feat: add app-level authentication foundation

apps/ui/js/api.js

@@ -1,5 +1,6 @@
 (function() {
   var API_BASE = '/api/admin';
+  var AUTH_BASE = '/api/auth';
 
   function headers(extra) {
     return Object.assign({
@@ -8,7 +9,7 @@
   }
 
   async function request(path, options) {
-    var response = await fetch(API_BASE + path, Object.assign({
+    var response = await fetch(path, Object.assign({
       credentials: 'same-origin',
       headers: headers(),
     }, options || {}));
@@ -27,6 +28,9 @@
     }
 
     if (!response.ok) {
+      if (response.status === 401 && window.CrankAuth && typeof window.CrankAuth.handleUnauthorized === 'function') {
+        window.CrankAuth.handleUnauthorized();
+      }
       var message = payload && payload.error
         ? payload.error.message
         : payload && payload.message
@@ -44,11 +48,11 @@
   }
 
   function get(path) {
-    return request(path);
+    return request(API_BASE + path);
   }
 
   function post(path, body) {
-    return request(path, {
+    return request(API_BASE + path, {
       method: 'POST',
       headers: headers({ 'Content-Type': 'application/json' }),
       body: JSON.stringify(body),
@@ -56,7 +60,7 @@
   }
 
   function patch(path, body) {
-    return request(path, {
+    return request(API_BASE + path, {
       method: 'PATCH',
       headers: headers({ 'Content-Type': 'application/json' }),
       body: JSON.stringify(body),
@@ -64,7 +68,7 @@
   }
 
   function del(path) {
-    return request(path, { method: 'DELETE' });
+    return request(API_BASE + path, { method: 'DELETE' });
   }
 
   function query(params) {
@@ -81,7 +85,7 @@
   }
 
   function postBytes(path, bytes, fileName) {
-    return request(path, {
+    return request(API_BASE + path, {
       method: 'POST',
       headers: headers(fileName ? { 'X-File-Name': fileName } : {}),
       body: bytes,
@@ -89,6 +93,23 @@
   }
 
   window.CrankApi = {
+    login: function(payload) {
+      return request(AUTH_BASE + '/login', {
+        method: 'POST',
+        headers: headers({ 'Content-Type': 'application/json' }),
+        body: JSON.stringify(payload),
+      });
+    },
+    logout: function() {
+      return request(AUTH_BASE + '/logout', {
+        method: 'POST',
+        headers: headers({ 'Content-Type': 'application/json' }),
+        body: JSON.stringify({}),
+      });
+    },
+    getSession: function() {
+      return request(AUTH_BASE + '/session');
+    },
     listWorkspaces: function() {
       return get('/workspaces');
     },
@@ -197,4 +218,5 @@
       );
     },
   };
+
 }());