add support for authenticating with RADIUS (#6488)

hashicorp · Mar 28, 2019 · 3c917a9 · 3c917a9
1 parent 0e759be
commit 3c917a9
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 0 deletions.
diff --git a/ui/app/adapters/cluster.js b/ui/app/adapters/cluster.js
@@ -146,6 +146,7 @@ export default ApplicationAdapter.extend({
       userpass: `login/${encodeURIComponent(username)}`,
       ldap: `login/${encodeURIComponent(username)}`,
       okta: `login/${encodeURIComponent(username)}`,
+      radius: `login/${encodeURIComponent(username)}`,
       token: 'lookup-self',
     };
     const urlSuffix = authURLs[authBackend];

diff --git a/ui/app/helpers/supported-auth-backends.js b/ui/app/helpers/supported-auth-backends.js
@@ -49,6 +49,14 @@ const SUPPORTED_AUTH_BACKENDS = [
     displayNamePath: 'display_name',
     formAttributes: ['role', 'jwt'],
   },
+  {
+    type: 'radius',
+    typeDisplay: 'RADIUS',
+    description: 'Authenticate with your RADIUS username and password.',
+    tokenPath: 'client_token',
+    displayNamePath: 'metadata.username',
+    formAttributes: ['username', 'password'],
+  },
   {
     type: 'github',
     typeDisplay: 'GitHub',

diff --git a/ui/app/templates/partials/auth-form/radius.hbs b/ui/app/templates/partials/auth-form/radius.hbs
@@ -0,0 +1 @@
+{{partial "partials/userpass-form"}}
diff --git a/ui/tests/unit/adapters/cluster-test.js b/ui/tests/unit/adapters/cluster-test.js
@@ -96,6 +96,15 @@ module('Unit | Adapter | cluster', function(hooks) {
       'auth:userpass options OK'
     );
 
+    adapter.authenticate({ backend: 'radius', data });
+    assert.equal('/v1/auth/radius/login/username', url, 'auth:RADIUS url OK');
+    assert.equal('POST', method, 'auth:RADIUS method OK');
+    assert.deepEqual(
+      { data: { password: 'password' }, unauthenticated: true },
+      options,
+      'auth:RADIUS options OK'
+    );
+
     adapter.authenticate({ backend: 'LDAP', data });
     assert.equal('/v1/auth/ldap/login/username', url, 'ldap:userpass url OK');
     assert.equal('POST', method, 'ldap:userpass method OK');