add force_all_traffic to enterprise settings frontend

Author: j-chmielewski

web/src/i18n/en/index.ts

@@ -1713,6 +1713,11 @@ Licensing information: [https://docs.defguard.net/enterprise/license](https://do
           helper:
             'When this option is enabled, users will not be able to route all traffic through the VPN using the defguard client.',
         },
+        forceAllTraffic: {
+          label: 'Force the clients to route all traffic through VPN',
+          helper:
+            'When this option is enabled, the users will always route all traffic through the VPN using the defguard client.',
+        },
         manualConfig: {
           label: "Disable users' ability to manually configure WireGuard client",
           helper:

web/src/i18n/i18n-types.ts

@@ -4092,6 +4092,16 @@ type RootTranslation = {
 					 */
 					helper: string
 				}
+				forceAllTraffic: {
+					/**
+					 * F​o​r​c​e​ ​t​h​e​ ​c​l​i​e​n​t​s​ ​t​o​ ​r​o​u​t​e​ ​a​l​l​ ​t​r​a​f​f​i​c​ ​t​h​r​o​u​g​h​ ​V​P​N
+					 */
+					label: string
+					/**
+					 * W​h​e​n​ ​t​h​i​s​ ​o​p​t​i​o​n​ ​i​s​ ​e​n​a​b​l​e​d​,​ ​t​h​e​ ​u​s​e​r​s​ ​w​i​l​l​ ​a​l​w​a​y​s​ ​r​o​u​t​e​ ​a​l​l​ ​t​r​a​f​f​i​c​ ​t​h​r​o​u​g​h​ ​t​h​e​ ​V​P​N​ ​u​s​i​n​g​ ​t​h​e​ ​d​e​f​g​u​a​r​d​ ​c​l​i​e​n​t​.
+					 */
+					helper: string
+				}
 				manualConfig: {
 					/**
 					 * D​i​s​a​b​l​e​ ​u​s​e​r​s​'​ ​a​b​i​l​i​t​y​ ​t​o​ ​m​a​n​u​a​l​l​y​ ​c​o​n​f​i​g​u​r​e​ ​W​i​r​e​G​u​a​r​d​ ​c​l​i​e​n​t
@@ -10823,6 +10833,16 @@ export type TranslationFunctions = {
 					 */
 					helper: () => LocalizedString
 				}
+				forceAllTraffic: {
+					/**
+					 * Force the clients to route all traffic through VPN
+					 */
+					label: () => LocalizedString
+					/**
+					 * When this option is enabled, the users will always route all traffic through the VPN using the defguard client.
+					 */
+					helper: () => LocalizedString
+				}
 				manualConfig: {
 					/**
 					 * Disable users' ability to manually configure WireGuard client

web/src/i18n/pl/index.ts

@@ -1499,6 +1499,11 @@ Uwaga, podane tutaj konfiguracje nie posiadają klucza prywatnego. Musisz uzupe
           helper:
             'Kiedy ta opcja jest włączona, użytkownicy nie będą mogli przekierować całego ruchu przez VPN za pomocą klienta Defguard.',
         },
+        forceAllTraffic: {
+          label: 'Wymuś przekierowanie całego ruchu przez VPN',
+          helper:
+            'Kiedy ta opcja jest włączona, użytkownicy będą zawsze przekierowywać cały ruch przez VPN za pomocą klienta Defguard.',
+        },
         manualConfig: {
           label: 'Wyłącz manualną konfigurację WireGuard',
           helper:

web/src/pages/settings/components/EnterpriseSettings/components/EnterpriseForm.tsx

@@ -78,7 +78,7 @@ export const EnterpriseForm = () => {
         </div>
         <div className="helper-row">
           <LabeledCheckbox
-            disabled={isLoading}
+            disabled={isLoading || settings.force_all_traffic}
             label={LL.settingsPage.enterprise.fields.disableAllTraffic.label()}
             value={settings.disable_all_traffic}
             onChange={() =>
@@ -89,6 +89,19 @@ export const EnterpriseForm = () => {
             {parse(LL.settingsPage.enterprise.fields.disableAllTraffic.helper())}
           </Helper>
         </div>
+        <div className="helper-row">
+          <LabeledCheckbox
+            disabled={isLoading || settings.disable_all_traffic}
+            label={LL.settingsPage.enterprise.fields.forceAllTraffic.label()}
+            value={settings.force_all_traffic}
+            onChange={() =>
+              mutate({ force_all_traffic: !settings.force_all_traffic })
+            }
+          />
+          <Helper>
+            {parse(LL.settingsPage.enterprise.fields.forceAllTraffic.helper())}
+          </Helper>
+        </div>
       </div>
     </section>
   );

web/src/shared/types.ts

@@ -1124,6 +1124,7 @@ export type SettingsGatewayNotifications = {
 export type SettingsEnterprise = {
   admin_device_management: boolean;
   disable_all_traffic: boolean;
+  force_all_traffic: boolean;
   only_client_activation: boolean;
 };