Public Access
jaap-janandClaude Opus 5
16e0051e89
`Tag` has been a full item kind for three commits — a table, a migration, a codec, a merge, a cipher — and `HostSecret.TagIds` has merged per tag so two people tagging one host both keep theirs. Nothing drew a chip. The tags a client could store were ones nothing here could see. Chips on host rows, both heads, from names resolved through the tag list rather than ids: a tag that does not resolve is left out rather than drawn, because it means the tag was deleted elsewhere or belongs to a vault this session cannot read, and a host with one chip fewer is the honest answer where a host wearing a GUID is not. The id stays on the host, so the chip comes back if the tag does. The picker is chips that toggle, matching the chips on the row behind it. A list of names to tick would make the user match an entry to a chip they can see two inches away. The box under it creates a tag and puts it on straight away, because that is when a tag is usually wanted — while tagging a host and finding it does not exist yet. Unlike every other field in that editor it writes to the keychain immediately, since a host can only name an id that exists; cancelling therefore leaves the tag behind, which is honest rather than hidden. A name that already exists is used rather than repeated: two tags called "staging" are storable and must stay storable, because two people creating one offline is how it happens, but typing it into a box beside a chip of the same name is a slip. Renaming and deleting needed a home, or the picker fills with names nobody uses and never empties. That home is a TAGS category on the keychain screen, where every other item kind is managed — and renaming is the whole reason a tag is an item rather than a string repeated inside twenty payloads: it is one write, and no host is touched. The delete confirmation counts the hosts wearing it, which is the difference between a tidy-up and losing a filter somebody relies on. The desktop host editor now scrolls, and that is not a tidy-up. A picker's height is a chip per tag in the keychain, wrapped, so somebody with fifteen tags has an editor half again as tall as somebody with three; no fixed height holds that, and trimming other fields to buy room only moves the failure to whoever has sixteen. The layout suite caught it the moment its seeder grew tags — which is why the seeder now creates ten rather than three, enough to drive the pane onto its cap so the capped shape is what gets measured rather than one no real keychain produces. The cost is named where it is paid: the harness skips anything inside a ScrollViewer, so from here it certifies that pane fits the column rather than that every field in it does. Two smaller things fell out. Five buttons overflowed the keychain header by a few pixels, so GENERATE lost the word KEY — its tooltip carries what the word did. And TotalItemCount had been counting keys and credentials while ALL showed four kinds; it counts all five now, because a number under a chip that disagrees with the rows it opens is worse than no number. An adversarial review of this change found two defects it had introduced, both green against the full suite. NewTag filed into the "new items go to" picker while the tag list only ever holds the active vault's — so with a team vault selected a tag would be created, queued for push, reported as added, and then invisible, with no row, no count, no picker entry and nothing able to rename or delete it, because there is no active-vault switcher to go and find it with. The comment on the host editor's own create path states that exact rule; this was the one place that broke it, and NewObjectStore, whose list is likewise active-vault-only, already ignored the picker. And the tag editor was the only one of five that did not disarm a pending deletion when it opened, so arming a key's deletion and then pressing + TAG left a live DELETE for an item the user was no longer looking at, directly above the boxes they were typing into. Both are fixed, both have a test, and the first was checked against the broken version before being kept. The same review caught a doc comment that had been inserted between SnippetRowViewModel's summary and its declaration, silently taking it over. Verified by the whole suite on a clean build: 1413 tests over nineteen projects, none failing. Both heads build. The rectangles the layout suite cannot reach are phase 9 of docs/manual-checks.md. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
474 lines
28 KiB
XML
474 lines
28 KiB
XML
<UserControl xmlns="https://github.com/avaloniaui"
|
|
xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
|
|
xmlns:vm="using:DodoSSH.Client.Shell.ViewModels"
|
|
xmlns:views="using:DodoSSH.Client.App.Views"
|
|
xmlns:ssh="using:DodoSSH.Client.Ssh"
|
|
x:Class="DodoSSH.Client.App.Views.VaultScreen"
|
|
x:DataType="vm:VaultViewModel">
|
|
|
|
<!--
|
|
The keychain: the SSH keys and the stored passwords. Things a person creates and edits.
|
|
|
|
Three columns, as the design has them — a category rail, one table, and a detail pane. The table has one
|
|
shape for every kind, which is what makes the ALL category possible and is why the row projection
|
|
exists; see VaultItemRowViewModel.
|
|
|
|
HOST KEYS was a fourth category here and is now a screen of its own; see KnownHostsScreen. It never fit:
|
|
the two categories left are things somebody made on purpose, and a pin is a decision recorded at the
|
|
moment of connecting — nobody goes looking for one in a list of credentials. It also has a workflow the
|
|
shared table could not serve, which is comparing an untruncated fingerprint against a published one.
|
|
|
|
Two of the design's five categories are still not here. IDENTITIES and CERTIFICATES have no item type
|
|
behind them, so listing them would be two headings that could never have anything under them. Recorded
|
|
in docs/design-import-gaps.md.
|
|
|
|
The SCOPES rail below the categories is the keychain list. Since M3 it genuinely has more than one entry
|
|
when somebody is in a team — but it is still not a selector, because every table on this screen already
|
|
spans every keychain this session holds a key for and each row names its own. What it carries instead is
|
|
the one keychain question with an answer: where a new item is filed.
|
|
-->
|
|
|
|
<Grid ColumnDefinitions="176,*,244">
|
|
|
|
<!-- Categories and scopes -->
|
|
<Border Grid.Column="0" Background="{StaticResource Sidebar}"
|
|
BorderBrush="{StaticResource Border}" BorderThickness="0,0,1,0">
|
|
<ScrollViewer>
|
|
<StackPanel Margin="0,12">
|
|
|
|
<TextBlock Classes="label" Text="KEYCHAIN" Margin="14,0,14,8" />
|
|
|
|
<Button Classes="flat cat" Command="{Binding ShowSectionCommand}"
|
|
CommandParameter="{x:Static vm:VaultSection.All}"
|
|
Classes.active="{Binding ShowsAll}">
|
|
<Grid ColumnDefinitions="Auto,*,Auto">
|
|
<Border Grid.Column="0" Classes="rowmark catmark" />
|
|
<TextBlock Grid.Column="1" Text="ALL" Margin="12,0,0,0" />
|
|
<TextBlock Grid.Column="2" Text="{Binding TotalItemCount}"
|
|
Foreground="{StaticResource TextFaint}" />
|
|
</Grid>
|
|
</Button>
|
|
|
|
<Button Classes="flat cat" Command="{Binding ShowSectionCommand}"
|
|
CommandParameter="{x:Static vm:VaultSection.Keys}"
|
|
Classes.active="{Binding ShowsKeys}">
|
|
<Grid ColumnDefinitions="Auto,*,Auto">
|
|
<Border Grid.Column="0" Classes="rowmark catmark" />
|
|
<TextBlock Grid.Column="1" Text="SSH KEYS" Margin="12,0,0,0" />
|
|
<TextBlock Grid.Column="2" Text="{Binding Keys.Count}"
|
|
Foreground="{StaticResource TextFaint}" />
|
|
</Grid>
|
|
</Button>
|
|
|
|
<Button Classes="flat cat" Command="{Binding ShowSectionCommand}"
|
|
CommandParameter="{x:Static vm:VaultSection.Credentials}"
|
|
Classes.active="{Binding ShowsCredentials}">
|
|
<Grid ColumnDefinitions="Auto,*,Auto">
|
|
<Border Grid.Column="0" Classes="rowmark catmark" />
|
|
<TextBlock Grid.Column="1" Text="PASSWORDS" Margin="12,0,0,0" />
|
|
<TextBlock Grid.Column="2" Text="{Binding Credentials.Count}"
|
|
Foreground="{StaticResource TextFaint}" />
|
|
</Grid>
|
|
</Button>
|
|
|
|
<!--
|
|
Buckets. A category here rather than a screen of its own, unlike the approved host keys: a bucket
|
|
is something somebody creates, edits and keeps a secret for, which is what the other two
|
|
categories are. A pin is a decision recorded at connect time and is not.
|
|
-->
|
|
<!--
|
|
Tags. The odd category: it is the only one holding nothing secret — a tag is a name. It is here
|
|
because the reason a tag is an item at all is that renaming it should be one write instead of
|
|
twenty, and a rename needs somewhere to happen; so does deleting, or the host editor's picker
|
|
fills with names nobody uses and never empties.
|
|
-->
|
|
<Button Classes="flat cat" Command="{Binding ShowSectionCommand}"
|
|
CommandParameter="{x:Static vm:VaultSection.Tags}"
|
|
Classes.active="{Binding ShowsTags}">
|
|
<Grid ColumnDefinitions="Auto,*,Auto">
|
|
<Border Grid.Column="0" Classes="rowmark catmark" />
|
|
<TextBlock Grid.Column="1" Text="TAGS" Margin="12,0,0,0" />
|
|
<TextBlock Grid.Column="2" Text="{Binding Tags.Count}"
|
|
Foreground="{StaticResource TextFaint}" />
|
|
</Grid>
|
|
</Button>
|
|
|
|
<Button Classes="flat cat" Command="{Binding ShowSectionCommand}"
|
|
CommandParameter="{x:Static vm:VaultSection.Buckets}"
|
|
Classes.active="{Binding ShowsBuckets}">
|
|
<Grid ColumnDefinitions="Auto,*,Auto">
|
|
<Border Grid.Column="0" Classes="rowmark catmark" />
|
|
<TextBlock Grid.Column="1" Text="BUCKETS" Margin="12,0,0,0" />
|
|
<TextBlock Grid.Column="2" Text="{Binding ObjectStores.Count}"
|
|
Foreground="{StaticResource TextFaint}" />
|
|
</Grid>
|
|
</Button>
|
|
|
|
<Border Height="1" Background="{StaticResource BorderSubtle}" Margin="14,10" />
|
|
|
|
<TextBlock Classes="label" Text="SCOPES" Margin="14,0,14,8" />
|
|
|
|
<!--
|
|
Still not a selector. Every list on this screen now spans every vault this session holds a key
|
|
for, and each row names its own vault — so there is nothing to switch to. What the picker below
|
|
chooses is where a *new* item is filed, which is a different question and the only one that has
|
|
an answer worth asking for.
|
|
-->
|
|
<StackPanel Orientation="Horizontal" Margin="14,2" Spacing="7">
|
|
<Ellipse Width="6" Height="6" Fill="{StaticResource Accent}" VerticalAlignment="Center" />
|
|
<TextBlock Classes="mono" Text="{Binding HostsHeading}" FontSize="10"
|
|
Foreground="{StaticResource Text}" VerticalAlignment="Center" />
|
|
</StackPanel>
|
|
|
|
<!--
|
|
Hidden at one vault, which is where most people stay. A control offering a single option is a
|
|
question with no answer.
|
|
-->
|
|
<StackPanel Margin="14,10,14,0" Spacing="4" IsVisible="{Binding HasVaultChoice}">
|
|
<TextBlock Classes="label" Text="NEW ITEMS GO TO" />
|
|
<ComboBox ItemsSource="{Binding TargetVaults}"
|
|
SelectedItem="{Binding SelectedTargetVault}"
|
|
HorizontalAlignment="Stretch">
|
|
<ComboBox.ItemTemplate>
|
|
<DataTemplate x:DataType="vm:VaultChoiceViewModel">
|
|
<TextBlock Text="{Binding Display}" FontSize="11" />
|
|
</DataTemplate>
|
|
</ComboBox.ItemTemplate>
|
|
</ComboBox>
|
|
<TextBlock Classes="hint" FontSize="9.5" TextWrapping="Wrap"
|
|
Text="An item filed into a team's vault is readable by everyone holding that vault's key. It defaults to your own and never moves on its own." />
|
|
</StackPanel>
|
|
|
|
<!--
|
|
Items that would not decrypt. Shown here rather than only in the status line because this is the
|
|
screen the number is about, and because a non-zero count after a rekey is the signal that new
|
|
grants are needed rather than a transient.
|
|
-->
|
|
<Border Classes="chip warn" Margin="14,12,14,0" HorizontalAlignment="Left"
|
|
IsVisible="{Binding HasUnreadableItems}">
|
|
<TextBlock Text="{Binding UnreadableSummary}" />
|
|
</Border>
|
|
|
|
</StackPanel>
|
|
</ScrollViewer>
|
|
</Border>
|
|
|
|
<!-- The table -->
|
|
<Grid Grid.Column="1" RowDefinitions="Auto,Auto,*">
|
|
|
|
<Border Grid.Row="0" Padding="14,0" Height="44"
|
|
BorderBrush="{StaticResource Border}" BorderThickness="0,0,0,1">
|
|
<Grid ColumnDefinitions="Auto,Auto,*,Auto" VerticalAlignment="Center">
|
|
<TextBlock Grid.Column="0" Classes="mono" Text="{Binding SectionTitle}" FontSize="11"
|
|
FontWeight="SemiBold" LetterSpacing="1" Foreground="{StaticResource Text}"
|
|
VerticalAlignment="Center" />
|
|
<TextBlock Grid.Column="1" Classes="mono" Text="{Binding SectionSummary}" FontSize="9.5"
|
|
Foreground="{StaticResource TextFaint}" Margin="10,0,0,0" VerticalAlignment="Center" />
|
|
<StackPanel Grid.Column="3" Orientation="Horizontal" Spacing="6">
|
|
<!--
|
|
Always offered. Every category left on this screen is one things can be added to — the one
|
|
that was not, HOST KEYS, is now its own screen, and a pin still cannot be typed in there
|
|
either. See KnownHostsScreen.
|
|
|
|
GENERATE lost the word KEY when a fifth button arrived: five of these overflow an 1016-wide
|
|
window's header by a few pixels, and the layout suite catches it. Its tooltip carries what the
|
|
word did, and the two key buttons are adjacent, so which one generates is not in doubt.
|
|
-->
|
|
<Button Classes="ghost" Content="GENERATE" Command="{Binding NewGeneratedKeyCommand}"
|
|
ToolTip.Tip="Makes a new key pair here, so the private half never becomes a file on this disk." />
|
|
<Button Classes="ghost" Content="+ SSH KEY" Command="{Binding NewKeyCommand}"
|
|
ToolTip.Tip="Pastes in a key you already have." />
|
|
<Button Classes="ghost" Content="+ PASSWORD" Command="{Binding NewCredentialCommand}" />
|
|
<Button Classes="ghost" Content="+ TAG" Command="{Binding NewTagCommand}"
|
|
ToolTip.Tip="A name to put on hosts. Usually made from a host's editor instead; this is for setting a scheme up before there is anything to put it on." />
|
|
<Button Classes="accent" Content="+ BUCKET" Command="{Binding NewObjectStoreCommand}"
|
|
ToolTip.Tip="An S3-compatible bucket, to browse beside a host on the Files screen." />
|
|
</StackPanel>
|
|
</Grid>
|
|
</Border>
|
|
|
|
<!--
|
|
The design's columns are NAME / TYPE / FINGERPRINT / SCOPE / ACCESS / LAST. Three of those six have
|
|
nothing behind them: there is one scope, no roles, and no item carries a last-used or modified time —
|
|
VaultItem is (id, secret, version, three sync flags) and nothing else. What replaces them is the one
|
|
thing this build does know and the design had no column for: whether a change is still sitting in
|
|
this machine's outbox.
|
|
-->
|
|
<Grid Grid.Row="1" ColumnDefinitions="2,1.3*,74,*,88" Margin="0,6,14,6"
|
|
IsVisible="{Binding HasVaultItems}">
|
|
<TextBlock Grid.Column="1" Classes="label" Text="NAME" FontSize="8.5" LetterSpacing="1"
|
|
Margin="12,0,8,0" />
|
|
<TextBlock Grid.Column="2" Classes="label" Text="TYPE" FontSize="8.5" LetterSpacing="1" />
|
|
<TextBlock Grid.Column="3" Classes="label" Text="DETAIL" FontSize="8.5" LetterSpacing="1" />
|
|
<TextBlock Grid.Column="4" Classes="label" Text="STATE" FontSize="8.5" LetterSpacing="1" />
|
|
</Grid>
|
|
|
|
<ListBox Grid.Row="2" x:Name="ItemList" Focusable="True"
|
|
ItemsSource="{Binding VaultItems}"
|
|
SelectedItem="{Binding SelectedVaultItem}">
|
|
<ListBox.ItemTemplate>
|
|
<DataTemplate x:DataType="vm:VaultItemRowViewModel">
|
|
<Grid ColumnDefinitions="2,1.3*,74,*,88" Margin="0,7,14,7">
|
|
<Border Grid.Column="0" Classes="rowmark" />
|
|
<TextBlock Grid.Column="1" Classes="mono" Text="{Binding Name}" FontSize="11"
|
|
FontWeight="Medium" Foreground="{StaticResource Text}" Margin="12,0,8,0"
|
|
TextTrimming="CharacterEllipsis" />
|
|
<TextBlock Grid.Column="2" Classes="mono" Text="{Binding Type}" FontSize="9"
|
|
Foreground="{StaticResource TextDim}" VerticalAlignment="Center" />
|
|
<TextBlock Grid.Column="3" Classes="mono" Text="{Binding Detail}" FontSize="9.5"
|
|
Foreground="{StaticResource TextFaint}" Margin="0,0,8,0"
|
|
TextTrimming="CharacterEllipsis" VerticalAlignment="Center" />
|
|
<Border Grid.Column="4" Classes="chip warn" HorizontalAlignment="Left"
|
|
VerticalAlignment="Center" IsVisible="{Binding HasBadge}">
|
|
<TextBlock Text="{Binding Badge}" FontSize="8.5" />
|
|
</Border>
|
|
</Grid>
|
|
</DataTemplate>
|
|
</ListBox.ItemTemplate>
|
|
</ListBox>
|
|
|
|
<!--
|
|
The empty state says which category is empty and what to do about it, rather than showing an empty
|
|
grid that reads as a list still loading.
|
|
-->
|
|
<TextBlock Grid.Row="2" Classes="hint" Text="{Binding EmptySectionMessage}" FontSize="11"
|
|
Margin="24" HorizontalAlignment="Center" VerticalAlignment="Center"
|
|
TextAlignment="Center" MaxWidth="320"
|
|
IsVisible="{Binding !HasVaultItems}" />
|
|
|
|
</Grid>
|
|
|
|
<!-- The detail pane, and the editors -->
|
|
<Border Grid.Column="2" Background="{StaticResource Sidebar}"
|
|
BorderBrush="{StaticResource Border}" BorderThickness="1,0,0,0">
|
|
<ScrollViewer>
|
|
<StackPanel Margin="14,16">
|
|
|
|
<!-- Nothing selected. -->
|
|
<TextBlock Classes="hint" FontSize="11"
|
|
Text="Choose something on the left to see what is known about it."
|
|
IsVisible="{Binding !HasSelectedVaultItem}" />
|
|
|
|
<StackPanel Spacing="6" IsVisible="{Binding HasSelectedVaultItem}">
|
|
<TextBlock Classes="mono" Text="{Binding SelectedVaultItem.Name}" FontSize="12"
|
|
FontWeight="SemiBold" Foreground="{StaticResource Text}" TextWrapping="Wrap" />
|
|
<StackPanel Orientation="Horizontal" Spacing="6">
|
|
<Border Classes="chip">
|
|
<TextBlock Text="{Binding SelectedVaultItem.Type}" />
|
|
</Border>
|
|
<Border Classes="chip accent">
|
|
<TextBlock Text="{Binding HostsHeading}" />
|
|
</Border>
|
|
</StackPanel>
|
|
|
|
<TextBlock Classes="label" Text="{Binding SelectedDetailHeading}" Margin="0,12,0,4" />
|
|
<Border Background="{StaticResource Raised}" BorderBrush="{StaticResource Border}"
|
|
BorderThickness="1" CornerRadius="4" Padding="8">
|
|
<SelectableTextBlock Classes="mono" Text="{Binding SelectedVaultItem.Detail}"
|
|
FontSize="9.5" Foreground="{StaticResource TextDim}"
|
|
TextWrapping="Wrap" />
|
|
</Border>
|
|
|
|
<!--
|
|
What the design puts here — who added it, when, who it is shared with, and a TEST CONNECT
|
|
button — has nothing behind it. Items carry no author, no timestamps and no sharing, and
|
|
nothing can exercise a credential without a host to exercise it against. Rather than five
|
|
empty rows, this says what is missing in one line.
|
|
-->
|
|
<TextBlock Classes="hint" FontSize="9.5" Margin="0,12,0,0"
|
|
Text="Keychain items record no author, no timestamps and no sharing yet, so there is nothing more to show here." />
|
|
|
|
<StackPanel Orientation="Horizontal" Spacing="6" Margin="0,14,0,0"
|
|
IsVisible="{Binding ShowsItemActions}">
|
|
<Button Classes="ghost" Content="EDIT" Command="{Binding EditSelectedItemCommand}" />
|
|
<Button Classes="danger" Content="DELETE" Command="{Binding DeleteSelectedItemCommand}" />
|
|
</StackPanel>
|
|
|
|
<!--
|
|
The public half only, and there is no button for the other one. Installing a key means pasting
|
|
this line into a host's authorized_keys; a private key on the clipboard is a private key in
|
|
every application on the machine.
|
|
-->
|
|
<Button Classes="ghost" Content="COPY PUBLIC KEY" Margin="0,6,0,0"
|
|
HorizontalAlignment="Left"
|
|
IsVisible="{Binding SelectedItemIsKey}"
|
|
Command="{Binding CopyPublicKeyCommand}"
|
|
ToolTip.Tip="Copies the authorized_keys line for this key, which is what a host needs to let it in." />
|
|
|
|
<!--
|
|
The question DELETE asks, in the place those two buttons were. Here rather than over the
|
|
screen, because this pane is where the item being deleted is described: the name, the kind and
|
|
what is stored are all still on screen above it, which is most of what somebody checks before
|
|
answering. See ConfirmDeleteCard.
|
|
-->
|
|
<Border Background="{StaticResource DangerWash}" BorderBrush="{StaticResource DangerSoft}"
|
|
BorderThickness="1" CornerRadius="4" Padding="10" Margin="0,14,0,0"
|
|
IsVisible="{Binding IsConfirmingDeletion}">
|
|
<views:ConfirmDeleteCard />
|
|
</Border>
|
|
|
|
</StackPanel>
|
|
|
|
<!--
|
|
Making a key, as opposed to pasting one in. A step of its own and a short one: an algorithm, a
|
|
comment, and a button. What it produces lands in the editor below, unsaved — so there is still
|
|
exactly one thing on this screen that writes a key, and it is still SAVE.
|
|
-->
|
|
<StackPanel Spacing="6" IsVisible="{Binding IsGeneratingKey}">
|
|
<TextBlock Classes="label" Text="NEW SSH KEY" Margin="0,0,0,4" />
|
|
|
|
<StackPanel Orientation="Horizontal" Spacing="6">
|
|
<!--
|
|
Buttons and a command rather than a selector bound to the algorithm, which is the same
|
|
choice the category rail makes and for the same reason: a selector moves its own highlight
|
|
before anything can refuse, so it can end up showing a choice nobody made.
|
|
-->
|
|
<Button Classes="flat choice" Content="ED25519"
|
|
Classes.active="{Binding GeneratesEd25519}"
|
|
Command="{Binding ChooseKeyAlgorithmCommand}"
|
|
CommandParameter="{x:Static ssh:SshKeyAlgorithm.Ed25519}"
|
|
ToolTip.Tip="What every current OpenSSH prefers. Small, fast, and generated instantly." />
|
|
<Button Classes="flat choice" Content="RSA 4096"
|
|
Classes.active="{Binding GeneratesRsa}"
|
|
Command="{Binding ChooseKeyAlgorithmCommand}"
|
|
CommandParameter="{x:Static ssh:SshKeyAlgorithm.Rsa4096}"
|
|
ToolTip.Tip="For servers too old to accept Ed25519. Larger, and a few seconds to generate." />
|
|
</StackPanel>
|
|
|
|
<TextBox Text="{Binding GenerateComment}" PlaceholderText="name — also the key's comment" />
|
|
<TextBlock Classes="hint" FontSize="9.5" TextWrapping="Wrap"
|
|
Text="This is what the key is called here and what is written into it, so the line on a host says where it came from." />
|
|
|
|
<!--
|
|
Said plainly rather than left to be discovered. Writing an encrypted openssh-key-v1 file needs
|
|
bcrypt_pbkdf, which .NET has no primitive for — and the defence it buys is one this product
|
|
already makes: a passphrase protects a key file on a disk, and this key is never on one.
|
|
-->
|
|
<TextBlock Classes="hint" FontSize="9.5" TextWrapping="Wrap" Margin="0,4,0,0"
|
|
Text="The key file itself has no passphrase. Your keychain passphrase is what protects it, and it never reaches the server in a form it can read." />
|
|
|
|
<StackPanel Orientation="Horizontal" Spacing="6" Margin="0,8,0,0">
|
|
<Button Classes="accent" Content="GENERATE" Command="{Binding GenerateKeyCommand}"
|
|
IsEnabled="{Binding !IsBusy}" />
|
|
<Button Classes="ghost" Content="CANCEL" Command="{Binding CancelGenerateKeyCommand}" />
|
|
</StackPanel>
|
|
</StackPanel>
|
|
|
|
<!-- The key editor. -->
|
|
<StackPanel Spacing="6" IsVisible="{Binding IsEditingKey}">
|
|
<TextBlock Classes="label" Text="SSH KEY" Margin="0,0,0,4" />
|
|
<TextBox Text="{Binding KeyEditorLabel}" PlaceholderText="name" />
|
|
<!--
|
|
Not a password box. The armour has to be visible to be pasted and checked — a masked
|
|
multi-line box makes "did the whole key arrive?" unanswerable — and the mistake this actually
|
|
prevents is pasting the .pub file, which SshKeySecret.TryValidate rejects by name.
|
|
-->
|
|
<TextBox Text="{Binding KeyEditorPrivateKey}"
|
|
PlaceholderText="-----BEGIN OPENSSH PRIVATE KEY-----"
|
|
AcceptsReturn="True" Height="96" TextWrapping="NoWrap"
|
|
FontFamily="{StaticResource MonoFont}" FontSize="10.5" />
|
|
<TextBox Text="{Binding KeyEditorPassphrase}"
|
|
PlaceholderText="passphrase, if the key has one" PasswordChar="•" />
|
|
<TextBox Text="{Binding KeyEditorPublicKey}" PlaceholderText="public half (optional)" />
|
|
<TextBox Text="{Binding KeyEditorNotes}" PlaceholderText="notes" AcceptsReturn="True"
|
|
Height="44" TextWrapping="Wrap" />
|
|
<TextBlock Classes="hint" FontSize="9.5"
|
|
Text="The key and its passphrase are encrypted here and never reach the server in a form it can read. Storing both together is the point of a keychain: on a disk the passphrase protects the key, and in here your keychain passphrase protects both." />
|
|
<StackPanel Orientation="Horizontal" Spacing="6">
|
|
<Button Classes="accent" Content="SAVE" Command="{Binding SaveKeyCommand}" />
|
|
<Button Classes="ghost" Content="CANCEL" Command="{Binding CancelKeyEditCommand}" />
|
|
</StackPanel>
|
|
</StackPanel>
|
|
|
|
<!-- The password editor. -->
|
|
<StackPanel Spacing="6" IsVisible="{Binding IsEditingCredential}">
|
|
<TextBlock Classes="label" Text="PASSWORD" Margin="0,0,0,4" />
|
|
<TextBox Text="{Binding CredentialEditorLabel}" PlaceholderText="name" />
|
|
<!--
|
|
Optional, and the reason a credential is worth being its own item rather than two more fields on
|
|
a host: one account on twenty machines is described once and rotated once. Left blank, each host
|
|
supplies its own username and only the password is shared.
|
|
-->
|
|
<TextBox Text="{Binding CredentialEditorUsername}"
|
|
PlaceholderText="username (blank: use each host's own)" />
|
|
<!--
|
|
Masked, unlike the private key box, and the difference is not inconsistency. A key's armour has
|
|
to be visible to be checked for truncation after a paste; a password is short, usually typed,
|
|
and shoulder-surfing is the likelier problem.
|
|
-->
|
|
<TextBox Text="{Binding CredentialEditorPassword}" PlaceholderText="password" PasswordChar="•" />
|
|
<TextBox Text="{Binding CredentialEditorNotes}" PlaceholderText="notes" AcceptsReturn="True"
|
|
Height="44" TextWrapping="Wrap" />
|
|
<TextBlock Classes="hint" FontSize="9.5"
|
|
Text="Encrypted here and never sent to the server in a form it can read. Bind a host to this in the host's own editor, under how it authenticates." />
|
|
<StackPanel Orientation="Horizontal" Spacing="6">
|
|
<Button Classes="accent" Content="SAVE" Command="{Binding SaveCredentialCommand}" />
|
|
<Button Classes="ghost" Content="CANCEL" Command="{Binding CancelCredentialEditCommand}" />
|
|
</StackPanel>
|
|
</StackPanel>
|
|
|
|
<!--
|
|
The tag editor, and the whole of it is one box. What it does not have is the point: renaming a
|
|
tag touches no host, because every host wearing it names its id. That is the entire reason a tag
|
|
is an item rather than a string repeated inside twenty payloads.
|
|
-->
|
|
<StackPanel Spacing="6" IsVisible="{Binding IsEditingTag}">
|
|
<TextBlock Classes="label" Text="TAG" Margin="0,0,0,4" />
|
|
<TextBox Text="{Binding TagEditorLabel}" PlaceholderText="name">
|
|
<TextBox.KeyBindings>
|
|
<KeyBinding Gesture="Enter" Command="{Binding SaveTagCommand}" />
|
|
</TextBox.KeyBindings>
|
|
</TextBox>
|
|
<TextBlock Classes="hint" FontSize="9.5"
|
|
Text="Renaming a tag changes it everywhere at once. No host is rewritten — each one names this tag rather than repeating its name." />
|
|
<StackPanel Orientation="Horizontal" Spacing="6">
|
|
<Button Classes="accent" Content="SAVE" Command="{Binding SaveTagCommand}" />
|
|
<Button Classes="ghost" Content="CANCEL" Command="{Binding CancelTagEditCommand}" />
|
|
</StackPanel>
|
|
</StackPanel>
|
|
|
|
<!-- The bucket editor. -->
|
|
<StackPanel Spacing="6" IsVisible="{Binding IsEditingObjectStore}">
|
|
<TextBlock Classes="label" Text="BUCKET" Margin="0,0,0,4" />
|
|
<TextBox Text="{Binding BucketEditorLabel}" PlaceholderText="name" />
|
|
<TextBox Text="{Binding BucketEditorBucket}" PlaceholderText="bucket" />
|
|
<TextBox Text="{Binding BucketEditorAccessKeyId}" PlaceholderText="access key id" />
|
|
<!--
|
|
Masked, like a password and for the same reason: a secret access key is one. The access key id
|
|
beside it is an identifier and is shown, which is also why the two are separate boxes.
|
|
-->
|
|
<TextBox Text="{Binding BucketEditorSecretAccessKey}" PlaceholderText="secret access key"
|
|
PasswordChar="•" />
|
|
<TextBox Text="{Binding BucketEditorRegion}" PlaceholderText="region (e.g. eu-west-1)" />
|
|
<!--
|
|
Blank means Amazon, and then the region resolves the host. Anything else is a full URL, which
|
|
is what makes this work against a self-hosted service.
|
|
-->
|
|
<TextBox Text="{Binding BucketEditorEndpoint}"
|
|
PlaceholderText="endpoint (blank: Amazon S3)" />
|
|
<CheckBox IsChecked="{Binding BucketEditorUsePathStyle}"
|
|
Content="Address the bucket as a path" />
|
|
<!--
|
|
Said where the decision is made. Getting this wrong produces a DNS failure whose message
|
|
mentions neither buckets nor this setting, which is the worst kind of thing to leave to a guess.
|
|
-->
|
|
<TextBlock Classes="hint" FontSize="9.5"
|
|
Text="Off for Amazon S3. On for most self-hosted services — MinIO and Ceph have no wildcard DNS, so the bucket cannot be a subdomain." />
|
|
<TextBox Text="{Binding BucketEditorNotes}" PlaceholderText="notes" AcceptsReturn="True"
|
|
Height="44" TextWrapping="Wrap" />
|
|
<TextBlock Classes="hint" FontSize="9.5"
|
|
Text="Encrypted here, keys and endpoint alike, and never sent to the server in a form it can read. Pick this bucket on the Files screen to browse it." />
|
|
<StackPanel Orientation="Horizontal" Spacing="6">
|
|
<Button Classes="accent" Content="SAVE" Command="{Binding SaveObjectStoreCommand}" />
|
|
<Button Classes="ghost" Content="CANCEL" Command="{Binding CancelObjectStoreEditCommand}" />
|
|
</StackPanel>
|
|
</StackPanel>
|
|
|
|
</StackPanel>
|
|
</ScrollViewer>
|
|
</Border>
|
|
|
|
</Grid>
|
|
|
|
</UserControl>
|