Remove remaining SecurityClient auth calls in favor of hooks, keep RouteGuard

frontend/src/pages/api/auth/ChangePassword2.ts

@@ -1,46 +0,0 @@
-import { apiRequest } from "@app/config/request";
-
-interface Props {
-  clientProof: string;
-  protectedKey: string;
-  protectedKeyIV: string;
-  protectedKeyTag: string;
-  encryptedPrivateKey: string;
-  encryptedPrivateKeyIV: string;
-  encryptedPrivateKeyTag: string;
-  salt: string;
-  verifier: string;
-}
-
-/**
- * This is the second step of the change password process (pake)
- * @param {*} clientPublicKey
- * @returns
- */
-const changePassword2 = async ({
-  clientProof,
-  protectedKey,
-  protectedKeyIV,
-  protectedKeyTag,
-  encryptedPrivateKey, 
-  encryptedPrivateKeyIV, 
-  encryptedPrivateKeyTag, 
-  salt, 
-  verifier
-}: Props) => {
-  const { data } = await apiRequest.post("/api/v1/password/change-password", {
-    clientProof,
-    protectedKey,
-    protectedKeyIV,
-    protectedKeyTag,
-    encryptedPrivateKey,
-    encryptedPrivateKeyIV,
-    encryptedPrivateKeyTag,
-    salt,
-    verifier
-  });
-  
-  return data;
-}
-
-export default changePassword2;

frontend/src/pages/api/auth/CheckAuth.ts

@@ -4,12 +4,13 @@ import SecurityClient from "@app/components/utilities/SecurityClient";
  * This function is used to check if the user is authenticated.
  * To do that, we get their tokens from cookies, and verify if they are good.
  */
-const checkAuth = async () =>
-  SecurityClient.fetchCall("/api/v1/auth/checkAuth", {
+const checkAuth = async () => {
+  return SecurityClient.fetchCall("/api/v1/auth/checkAuth", {
     method: "POST",
     headers: {
       "Content-Type": "application/json"
     }
   }).then((res) => res);
+}
 
 export default checkAuth;

frontend/src/pages/api/auth/CheckEmailVerificationCode.ts

@@ -1,24 +0,0 @@
-interface Props {
-  email: string;
-  code: string;
-}
-
-/**
- * This route check the verification code from the email that user just recieved
- * @param {object} obj
- * @param {string} obj.email
- * @param {string} obj.code
- * @returns
- */
-const checkEmailVerificationCode = ({ email, code }: Props) => fetch("/api/v1/signup/email/verify", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      email,
-      code
-    })
-  });
-
-export default checkEmailVerificationCode;

frontend/src/pages/api/auth/CompleteAccountInformationSignup.ts

@@ -1,79 +0,0 @@
-
-import { apiRequest } from "@app/config/request";
-
-interface Props {
-  email: string;
-  firstName: string;
-  lastName: string;
-  protectedKey: string;
-  protectedKeyIV: string;
-  protectedKeyTag: string;
-  providerAuthToken?: string;
-  publicKey: string;
-  encryptedPrivateKey: string;
-  encryptedPrivateKeyIV: string;
-  encryptedPrivateKeyTag: string;
-  organizationName: string;
-  salt: string;
-  verifier: string;
-  attributionSource?: string;
-}
-
-/**
- * This function is called in the end of the signup process.
- * It sends all the necessary nformation to the server.
- * @param {object} obj
- * @param {string} obj.email - email of the user completing signup
- * @param {string} obj.firstName - first name of the user completing signup
- * @param {string} obj.lastName - last name of the user completing sign up
- * @param {string} obj.protectedKey - protected key in encryption version 2
- * @param {string} obj.protectedKeyIV - IV of protected key in encryption version 2
- * @param {string} obj.protectedKeyTag - tag of protected key in encryption version 2
- * @param {string} obj.organizationName - organization name for this user (usually, [FIRST_NAME]'s organization)
- * @param {string} obj.publicKey - public key of the user completing signup
- * @param {string} obj.ciphertext
- * @param {string} obj.iv
- * @param {string} obj.tag
- * @param {string} obj.salt
- * @param {string} obj.verifier
- * @returns
- */
-const completeAccountInformationSignup = async ({
-  email,
-  firstName,
-  lastName,
-  protectedKey,
-  protectedKeyIV,
-  protectedKeyTag,
-  publicKey,
-  encryptedPrivateKey,
-  encryptedPrivateKeyIV,
-  encryptedPrivateKeyTag,
-  salt,
-  verifier,
-  organizationName,
-  providerAuthToken,
-  attributionSource
-}: Props) => {
-  const { data } = await apiRequest.post("/api/v3/signup/complete-account/signup", {
-    email,
-    firstName,
-    lastName,
-    protectedKey,
-    protectedKeyIV,
-    protectedKeyTag,
-    publicKey,
-    encryptedPrivateKey,
-    encryptedPrivateKeyIV,
-    encryptedPrivateKeyTag,
-    salt,
-    verifier,
-    organizationName,
-    providerAuthToken,
-    ...(attributionSource ? { attributionSource } : {})
-  });
-
-  return data;
-}
-
-export default completeAccountInformationSignup;

frontend/src/pages/api/auth/CompleteAccountInformationSignupInvite.ts

@@ -1,70 +0,0 @@
-import { apiRequest } from "@app/config/request";
-
-interface Props {
-  email: string;
-  firstName: string;
-  lastName: string;
-  protectedKey: string;
-  protectedKeyIV: string;
-  protectedKeyTag: string;
-  publicKey: string;
-  encryptedPrivateKey: string;
-  encryptedPrivateKeyIV: string;
-  encryptedPrivateKeyTag: string;
-  salt: string;
-  verifier: string;
-}
-
-// missing token?
-// TODO: add to SecurityClient
-
-
-/**
- * This function is called in the end of the signup process.
- * It sends all the necessary nformation to the server.
- * @param {object} obj
- * @param {string} obj.email - email of the user completing signupinvite flow
- * @param {string} obj.firstName - first name of the user completing signupinvite flow
- * @param {string} obj.lastName - last name of the user completing signupinvite flow
- * @param {string} obj.publicKey - public key of the user completing signupinvite flow
- * @param {string} obj.ciphertext
- * @param {string} obj.iv
- * @param {string} obj.tag
- * @param {string} obj.salt
- * @param {string} obj.verifier
- * @param {string} obj.token - token that confirms a user's identity
- * @returns
- */
-const completeAccountInformationSignupInvite = async ({
-  email,
-  firstName,
-  lastName,
-  protectedKey,
-  protectedKeyIV,
-  protectedKeyTag,
-  publicKey,
-  encryptedPrivateKey,
-  encryptedPrivateKeyIV,
-  encryptedPrivateKeyTag,
-  salt,
-  verifier
-}: Props) => {
-  const { data } = await apiRequest.post("/api/v2/signup/complete-account/invite", {
-    email,
-    firstName,
-    lastName,
-    protectedKey,
-    protectedKeyIV,
-    protectedKeyTag,
-    publicKey,
-    encryptedPrivateKey,
-    encryptedPrivateKeyIV,
-    encryptedPrivateKeyTag,
-    salt,
-    verifier 
-  });
-
-  return data;
-}
-
-export default completeAccountInformationSignupInvite;

frontend/src/pages/api/auth/EmailVerifyOnPasswordReset.ts

@@ -1,34 +0,0 @@
-interface Props {
-  email: string;
-  code: string;
-}
-
-/**
- * This is the second part of the account recovery step (a user needs to verify their email).
- * A user need to click on a button in a magic link page
- * @param {object} obj
- * @param {object} obj.email - email of a user that is trying to recover access to their account
- * @param {object} obj.code - token that a use received via the magic link
- * @returns
- */
-const EmailVerifyOnPasswordReset = async ({ email, code }: Props) => {
-  const response = await fetch("/api/v1/password/email/password-reset-verify", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      email,
-      code
-    })
-  });
-  if (response?.status === 200) {
-    return response;
-  }
-
-  throw new Error(
-    "Something went wrong during email verification on password reset."
-  );
-};
-
-export default EmailVerifyOnPasswordReset;

frontend/src/pages/api/auth/IssueBackupPrivateKey.ts

@@ -1,51 +0,0 @@
-import SecurityClient from "@app/components/utilities/SecurityClient";
-
-interface Props {
-  encryptedPrivateKey: string;
-  iv: string;
-  tag: string;
-  salt: string;
-  verifier: string;
-  clientProof: string;
-}
-
-/**
- * This is the route that issues a backup private key that will afterwards be added into a pdf
- * @param {object} obj
- * @param {string} obj.encryptedPrivateKey
- * @param {string} obj.iv
- * @param {string} obj.tag
- * @param {string} obj.salt
- * @param {string} obj.verifier
- * @param {string} obj.clientProof
- * @returns
- */
-const issueBackupPrivateKey = ({
-  encryptedPrivateKey,
-  iv,
-  tag,
-  salt,
-  verifier,
-  clientProof
-}: Props) =>
-  SecurityClient.fetchCall("/api/v1/password/backup-private-key", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      clientProof,
-      encryptedPrivateKey,
-      iv,
-      tag,
-      salt,
-      verifier
-    })
-  }).then((res) => {
-    if (res?.status !== 200) {
-      console.log("Failed to issue the backup key");
-    }
-    return res;
-  });
-
-export default issueBackupPrivateKey;

frontend/src/pages/api/auth/Login1.ts

@@ -1,33 +0,0 @@
-interface Login1 {
-  serverPublicKey: string;
-  salt: string;
-}
-
-/**
- * This is the first step of the login process (pake)
- * @param {*} email
- * @param {*} clientPublicKey
- * @returns
- */
-const login1 = async (loginDetails: {
-  email: string;
-  clientPublicKey: string;
-  providerAuthToken?: string;
-}) => {
-  const response = await fetch("/api/v3/auth/login1", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify(loginDetails),
-  });
-  // need precise error handling about the status code
-  if (response?.status === 200) {
-    const data = (await response.json()) as unknown as Login1;
-    return data;
-  }
-  
-  throw new Error("Wrong password");
-};
-
-export default login1;

frontend/src/pages/api/auth/Login2.ts

@@ -1,42 +0,0 @@
-interface Login2Response {
-  mfaEnabled: boolean;
-  token: string;
-  encryptionVersion?: number;
-  protectedKey?: string;
-  protectedKeyIV?: string;
-  protectedKeyTag?: string;
-  publicKey?: string;
-  encryptedPrivateKey?: string;
-  iv?: string;
-  tag?: string;
-}
-
-/**
- * This is the second step of the login process
- * @param {*} email
- * @param {*} clientPublicKey
- * @returns
- */
-const login2 = async (loginDetails: {
-  email: string;
-  clientProof: string;
-  providerAuthToken?: string;
-}) => {
-  const response = await fetch("/api/v3/auth/login2", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify(loginDetails),
-    credentials: "include"
-  });
-  // need precise error handling about the status code
-  if (response.status === 200) {
-    const data = (await response.json()) as unknown as Login2Response;
-    return data;
-  }
-
-  throw new Error("Password verification failed");
-};
-
-export default login2;

frontend/src/pages/api/auth/Logout.ts

@@ -1,41 +0,0 @@
-import SecurityClient from "@app/components/utilities/SecurityClient";
-
-/**
- * This route logs the user out. Note: the user should authorized to do this.
- * We first try to log out - if the authorization fails (response.status = 401), we refetch the new token, and then retry
- */
-const logout = async () => {
-  try {
-    const res = await SecurityClient.fetchCall("/api/v1/auth/logout", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      credentials: "include"
-    });
-
-    if (res?.status === 200) {
-      SecurityClient.setToken("");
-      // Delete the cookie by not setting a value; Alternatively clear the local storage
-      localStorage.removeItem("protectedKey");
-      localStorage.removeItem("protectedKeyIV");
-      localStorage.removeItem("protectedKeyTag");
-      localStorage.removeItem("publicKey");
-      localStorage.removeItem("encryptedPrivateKey");
-      localStorage.removeItem("iv");
-      localStorage.removeItem("tag");
-      localStorage.removeItem("PRIVATE_KEY");
-      localStorage.removeItem("orgData.id");
-      localStorage.removeItem("projectData.id");
-
-      return res;
-    }
-
-  } catch (error) {
-    console.log("Error logging out", error);
-  }
-
-  return undefined;
-};
-
-export default logout;

frontend/src/pages/api/auth/SRP1.ts

@@ -1,29 +0,0 @@
-import SecurityClient from "@app/components/utilities/SecurityClient";
-
-interface Props {
-  clientPublicKey: string;
-}
-
-/**
- * This is the first step of the change password process (pake)
- * @param {string} clientPublicKey
- * @returns
- */
-const SRP1 = ({ clientPublicKey }: Props) =>
-  SecurityClient.fetchCall("/api/v1/password/srp1", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      clientPublicKey
-    })
-  }).then(async (res) => {
-    if (res && res.status === 200) {
-      return res.json();
-    }
-    console.log("Failed to do the first step of SRP");
-    return undefined;
-  });
-
-export default SRP1;

frontend/src/pages/api/auth/SendEmailOnPasswordReset.ts

@@ -1,33 +0,0 @@
-interface Props {
-  email: string;
-}
-
-/**
- * This is the first of the account recovery step (a user needs to verify their email).
- * It will send an email containing a magic link to start the account recovery flow.
- * @param {object} obj
- * @param {object} obj.email - email of a user that is trying to recover access to their account
- * @returns
- */
-const SendEmailOnPasswordReset = async ({ email }: Props) => {
-  const response = await fetch("/api/v1/password/email/password-reset", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      email
-    })
-  });
-  // need precise error handling about the status code
-  if (response?.status === 200) {
-    const data = await response.json();
-    return data;
-  }
-
-  throw new Error(
-    "Something went wrong while sending the email verification for password reset."
-  );
-};
-
-export default SendEmailOnPasswordReset;

frontend/src/pages/api/auth/SendVerificationEmail.ts

@@ -1,17 +0,0 @@
-/**
- * This route send the verification email to the user's email (contains a 6-digit verification code)
- * @param {*} email
- */
-const sendVerificationEmail = (email: string) => {
-  fetch("/api/v1/signup/email/signup", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      email
-    })
-  });
-};
-
-export default sendVerificationEmail;

frontend/src/pages/api/auth/Token.ts

@@ -1,16 +0,0 @@
-const token = async () =>
-  fetch("/api/v1/auth/token", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    credentials: "include"
-  }).then(async (res) => {
-    if (res.status === 200) {
-      return (await res.json()).token;
-    }
-    console.log("Getting a new token failed");
-    return undefined;
-  });
-
-export default token;

frontend/src/pages/api/auth/VerifySignupInvite.ts

@@ -1,27 +0,0 @@
-interface Props {
-  email: string;
-  code: string;
-  organizationId: string;
-}
-
-/**
- * This route verifies the signup invite link
- * @param {object} obj
- * @param {string} obj.email - email that a user is trying to verify
- * @param {string} obj.organizationId - id of organization that a user is trying to verify for
- * @param {string} obj.code - code that a user received to the abovementioned email
- * @returns
- */
-const verifySignupInvite = ({ email, organizationId, code }: Props) => fetch("/api/v1/invite-org/verify", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      email,
-      organizationId,
-      code
-    })
-  });
-
-export default verifySignupInvite;

frontend/src/pages/api/auth/getBackupEncryptedPrivateKey.ts

@@ -1,24 +0,0 @@
-/**
- * This is the route that get an encrypted private key (will be decrypted with a backup key)
- * @param {object} obj
- * @param {object} obj.verificationToken - this is the token that confirms that a user is the right one
- * @returns
- */
-const getBackupEncryptedPrivateKey = ({
-  verificationToken
-}: {
-  verificationToken: string;
-}) => fetch("/api/v1/password/backup-private-key", {
-    method: "GET",
-    headers: {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${  verificationToken}`
-    }
-  }).then(async (res) => {
-    if (res?.status !== 200) {
-      console.log("Failed to get the backup key");
-    }
-    return (await res?.json())?.backupPrivateKey;
-  });
-
-export default getBackupEncryptedPrivateKey;

frontend/src/pages/api/auth/publicKeyInfisical.ts

@@ -1,8 +0,0 @@
-const publicKeyInfisical = () => fetch("/api/v1/key/publicKey/infisical", {
-    method: "GET",
-    headers: {
-      "Content-Type": "application/json"
-    }
-  });
-
-export default publicKeyInfisical;

frontend/src/pages/api/auth/resetPasswordOnAccountRecovery.ts

@@ -1,57 +0,0 @@
-interface Props {
-  protectedKey: string;
-  protectedKeyIV: string;
-  protectedKeyTag: string;
-  encryptedPrivateKey: string;
-  encryptedPrivateKeyIV: string;
-  encryptedPrivateKeyTag: string;
-  salt: string;
-  verifier: string;
-  verificationToken: string;
-}
-
-/**
- * This is the route that resets the account password if all the previus steps were passed
- * @param {object} obj
- * @param {object} obj.verificationToken - this is the token that confirms that a user is the right one
- * @param {object} obj.encryptedPrivateKey - the new encrypted private key (encrypted using the new password)
- * @param {object} obj.iv
- * @param {object} obj.tag
- * @param {object} obj.salt
- * @param {object} obj.verifier
- * @returns
- */
-const resetPasswordOnAccountRecovery = ({
-  protectedKey,
-  protectedKeyIV,
-  protectedKeyTag,
-  encryptedPrivateKey,
-  encryptedPrivateKeyIV,
-  encryptedPrivateKeyTag,
-  salt,
-  verifier,
-  verificationToken,
-}: Props) => fetch("/api/v1/password/password-reset", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${verificationToken}`
-    },
-    body: JSON.stringify({
-      protectedKey,
-      protectedKeyIV,
-      protectedKeyTag,
-      encryptedPrivateKey,
-      encryptedPrivateKeyIV,
-      encryptedPrivateKeyTag,
-      salt,
-      verifier
-    })
-  }).then(async (res) => {
-    if (res?.status !== 200) {
-      console.log("Failed to get the backup key");
-    }
-    return res;
-  });
-
-export default resetPasswordOnAccountRecovery;

frontend/src/pages/api/auth/verifyMfaToken.ts

@@ -1,25 +0,0 @@
-import { apiRequest } from "@app/config/request";
-
-/**
- * Verify MFA token [mfaToken] for user with email [email]
- * @param {object} obj
- * @param {string} obj.email - email of user
- * @param {string} obj.mfaToken - MFA cod/token to verify
- * @returns
- */
-const verifyMfaToken = async ({
-    email, 
-    mfaToken
-}: {
-    email: string;
-    mfaToken: string;
-}) => {
-  const { data } = await apiRequest.post("/api/v2/auth/mfa/verify", {
-    email,
-    mfaToken
-  });  
-  
-  return data;
-}
-
-export default verifyMfaToken;