sources as source} + |
|---|---|---|---|---|---|---|---|---|
|
+ {source.id} + |
+
+ {source.name} + |
+
+ {source.description} + |
+
+ {source.type} + |
+
+ {source.authoritative ? 'True' : 'False'} + |
+
+ + {source.healthy ? 'True' : 'False'} + + |
+
+ {source.deleteThreshold} + |
+
+ {source.owner.name} + |
+ + + Open + + + | +
{data.source.description}
+ID: {data.source.id}
+Type: {data.source.type}
++ Authoritative: {data.source.authoritative ? 'True' : 'False'} +
++ Healthy: + + {data.source.healthy ? 'True' : 'False'} + +
+Successfully Logged out
+ {:else} +
+ WHOOPS! an error occurred.
If you believe this is a bug please submit an issue on
+
+ GitHub
+
+
W0Z{1*W0_d}W?pFvDj=X^h0A4(fQ
zzVA8HfMG}R{`+dP!u)`3^Zq4XK_4G@4m_Rf#lhg>QtbX#NGpUf&o