@@ -232,6 +275,127 @@ async function loadBridges(){
`).join('');
}
+// --- API Clients ---
+let _allInstances=[]; // cache
+let _lastToken=''; // for copy button
+
+async function loadAllInstancesForPicker(selected){
+ selected=selected||new Set();
+ const res=await fetch(API+'/api/admin/instances');
+ if(!res.ok)return;
+ _allInstances=await res.json();
+ const container=document.getElementById('nac-instances');
+ if(!_allInstances.length){container.innerHTML='
No instances exist yet — create one first.
';return}
+ // Group by user
+ const byUser={};
+ _allInstances.forEach(i=>{(byUser[i.username]=byUser[i.username]||[]).push(i)});
+ container.innerHTML=Object.keys(byUser).sort().map(un=>`
+
${un}
+ ${byUser[un].map(i=>`
+ ${i.catalog_id} · ${i.name} (id ${i.id}) `).join('')}
`).join('');
+}
+
+async function loadApiClients(){
+ const res=await fetch(API+'/api/admin/api-clients');
+ if(!res.ok)return;
+ const clients=await res.json();
+ const tbody=document.querySelector('#api-clients-table tbody');
+ if(!clients.length){tbody.innerHTML='
No API clients yet ';return}
+ tbody.innerHTML=clients.map(c=>{
+ const status=c.revoked?'
revoked ':'
active ';
+ const scopeLabels=(c.instance_ids||[]).map(id=>{
+ const inst=_allInstances.find(i=>i.id===id);
+ return inst?`${inst.username}/${inst.catalog_id}(${id})`:`#${id}`;
+ }).join(', ')||'
none ';
+ const actions=c.revoked
+ ? `
Rotate Delete `
+ : `
Edit Rotate Revoke `;
+ return `
+ ${c.name} ${c.description?`${c.description}
`:''}${c.token_prefix||'-'}…${scopeLabels}
+ ${c.created_at?new Date(c.created_at).toLocaleDateString():'-'}
+ ${c.last_used_at?new Date(c.last_used_at).toLocaleString():'never '}
+ ${status}
+ ${actions}
`;
+ }).join('');
+}
+
+async function createApiClient(){
+ const name=document.getElementById('nac-name').value.trim();
+ const desc=document.getElementById('nac-desc').value.trim();
+ const instance_ids=[...document.querySelectorAll('.nac-inst-cb:checked')].map(cb=>parseInt(cb.value));
+ if(!name){showMsg('nac-msg','Name is required',false);return}
+ if(!instance_ids.length){showMsg('nac-msg','Pick at least one instance to scope the token',false);return}
+ const res=await fetch(API+'/api/admin/api-clients',{method:'POST',headers:{'Content-Type':'application/json'},
+ body:JSON.stringify({name,description:desc,instance_ids})});
+ if(res.ok){
+ const c=await res.json();
+ revealToken(c.token);
+ showMsg('nac-msg','Created',true);
+ document.getElementById('nac-name').value='';
+ document.getElementById('nac-desc').value='';
+ loadAllInstancesForPicker();
+ loadApiClients();
+ } else {
+ const e=await res.json();showMsg('nac-msg',e.detail||'Error',false);
+ }
+}
+
+function revealToken(token){
+ _lastToken=token;
+ document.getElementById('token-reveal-value').textContent=token;
+ document.getElementById('token-reveal').style.display='block';
+ document.getElementById('token-reveal').scrollIntoView({behavior:'smooth',block:'center'});
+}
+
+function copyToken(){
+ navigator.clipboard.writeText(_lastToken).then(()=>{
+ const btn=event.target;const orig=btn.textContent;btn.textContent='Copied!';setTimeout(()=>btn.textContent=orig,1500);
+ });
+}
+
+async function revokeApiClient(id){
+ if(!confirm('Revoke this token? The app using it will stop working immediately.'))return;
+ await fetch(API+'/api/admin/api-clients/'+id+'/revoke',{method:'POST'});
+ loadApiClients();
+}
+
+async function rotateApiClient(id){
+ if(!confirm('Issue a new token? The old one will stop working immediately.'))return;
+ const res=await fetch(API+'/api/admin/api-clients/'+id+'/rotate',{method:'POST'});
+ if(res.ok){
+ const c=await res.json();
+ revealToken(c.token);
+ loadApiClients();
+ }
+}
+
+async function deleteApiClient(id,name){
+ if(!confirm('Permanently delete client '+name+'?'))return;
+ await fetch(API+'/api/admin/api-clients/'+id,{method:'DELETE'});
+ loadApiClients();
+}
+
+async function editApiClient(id){
+ const res=await fetch(API+'/api/admin/api-clients');
+ const clients=await res.json();
+ const c=clients.find(x=>x.id===id);
+ if(!c)return;
+ const existing=new Set(c.instance_ids||[]);
+ const checkboxes=[..._allInstances].map(i=>`${i.id}: ${i.username}/${i.catalog_id} (${i.name})${existing.has(i.id)?' [currently authorized]':''}`).join('\n');
+ const input=prompt(`Edit scopes for "${c.name}"\n\nEnter comma-separated instance IDs this token should be allowed to access.\n\nAvailable instances:\n${checkboxes}`, [...existing].join(','));
+ if(input===null)return;
+ const ids=input.split(',').map(s=>parseInt(s.trim())).filter(n=>!isNaN(n));
+ const res2=await fetch(API+'/api/admin/api-clients/'+id,{method:'PUT',headers:{'Content-Type':'application/json'},
+ body:JSON.stringify({instance_ids:ids})});
+ if(res2.ok)loadApiClients();
+ else{const e=await res2.json();alert(e.detail||'Error')}
+}
+
// --- System ---
async function loadSystem(){
const[usersRes,instRes]=await Promise.all([fetch(API+'/api/admin/users'),fetch(API+'/api/health')]);
@@ -244,7 +408,7 @@ async function loadSystem(){
}
// Init
-loadUsers();loadCatalog();loadProviders();loadBridges();loadSystem();
+loadUsers();loadCatalog();loadProviders();loadBridges();loadAllInstancesForPicker().then(loadApiClients);loadSystem();