support switching user via acm/idm (#172)

README.md

@@ -39,6 +39,7 @@ This frontend can be configured at runtime. It will get the environment variable
 * `EMBER_OAUTH_BASE_URL`
 * `EMBER_OAUTH_REDIRECT_URL`
 * `EMBER_OAUTH_LOGOUT_URL`
+* `EMBER_OAUTH_SWITCH_URL`
 
 ### other
 * `EMBER_PUBLICATION_BASE_URL`: url of the linked [publication platform](https://github.com/lblod/app-gn-publicatie/), e.g. "https://publicatie.gelinkt-notuleren.vlaanderen.be/"

app/controllers/inbox.js

@@ -1,6 +1,18 @@
 import Controller from '@ember/controller';
 import { inject as service } from '@ember/service';
+import { action } from '@ember/object';
 
 export default class InboxController extends Controller {
-  @service currentSession;
+  @service currentSession; //used in template
+  @service features;
+  @service session;
+
+  get acmSwitchEnabled() {
+    return this.features.isEnabled('acmidm-switch');
+  }
+
+  @action
+  logout() {
+    this.session.invalidate();
+  }
 }

app/routes/switch-login.js

@@ -0,0 +1,20 @@
+import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
+
+export default class SwitchLoginRoute extends Route {
+  @service() session;
+
+  beforeModel(){
+    this.session.prohibitAuthentication('index');
+  }
+
+  async model() {
+    try {
+      return await this.session.authenticate('authenticator:torii', 'acmidm-oauth2');
+    }
+    catch(e) {
+      return 'Fout bij het aanmelden. Gelieve opnieuw te proberen.';
+    }
+  }
+}
+

app/templates/inbox.hbs

@@ -1,8 +1,15 @@
 <AuMainHeader @homeRoute="index" @appTitle="Gelinkt Notuleren" @contactRoute="contact">
   <AuDropdown @dropdownTitle="{{this.currentSession.user.voornaam}} {{this.currentSession.user.achternaam}} - {{this.currentSession.group.classificatie.label}} {{this.currentSession.group.naam}}" @dropdownButtonLabel="Account settings" @alignment="right">
-    <AcmidmLogout class="au-c-button au-c-button--link" role="menuitem">
+    {{#if this.acmSwitchEnabled}}
+      <Acmidm::Switch as |acmidm|>
+        <AuButton @loading={{acmidm.isSwitching}} class="au-c-button au-c-button--tertiary" role="menuitem" {{on "click" acmidm.switch}}>
+          <AuIcon @icon="switch" @alignment="left" />Wissel van bestuurseenheid
+        </AuButton>
+      </Acmidm::Switch>
+    {{/if}}
+    <button type="button" class="au-c-button au-c-button--tertiary" role="menuitem" {{on "click" this.logout}}>
       <AuIcon @icon="logout" @alignment="left" />Afmelden
-    </AcmidmLogout>
+    </button>
   </AuDropdown>
 </AuMainHeader>
 

app/templates/switch-login.hbs

@@ -0,0 +1,22 @@
+<VoPage>
+  <section class="au-o-region-large">
+      <div class="au-o-layout">
+        <div class="au-o-grid au-o-grid--small">
+          <div class="au-o-grid__item au-u-3-4@small au-u-1-2@medium">
+            <AuContent @skin="large">
+              <h1>Gelinkt Notuleren</h1>
+              <p class="au-c-heading au-c-heading--4">Een webapplicatie die helpt met het opmaken en publiceren van agenda's, notulen en besluiten voor Lokale Besturen.</p>
+              <p>Lukt het aanmelden niet? Neem contact op met uw interne beheerder. Indien er zich een probleem voordoet, contacteer <a class="au-c-link" href="https://overheid.vlaanderen.be/ict/ict-diensten/gebruikersbeheer">gebruikersbeheer Vlaanderen</a>.</p>
+              <p>Het aanmelden gebeurt in een pop-up; zorg dat de instellingen van uw browser correct staan indien deze niet verschijnt.</p>
+            </AuContent>
+          </div>
+          <div class="au-o-grid__item au-u-1-4@small au-u-1-2@medium au-u-text-right@medium">
+            <AcmidmLogin />
+            {{#if this.model}}
+              <AuAlert @alertIcon="alert-triangle" @alertTitle={{this.model}}  @alertskin="error" class="au-u-text-left" />
+            {{/if}}
+          </div>
+        </div>
+      </div>
+  </section>
+</VoPage>

config/environment.js

@@ -40,6 +40,7 @@ module.exports = function (environment) {
       'language-select': false,
       'editor-html-paste': true,
       'editor-extended-html-paste': true,
+      'acmidm-switch': false
       'attachments': false
     },
     browserUpdate: {
@@ -62,7 +63,8 @@ module.exports = function (environment) {
           baseUrl: "{{OAUTH_BASE_URL}}",
           scope: 'openid rrn vo profile abb_gelinktNotuleren',
           redirectUri: "{{OAUTH_REDIRECT_URL}}",
-          logoutUrl: "{{OAUTH_LOGOUT_URL}}"
+          logoutUrl: "{{OAUTH_LOGOUT_URL}}",
+          returnUrl: "{{OAUTH_SWITCH_URL}}"
         }
       }
     },