UI: Add capabilities service

ui/app/services/capabilities.ts

@@ -0,0 +1,49 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: BUSL-1.1
+ */
+
+import Service, { service } from '@ember/service';
+
+import type StoreService from 'vault/services/store';
+
+export default class CapabilitiesService extends Service {
+  @service declare readonly store: StoreService;
+
+  request = (apiPath: string) => {
+    return this.store.findRecord('capabilities', apiPath);
+  };
+
+  async fetchAll(apiPath: string) {
+    try {
+      return await this.request(apiPath);
+    } catch (e) {
+      return e;
+    }
+  }
+
+  async fetchSpecific(apiPath: string, capability: string) {
+    try {
+      const capabilities = await this.request(apiPath);
+      return capabilities[capability];
+    } catch (e) {
+      return e;
+    }
+  }
+
+  async canRead(apiPath: string) {
+    try {
+      return await this.fetchSpecific(apiPath, 'canRead');
+    } catch (e) {
+      return e;
+    }
+  }
+
+  async canUpdate(apiPath: string) {
+    try {
+      return await this.fetchSpecific(apiPath, 'canUpdate');
+    } catch (e) {
+      return e;
+    }
+  }
+}

ui/app/services/flags.ts

@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: BUSL-1.1
  */
 
-import Service, { inject as service } from '@ember/service';
+import Service, { service } from '@ember/service';
 import { tracked } from '@glimmer/tracking';
 import { keepLatestTask } from 'ember-concurrency';
 import { DEBUG } from '@glimmer/env';

ui/lib/core/app/helpers/await.js

@@ -0,0 +1,6 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: BUSL-1.1
+ */
+
+export { default } from 'core/helpers/await';

ui/tests/unit/services/capabilities-test.js

@@ -0,0 +1,79 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: BUSL-1.1
+ */
+
+import { module, test } from 'qunit';
+import { setupTest } from 'ember-qunit';
+import { setupMirage } from 'ember-cli-mirage/test-support';
+
+module('Unit | Service | capabilities', function (hooks) {
+  setupTest(hooks);
+  setupMirage(hooks);
+
+  hooks.beforeEach(function () {
+    this.capabilities = this.owner.lookup('service:capabilities');
+    this.store = this.owner.lookup('service:store');
+    this.generateResponse = (apiPath, perms) => {
+      return {
+        [apiPath]: perms,
+        capabilities: perms,
+        request_id: '6cc7a484-921a-a730-179c-eaf6c6fbe97e',
+        data: {
+          capabilities: perms,
+          [apiPath]: perms,
+        },
+      };
+    };
+  });
+
+  test('it makes request to capabilities-self', function (assert) {
+    const apiPath = '/my/api/path';
+    const expectedPayload = {
+      paths: [apiPath],
+    };
+    this.server.post('/sys/capabilities-self', (schema, req) => {
+      const actual = JSON.parse(req.requestBody);
+      assert.true(true, 'request made to capabilities-self');
+      assert.propEqual(actual, expectedPayload, `request made with path: ${JSON.stringify(actual)}`);
+      return this.generateResponse(apiPath, ['read']);
+    });
+    this.capabilities.request(apiPath);
+  });
+
+  const TEST_CASES = [
+    {
+      capabilities: ['read'],
+      canRead: true,
+      canUpdate: false,
+    },
+    {
+      capabilities: ['update'],
+      canRead: false,
+      canUpdate: true,
+    },
+    {
+      capabilities: ['deny'],
+      canRead: false,
+      canUpdate: false,
+    },
+    {
+      capabilities: ['read', 'update'],
+      canRead: true,
+      canUpdate: true,
+    },
+  ];
+  TEST_CASES.forEach(({ capabilities, canRead, canUpdate }) => {
+    test(`it returns expected boolean for "${capabilities.join(', ')}"`, async function (assert) {
+      const apiPath = '/my/api/path';
+      this.server.post('/sys/capabilities-self', () => {
+        return this.generateResponse(apiPath, capabilities);
+      });
+
+      const canReadResponse = await this.capabilities.canRead(apiPath);
+      const canUpdateResponse = await this.capabilities.canUpdate(apiPath);
+      assert[canRead](canReadResponse, `canRead returns ${canRead}`);
+      assert[canUpdate](canUpdateResponse, `canUpdate returns ${canRead}`);
+    });
+  });
+});

ui/types/vault/services/store.d.ts

@@ -13,4 +13,5 @@ export default class StoreService extends Store {
   ): Promise<RecordArray>;
 
   clearDataset(modelName: string);
+  findRecord(modelName: string, path: string);
 }