nickgamb / obake Goto Github PK

Build out TF template for UDP

Clean up layouts:

Default
Incredible
Inspire
Business
Aspire

Make app config unique in UDP (TF) so that multiple apps can be provisioned into a single tenant.

Add a popout information icon on every page that describes what the page showcases and how it works.

When the send code button is clicked (login - api) it can be clicked over and over again with no indication that anything was actually clicked.

Disable send code button once it has been clicked
Change label to "sent" once it has been clicked

Other UDP demos have a javascript element in the front end to show stored oauth tokens for demo purposes. Add to Obake

Currently we pull the Okta API token from an unprotected API (App config). We need to pull from subdomain API with access token from the UDP Okta Org.

Registration throws index out of bounds when no space is used in full name.

Build out other demo examples:

Nick to define further criteria.

The title of the page window is static at the moment. Move it out to UDP app config.

Move all configuration to settings widget
Allow full configuration to be exported as a template file
Allow the upload of custom templates

Right now only strings are supported and the type field in UDP is ignored. Support for the following would be great for the changes needed by Obake.

URL: Check formatting
Enum: Maybe a drop down
Array/Dictionary/JSON Object: For complex page customization options

If the user clicks the verify code button before sending or typing a code, there is an unexpected error (no code was entered).

Registration page only requests email from the user.

-Request SMS
-Request Profile Link?

Nick to further define

There is literally no error handling at this time. Look for the TODO:'s

Currently the site renders the primary color of green by default. Since the Okta template is default, set this to blue

Demo loads home-default by default. Let UDP users configure this in UDP.

API Login does not work when factor sequencing is disabled.

Right now a script could easily span the reg page and create enough fake accounts to trigger ddos protections. Add captcha or other solutions to protect from this.

Other UDP demos have a javascript element in the front end that allow for the tweaking of the okta javascript widget in real time for demo purposes. Add to Obake.

Build out new pages and support for RBAC/ABAC demonstrations.

Nick to define further

Right now MFA assignment is based on in roll or not in roll. Create a feature in account profile that allows a user to self enroll into MFA and set up what ever factors that they wish.

Add Vertical Examples to Docs

Right now, UDP users are required to host images and videos for Obake on their own and them provide the links. Enhance UDP and Obake to allow for uploading of media content.

Support for templates should include files uploaded as well.

If the user leaves the factor selection dropdown on and clicks login, there is an unexpected error (because a value was not selected).

Build out a readme for github.
Describe project and code
Define steps to run locally or via docker

Right now Obake asks the user to change app config settings for every demo, which means going back to default takes some effort. Work with UDP team to get a reset to defaults option in UDP App Config UI.

Obake V2 will support all other Okta login API states (https://github.com/nickgamb/Obake/projects/2#card-26518977). For V1, we need to gracefully notify when an unhandled state has been reached.

When a profile attribute is not populated in Okta, the profile menu freaks out. Handle the missing attributes gracefully.

Right now some login states are not supported. We need to support all login API states.

Enroll
Password warn
Password expired
Locked out
Recovery
etc.

Reg only gets username, name, and password. We should also require other bits used in profile UI.

Move off default auth server by replacing {0}/oauth2/default/v1/authorize with {0}/v1/authorize where {0} becomes the issuer for the auth server.

Create an admin portal demo UI for management demo examples.