"use client"; import { Credenza, CredenzaBody, CredenzaClose, CredenzaContent, CredenzaDescription, CredenzaFooter, CredenzaHeader, CredenzaTitle } from "@app/components/Credenza"; import { Tag, TagInput } from "@app/components/tags/tag-input"; import { Button } from "@app/components/ui/button"; import { Command, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList } from "@app/components/ui/command"; import { Form, FormControl, FormDescription, FormField, FormItem, FormLabel, FormMessage } from "@app/components/ui/form"; import { Input } from "@app/components/ui/input"; import { Popover, PopoverContent, PopoverTrigger } from "@app/components/ui/popover"; import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@app/components/ui/select"; import { Switch } from "@app/components/ui/switch"; import { useEnvContext } from "@app/hooks/useEnvContext"; import { toast } from "@app/hooks/useToast"; import { createApiClient, formatAxiosError } from "@app/lib/api"; import { cn } from "@app/lib/cn"; import { orgQueries } from "@app/lib/queries"; import { zodResolver } from "@hookform/resolvers/zod"; import { ListSitesResponse } from "@server/routers/site"; import { UserType } from "@server/types/UserTypes"; import { useQuery } from "@tanstack/react-query"; import { AxiosResponse } from "axios"; import { Check, ChevronsUpDown } from "lucide-react"; import { useTranslations } from "next-intl"; import { useEffect, useState } from "react"; import { useForm } from "react-hook-form"; import { z } from "zod"; import { HorizontalTabs, TabItem } from "@app/components/HorizontalTabs"; // import { InfoPopup } from "@app/components/ui/info-popup"; // Helper to validate port range string format const isValidPortRangeString = (val: string | undefined | null): boolean => { if (!val || val.trim() === "" || val.trim() === "*") { return true; } const parts = val.split(",").map((p) => p.trim()); for (const part of parts) { if (part === "") { return false; } if (part.includes("-")) { const [start, end] = part.split("-").map((p) => p.trim()); if (!start || !end) { return false; } const startPort = parseInt(start, 10); const endPort = parseInt(end, 10); if (isNaN(startPort) || isNaN(endPort)) { return false; } if ( startPort < 1 || startPort > 65535 || endPort < 1 || endPort > 65535 ) { return false; } if (startPort > endPort) { return false; } } else { const port = parseInt(part, 10); if (isNaN(port)) { return false; } if (port < 1 || port > 65535) { return false; } } } return true; }; // Port range string schema for client-side validation // Note: This schema is defined outside the component, so we'll use a function to get the message const getPortRangeValidationMessage = (t: (key: string) => string) => t("editInternalResourceDialogPortRangeValidationError"); const createPortRangeStringSchema = (t: (key: string) => string) => z .string() .optional() .nullable() .refine((val) => isValidPortRangeString(val), { message: getPortRangeValidationMessage(t) }); // Helper to determine the port mode from a port range string type PortMode = "all" | "blocked" | "custom"; const getPortModeFromString = (val: string | undefined | null): PortMode => { if (val === "*") return "all"; if (!val || val.trim() === "") return "blocked"; return "custom"; }; // Helper to get the port string for API from mode and custom value const getPortStringFromMode = ( mode: PortMode, customValue: string ): string | undefined => { if (mode === "all") return "*"; if (mode === "blocked") return ""; return customValue; }; type Site = ListSitesResponse["sites"][0]; type CreateInternalResourceDialogProps = { open: boolean; setOpen: (val: boolean) => void; orgId: string; sites: Site[]; onSuccess?: () => void; }; export default function CreateInternalResourceDialog({ open, setOpen, orgId, sites, onSuccess }: CreateInternalResourceDialogProps) { const t = useTranslations(); const api = createApiClient(useEnvContext()); const [isSubmitting, setIsSubmitting] = useState(false); const formSchema = z.object({ name: z .string() .min(1, t("createInternalResourceDialogNameRequired")) .max(255, t("createInternalResourceDialogNameMaxLength")), siteId: z .int() .positive(t("createInternalResourceDialogPleaseSelectSite")), // mode: z.enum(["host", "cidr", "port"]), mode: z.enum(["host", "cidr"]), // protocol: z.enum(["tcp", "udp"]).nullish(), // proxyPort: z.int().positive().min(1, t("createInternalResourceDialogProxyPortMin")).max(65535, t("createInternalResourceDialogProxyPortMax")).nullish(), destination: z.string().min(1, { message: t("createInternalResourceDialogDestinationRequired") }), // destinationPort: z.int().positive().min(1, t("createInternalResourceDialogDestinationPortMin")).max(65535, t("createInternalResourceDialogDestinationPortMax")).nullish(), alias: z.string().nullish(), tcpPortRangeString: createPortRangeStringSchema(t), udpPortRangeString: createPortRangeStringSchema(t), disableIcmp: z.boolean().optional(), roles: z .array( z.object({ id: z.string(), text: z.string() }) ) .optional(), users: z .array( z.object({ id: z.string(), text: z.string() }) ) .optional(), clients: z .array( z.object({ id: z.string(), text: z.string() }) ) .optional() }); // .refine( // (data) => { // if (data.mode === "port") { // return data.protocol !== undefined && data.protocol !== null; // } // return true; // }, // { // error: t("createInternalResourceDialogProtocol") + " is required for port mode", // path: ["protocol"] // } // ) // .refine( // (data) => { // if (data.mode === "port") { // return data.proxyPort !== undefined && data.proxyPort !== null; // } // return true; // }, // { // error: t("createInternalResourceDialogSitePort") + " is required for port mode", // path: ["proxyPort"] // } // ) // .refine( // (data) => { // if (data.mode === "port") { // return data.destinationPort !== undefined && data.destinationPort !== null; // } // return true; // }, // { // error: t("targetPort") + " is required for port mode", // path: ["destinationPort"] // } // ); type FormData = z.infer; const { data: rolesResponse = [] } = useQuery(orgQueries.roles({ orgId })); const { data: usersResponse = [] } = useQuery(orgQueries.users({ orgId })); const { data: clientsResponse = [] } = useQuery( orgQueries.clients({ orgId, filters: { filter: "machine" } }) ); const allRoles = rolesResponse .map((role) => ({ id: role.roleId.toString(), text: role.name })) .filter((role) => role.text !== "Admin"); const allUsers = usersResponse.map((user) => ({ id: user.id.toString(), text: `${user.email || user.username}${user.type !== UserType.Internal ? ` (${user.idpName})` : ""}` })); const allClients = clientsResponse .filter((client) => !client.userId) .map((client) => ({ id: client.clientId.toString(), text: client.name })); const hasMachineClients = allClients.length > 0; const [activeRolesTagIndex, setActiveRolesTagIndex] = useState< number | null >(null); const [activeUsersTagIndex, setActiveUsersTagIndex] = useState< number | null >(null); const [activeClientsTagIndex, setActiveClientsTagIndex] = useState< number | null >(null); // Port restriction UI state - default to "all" (*) for new resources const [tcpPortMode, setTcpPortMode] = useState("all"); const [udpPortMode, setUdpPortMode] = useState("all"); const [tcpCustomPorts, setTcpCustomPorts] = useState(""); const [udpCustomPorts, setUdpCustomPorts] = useState(""); const availableSites = sites.filter( (site) => site.type === "newt" && site.subnet ); const form = useForm({ resolver: zodResolver(formSchema), defaultValues: { name: "", siteId: availableSites[0]?.siteId || 0, mode: "host", // protocol: "tcp", // proxyPort: undefined, destination: "", // destinationPort: undefined, alias: "", tcpPortRangeString: "*", udpPortRangeString: "*", disableIcmp: false, roles: [], users: [], clients: [] } }); const mode = form.watch("mode"); // Update form values when port mode or custom ports change useEffect(() => { const tcpValue = getPortStringFromMode(tcpPortMode, tcpCustomPorts); form.setValue("tcpPortRangeString", tcpValue); }, [tcpPortMode, tcpCustomPorts, form]); useEffect(() => { const udpValue = getPortStringFromMode(udpPortMode, udpCustomPorts); form.setValue("udpPortRangeString", udpValue); }, [udpPortMode, udpCustomPorts, form]); // Helper function to check if destination contains letters (hostname vs IP) const isHostname = (destination: string): boolean => { return /[a-zA-Z]/.test(destination); }; // Helper function to clean resource name for FQDN format const cleanForFQDN = (name: string): string => { return name .toLowerCase() .replace(/[^a-z0-9.-]/g, "-") // Replace invalid chars with hyphens .replace(/[-]+/g, "-") // Replace multiple hyphens with single hyphen .replace(/^-|-$/g, "") // Remove leading/trailing hyphens .replace(/^\.|\.$/g, ""); // Remove leading/trailing dots }; useEffect(() => { if (open) { form.reset({ name: "", siteId: availableSites[0]?.siteId || 0, mode: "host", // protocol: "tcp", // proxyPort: undefined, destination: "", // destinationPort: undefined, alias: "", tcpPortRangeString: "*", udpPortRangeString: "*", disableIcmp: false, roles: [], users: [], clients: [] }); // Reset port mode state setTcpPortMode("all"); setUdpPortMode("all"); setTcpCustomPorts(""); setUdpCustomPorts(""); } }, [open]); const handleSubmit = async (data: FormData) => { setIsSubmitting(true); try { // Validate: if mode is "host" and destination is a hostname (contains letters), // an alias is required if (data.mode === "host" && isHostname(data.destination)) { const currentAlias = data.alias?.trim() || ""; if (!currentAlias) { // Prefill alias based on destination let aliasValue = data.destination; if (data.destination.toLowerCase() === "localhost") { // Use resource name cleaned for FQDN with .internal suffix const cleanedName = cleanForFQDN(data.name); aliasValue = `${cleanedName}.internal`; } // Update the form with the prefilled alias form.setValue("alias", aliasValue); data.alias = aliasValue; } } const response = await api.put>( `/org/${orgId}/site-resource`, { name: data.name, siteId: data.siteId, mode: data.mode, // protocol: data.protocol, // proxyPort: data.mode === "port" ? data.proxyPort : undefined, // destinationPort: data.mode === "port" ? data.destinationPort : undefined, destination: data.destination, enabled: true, alias: data.alias && typeof data.alias === "string" && data.alias.trim() ? data.alias : undefined, tcpPortRangeString: data.tcpPortRangeString, udpPortRangeString: data.udpPortRangeString, disableIcmp: data.disableIcmp ?? false, roleIds: data.roles ? data.roles.map((r) => parseInt(r.id)) : [], userIds: data.users ? data.users.map((u) => u.id) : [], clientIds: data.clients ? data.clients.map((c) => parseInt(c.id)) : [] } ); const siteResourceId = response.data.data.siteResourceId; // // Set roles and users if provided // if (data.roles && data.roles.length > 0) { // await api.post(`/site-resource/${siteResourceId}/roles`, { // roleIds: data.roles.map((r) => parseInt(r.id)) // }); // } // if (data.users && data.users.length > 0) { // await api.post(`/site-resource/${siteResourceId}/users`, { // userIds: data.users.map((u) => u.id) // }); // } // if (data.clients && data.clients.length > 0) { // await api.post(`/site-resource/${siteResourceId}/clients`, { // clientIds: data.clients.map((c) => parseInt(c.id)) // }); // } toast({ title: t("createInternalResourceDialogSuccess"), description: t( "createInternalResourceDialogInternalResourceCreatedSuccessfully" ), variant: "default" }); setOpen(false); onSuccess?.(); } catch (error) { console.error("Error creating internal resource:", error); toast({ title: t("createInternalResourceDialogError"), description: formatAxiosError( error, t( "createInternalResourceDialogFailedToCreateInternalResource" ) ), variant: "destructive" }); } finally { setIsSubmitting(false); } }; return ( {t("createInternalResourceDialogCreateClientResource")} {t( "createInternalResourceDialogCreateClientResourceDescription" )}
{/* Name and Site - Side by Side */}
( {t( "createInternalResourceDialogName" )} )} /> ( {t("site")} {t( "noSitesFound" )} {availableSites.map( (site) => ( { field.onChange( site.siteId ); }} > { site.name } ) )} )} />
{/* Tabs for Network Settings and Access Control */} {/* Network Settings Tab */}
{t( "editInternalResourceDialogDestinationDescription" )}
{/* Mode - Smaller select */}
( {t( "createInternalResourceDialogMode" )} )} />
{/* Destination - Larger input */}
( {t( "createInternalResourceDialogDestination" )} )} />
{/* Alias - Equally sized input (if allowed) */} {mode !== "cidr" && (
( {t( "createInternalResourceDialogAlias" )} )} />
)}
{/* Ports and Restrictions */}
{/* TCP Ports */}
{t( "editInternalResourceDialogPortRestrictionsDescription" )}
{t( "editInternalResourceDialogTcp" )}
(
{/**/} {tcpPortMode === "custom" ? ( setTcpCustomPorts( e .target .value ) } /> ) : ( )}
)} />
{/* UDP Ports */}
{t( "editInternalResourceDialogUdp" )}
(
{/**/} {udpPortMode === "custom" ? ( setUdpCustomPorts( e .target .value ) } /> ) : ( )}
)} />
{/* ICMP Toggle */}
{t( "editInternalResourceDialogIcmp" )}
(
field.onChange( !checked ) } /> {field.value ? t( "blocked" ) : t( "allowed" )}
)} />
{/* Access Control Tab */}
{t( "editInternalResourceDialogAccessControlDescription" )}
{/* Roles */} ( {t("roles")} { form.setValue( "roles", newRoles as [ Tag, ...Tag[] ] ); }} enableAutocomplete={ true } autocompleteOptions={ allRoles } allowDuplicates={ false } restrictTagsToAutocompleteOptions={ true } sortTags={true} /> )} /> {/* Users */} ( {t("users")} { form.setValue( "users", newUsers as [ Tag, ...Tag[] ] ); }} enableAutocomplete={ true } autocompleteOptions={ allUsers } allowDuplicates={ false } restrictTagsToAutocompleteOptions={ true } sortTags={true} /> )} /> {/* Clients (Machines) */} {hasMachineClients && ( ( {t( "machineClients" )} { form.setValue( "clients", newClients as [ Tag, ...Tag[] ] ); }} enableAutocomplete={ true } autocompleteOptions={ allClients } allowDuplicates={ false } restrictTagsToAutocompleteOptions={ true } sortTags={true} /> )} /> )}
); }