From a8ccad9ed4a9eb295ad08af2cf9765acf0e8bc77 Mon Sep 17 00:00:00 2001
From: Ivan Gromov <summer.is.gone@gmail.com>
Date: Thu, 29 Oct 2020 23:00:46 +0500
Subject: [PATCH] Secrets from env for EC2 provider

---
 app/static/provider-do.vue  |  39 +++----
 app/static/provider-ec2.vue | 215 +++++++++++++++++++++---------------
 2 files changed, 139 insertions(+), 115 deletions(-)

diff --git a/app/static/provider-do.vue b/app/static/provider-do.vue
index ef71bd5..f34bdbd 100644
--- a/app/static/provider-do.vue
+++ b/app/static/provider-do.vue
@@ -1,33 +1,24 @@
 <template>
   <div>
-    <div class="form-group">
+    <div v-if="ui_token_from_env">
+      <div v-if="ui_token_from_env" class="form-text alert alert-success" role="alert">
+        The token was read from the environment variable
+      </div>
+    </div>
+    <div class="form-group" v-else>
       <label for="id_do_token">
           Enter your API token. The token must have read and write permissions
           <a href="https://cloud.digitalocean.com/settings/api/tokens" title="https://cloud.digitalocean.com/settings/api/tokens" class="badge bagde-pill badge-primary" target="_blank" rel="noopener noreferrer">?</a>
       </label>
-      <div v-if="ui_token_from_env">
-        <input
-          type="password"
-          class="form-control"
-          v-bind:disabled="ui_loading_check"
-          v-bind:value="'1234567890abcdef'"
-        />
-        <div v-if="ui_token_from_env" class="form-text alert alert-success" role="alert">
-          The token was read from the environment variable
-        </div>
-      </div>
-      <div v-else>
-        <input
-          type="text"
-          class="form-control"
-          id="id_do_token"
-          name="do_token"
-          v-bind:disabled="ui_loading_check"
-          v-model="do_token"
-          @blur="load_regions"
-        />
-      </div>
-      
+      <input
+        type="text"
+        class="form-control"
+        id="id_do_token"
+        name="do_token"
+        v-bind:disabled="ui_loading_check"
+        v-model="do_token"
+        @blur="load_regions"
+      />
     </div>
     <region-select v-model="region"
       v-bind:options="ui_region_options"
diff --git a/app/static/provider-ec2.vue b/app/static/provider-ec2.vue
index 7c0d1ed..143a61b 100644
--- a/app/static/provider-ec2.vue
+++ b/app/static/provider-ec2.vue
@@ -1,77 +1,67 @@
 <template>
   <div>
-    <div class="form-group">
-      <label>
-        Enter your AWS Access Key
-        <a
-          href="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
-          title="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
-          target="_blank"
-          rel="noreferrer noopener"
-          class="badge bagde-pill badge-primary"
-          >?</a
+    <div v-if="ui_config_error && ui_config_error === 'missing_boto'" class="form-text alert alert-danger" role="alert">
+      Python module "boto3" is missing, please install it to proceed
+    </div>
+    <div v-if="ui_env_secrets" class="form-text alert alert-success" role="alert">
+      AWS credentials were read from the environment variables
+    </div>
+    <div v-else>
+      <div class="form-group">
+        <label>
+          Enter your AWS Access Key
+          <a
+            href="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
+            title="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
+            target="_blank"
+            rel="noreferrer noopener"
+            class="badge bagde-pill badge-primary"
+            >?</a
+          >
+          <br />
+          Note: Make sure to use an IAM user with an acceptable policy attached
+          (see
+          <a
+            href="https://github.com/trailofbits/algo/blob/master/docs/deploy-from-ansible.md"
+            target="_blank"
+            rel="noreferrer noopener"
+            >docs</a
+          >)
+        </label>
+        <input
+          type="text"
+          class="form-control"
+          name="aws_access_key"
+          v-on:blur="load_regions"
+          v-model="aws_access_key"
+        />
+      </div>
+      <div class="form-group">
+        <label
+          >Enter your AWS Secret Key
+          <a
+            href="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
+            title="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
+            target="_blank"
+            rel="noreferrer noopener"
+            class="badge bagde-pill badge-primary"
+            >?</a
+          ></label
         >
-        <br />
-        Note: Make sure to use an IAM user with an acceptable policy attached
-        (see
-        <a
-          href="https://github.com/trailofbits/algo/blob/master/docs/deploy-from-ansible.md"
-          target="_blank"
-          rel="noreferrer noopener"
-          >docs</a
-        >)
-      </label>
-      <input
-        type="text"
-        class="form-control"
-        name="aws_access_key"
-        v-on:blur="load_regions"
-        v-model="aws_access_key"
-      />
-    </div>
-    <div class="form-group">
-      <label
-        >Enter your AWS Secret Key
-        <a
-          href="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
-          title="http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html"
-          target="_blank"
-          rel="noreferrer noopener"
-          class="badge bagde-pill badge-primary"
-          >?</a
-        ></label
-      >
-      <input
-        type="password"
-        class="form-control"
-        name="aws_secret_key"
-        v-on:blur="load_regions"
-        v-model="aws_secret_key"
-      />
-    </div>
-    <div class="form-group">
-      <label v-if="region_options.length === 0"
-        >Please enter Access key and Secret key to select region</label
-      >
-      <label v-if="is_loading">Loading regions...</label>
-      <label v-if="region_options.length > 0"
-        >What region should the server be located in?</label
-      >
-      <select
-        name="region"
-        class="form-control"
-        v-model="region"
-        v-bind:disabled="is_region_disabled"
-      >
-        <option value disabled>Select region</option>
-        <option
-          v-for="(region, i) in region_options"
-          v-bind:key="i"
-          v-bind:value="region.RegionName"
-          >{{ region.RegionName }}</option
-        >
-      </select>
+        <input
+          type="password"
+          class="form-control"
+          name="aws_secret_key"
+          v-on:blur="load_regions"
+          v-model="aws_secret_key"
+        />
+      </div>
     </div>
+    <region-select v-model="region"
+      v-bind:options="ui_region_options"
+      v-bind:loading="ui_loading_check || ui_loading_regions"
+      v-bind:error="ui_region_error">
+    </region-select>
     <button
       class="btn btn-primary"
       type="button"
@@ -87,53 +77,96 @@
 module.exports = {
   data: function() {
     return {
-      // options for
       aws_access_key: null,
       aws_secret_key: null,
       region: null,
-      // helper variables
-      region_options: [],
-      is_loading: false
+      // ui helper variables
+      ui_region_options: [],
+      ui_env_secrets: null,
+      ui_loading_check: false,
+      ui_loading_regions: false,
+      ui_config_error: null,
+      ui_region_error: null
     };
   },
   computed: {
     is_valid() {
-      return this.aws_access_key && this.aws_secret_key && this.region;
+      return this.has_secrets && this.region;
     },
-    is_region_disabled() {
-      return !(this.aws_access_key && this.aws_secret_key) || this.is_loading;
-    }
+    has_secrets() {
+      return this.ui_env_secrets || (this.aws_access_key && this.aws_secret_key);
+    },
+  },
+  created: function() {
+    this.check_config();
   },
   methods: {
+    check_config() {
+      this.ui_loading_check = true;
+      fetch("/aws_config")
+        .then(r => {
+          if (r.status === 200 || r.status === 400) {
+            return r.json();
+          }
+          throw new Error(r.status);
+        })
+        .then(response => {
+          if (response.has_secret) {
+            this.ui_env_secrets = true;
+            this.load_regions();
+          } else if (response.error) {
+            this.ui_config_error = response.error;
+          }
+        })
+        .finally(() => {
+          this.ui_loading_check = false;
+        });
+    },
     load_regions() {
-      if (this.aws_access_key && this.aws_secret_key && this.region_options.length === 0) {
-        this.is_loading = true;
+      if (this.has_secrets && this.ui_region_options.length === 0) {
+        this.ui_loading_regions = true;
+        this.ui_region_error = false;
+        const payload = this.ui_env_secrets ? {} : {
+          aws_access_key: this.aws_access_key,
+          aws_secret_key: this.aws_secret_key
+        }
         fetch('/ec2_regions', {
           method: 'post',
           headers: {
             'Content-Type': 'application/json'
           },
-          body: JSON.stringify({
-            aws_access_key: this.aws_access_key,
-            aws_secret_key: this.aws_secret_key
-          })
+          body: JSON.stringify(payload)
+        })
+        .then((r) => {
+          if (r.status === 200) {
+            return r.json();
+          }
+          throw new Error(r.status);
         })
-        .then(r => r.json())
         .then(data => {
-          this.region_options = data;
+          this.ui_region_options = data.map(i => ({key: i.RegionName, value: i.RegionName}));
+        })
+        .catch((err) => {
+          this.ui_region_error = err;
         })
         .finally(() => {
-          this.is_loading = false;
+          this.ui_loading_regions = false;
         });
       }
     },
     submit() {
-      this.$emit('submit', {
-        aws_access_key: this.aws_access_key,
-        aws_secret_key: this.aws_secret_key,
+      let submit_value = {
         region: this.region
-      });
+      }
+      if (!this.ui_env_secrets) {
+        submit_value['aws_access_key'] = this.aws_access_key;
+        submit_value['aws_secret_key'] = this.aws_secret_key;
+      }
+      this.$emit('submit', submit_value);
     }
+  },
+  components: {
+    "region-select": window.httpVueLoader("/static/region-select.vue"),
   }
 };
 </script>