Add network access boolean checkbox settings

What does this MR do and why?

Adds three network access control boolean checkbox settings to the Duo configuration pages (admin and group), gated behind the existing dap_instance_network_access_controls and dap_group_network_access_controls feature flags.

This adds a NetworkAccessSettingsForm component with the following checkboxes:

  • Include recommended domains in the allowlist
  • Allow all Unix sockets
  • Allow projects to extend the domain allowlist

The Enforce network access controls on local clients checkbox has been excluded per feedback from Roman Eisner, as this setting should not be presented to users in 19.0.

The checkboxes are wired through the common settings form chain and pipe through the existing Save button. The backend write path will be handled in a separate MR by another author.

Frontend only

This MR contains no backend changes. The boolean values are read from data- attributes provided by the existing presenters/helpers (added in !230831 (merged)) and included in the form submission payload. The backend mutations to persist these values are tracked separately.

04-group-network-access-final

References

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Andrew Fontaine

Merge request reports

Loading