Merge branch 'users/sindhuba/listKeys' into users/sindhuba/refresh-token
This commit is contained in:
commit
451316cad4
|
@ -5,6 +5,7 @@ import {
|
||||||
MongoProxyEndpoints,
|
MongoProxyEndpoints,
|
||||||
PortalBackendEndpoints,
|
PortalBackendEndpoints,
|
||||||
} from "Common/Constants";
|
} from "Common/Constants";
|
||||||
|
import { userContext } from "UserContext";
|
||||||
import {
|
import {
|
||||||
allowedAadEndpoints,
|
allowedAadEndpoints,
|
||||||
allowedArcadiaEndpoints,
|
allowedArcadiaEndpoints,
|
||||||
|
@ -38,6 +39,7 @@ export interface ConfigContext {
|
||||||
gitSha?: string;
|
gitSha?: string;
|
||||||
proxyPath?: string;
|
proxyPath?: string;
|
||||||
AAD_ENDPOINT: string;
|
AAD_ENDPOINT: string;
|
||||||
|
ENVIRONMENT: string;
|
||||||
ARM_AUTH_AREA: string;
|
ARM_AUTH_AREA: string;
|
||||||
ARM_ENDPOINT: string;
|
ARM_ENDPOINT: string;
|
||||||
EMULATOR_ENDPOINT?: string;
|
EMULATOR_ENDPOINT?: string;
|
||||||
|
@ -93,7 +95,7 @@ let configContext: Readonly<ConfigContext> = {
|
||||||
], // Webpack injects this at build time
|
], // Webpack injects this at build time
|
||||||
gitSha: process.env.GIT_SHA,
|
gitSha: process.env.GIT_SHA,
|
||||||
hostedExplorerURL: "https://cosmos.azure.com/",
|
hostedExplorerURL: "https://cosmos.azure.com/",
|
||||||
AAD_ENDPOINT: "https://login.microsoftonline.com/",
|
AAD_ENDPOINT: "",
|
||||||
ARM_AUTH_AREA: "https://management.azure.com/",
|
ARM_AUTH_AREA: "https://management.azure.com/",
|
||||||
ARM_ENDPOINT: "https://management.azure.com/",
|
ARM_ENDPOINT: "https://management.azure.com/",
|
||||||
ARM_API_VERSION: "2016-06-01",
|
ARM_API_VERSION: "2016-06-01",
|
||||||
|
|
|
@ -80,6 +80,7 @@ export interface UserContext {
|
||||||
readonly endpoint?: string;
|
readonly endpoint?: string;
|
||||||
readonly aadToken?: string;
|
readonly aadToken?: string;
|
||||||
readonly accessToken?: string;
|
readonly accessToken?: string;
|
||||||
|
readonly armToken?: string;
|
||||||
readonly authorizationToken?: string;
|
readonly authorizationToken?: string;
|
||||||
readonly resourceToken?: string;
|
readonly resourceToken?: string;
|
||||||
readonly subscriptionType?: SubscriptionType;
|
readonly subscriptionType?: SubscriptionType;
|
||||||
|
|
|
@ -3,6 +3,7 @@ import { useBoolean } from "@fluentui/react-hooks";
|
||||||
import * as React from "react";
|
import * as React from "react";
|
||||||
import { configContext } from "../ConfigContext";
|
import { configContext } from "../ConfigContext";
|
||||||
import { acquireTokenWithMsal, getMsalInstance } from "../Utils/AuthorizationUtils";
|
import { acquireTokenWithMsal, getMsalInstance } from "../Utils/AuthorizationUtils";
|
||||||
|
import { updateUserContext } from "UserContext";
|
||||||
|
|
||||||
const msalInstance = await getMsalInstance();
|
const msalInstance = await getMsalInstance();
|
||||||
|
|
||||||
|
@ -79,7 +80,7 @@ export function useAADAuth(): ReturnType {
|
||||||
authority: `${configContext.AAD_ENDPOINT}${tenantId}`,
|
authority: `${configContext.AAD_ENDPOINT}${tenantId}`,
|
||||||
scopes: [`${configContext.ARM_ENDPOINT}/.default`],
|
scopes: [`${configContext.ARM_ENDPOINT}/.default`],
|
||||||
});
|
});
|
||||||
|
updateUserContext({ armToken: armToken});
|
||||||
setArmToken(armToken);
|
setArmToken(armToken);
|
||||||
setAuthFailure(null);
|
setAuthFailure(null);
|
||||||
} catch (error) {
|
} catch (error) {
|
||||||
|
|
|
@ -1,8 +1,8 @@
|
||||||
import { HttpHeaders } from "Common/Constants";
|
import { HttpHeaders } from "Common/Constants";
|
||||||
import { QueryRequestOptions, QueryResponse } from "Contracts/AzureResourceGraph";
|
|
||||||
import useSWR from "swr";
|
import useSWR from "swr";
|
||||||
import { configContext } from "../ConfigContext";
|
import { acquireTokenWithMsal, getMsalInstance } from "Utils/AuthorizationUtils";
|
||||||
import { DatabaseAccount } from "../Contracts/DataModels";
|
import React from "react";
|
||||||
|
import { updateUserContext, userContext } from "UserContext";
|
||||||
/* eslint-disable @typescript-eslint/no-explicit-any */
|
/* eslint-disable @typescript-eslint/no-explicit-any */
|
||||||
|
|
||||||
interface AccountListResult {
|
interface AccountListResult {
|
||||||
|
@ -34,11 +34,10 @@ export async function fetchDatabaseAccounts(subscriptionId: string, accessToken:
|
||||||
}
|
}
|
||||||
|
|
||||||
export async function fetchDatabaseAccountsFromGraph(
|
export async function fetchDatabaseAccountsFromGraph(
|
||||||
subscriptionId: string,
|
subscriptionId: string
|
||||||
accessToken: string,
|
|
||||||
): Promise<DatabaseAccount[]> {
|
): Promise<DatabaseAccount[]> {
|
||||||
const headers = new Headers();
|
const headers = new Headers();
|
||||||
const bearer = `Bearer ${accessToken}`;
|
const bearer = `Bearer ${userContext.armToken}`;
|
||||||
|
|
||||||
headers.append("Authorization", bearer);
|
headers.append("Authorization", bearer);
|
||||||
headers.append(HttpHeaders.contentType, "application/json");
|
headers.append(HttpHeaders.contentType, "application/json");
|
||||||
|
@ -46,8 +45,9 @@ export async function fetchDatabaseAccountsFromGraph(
|
||||||
const apiVersion = "2021-03-01";
|
const apiVersion = "2021-03-01";
|
||||||
const managementResourceGraphAPIURL = `${configContext.ARM_ENDPOINT}providers/Microsoft.ResourceGraph/resources?api-version=${apiVersion}`;
|
const managementResourceGraphAPIURL = `${configContext.ARM_ENDPOINT}providers/Microsoft.ResourceGraph/resources?api-version=${apiVersion}`;
|
||||||
|
|
||||||
const databaseAccounts: DatabaseAccount[] = [];
|
let databaseAccounts: DatabaseAccount[] = [];
|
||||||
let skipToken: string;
|
let skipToken: string;
|
||||||
|
console.log("Old ARM Token", userContext.armToken);
|
||||||
do {
|
do {
|
||||||
const body = {
|
const body = {
|
||||||
query: databaseAccountsQuery,
|
query: databaseAccountsQuery,
|
||||||
|
@ -75,20 +75,166 @@ export async function fetchDatabaseAccountsFromGraph(
|
||||||
throw new Error(await response.text());
|
throw new Error(await response.text());
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
const queryResponse: QueryResponse = (await response.json()) as QueryResponse;
|
const queryResponse: QueryResponse = (await response.json()) as QueryResponse;
|
||||||
skipToken = queryResponse.$skipToken;
|
skipToken = queryResponse.$skipToken;
|
||||||
queryResponse.data?.map((databaseAccount: any) => {
|
queryResponse.data?.map((databaseAccount: any) => {
|
||||||
databaseAccounts.push(databaseAccount as DatabaseAccount);
|
databaseAccounts.push(databaseAccount as DatabaseAccount);
|
||||||
});
|
});
|
||||||
} while (skipToken);
|
|
||||||
|
|
||||||
|
// else {
|
||||||
|
// try{
|
||||||
|
// console.log("Token expired");
|
||||||
|
// databaseAccounts = await acquireNewTokenAndRetry(body);
|
||||||
|
// }
|
||||||
|
// catch (error) {
|
||||||
|
// throw new Error(error);
|
||||||
|
// }
|
||||||
|
|
||||||
|
//}
|
||||||
|
} while (skipToken);
|
||||||
return databaseAccounts.sort((a, b) => a.name.localeCompare(b.name));
|
return databaseAccounts.sort((a, b) => a.name.localeCompare(b.name));
|
||||||
}
|
}
|
||||||
|
|
||||||
export function useDatabaseAccounts(subscriptionId: string, armToken: string): DatabaseAccount[] | undefined {
|
export function useDatabaseAccounts(subscriptionId: string): DatabaseAccount[] | undefined {
|
||||||
const { data } = useSWR(
|
const { data } = useSWR(
|
||||||
() => (armToken && subscriptionId ? ["databaseAccounts", subscriptionId, armToken] : undefined),
|
() => ( subscriptionId ? ["databaseAccounts", subscriptionId] : undefined),
|
||||||
(_, subscriptionId, armToken) => fetchDatabaseAccountsFromGraph(subscriptionId, armToken),
|
(_, subscriptionId) => runCommand(fetchDatabaseAccountsFromGraph, subscriptionId),
|
||||||
);
|
);
|
||||||
return data;
|
return data;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// Define the types for your responses
|
||||||
|
interface DatabaseAccount {
|
||||||
|
name: string;
|
||||||
|
id: string;
|
||||||
|
// Add other relevant fields as per your use case
|
||||||
|
}
|
||||||
|
|
||||||
|
interface Subscription {
|
||||||
|
displayName: string;
|
||||||
|
subscriptionId: string;
|
||||||
|
state: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
interface QueryRequestOptions {
|
||||||
|
$top?: number;
|
||||||
|
$skipToken?: string;
|
||||||
|
$allowPartialScopes?: boolean;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Define the configuration context and headers if not already defined
|
||||||
|
const configContext = {
|
||||||
|
ARM_ENDPOINT: 'https://management.azure.com/',
|
||||||
|
AAD_ENDPOINT: 'https://login.microsoftonline.com/'
|
||||||
|
};
|
||||||
|
|
||||||
|
interface QueryResponse {
|
||||||
|
data?: any[];
|
||||||
|
$skipToken?: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Define a generic runCommand function
|
||||||
|
export async function runCommand<T>(
|
||||||
|
fn: (...args: any[]) => Promise<T>,
|
||||||
|
...args: any[]
|
||||||
|
): Promise<T> {
|
||||||
|
try {
|
||||||
|
// Attempt to execute the function passed as an argument
|
||||||
|
const result = await fn(...args);
|
||||||
|
console.log('Successfully executed function:', result);
|
||||||
|
return result;
|
||||||
|
|
||||||
|
} catch (error) {
|
||||||
|
// Handle any error that is thrown during the execution of the function
|
||||||
|
//(error.code === "ExpiredAuthenticationToken")
|
||||||
|
if(error) {
|
||||||
|
console.log('Creating new token');
|
||||||
|
const msalInstance = await getMsalInstance();
|
||||||
|
|
||||||
|
const cachedAccount = msalInstance.getAllAccounts()?.[0];
|
||||||
|
const cachedTenantId = localStorage.getItem("cachedTenantId");
|
||||||
|
|
||||||
|
|
||||||
|
msalInstance.setActiveAccount(cachedAccount);
|
||||||
|
|
||||||
|
const newAccessToken = await acquireTokenWithMsal(msalInstance, {
|
||||||
|
authority: `${configContext.AAD_ENDPOINT}${cachedTenantId}`,
|
||||||
|
scopes: [`${configContext.ARM_ENDPOINT}/.default`],
|
||||||
|
});
|
||||||
|
|
||||||
|
console.log("Latest ARM Token", userContext.armToken);
|
||||||
|
updateUserContext({armToken: newAccessToken});
|
||||||
|
const result = await fn(...args);
|
||||||
|
return result;
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
console.error('An error occurred:', error.message);
|
||||||
|
throw new error;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Running the functions using runCommand
|
||||||
|
|
||||||
|
const accessToken = 'your-access-token';
|
||||||
|
const subscriptionId = 'your-subscription-id';
|
||||||
|
|
||||||
|
//runCommand(fetchDatabaseAccountsFromGraph, subscriptionId, accessToken);
|
||||||
|
//runCommand(fetchSubscriptionsFromGraph, accessToken);
|
||||||
|
|
||||||
|
async function acquireNewTokenAndRetry(body: any) : Promise<DatabaseAccount[]> {
|
||||||
|
try {
|
||||||
|
const msalInstance = await getMsalInstance();
|
||||||
|
|
||||||
|
const cachedAccount = msalInstance.getAllAccounts()?.[0];
|
||||||
|
const cachedTenantId = localStorage.getItem("cachedTenantId");
|
||||||
|
|
||||||
|
// const [tenantId, setTenantId] = React.useState<string>(cachedTenantId);
|
||||||
|
|
||||||
|
|
||||||
|
msalInstance.setActiveAccount(cachedAccount);
|
||||||
|
|
||||||
|
const newAccessToken = await acquireTokenWithMsal(msalInstance, {
|
||||||
|
authority: `${configContext.AAD_ENDPOINT}${cachedTenantId}`,
|
||||||
|
scopes: [`${configContext.ARM_ENDPOINT}/.default`],
|
||||||
|
});
|
||||||
|
console.log("New ARM Token", newAccessToken);
|
||||||
|
const newBearer = `Bearer ${newAccessToken}`;
|
||||||
|
const newHeaders = new Headers();
|
||||||
|
newHeaders.append("Authorization", newBearer);
|
||||||
|
newHeaders.append(HttpHeaders.contentType, "application/json");
|
||||||
|
const apiVersion = "2021-03-01";
|
||||||
|
const managementResourceGraphAPIURL = `${configContext.ARM_ENDPOINT}providers/Microsoft.ResourceGraph/resources?api-version=${apiVersion}`;
|
||||||
|
|
||||||
|
const databaseAccounts: DatabaseAccount[] = [];
|
||||||
|
let skipToken: string;
|
||||||
|
|
||||||
|
|
||||||
|
// Retry the request with the new token
|
||||||
|
const response = await fetch(managementResourceGraphAPIURL, {
|
||||||
|
method: "POST",
|
||||||
|
headers: newHeaders,
|
||||||
|
body: JSON.stringify(body),
|
||||||
|
});
|
||||||
|
|
||||||
|
if (response.ok) {
|
||||||
|
// Handle successful response with new token
|
||||||
|
const queryResponse: QueryResponse = await response.json();
|
||||||
|
skipToken = queryResponse.$skipToken;
|
||||||
|
queryResponse.data?.forEach((databaseAccount: any) => {
|
||||||
|
databaseAccounts.push(databaseAccount as DatabaseAccount);
|
||||||
|
});
|
||||||
|
return databaseAccounts;
|
||||||
|
} else {
|
||||||
|
throw new Error(`Failed to fetch data after acquiring new token. Status: ${response.status}, ${await response.text()}`);
|
||||||
|
}
|
||||||
|
} catch (error) {
|
||||||
|
console.error("Error acquiring new token and retrying:", error);
|
||||||
|
throw error;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
|
@ -5,6 +5,7 @@ import { FabricMessageTypes } from "Contracts/FabricMessageTypes";
|
||||||
import { FABRIC_RPC_VERSION, FabricMessageV2 } from "Contracts/FabricMessagesContract";
|
import { FABRIC_RPC_VERSION, FabricMessageV2 } from "Contracts/FabricMessagesContract";
|
||||||
import Explorer from "Explorer/Explorer";
|
import Explorer from "Explorer/Explorer";
|
||||||
import { useDataPlaneRbac } from "Explorer/Panes/SettingsPane/SettingsPane";
|
import { useDataPlaneRbac } from "Explorer/Panes/SettingsPane/SettingsPane";
|
||||||
|
import { useDataPlaneRbac } from "Explorer/Panes/SettingsPane/SettingsPane";
|
||||||
import { useSelectedNode } from "Explorer/useSelectedNode";
|
import { useSelectedNode } from "Explorer/useSelectedNode";
|
||||||
import { scheduleRefreshDatabaseResourceToken } from "Platform/Fabric/FabricUtil";
|
import { scheduleRefreshDatabaseResourceToken } from "Platform/Fabric/FabricUtil";
|
||||||
import { LocalStorageUtility, StorageKey } from "Shared/StorageUtility";
|
import { LocalStorageUtility, StorageKey } from "Shared/StorageUtility";
|
||||||
|
@ -18,6 +19,7 @@ import { AuthType } from "../AuthType";
|
||||||
import { AccountKind, Flights } from "../Common/Constants";
|
import { AccountKind, Flights } from "../Common/Constants";
|
||||||
import { normalizeArmEndpoint } from "../Common/EnvironmentUtility";
|
import { normalizeArmEndpoint } from "../Common/EnvironmentUtility";
|
||||||
import * as Logger from "../Common/Logger";
|
import * as Logger from "../Common/Logger";
|
||||||
|
import * as Logger from "../Common/Logger";
|
||||||
import { handleCachedDataMessage, sendMessage, sendReadyMessage } from "../Common/MessageHandler";
|
import { handleCachedDataMessage, sendMessage, sendReadyMessage } from "../Common/MessageHandler";
|
||||||
import { Platform, configContext, updateConfigContext } from "../ConfigContext";
|
import { Platform, configContext, updateConfigContext } from "../ConfigContext";
|
||||||
import { ActionType, DataExplorerAction, TabKind } from "../Contracts/ActionContracts";
|
import { ActionType, DataExplorerAction, TabKind } from "../Contracts/ActionContracts";
|
||||||
|
@ -49,6 +51,7 @@ import {
|
||||||
} from "../Utils/AuthorizationUtils";
|
} from "../Utils/AuthorizationUtils";
|
||||||
import { isInvalidParentFrameOrigin, shouldProcessMessage } from "../Utils/MessageValidation";
|
import { isInvalidParentFrameOrigin, shouldProcessMessage } from "../Utils/MessageValidation";
|
||||||
import { getReadOnlyKeys, listKeys } from "../Utils/arm/generatedClients/cosmos/databaseAccounts";
|
import { getReadOnlyKeys, listKeys } from "../Utils/arm/generatedClients/cosmos/databaseAccounts";
|
||||||
|
import { getReadOnlyKeys, listKeys } from "../Utils/arm/generatedClients/cosmos/databaseAccounts";
|
||||||
import { applyExplorerBindings } from "../applyExplorerBindings";
|
import { applyExplorerBindings } from "../applyExplorerBindings";
|
||||||
|
|
||||||
// This hook will create a new instance of Explorer.ts and bind it to the DOM
|
// This hook will create a new instance of Explorer.ts and bind it to the DOM
|
||||||
|
@ -460,10 +463,14 @@ function configureEmulator(): Explorer {
|
||||||
return explorer;
|
return explorer;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
export async function fetchAndUpdateKeys(subscriptionId: string, resourceGroup: string, account: string) {
|
||||||
|
Logger.logInfo(`Fetching keys for ${userContext.apiType} account ${account}`, "Explorer/fetchAndUpdateKeys");
|
||||||
|
let keys;
|
||||||
export async function fetchAndUpdateKeys(subscriptionId: string, resourceGroup: string, account: string) {
|
export async function fetchAndUpdateKeys(subscriptionId: string, resourceGroup: string, account: string) {
|
||||||
Logger.logInfo(`Fetching keys for ${userContext.apiType} account ${account}`, "Explorer/fetchAndUpdateKeys");
|
Logger.logInfo(`Fetching keys for ${userContext.apiType} account ${account}`, "Explorer/fetchAndUpdateKeys");
|
||||||
let keys;
|
let keys;
|
||||||
try {
|
try {
|
||||||
|
keys = await listKeys(subscriptionId, resourceGroup, account);
|
||||||
keys = await listKeys(subscriptionId, resourceGroup, account);
|
keys = await listKeys(subscriptionId, resourceGroup, account);
|
||||||
Logger.logInfo(`Keys fetched for ${userContext.apiType} account ${account}`, "Explorer/fetchAndUpdateKeys");
|
Logger.logInfo(`Keys fetched for ${userContext.apiType} account ${account}`, "Explorer/fetchAndUpdateKeys");
|
||||||
updateUserContext({
|
updateUserContext({
|
||||||
|
@ -487,6 +494,23 @@ export async function fetchAndUpdateKeys(subscriptionId: string, resourceGroup:
|
||||||
);
|
);
|
||||||
throw error;
|
throw error;
|
||||||
}
|
}
|
||||||
|
if (error.code === "AuthorizationFailed") {
|
||||||
|
keys = await getReadOnlyKeys(subscriptionId, resourceGroup, account);
|
||||||
|
Logger.logInfo(
|
||||||
|
`Read only Keys fetched for ${userContext.apiType} account ${account}`,
|
||||||
|
"Explorer/fetchAndUpdateKeys",
|
||||||
|
);
|
||||||
|
updateUserContext({
|
||||||
|
masterKey: keys.primaryReadonlyMasterKey,
|
||||||
|
});
|
||||||
|
} else {
|
||||||
|
logConsoleError(`Error occurred fetching keys for the account." ${error.message}`);
|
||||||
|
Logger.logError(
|
||||||
|
`Error during fetching keys or updating user context: ${error} for ${userContext.apiType} account ${account}`,
|
||||||
|
"Explorer/fetchAndUpdateKeys",
|
||||||
|
);
|
||||||
|
throw error;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -3,6 +3,7 @@ import { QueryRequestOptions, QueryResponse } from "Contracts/AzureResourceGraph
|
||||||
import useSWR from "swr";
|
import useSWR from "swr";
|
||||||
import { configContext } from "../ConfigContext";
|
import { configContext } from "../ConfigContext";
|
||||||
import { Subscription } from "../Contracts/DataModels";
|
import { Subscription } from "../Contracts/DataModels";
|
||||||
|
import { acquireTokenWithMsal, getMsalInstance } from "Utils/AuthorizationUtils";
|
||||||
/* eslint-disable @typescript-eslint/no-explicit-any */
|
/* eslint-disable @typescript-eslint/no-explicit-any */
|
||||||
|
|
||||||
interface SubscriptionListResult {
|
interface SubscriptionListResult {
|
||||||
|
@ -92,3 +93,5 @@ export function useSubscriptions(armToken: string): Subscription[] | undefined {
|
||||||
);
|
);
|
||||||
return data;
|
return data;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue