Checkpoint weaving frontend and backend MFA

frontend/src/pages/api/auth/CompleteAccountInformationSignup.ts

@@ -1,3 +1,5 @@
+import SecurityClient from '@app/components/utilities/SecurityClient';
+
 interface Props {
   email: string;
   firstName: string;
@@ -12,7 +14,6 @@ interface Props {
   organizationName: string;
   salt: string;
   verifier: string;
-  token: string;
 }
 
 /**
@@ -32,7 +33,6 @@ interface Props {
  * @param {string} obj.tag
  * @param {string} obj.salt
  * @param {string} obj.verifier
- * @param {string} obj.token - token that confirms a user's identity
  * @returns
  */
 const completeAccountInformationSignup = ({
@@ -48,13 +48,11 @@ const completeAccountInformationSignup = ({
   encryptedPrivateKeyTag,
   salt,
   verifier,
-  token,
   organizationName
-}: Props) => fetch('/api/v2/signup/complete-account/signup', {
+}: Props) => SecurityClient.fetchCall('/api/v2/signup/complete-account/signup', {
     method: 'POST',
     headers: {
-      'Content-Type': 'application/json',
-      Authorization: `Bearer ${  token}`
+      'Content-Type': 'application/json'
     },
     body: JSON.stringify({
       email,
@@ -71,6 +69,12 @@ const completeAccountInformationSignup = ({
       verifier,
       organizationName
     })
+  }).then(async (res) => {
+    if (res && res?.status === 200) {
+      return res.json();
+    }
+    console.log('Failed to verify MFA code');
+    throw new Error('Something went wrong during MFA code verification');
   });
 
 export default completeAccountInformationSignup;

frontend/src/pages/api/auth/Login1.ts

@@ -25,7 +25,7 @@ const login1 = async (email: string, clientPublicKey: string) => {
     const data = (await response.json()) as unknown as Login1;
     return data;
   }
-
+  
   throw new Error("Wrong password");
 };
 

frontend/src/pages/api/auth/Login2.ts

@@ -1,14 +1,14 @@
 interface Login2Response {
   mfaEnabled: boolean;
-  encryptionVersion: number;
+  token: string;
+  encryptionVersion?: number;
   protectedKey?: string;
   protectedKeyIV?: string;
   protectedKeyTag?: string;
-  token: string;
-  publicKey: string;
-  encryptedPrivateKey: string;
-  iv: string;
-  tag: string;
+  publicKey?: string;
+  encryptedPrivateKey?: string;
+  iv?: string;
+  tag?: string;
 }
 
 /**

frontend/src/pages/api/auth/resendMfaToken.ts

@@ -0,0 +1,29 @@
+import SecurityClient from "@app/components/utilities/SecurityClient";
+
+/**
+ * Send new MFA token to user with email [email]
+ * @param {object} obj
+ * @param {string} obj.email - email of user
+ * @returns
+ */
+const resendMfaToken = async ({
+    email, 
+}: {
+    email: string;
+}) => SecurityClient.fetchCall('/api/v2/auth/mfa/send', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({
+      email
+    })
+  }).then(async (res) => {
+    if (res && res?.status === 200) {
+      return res.json();
+    }
+    console.log('Failed to send new MFA code');
+    throw new Error('Something went wrong while sending new MFA code');
+  });
+
+export default resendMfaToken;

frontend/src/pages/api/auth/verifyMfaToken.ts

@@ -0,0 +1,35 @@
+import SecurityClient from "@app/components/utilities/SecurityClient";
+
+/**
+ * Verify MFA token [mfaToken] for user with email [email]
+ * @param {object} obj
+ * @param {string} obj.email - email of user
+ * @param {string} obj.mfaToken - MFA cod/token to verify
+ * @returns
+ */
+const verifyMfaToken = async ({
+    email, 
+    mfaToken
+}: {
+    email: string;
+    mfaToken: string;
+}) => SecurityClient.fetchCall('/api/v2/auth/mfa/verify', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({
+      email,
+      mfaToken
+    })
+  }).then(async (res) => {
+    if (res && res?.status === 200) {
+      return res.json();
+    }
+    console.log('Failed to verify MFA code');
+    throw new Error('Something went wrong during MFA code verification');
+  });
+
+
+
+export default verifyMfaToken;

frontend/src/pages/api/user/updateMyMfaEnabled.ts

@@ -0,0 +1,32 @@
+import SecurityClient from '@app/components/utilities/SecurityClient';
+
+interface Props {
+    isMfaEnabled: boolean;
+}
+
+/**
+ * Update the user's MFA-enabled status to [isMfaEnabled]
+ * @param {Object} obj
+ * @param {Boolean} obj.isMfaEnabled - whether or not MFA status should be set to enabled or not
+ * @returns {User} user - user with updated MFA-enabled status
+ */
+const updateMyMfaEnabled = async ({
+    isMfaEnabled
+}: Props) =>
+  SecurityClient.fetchCall(`/api/v2/users/me/mfa`, {
+    method: 'PATCH',
+    headers: {
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({
+      isMfaEnabled,
+    })
+  }).then(async (res) => {
+    if (res && res.status === 200) {
+      return (await res.json()).user;
+    }
+    console.log('Failed to update MFA status');
+    return undefined;
+  });
+
+export default updateMyMfaEnabled;