Replace isTeam with new flags

api/client/webclient/webconfig.go

@@ -78,13 +78,34 @@ type WebConfig struct {
 	// CustomTheme is a string that represents the name of the custom theme that the WebUI should use.
 	CustomTheme string `json:"customTheme"`
 	// IsTeam is true if [Features.ProductType] = Team
+	// Prefer checking the cluster features over this flag, as this will be removed.
 	IsTeam bool `json:"isTeam"`
 	// IsIGSEnabled is true if [Features.IdentityGovernance] = true
 	IsIGSEnabled bool `json:"isIgsEnabled"`
 	// featureLimits define limits for features.
 	// Typically used with feature teasers if feature is not enabled for the
 	// product type eg: Team product contains teasers to upgrade to Enterprise.
 	FeatureLimits FeatureLimits `json:"featureLimits"`
+	// Questionnaire indicates whether cluster users should get an onboarding questionnaire
+	Questionnaire bool `json:"questionnaire"`
+	// indicates if the cluster billing & lifecycle is managed via Stripe
+	IsStripeManaged bool `json:"isStripeManaged"`
+	// ExternalAuditStorage indicates whether the EAS feature is enabled in the cluster.
+	ExternalAuditStorage bool `json:"externalAuditStorage"`
+	// PremiumSupport indicates if the customer has premium support
+	PremiumSupport bool `json:"premiumSupport"`
+	// JoinActiveSessions indicates whether joining active sessions via web UI is enabled
+	JoinActiveSessions bool `json:"joinActiveSessions"`
+	// AccessRequests enables access requests
+	AccessRequests bool `json:"accessRequests"`
+	// TrustedDevices enables trusted devices pages
+	TrustedDevices bool `json:"trustedDevices"`
+	// OIDC enables the OIDC integration flow
+	OIDC bool `json:"oidc"`
+	// SAML enables the SAML integration flow
+	SAML bool `json:"saml"`
+	// MobileDeviceManagement enables adding Jamf plugin
+	MobileDeviceManagement bool `json:"mobileDeviceManagement"`
 }
 
 // featureLimits define limits for features.

lib/httplib/httpheaders.go

@@ -201,7 +201,7 @@ var indexCSPStringCache *cspCache = newCSPCache()
 
 func getIndexContentSecurityPolicyString(cfg proto.Features, urlPath string) string {
 	// Check for result with this cfg and urlPath in cache
-	withStripe := cfg.GetProductType() == proto.ProductType_PRODUCT_TYPE_TEAM
+	withStripe := cfg.GetIsStripeManaged()
 	key := fmt.Sprintf("%v-%v", withStripe, urlPath)
 	if cspString, ok := indexCSPStringCache.get(key); ok {
 		return cspString

lib/httplib/httplib_test.go

@@ -295,8 +295,8 @@ func TestSetIndexContentSecurityPolicy(t *testing.T) {
 			},
 		},
 		{
-			name:     "for cloud based usage, Team product (with stripe, no wasm)",
-			features: proto.Features{Cloud: true, IsUsageBased: true, ProductType: proto.ProductType_PRODUCT_TYPE_TEAM},
+			name:     "for cloud based usage, Stripe managed product (with stripe, no wasm)",
+			features: proto.Features{Cloud: true, IsUsageBased: true, IsStripeManaged: true},
 			urlPath:  "/web/index.js",
 			expectedCspVals: map[string]string{
 				"default-src":     "'self'",
@@ -346,8 +346,8 @@ func TestSetIndexContentSecurityPolicy(t *testing.T) {
 			},
 		},
 		{
-			name:     "for cloud based usage & desktop session, Team product (with stripe, with wasm)",
-			features: proto.Features{Cloud: true, IsUsageBased: true, ProductType: proto.ProductType_PRODUCT_TYPE_TEAM},
+			name:     "for cloud based usage & desktop session, Stripe managed product (with stripe, with wasm)",
+			features: proto.Features{Cloud: true, IsUsageBased: true, IsStripeManaged: true},
 			urlPath:  "/web/cluster/:clusterId/desktops/:desktopName/:username",
 			expectedCspVals: map[string]string{
 				"default-src":     "'self'",

lib/integrations/externalauditstorage/configurator.go

@@ -182,7 +182,7 @@ func NewDraftConfigurator(ctx context.Context, ecaSvc ExternalAuditStorageGetter
 
 func newConfigurator(ctx context.Context, spec *externalauditstorage.ExternalAuditStorageSpec, integrationSvc services.IntegrationsGetter, alertService ClusterAlertService, optFns ...func(*Options)) (*Configurator, error) {
 	// ExternalAuditStorage is only available in Cloud Enterprise
-	if !modules.GetModules().Features().Cloud || modules.GetModules().Features().IsTeam() {
+	if !modules.GetModules().Features().Cloud || !modules.GetModules().Features().ExternalAuditStorage {
 		return &Configurator{isUsed: false}, nil
 	}
 

lib/integrations/externalauditstorage/configurator_test.go

@@ -102,8 +102,8 @@ func TestConfiguratorIsUsed(t *testing.T) {
 			name: "cloud enterprise without config",
 			modules: &modules.TestModules{
 				TestFeatures: modules.Features{
-					Cloud:               true,
-					IsUsageBasedBilling: false,
+					Cloud:                true,
+					ExternalAuditStorage: true,
 				},
 			},
 			wantIsUsed: false,
@@ -112,8 +112,8 @@ func TestConfiguratorIsUsed(t *testing.T) {
 			name: "cloud enterprise with only draft",
 			modules: &modules.TestModules{
 				TestFeatures: modules.Features{
-					Cloud:               true,
-					IsUsageBasedBilling: false,
+					Cloud:                true,
+					ExternalAuditStorage: true,
 				},
 			},
 			// Just create draft, External Audit Storage should be disabled, it's
@@ -129,8 +129,8 @@ func TestConfiguratorIsUsed(t *testing.T) {
 			name: "cloud enterprise with cluster config",
 			modules: &modules.TestModules{
 				TestFeatures: modules.Features{
-					Cloud:               true,
-					IsUsageBasedBilling: false,
+					Cloud:                true,
+					ExternalAuditStorage: true,
 				},
 			},
 			// Create draft and promote it to cluster.
@@ -178,8 +178,8 @@ func TestCredentialsCache(t *testing.T) {
 
 	modules.SetTestModules(t, &modules.TestModules{
 		TestFeatures: modules.Features{
-			Cloud:               true,
-			IsUsageBasedBilling: false,
+			Cloud:                true,
+			ExternalAuditStorage: true,
 		},
 	})
 
@@ -316,8 +316,8 @@ func TestDraftConfigurator(t *testing.T) {
 
 	modules.SetTestModules(t, &modules.TestModules{
 		TestFeatures: modules.Features{
-			Cloud:               true,
-			IsUsageBasedBilling: false,
+			Cloud:                true,
+			ExternalAuditStorage: true,
 		},
 	})
 

lib/modules/modules.go

@@ -243,7 +243,7 @@ func (f Features) IGSEnabled() bool {
 	return f.IdentityGovernanceSecurity
 }
 
-// TODO(mcbattirola): Deprecate IsTeam once it's unused.
+// TODO(mcbattirola): remove isTeam when it is no longer used
 func (f Features) IsTeam() bool {
 	return f.ProductType == ProductTypeTeam
 }

lib/service/service_test.go

@@ -474,7 +474,8 @@ func TestAthenaAuditLogSetup(t *testing.T) {
 	ctx := context.Background()
 	modules.SetTestModules(t, &modules.TestModules{
 		TestFeatures: modules.Features{
-			Cloud: true,
+			Cloud:                true,
+			ExternalAuditStorage: true,
 		},
 	})
 

lib/web/apiserver.go

@@ -1694,6 +1694,9 @@ func (h *Handler) getWebConfig(w http.ResponseWriter, r *http.Request, p httprou
 		h.log.WithError(err).Error("Cannot read target version")
 	}
 
+	// TODO(mcbattirola): remove isTeam when it is no longer used
+	isTeam := clusterFeatures.GetProductType() == proto.ProductType_PRODUCT_TYPE_TEAM
+
 	webCfg := webclient.WebConfig{
 		Auth:                           authSettings,
 		CanJoinSessions:                canJoinSessions,
@@ -1708,13 +1711,24 @@ func (h *Handler) getWebConfig(w http.ResponseWriter, r *http.Request, p httprou
 		AssistEnabled:                  assistEnabled,
 		HideInaccessibleFeatures:       clusterFeatures.GetFeatureHiding(),
 		CustomTheme:                    clusterFeatures.GetCustomTheme(),
-		IsTeam:                         clusterFeatures.GetProductType() == proto.ProductType_PRODUCT_TYPE_TEAM,
 		IsIGSEnabled:                   clusterFeatures.GetIdentityGovernance(),
 		FeatureLimits: webclient.FeatureLimits{
 			AccessListCreateLimit:               int(clusterFeatures.GetAccessList().GetCreateLimit()),
 			AccessMonitoringMaxReportRangeLimit: int(clusterFeatures.GetAccessMonitoring().GetMaxReportRangeLimit()),
 			AccessRequestMonthlyRequestLimit:    int(clusterFeatures.GetAccessRequests().GetMonthlyRequestLimit()),
 		},
+		Questionnaire:          clusterFeatures.GetQuestionnaire(),
+		IsStripeManaged:        clusterFeatures.GetIsStripeManaged(),
+		ExternalAuditStorage:   clusterFeatures.GetExternalAuditStorage(),
+		PremiumSupport:         clusterFeatures.GetSupportType() == proto.SupportType_SUPPORT_TYPE_PREMIUM,
+		AccessRequests:         clusterFeatures.GetAccessRequests().MonthlyRequestLimit > 0,
+		TrustedDevices:         clusterFeatures.GetDeviceTrust().GetEnabled(),
+		OIDC:                   clusterFeatures.GetOIDC(),
+		SAML:                   clusterFeatures.GetSAML(),
+		MobileDeviceManagement: clusterFeatures.GetMobileDeviceManagement(),
+		JoinActiveSessions:     clusterFeatures.GetJoinActiveSessions(),
+		// TODO(mcbattirola): remove isTeam when it is no longer used
+		IsTeam: isTeam,
 	}
 
 	resource, err := h.cfg.ProxyClient.GetClusterName()

lib/web/apiserver_test.go

@@ -4497,11 +4497,12 @@ func TestGetWebConfig(t *testing.T) {
 			PrivateKeyPolicy:   keys.PrivateKeyPolicyNone,
 			MOTD:               MOTD,
 		},
-		CanJoinSessions:   true,
-		ProxyClusterName:  env.server.ClusterName(),
-		IsCloud:           false,
-		AssistEnabled:     false,
-		AutomaticUpgrades: false,
+		CanJoinSessions:    true,
+		ProxyClusterName:   env.server.ClusterName(),
+		IsCloud:            false,
+		AssistEnabled:      false,
+		AutomaticUpgrades:  false,
+		JoinActiveSessions: true,
 	}
 
 	// Make a request.
@@ -4551,6 +4552,7 @@ func TestGetWebConfig(t *testing.T) {
 	expectedCfg.AutomaticUpgrades = true
 	expectedCfg.AutomaticUpgradesTargetVersion = "v" + teleport.Version
 	expectedCfg.AssistEnabled = false
+	expectedCfg.JoinActiveSessions = false
 
 	// request and verify enabled features are enabled.
 	re, err = clt.Get(ctx, endpoint, nil)
@@ -4603,6 +4605,9 @@ func TestGetWebConfig_IGSFeatureLimits(t *testing.T) {
 			AccessMonitoring: modules.AccessMonitoringFeature{
 				MaxReportRangeLimit: 10,
 			},
+			IsUsageBasedBilling: true,
+			IsStripeManaged:     true,
+			Questionnaire:       true,
 		},
 	})
 
@@ -4619,8 +4624,11 @@ func TestGetWebConfig_IGSFeatureLimits(t *testing.T) {
 			AccessListCreateLimit:               5,
 			AccessMonitoringMaxReportRangeLimit: 10,
 		},
-		IsTeam:       true,
-		IsIGSEnabled: true,
+		IsTeam:              true,
+		IsIGSEnabled:        true,
+		IsStripeManaged:     true,
+		Questionnaire:       true,
+		IsUsageBasedBilling: true,
 	}
 
 	// Make a request.

web/packages/teleport/src/Integrations/Enroll/IntegrationTiles.tsx

@@ -39,7 +39,7 @@ export function IntegrationTiles({
   hasIntegrationAccess?: boolean;
   hasExternalAuditStorage?: boolean;
 }) {
-  const isCloudEnterprise = cfg.isCloud && !cfg.isTeam;
+  const externalAuditStorageEnabled = cfg.externalAuditStorage;
   const isOnpremEnterprise = cfg.isEnterprise && !cfg.isCloud;
 
   return (
@@ -76,7 +76,7 @@ export function IntegrationTiles({
       </IntegrationTile>
       {!isOnpremEnterprise && (
         <IntegrationTile
-          disabled={!hasExternalAuditStorage || !isCloudEnterprise}
+          disabled={!hasExternalAuditStorage || !externalAuditStorageEnabled}
           as={hasExternalAuditStorage ? Link : null}
           to={
             hasExternalAuditStorage
@@ -93,7 +93,7 @@ export function IntegrationTiles({
           <Text>AWS External Audit Storage</Text>
           {renderExternalAuditStorageBadge(
             hasExternalAuditStorage,
-            isCloudEnterprise
+            externalAuditStorageEnabled
           )}
         </IntegrationTile>
       )}

web/packages/teleport/src/Sessions/Sessions.story.test.tsx

@@ -34,7 +34,6 @@ test('loaded', () => {
 });
 
 test('active sessions CTA', () => {
-  cfg.isTeam = true;
   cfg.isEnterprise = true;
   const { container } = render(<ActiveSessionsCTA />);
   expect(container.firstChild).toMatchSnapshot();

web/packages/teleport/src/Sessions/__snapshots__/Sessions.story.test.tsx.snap

@@ -490,7 +490,7 @@ exports[`active sessions CTA 1`] = `
       <a
         class="c10"
         height="36px"
-        href="https://goteleport.com/r/upgrade-team?e_4.4.0-dev&utm_campaign=CTA_ACTIVE_SESSIONS"
+        href="https://goteleport.com/r/upgrade-igs?e_4.4.0-dev&utm_campaign=CTA_ACTIVE_SESSIONS"
         kind="primary"
         rel="noreferrer"
         style="text-transform: none;"

web/packages/teleport/src/Sessions/useSessions.ts

@@ -24,6 +24,7 @@ import { context, trace } from '@opentelemetry/api';
 import { Session } from 'teleport/services/session';
 
 import Ctx from 'teleport/teleportContext';
+import cfg from 'teleport/config';
 
 const tracer = trace.getTracer('userSessions');
 
@@ -57,6 +58,6 @@ export default function useSessions(ctx: Ctx, clusterId: string) {
     sessions,
     // moderated is available with any enterprise editions
     showModeratedSessionsCTA: !ctx.isEnterprise,
-    showActiveSessionsCTA: ctx.lockedFeatures.activeSessions,
+    showActiveSessionsCTA: !cfg.joinActiveSessions,
   };
 }

web/packages/teleport/src/Support/Support.story.test.tsx

@@ -69,7 +69,7 @@ test('support Enterprise', () => {
 
 test('support Enterprise with CTA', () => {
   cfg.isEnterprise = true;
-  cfg.isTeam = true;
+  cfg.premiumSupport = true;
   const { container } = render(
     <MemoryRouter>
       <SupportEnterpriseWithCTA />

web/packages/teleport/src/Support/Support.tsx

@@ -34,7 +34,7 @@ export function SupportContainer({ children }: { children?: React.ReactNode }) {
   const cluster = ctx.storeUser.state.cluster;
 
   // showCTA returns the premium support value for enterprise customers and true for OSS users
-  const showCTA = cfg.isEnterprise ? ctx.lockedFeatures.premiumSupport : true;
+  const showCTA = cfg.isEnterprise ? !cfg.premiumSupport : true;
 
   return (
     <Support

web/packages/teleport/src/Support/__snapshots__/Support.story.test.tsx.snap

@@ -1134,7 +1134,7 @@ exports[`support Enterprise with CTA 1`] = `
         </a>
         <a
           class="c13"
-          href="https://goteleport.com/r/upgrade-team?e_4.4.0-dev&utm_campaign=CTA_PREMIUM_SUPPORT"
+          href="https://goteleport.com/r/upgrade-igs?e_4.4.0-dev&utm_campaign=CTA_PREMIUM_SUPPORT"
           kind="primary"
           rel="noreferrer"
           style="text-transform: none;"

web/packages/teleport/src/components/ButtonLockedFeature/ButtonLockedFeature.test.tsx

@@ -28,14 +28,12 @@ import { CtaEvent, userEventService } from 'teleport/services/userEvent';
 
 import { ButtonLockedFeature } from './ButtonLockedFeature';
 
-const defaultIsTeamFlag = cfg.isTeam;
 const defaultIsEnterpriseFlag = cfg.isEnterprise;
 
 describe('buttonLockedFeature', () => {
   afterEach(() => {
     jest.resetAllMocks();
 
-    cfg.isTeam = defaultIsTeamFlag;
     cfg.isEnterprise = defaultIsEnterpriseFlag;
   });
 
@@ -59,35 +57,8 @@ describe('buttonLockedFeature', () => {
     expect(screen.queryByTestId('locked-icon')).not.toBeInTheDocument();
   });
 
-  test('it has upgrade-team href for Team Plan', () => {
-    const version = ctx.storeUser.state.cluster.authVersion;
-    cfg.isTeam = true;
-    cfg.isEnterprise = true;
-
-    renderWithContext(
-      <ButtonLockedFeature noIcon={true}>text</ButtonLockedFeature>
-    );
-    expect(screen.getByText('text').closest('a')).toHaveAttribute(
-      'href',
-      `https://goteleport.com/r/upgrade-team?e_${version}&utm_campaign=CTA_UNSPECIFIED`
-    );
-
-    renderWithContext(
-      <ButtonLockedFeature noIcon={true} event={CtaEvent.CTA_ACCESS_REQUESTS}>
-        othertext
-      </ButtonLockedFeature>
-    );
-    expect(screen.getByText('othertext').closest('a')).toHaveAttribute(
-      'href',
-      `https://goteleport.com/r/upgrade-team?e_${version}&utm_campaign=${
-        CtaEvent[CtaEvent.CTA_ACCESS_REQUESTS]
-      }`
-    );
-  });
-
   test('it has upgrade-community href for community edition', () => {
     const version = ctx.storeUser.state.cluster.authVersion;
-    cfg.isTeam = false;
     cfg.isEnterprise = false;
     renderWithContext(
       <ButtonLockedFeature noIcon={true}>text</ButtonLockedFeature>,
@@ -118,7 +89,6 @@ describe('buttonLockedFeature', () => {
 
   test('it has upgrade-igs href for Enterprise + IGS Plan', () => {
     const version = ctx.storeUser.state.cluster.authVersion;
-    cfg.isTeam = false;
     cfg.isEnterprise = true;
 
     renderWithContext(

web/packages/teleport/src/components/ExternalAuditStorageCta/ExternalAuditStorageCta.test.tsx

@@ -51,7 +51,7 @@ describe('externalAuditStorageCta', () => {
     });
 
     cfg.isCloud = isCloud;
-    ctx.lockedFeatures.externalCloudAudit = lockedFeature;
+    cfg.externalAuditStorage = lockedFeature;
 
     jest
       .spyOn(storageService, 'getExternalAuditStorageCtaDisabled')

web/packages/teleport/src/components/ExternalAuditStorageCta/ExternalAuditStorageCta.tsx

@@ -40,7 +40,7 @@ import { ButtonLockedFeature } from '../ButtonLockedFeature';
 export const ExternalAuditStorageCta = () => {
   const [showCta, setShowCta] = useState<boolean>(false);
   const ctx = useTeleport();
-  const featureEnabled = !ctx.lockedFeatures.externalCloudAudit;
+  const featureEnabled = !cfg.externalAuditStorage;
   const userHasAccess = ctx.getFeatureFlags().enrollIntegrationsOrPlugins;
 
   useEffect(() => {