feat(secrets-ui): add/rotate/delete modal + audited gated reveal

2026-07-15 17:20:01 -04:00
parent d7f8ca455b
commit 21556cc1a7
15 changed files with 950 additions and 14 deletions
@@ -0,0 +1,45 @@
+using Microsoft.AspNetCore.Components.Authorization;
+using Microsoft.Extensions.DependencyInjection;
+using ZB.MOM.WW.Secrets.Abstractions;
+
+namespace ZB.MOM.WW.Secrets.Ui;
+
+/// <summary>
+/// Resolves the principal to record as the audit <c>Actor</c> for a UI-driven secret mutation or
+/// reveal. The resolution order is: an explicitly wired <see cref="ISecretActorAccessor"/> (if the
+/// host registered one and it reports a non-blank actor); otherwise the authenticated user's
+/// <see cref="System.Security.Principal.IIdentity.Name"/> from the cascading authentication state;
+/// otherwise the literal <c>"unknown"</c> so an action is never attributed to a blank actor.
+/// </summary>
+internal static class SecretActorResolver
+{
+    /// <summary>The fallback actor used when no accessor and no authenticated identity name is available.</summary>
+    public const string Unknown = "unknown";
+
+    /// <summary>
+    /// Resolves the audit actor. Never returns <c>null</c> or blank.
+    /// </summary>
+    /// <param name="services">The component's service provider, used to optionally resolve an <see cref="ISecretActorAccessor"/>.</param>
+    /// <param name="authState">The cascading authentication-state task, or <c>null</c> if unavailable.</param>
+    /// <returns>The resolved actor identity string.</returns>
+    public static async Task<string> ResolveAsync(IServiceProvider services, Task<AuthenticationState>? authState)
+    {
+        string? fromAccessor = services.GetService<ISecretActorAccessor>()?.CurrentActor;
+        if (!string.IsNullOrWhiteSpace(fromAccessor))
+        {
+            return fromAccessor;
+        }
+
+        if (authState is not null)
+        {
+            AuthenticationState state = await authState.ConfigureAwait(false);
+            string? name = state.User.Identity?.Name;
+            if (!string.IsNullOrWhiteSpace(name))
+            {
+                return name;
+            }
+        }
+
+        return Unknown;
+    }
+}