Support authz for read-only web access

This updates the web UI to support the requirement for authn/z
for read-only access.

If authz is required for read access, we will automatically redirect.
If we return and still aren't authorized, we will display an
"Authorization required" page (rather than continuing and popping up
API error notifications).

The API methods are updated to send an authorization token whenever
one is present.

Change-Id: I31c13c943d05819b4122fcbcf2eaf41515c5b1d9

2 files changed, 45 insertions, 0 deletions

diff --git a/web/src/pages/AuthCallback.jsx b/web/src/pages/AuthCallback.jsx
index c8f765be2..f964cd81f 100644
--- a/web/src/pages/AuthCallback.jsx
+++ b/web/src/pages/AuthCallback.jsx
@@ -1,4 +1,5 @@
 // Copyright 2020 Red Hat, Inc
+// Copyright 2022 Acme Gating, LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License"); you may
 // not use this file except in compliance with the License. You may obtain
diff --git a/web/src/pages/AuthRequired.jsx b/web/src/pages/AuthRequired.jsx
new file mode 100644
index 000000000..a14259716
--- /dev/null
+++ b/web/src/pages/AuthRequired.jsx
@@ -0,0 +1,44 @@
+// Copyright 2020 Red Hat, Inc
+// Copyright 2022 Acme Gating, LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License"); you may
+// not use this file except in compliance with the License. You may obtain
+// a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+// WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+// License for the specific language governing permissions and limitations
+// under the License.
+
+import React from 'react'
+import {
+  EmptyState,
+  EmptyStateBody,
+  EmptyStateIcon,
+  Title,
+} from '@patternfly/react-core'
+import {
+  LockIcon,
+} from '@patternfly/react-icons'
+
+function AuthRequiredPage() {
+  return (
+    <>
+        <EmptyState>
+          <EmptyStateIcon icon={LockIcon} />
+          <Title headingLevel="h1">Unauthorized</Title>
+          <EmptyStateBody>
+            <p>
+              Authorization is required.
+            </p>
+          </EmptyStateBody>
+        </EmptyState>
+    </>
+  )
+}
+
+
+export default AuthRequiredPage