246 lines
12 KiB
PHP
246 lines
12 KiB
PHP
|
<?php
|
||
|
|
// Admin view for managing API keys
|
||
|
|
// Receives $apiKeys from controller
|
||
|
|
?>
|
||
|
|
<!DOCTYPE html>
|
||
|
|
<html lang="en">
|
||
|
|
<head>
|
||
|
|
<meta charset="UTF-8">
|
||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
|
|
<title>API Keys - Admin</title>
|
||
|
|
<link rel="icon" type="image/png" href="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/images/favicon.png">
|
||
|
|
<link rel="stylesheet" href="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/css/dashboard.css">
|
||
|
|
<link rel="stylesheet" href="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/css/ticket.css">
|
||
|
|
<script src="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/js/toast.js"></script>
|
||
|
|
<script>
|
||
|
|
window.CSRF_TOKEN = '<?php
|
||
|
|
require_once __DIR__ . '/../../middleware/CsrfMiddleware.php';
|
||
|
|
echo CsrfMiddleware::getToken();
|
||
|
|
?>';
|
||
|
|
</script>
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<div class="user-header">
|
||
|
|
<div class="user-header-left">
|
||
|
|
<a href="/" class="back-link">← Dashboard</a>
|
||
|
|
<span style="margin-left: 1rem; color: var(--terminal-amber);">Admin: API Keys</span>
|
||
|
|
</div>
|
||
|
|
<div class="user-header-right">
|
||
|
|
<?php if (isset($GLOBALS['currentUser'])): ?>
|
||
|
|
<span class="user-name"><?php echo htmlspecialchars($GLOBALS['currentUser']['display_name'] ?? $GLOBALS['currentUser']['username']); ?></span>
|
||
|
|
<span class="admin-badge">Admin</span>
|
||
|
|
<?php endif; ?>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<div class="ascii-frame-outer" style="max-width: 1200px; margin: 2rem auto;">
|
||
|
|
<span class="bottom-left-corner">╚</span>
|
||
|
|
<span class="bottom-right-corner">╝</span>
|
||
|
|
|
||
|
|
<div class="ascii-section-header">API Key Management</div>
|
||
|
|
<div class="ascii-content">
|
||
|
|
<!-- Generate New Key Form -->
|
||
|
|
<div class="ascii-frame-inner" style="margin-bottom: 1.5rem;">
|
||
|
|
<h3 style="color: var(--terminal-amber); margin-bottom: 1rem;">Generate New API Key</h3>
|
||
|
|
<form id="generateKeyForm" style="display: flex; gap: 1rem; flex-wrap: wrap; align-items: flex-end;">
|
||
|
|
<div style="flex: 1; min-width: 200px;">
|
||
|
|
<label style="display: block; font-size: 0.8rem; color: var(--terminal-amber); margin-bottom: 0.25rem;">Key Name *</label>
|
||
|
|
<input type="text" id="keyName" required placeholder="e.g., CI/CD Pipeline"
|
||
|
|
style="width: 100%; padding: 0.5rem; border: 2px solid var(--terminal-green); background: var(--bg-primary); color: var(--terminal-green); font-family: var(--font-mono);">
|
||
|
|
</div>
|
||
|
|
<div style="min-width: 150px;">
|
||
|
|
<label style="display: block; font-size: 0.8rem; color: var(--terminal-amber); margin-bottom: 0.25rem;">Expires In</label>
|
||
|
|
<select id="expiresIn" style="width: 100%; padding: 0.5rem; border: 2px solid var(--terminal-green); background: var(--bg-primary); color: var(--terminal-green); font-family: var(--font-mono);">
|
||
|
|
<option value="">Never</option>
|
||
|
|
<option value="30">30 days</option>
|
||
|
|
<option value="90">90 days</option>
|
||
|
|
<option value="180">180 days</option>
|
||
|
|
<option value="365">1 year</option>
|
||
|
|
</select>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<button type="submit" class="btn">Generate Key</button>
|
||
|
|
</div>
|
||
|
|
</form>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- New Key Display (hidden by default) -->
|
||
|
|
<div id="newKeyDisplay" class="ascii-frame-inner" style="display: none; margin-bottom: 1.5rem; background: rgba(255, 176, 0, 0.1); border-color: var(--terminal-amber);">
|
||
|
|
<h3 style="color: var(--terminal-amber); margin-bottom: 0.5rem;">New API Key Generated</h3>
|
||
|
|
<p style="color: var(--priority-1); margin-bottom: 1rem; font-size: 0.9rem;">
|
||
|
|
Copy this key now. You won't be able to see it again!
|
||
|
|
</p>
|
||
|
|
<div style="display: flex; gap: 0.5rem; align-items: center;">
|
||
|
|
<input type="text" id="newKeyValue" readonly
|
||
|
|
style="flex: 1; padding: 0.75rem; font-family: var(--font-mono); font-size: 0.85rem; background: var(--bg-primary); border: 2px solid var(--terminal-green); color: var(--terminal-green);">
|
||
|
|
<button onclick="copyApiKey()" class="btn" title="Copy to clipboard">Copy</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- Existing Keys Table -->
|
||
|
|
<div class="ascii-frame-inner">
|
||
|
|
<h3 style="color: var(--terminal-amber); margin-bottom: 1rem;">Existing API Keys</h3>
|
||
|
|
<table style="width: 100%; font-size: 0.9rem;">
|
||
|
|
<thead>
|
||
|
|
<tr>
|
||
|
|
<th>Name</th>
|
||
|
|
<th>Key Prefix</th>
|
||
|
|
<th>Created By</th>
|
||
|
|
<th>Created At</th>
|
||
|
|
<th>Expires At</th>
|
||
|
|
<th>Last Used</th>
|
||
|
|
<th>Status</th>
|
||
|
|
<th>Actions</th>
|
||
|
|
</tr>
|
||
|
|
</thead>
|
||
|
|
<tbody>
|
||
|
|
<?php if (empty($apiKeys)): ?>
|
||
|
|
<tr>
|
||
|
|
<td colspan="8" style="text-align: center; padding: 2rem; color: var(--terminal-green-dim);">
|
||
|
|
No API keys found. Generate one above.
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
<?php else: ?>
|
||
|
|
<?php foreach ($apiKeys as $key): ?>
|
||
|
|
<tr id="key-row-<?php echo $key['api_key_id']; ?>">
|
||
|
|
<td><?php echo htmlspecialchars($key['key_name']); ?></td>
|
||
|
|
<td style="font-family: var(--font-mono);">
|
||
|
|
<code><?php echo htmlspecialchars($key['key_prefix']); ?>...</code>
|
||
|
|
</td>
|
||
|
|
<td><?php echo htmlspecialchars($key['display_name'] ?? $key['username'] ?? 'Unknown'); ?></td>
|
||
|
|
<td style="white-space: nowrap;"><?php echo date('Y-m-d H:i', strtotime($key['created_at'])); ?></td>
|
||
|
|
<td style="white-space: nowrap;">
|
||
|
|
<?php if ($key['expires_at']): ?>
|
||
|
|
<?php
|
||
|
|
$expired = strtotime($key['expires_at']) < time();
|
||
|
|
$color = $expired ? 'var(--priority-1)' : 'var(--terminal-green)';
|
||
|
|
?>
|
||
|
|
<span style="color: <?php echo $color; ?>;">
|
||
|
|
<?php echo date('Y-m-d', strtotime($key['expires_at'])); ?>
|
||
|
|
<?php if ($expired): ?> (Expired)<?php endif; ?>
|
||
|
|
</span>
|
||
|
|
<?php else: ?>
|
||
|
|
<span style="color: var(--terminal-cyan);">Never</span>
|
||
|
|
<?php endif; ?>
|
||
|
|
</td>
|
||
|
|
<td style="white-space: nowrap;">
|
||
|
|
<?php echo $key['last_used'] ? date('Y-m-d H:i', strtotime($key['last_used'])) : 'Never'; ?>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<?php if ($key['is_active']): ?>
|
||
|
|
<span style="color: var(--status-open);">Active</span>
|
||
|
|
<?php else: ?>
|
||
|
|
<span style="color: var(--status-closed);">Revoked</span>
|
||
|
|
<?php endif; ?>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<?php if ($key['is_active']): ?>
|
||
|
|
<button onclick="revokeKey(<?php echo $key['api_key_id']; ?>)" class="btn btn-secondary" style="padding: 0.25rem 0.5rem; font-size: 0.8rem;">
|
||
|
|
Revoke
|
||
|
|
</button>
|
||
|
|
<?php else: ?>
|
||
|
|
<span style="color: var(--text-muted);">-</span>
|
||
|
|
<?php endif; ?>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
<?php endforeach; ?>
|
||
|
|
<?php endif; ?>
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- API Usage Info -->
|
||
|
|
<div class="ascii-frame-inner" style="margin-top: 1.5rem;">
|
||
|
|
<h3 style="color: var(--terminal-amber); margin-bottom: 1rem;">API Usage</h3>
|
||
|
|
<p style="margin-bottom: 0.5rem;">Include the API key in your requests using the Authorization header:</p>
|
||
|
|
<pre style="background: var(--bg-primary); padding: 1rem; border: 1px solid var(--terminal-green); overflow-x: auto;"><code>Authorization: Bearer YOUR_API_KEY</code></pre>
|
||
|
|
<p style="margin-top: 1rem; font-size: 0.9rem; color: var(--text-muted);">
|
||
|
|
API keys provide programmatic access to create and manage tickets. Keep your keys secure and rotate them regularly.
|
||
|
|
</p>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<script>
|
||
|
|
document.getElementById('generateKeyForm').addEventListener('submit', async function(e) {
|
||
|
|
e.preventDefault();
|
||
|
|
|
||
|
|
const keyName = document.getElementById('keyName').value.trim();
|
||
|
|
const expiresIn = document.getElementById('expiresIn').value;
|
||
|
|
|
||
|
|
if (!keyName) {
|
||
|
|
showToast('Please enter a key name', 'error');
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
try {
|
||
|
|
const response = await fetch('/api/generate_api_key.php', {
|
||
|
|
method: 'POST',
|
||
|
|
headers: {
|
||
|
|
'Content-Type': 'application/json',
|
||
|
|
'X-CSRF-Token': window.CSRF_TOKEN
|
||
|
|
},
|
||
|
|
body: JSON.stringify({
|
||
|
|
key_name: keyName,
|
||
|
|
expires_in_days: expiresIn || null
|
||
|
|
})
|
||
|
|
});
|
||
|
|
|
||
|
|
const data = await response.json();
|
||
|
|
|
||
|
|
if (data.success) {
|
||
|
|
// Show the new key
|
||
|
|
document.getElementById('newKeyValue').value = data.api_key;
|
||
|
|
document.getElementById('newKeyDisplay').style.display = 'block';
|
||
|
|
document.getElementById('keyName').value = '';
|
||
|
|
|
||
|
|
showToast('API key generated successfully', 'success');
|
||
|
|
|
||
|
|
// Reload page after 5 seconds to show new key in table
|
||
|
|
setTimeout(() => location.reload(), 5000);
|
||
|
|
} else {
|
||
|
|
showToast(data.error || 'Failed to generate API key', 'error');
|
||
|
|
}
|
||
|
|
} catch (error) {
|
||
|
|
showToast('Error generating API key: ' + error.message, 'error');
|
||
|
|
}
|
||
|
|
});
|
||
|
|
|
||
|
|
function copyApiKey() {
|
||
|
|
const keyInput = document.getElementById('newKeyValue');
|
||
|
|
keyInput.select();
|
||
|
|
document.execCommand('copy');
|
||
|
|
showToast('API key copied to clipboard', 'success');
|
||
|
|
}
|
||
|
|
|
||
|
|
async function revokeKey(keyId) {
|
||
|
|
if (!confirm('Are you sure you want to revoke this API key? This action cannot be undone.')) {
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
try {
|
||
|
|
const response = await fetch('/api/revoke_api_key.php', {
|
||
|
|
method: 'POST',
|
||
|
|
headers: {
|
||
|
|
'Content-Type': 'application/json',
|
||
|
|
'X-CSRF-Token': window.CSRF_TOKEN
|
||
|
|
},
|
||
|
|
body: JSON.stringify({ key_id: keyId })
|
||
|
|
});
|
||
|
|
|
||
|
|
const data = await response.json();
|
||
|
|
|
||
|
|
if (data.success) {
|
||
|
|
showToast('API key revoked successfully', 'success');
|
||
|
|
location.reload();
|
||
|
|
} else {
|
||
|
|
showToast(data.error || 'Failed to revoke API key', 'error');
|
||
|
|
}
|
||
|
|
} catch (error) {
|
||
|
|
showToast('Error revoking API key: ' + error.message, 'error');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
</script>
|
||
|
|
</body>
|
||
|
|
</html>
|