Add login and hide non-public pages (#9)

* remove module, embrace components

* current user request

* fix ui image

* login form

* optimization

* eslint

* create env for admin password

* fix tests

.github/workflows/build-frontend.yaml

@@ -26,6 +26,10 @@ jobs:
         working-directory: frontend/
         run: npm run build
 
+      - name: Lint
+        working-directory: frontend/
+        run: npm run lint
+
       - name: Upload artifacts
         uses: actions/upload-artifact@v4
         with:

aggregator/src/main/java/io/spoud/kcc/aggregator/CostControlConfigProperties.java

@@ -11,6 +11,10 @@
 @ConfigMapping(prefix = "cc")
 public interface CostControlConfigProperties {
 
+    @WithName("admin-password")
+    @NotNull
+    String adminPassword();
+
     @WithName("topics.raw-data")
     @NotNull
     List<String> rawTopics();

aggregator/src/main/java/io/spoud/kcc/aggregator/graphql/UserResource.java

@@ -0,0 +1,26 @@
+package io.spoud.kcc.aggregator.graphql;
+
+import io.quarkus.security.Authenticated;
+import io.quarkus.security.identity.SecurityIdentity;
+import jakarta.enterprise.context.RequestScoped;
+import jakarta.inject.Inject;
+import lombok.RequiredArgsConstructor;
+import org.eclipse.microprofile.graphql.GraphQLApi;
+import org.eclipse.microprofile.graphql.NonNull;
+import org.eclipse.microprofile.graphql.Query;
+
+@GraphQLApi
+@RequiredArgsConstructor
+@Authenticated
+@RequestScoped
+public class UserResource {
+
+    @Inject
+    SecurityIdentity securityIdentity;
+
+
+    @Query("currentUser")
+    public @NonNull String currentUser() {
+        return securityIdentity.getPrincipal().getName();
+    }
+}

aggregator/src/main/java/io/spoud/kcc/aggregator/graphql/data/ContextDataSaveRequest.java

@@ -10,7 +10,12 @@
 
 @RegisterForReflection
 public record ContextDataSaveRequest(
-        String id, Instant validFrom, Instant validUntil, @NonNull EntityType entityType, @NonNull String regex, @NonNull Map<@NonNull String, @NonNull String> context) {
+        String id,
+        Instant validFrom,
+        Instant validUntil,
+        @NonNull EntityType entityType,
+        @NonNull String regex,
+        @NonNull Map<@NonNull String, @NonNull String> context) {
   public ContextData toAvro() {
     return new ContextData(Instant.now(), validFrom, validUntil, entityType, regex, context);
   }

aggregator/src/main/resources/application.yaml

@@ -8,6 +8,7 @@ kafka:
       url: http://localhost:8081
 
 cc:
+  admin-password: admin
   topics:
     pricing-rules: pricing-rules
     context-data: context-data
@@ -62,7 +63,7 @@ quarkus:
         enabled: true
         plain-text: true
         users:
-          admin: kpwx06KsQ2Sbi7Tp2N2l
+          admin: ${cc.admin-password}
         roles:
           admin: ADMIN
   http:

aggregator/src/test/java/io/spoud/kcc/aggregator/stream/TestConfigProperties.java

@@ -7,6 +7,7 @@
 
 @Builder
 public class TestConfigProperties implements CostControlConfigProperties {
+    private String adminPassword;
     private String topicAggregatedTableFriendly;
     private List<String> rawTopics;
     private String applicationId;
@@ -15,6 +16,11 @@ public class TestConfigProperties implements CostControlConfigProperties {
     private List<String> topicRawData;
     private String topicAggregated;
 
+    @Override
+    public String adminPassword() {
+        return adminPassword;
+    }
+
     @Override
     public List<String> rawTopics() {
         return rawTopics;

deployment/kafka-cost-control/app/.env.sample

@@ -11,3 +11,6 @@ SCHEMA_REGISTRY_API_SECRET=schema-registry-api-secret
 
 # Coma separated list of topics that contains raw metrics from telegraf
 CC_TOPICS_RAW_DATA=metrics-raw-telegraf-dev
+
+# Admin password
+CC_ADMIN_PASSWORD=admin

deployment/kafka-cost-control/base/aggregator.yaml

@@ -32,6 +32,11 @@ spec:
               value: /home/jboss/kafka-stream/data/
             - name: QUARKUS_PROFILE
               value: "ccloud"
+            - name: CC_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: kafka-cost-control-secret
+                  key: CC_ADMIN_PASSWORD
           envFrom:
             - secretRef:
                 name: kafka-cost-control-secret

deployment/kafka-cost-control/base/kafka-cost-control-ui.yaml

@@ -16,8 +16,7 @@ spec:
     spec:
       containers:
         - name: kafka-cost-control-ui
-          # TODO define final image
-          image: spoud/kafka-cost-control-exploration-ui:latest
+          image: spoud/kafka-cost-control-ui:latest
           imagePullPolicy: Always
           ports:
             - containerPort: 80

frontend/.eslintrc.json

@@ -0,0 +1,54 @@
+{
+  "root": true,
+  "ignorePatterns": [
+    "src/generated/**/*"
+  ],
+  "overrides": [
+    {
+      "files": [
+        "*.ts"
+      ],
+      "extends": [
+        "eslint:recommended",
+        "plugin:@typescript-eslint/recommended",
+        "plugin:@angular-eslint/recommended",
+        "plugin:@angular-eslint/template/process-inline-templates"
+      ],
+      "rules": {
+        "@angular-eslint/directive-selector": [
+          "error",
+          {
+            "type": "attribute",
+            "prefix": "app",
+            "style": "camelCase"
+          }
+        ],
+        "@angular-eslint/component-selector": [
+          "error",
+          {
+            "type": "element",
+            "prefix": "app",
+            "style": "kebab-case"
+          }
+        ],
+        "@typescript-eslint/no-explicit-any": "warn",
+        "@typescript-eslint/no-unused-vars": [
+          "error",
+          {
+            "argsIgnorePattern": "^_"
+          }
+        ]
+      }
+    },
+    {
+      "files": [
+        "*.html"
+      ],
+      "extends": [
+        "plugin:@angular-eslint/template/recommended",
+        "plugin:@angular-eslint/template/accessibility"
+      ],
+      "rules": {}
+    }
+  ]
+}

frontend/angular.json

@@ -17,6 +17,7 @@
         "build": {
           "builder": "@angular-devkit/build-angular:application",
           "options": {
+            "statsJson": true,
             "outputPath": "dist/kafka-cost-control-frontend",
             "index": "src/index.html",
             "browser": "src/main.ts",
@@ -99,11 +100,23 @@
             ],
             "scripts": []
           }
+        },
+        "lint": {
+          "builder": "@angular-eslint/builder:lint",
+          "options": {
+            "lintFilePatterns": [
+              "src/**/*.ts",
+              "src/**/*.html"
+            ]
+          }
         }
       }
     }
   },
   "cli": {
-    "analytics": false
+    "analytics": false,
+    "schematicCollections": [
+      "@angular-eslint/schematics"
+    ]
   }
 }

frontend/graphql/schema.graphql

@@ -49,13 +49,15 @@ type PricingRuleEntity {
 "Query root"
 type Query {
   contextData: [ContextDataEntity!]!
+  currentUser: String!
   metricNames: [MetricNameEntity!]!
   pricingRules: [PricingRuleEntity!]!
 }
 
 enum EntityType {
   PRINCIPAL
   TOPIC
+  UNKNOWN
 }
 
 "Scalar for BigDecimal"
@@ -72,7 +74,7 @@ input ContextDataDeleteRequestInput {
 }
 
 input ContextDataSaveRequestInput {
-  context: [Entry_String_StringInput]!
+  context: [Entry_String_StringInput!]!
   entityType: EntityType!
   id: String
   regex: String!

frontend/nginx.conf

@@ -11,6 +11,20 @@ http{
 		error_log  /var/log/nginx.error.log;
 		root /usr/share/nginx/html;
 		charset utf-8;
+		gzip on;
+        gzip_types
+            text/plain
+            text/css
+            text/js
+            text/xml
+            text/javascript
+            application/javascript
+            application/x-javascript
+            application/json
+            application/xml
+            application/rss+xml
+            image/svg+xml/javascript;
+
 
 		add_header X-Frame-Options "DENY";