fix: 🐛 OIDC authentications not properly showing username

✅ Closes: https://hashicorp.atlassian.net/browse/ICU-17231

Author: lisbet-alvarez

addons/auth/addon/authenticators/base.js

@@ -6,6 +6,7 @@
 import SimpleAuthBaseAuthenticator from 'ember-simple-auth/authenticators/base';
 import { resolve, reject } from 'rsvp';
 import { waitForPromise } from '@ember/test-waiters';
+import { service } from '@ember/service';
 
 /**
  * Encapsulates common authenticator functionality.
@@ -19,6 +20,10 @@ import { waitForPromise } from '@ember/test-waiters';
  * All other responses should resolve the session restoration successfully.
  */
 export default class BaseAuthenticator extends SimpleAuthBaseAuthenticator {
+  // =services
+
+  @service store;
+
   // =unimplemented methods
 
   /**
@@ -101,15 +106,41 @@ export default class BaseAuthenticator extends SimpleAuthBaseAuthenticator {
    * @param {string} username
    * @return {object}
    */
-  normalizeData(data, username) {
+  async normalizeData(data) {
     // Pull fields up from `data.attributes` for easier access in JavaScript.
     // The `attributes` field exists on the Go side for its convenience but is
     // unnecessary here.
     Object.assign(data, data.attributes);
     // Add booleans indicated the scope type
     data.isGlobal = data?.scope?.type === 'global';
     data.isOrg = data?.scope?.type === 'org';
-    if (username) data.username = username;
+
+    try {
+      const adapter = this.store.adapterFor('application');
+      const findAccountRecordURL = adapter.buildURL(
+        'account',
+        data?.account_id,
+        {},
+        'findRecord',
+      );
+      const response = await waitForPromise(
+        fetch(findAccountRecordURL, {
+          method: 'get',
+          headers: { Authorization: `Bearer ${data.attributes.token}` },
+        }),
+      );
+
+      const authenticatedAccount = await response.json();
+
+      if (response.status === 200) {
+        const { email, full_name, login_name, subject } =
+          authenticatedAccount.attributes;
+        data.username = email || full_name || login_name || subject;
+      }
+    } catch (_) {
+      /* no op */
+    }
+
     return data;
   }
 

addons/auth/addon/authenticators/password.js

@@ -72,8 +72,6 @@ export default class PasswordAuthenticator extends BaseAuthenticator {
       fetch(authEndpointURL, { method: 'post', body }),
     );
     const json = await response.json();
-    return response.status < 400
-      ? resolve(this.normalizeData(json, login_name))
-      : reject();
+    return response.status < 400 ? resolve(this.normalizeData(json)) : reject();
   }
 }

addons/core/translations/en-us.yaml

@@ -49,6 +49,7 @@ titles:
   project-actions: Project Actions
   user-menu: User Menu
   back-link: 'Back to {scope}'
+  authenticated: Signed In
 descriptions:
   empty-set: There are no items to display yet.  You may be able to add items or try back later.
   cluster-url-initialization: To get started, please enter your cluster URL

ui/admin/app/templates/application.hbs

@@ -63,13 +63,13 @@
               data-test-side-nav-user-dropdown
               as |dd|
             >
+              <dd.ToggleIcon @icon='user' @text={{t 'titles.user-menu'}} />
               {{#if this.session.data.authenticated.username}}
-                <dd.ToggleButton
-                  @icon='user'
+                <dd.Title @text={{t 'titles.authenticated'}} />
+                <dd.Description
                   @text={{this.session.data.authenticated.username}}
                 />
-              {{else}}
-                <dd.ToggleIcon @icon='user' @text={{t 'titles.user-menu'}} />
+                <dd.Separator />
               {{/if}}
 
               <dd.Interactive @route='account.change-password'>{{t