Skip to content

Identity Lab: Security Hardening and Audit Fixes (Part 3) #115

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mckaragoz merged 4 commits into from
Oct 27, 2026
Merged

Identity Lab: Security Hardening and Audit Fixes (Part 3) #115

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
1e76ee2
Identity Lab Hardening
mckaragoz Oct 27, 2026
e3d8b87
Fix Flows
mckaragoz Oct 27, 2026
17052ea
Some Other Fixes
mckaragoz Oct 27, 2026
4649c57
Fix Nested Tooltips and Activity Error
mckaragoz Oct 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions apps/identity-lab/CodeBeam.UltimateAuth.IdentityLab/Components/Pages/AdminPage.razor
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -210,6 +210,7 @@

</MudTable>

<AdminRepairPanel />
</MudStack>

</MudPaper>
Expand Down
244 changes: 244 additions & 0 deletions apps/identity-lab/CodeBeam.UltimateAuth.IdentityLab/Components/Pages/AdminRepairPanel.razor
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,244 @@
@using CodeBeam.UltimateAuth.IdentityLab.Authorization
@using CodeBeam.UltimateAuth.IdentityLab.Contracts
@using CodeBeam.UltimateAuth.IdentityLab.Services

@inject LabRepairService RepairService
@inject LabAccessContextProvider ContextProvider
@inject IDialogService DialogService
@inject ISnackbar Snackbar

<MudPaper Outlined="true" Class="pa-4">
<MudStack Spacing="3">
<MudStack Row="true"
AlignItems="AlignItems.Center"
Justify="Justify.SpaceBetween">

<MudStack Spacing="1">
<MudText Typo="Typo.h6">
Provisioning &amp; Repair
</MudText>
<MudText Color="Color.Secondary">
Detect incomplete accounts and orphaned sandboxes.
</MudText>
</MudStack>

<MudButton Variant="Variant.Outlined"
Color="Color.Primary"
Disabled="_busy"
OnClick="LoadAsync">
Scan
</MudButton>
</MudStack>

@if (_busy)
{
<MudProgressLinear Indeterminate="true" />
}

@if (!string.IsNullOrEmpty(_error))
{
<MudAlert Severity="Severity.Error">
@_error
</MudAlert>
}

@if (_snapshot is not null)
{
@if (!_snapshot.UserScanComplete)
{
<MudAlert Severity="Severity.Warning">
User scan was limited. Results may be incomplete.
</MudAlert>
}

<MudText Typo="Typo.subtitle1">
Unlinked Users (@_snapshot.OrphanUsers.Count)
</MudText>

<MudTable Items="_snapshot.OrphanUsers"
Hover="true"
Dense="true"
RowsPerPage="10">
<HeaderContent>
<MudTh>User</MudTh>
<MudTh>Email</MudTh>
<MudTh>Role</MudTh>
<MudTh>Recovery</MudTh>
</HeaderContent>

<RowTemplate>
<MudTd DataLabel="User">
@context.DisplayName
</MudTd>

<MudTd DataLabel="Email">
@context.Email
</MudTd>

<MudTd DataLabel="Role">
@context.Role
</MudTd>

<MudTd DataLabel="Recovery">
@if (context.Role == LabRoles.Owner)
{
<MudButton Size="Size.Small"
Color="Color.Primary"
Variant="Variant.Outlined"
Disabled="_busy"
OnClick="@(() => RepairOwnerAsync(context))">
Repair Owner
</MudButton>
}
else
{
<MudText Color="Color.Secondary">
Manual review required
</MudText>
}
</MudTd>
</RowTemplate>
<PagerContent>
<MudTablePager />
</PagerContent>
</MudTable>

<MudDivider />

<MudText Typo="Typo.subtitle1">
Empty Sandboxes (@_snapshot.EmptySandboxes.Count)
</MudText>

<MudTable Items="_snapshot.EmptySandboxes"
Hover="true"
Dense="true"
RowsPerPage="10">
<HeaderContent>
<MudTh>Sandbox</MudTh>
<MudTh>Owner Key</MudTh>
<MudTh>Status</MudTh>
<MudTh>Action</MudTh>
</HeaderContent>

<RowTemplate>
<MudTd DataLabel="Sandbox">
@context.Name
</MudTd>

<MudTd DataLabel="Owner Key">
@context.OwnerUserKey.Value
</MudTd>

<MudTd DataLabel="Status">
@context.Status
</MudTd>

<MudTd DataLabel="Action">
<MudButton Size="Size.Small"
Color="Color.Error"
Variant="Variant.Outlined"
Disabled="_busy"
OnClick="@(() => DeleteSandboxAsync(context))">
Delete
</MudButton>
</MudTd>
</RowTemplate>
<PagerContent>
<MudTablePager />
</PagerContent>
</MudTable>
}
</MudStack>
</MudPaper>

@code {
private RepairSnapshot? _snapshot;
private bool _busy;
private string? _error;

private async Task<CodeBeam.UltimateAuth.Core.Contracts.AccessContext>
GetContextAsync()
{
return await ContextProvider.CreateAsync(
"identitylab.repair.admin",
"identitylab.repair");
}

private async Task LoadAsync()
{
_busy = true;
_error = null;

try
{
var context = await GetContextAsync();
_snapshot = await RepairService.GetSnapshotAsync(context);
}
catch (Exception)
{
_error = "Unable to load repair information.";
}
finally
{
_busy = false;
}
}

private async Task RepairOwnerAsync(OrphanUserItem user)
{
var confirm = await DialogService.ShowMessageBoxAsync(
"Repair Owner",
$"Repair the Sandbox membership for {user.DisplayName}?",
yesText: "Repair",
cancelText: "Cancel");

if (confirm != true)
return;

await ExecuteAsync(async () =>
{
var context = await GetContextAsync();
return await RepairService.RepairOwnerAsync(context, user.UserKey);
});
}

private async Task DeleteSandboxAsync(EmptySandboxItem sandbox)
{
var confirm = await DialogService.ShowMessageBoxAsync(
"Delete Empty Sandbox",
$"Permanently delete '{sandbox.Name}'? This cannot be undone.",
yesText: "Delete",
cancelText: "Cancel");

if (confirm != true)
return;

await ExecuteAsync(async () =>
{
var context = await GetContextAsync();
return await RepairService.DeleteEmptySandboxAsync(context, sandbox.SandboxId);
});
}

private async Task ExecuteAsync(Func<Task<RepairOperationResult>> operation)
{
_busy = true;
_error = null;

try
{
var result = await operation();
Snackbar.Add(result.Message, result.Success ? Severity.Success : Severity.Warning);
}
catch (Exception)
{
Snackbar.Add("Repair operation failed. No further changes should be made until the state is reviewed.", Severity.Error);
}
finally
{
_busy = false;
}

await LoadAsync();
}
}
56 changes: 56 additions & 0 deletions ...ntity-lab/CodeBeam.UltimateAuth.IdentityLab/Components/Pages/Dashboard/ActivityPage.razor
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,14 @@
<h1>Activity</h1>
<p>Review identity, session, and authorization activity within your sandbox.</p>
</div>

<MudButton Variant="Variant.Outlined"
Color="Color.Primary"
StartIcon="@Icons.Material.Filled.Refresh"
Disabled="@_loading"
OnClick="RefreshActivityAsync">
Refresh
</MudButton>
</div>

<div class="lab-activity-stats">
Expand All @@ -46,6 +54,15 @@
</div>
</div>

@if (!string.IsNullOrWhiteSpace(_error))
{
<MudAlert Severity="Severity.Error"
Variant="Variant.Outlined"
Class="mb-4">
@_error
</MudAlert>
}

<section class="lab-activity-panel">

<div class="lab-activity-panel-heading">
Expand Down Expand Up @@ -170,8 +187,35 @@
private bool _loading;
private string? _error;

private UserKey? _loadedUserKey;

protected override async Task OnParametersSetAsync()
{
await base.OnParametersSetAsync();

var userKey = AuthState?.Identity?.UserKey;

if (userKey is null)
{
_loadedUserKey = null;
_events.Clear();
_error = null;
return;
}

if (_loadedUserKey == userKey)
return;

_loadedUserKey = userKey;

await InitializeActivityAsync(userKey.Value);
}

private async Task InitializeActivityAsync(UserKey currentUserKey)
{
_events.Clear();
_error = null;

var sandbox = await SandboxService.GetByUserAsync(currentUserKey);

if (sandbox is null)
Expand Down Expand Up @@ -205,6 +249,8 @@
}
catch (Exception)
{
_events.Clear();
_loadedUserKey = null;
_error = "Unable to load activity records.";
}
finally
Expand All @@ -213,6 +259,16 @@
}
}

private async Task RefreshActivityAsync()
{
var userKey = AuthState?.Identity?.UserKey;

if (userKey is null)
return;

await InitializeActivityAsync(userKey.Value);
}

private IEnumerable<ActivityLog> FilteredEvents =>
_events
.Where(x =>
Expand Down
Loading
Loading