feat(infisical-pg): auth injection completed and validation in password router

backend/src/utils/authn/helpers/index.ts

@@ -16,19 +16,19 @@ import { getUserAgentType } from "../../posthog";
 export * from "./authDataExtractors";
 
 interface ExtractAuthModeParams {
-    headers: { [key: string]: string | string[] | undefined }
+  headers: { [key: string]: string | string[] | undefined };
 }
 
 interface ExtractAuthModeReturn {
-    authMode: AuthMode;
-    authTokenValue: string;
+  authMode: AuthMode;
+  authTokenValue: string;
 }
 
 interface GetAuthDataParams {
-    authMode: AuthMode;
-    authTokenValue: string;
-    ipAddress: string;
-    userAgent: string;
+  authMode: AuthMode;
+  authTokenValue: string;
+  ipAddress: string;
+  userAgent: string;
 }
 
 /**
@@ -44,33 +44,30 @@ interface GetAuthDataParams {
  * @throws {UnauthorizedError} Throws an error if no applicable authMode is found.
  */
 export const extractAuthMode = async ({
-    headers
+  headers
 }: ExtractAuthModeParams): Promise<ExtractAuthModeReturn> => {
+  const apiKey = headers["x-api-key"] as string;
+  const authHeader = headers["authorization"] as string;
 
-    const apiKey = headers["x-api-key"] as string;
-	const authHeader = headers["authorization"] as string;
-    
-    if (apiKey) {
-        return { authMode: AuthMode.API_KEY, authTokenValue: apiKey };
-    }
-    
-    if (!authHeader) throw UnauthorizedRequestError({
-        message: "Failed to authenticate unknown authentication method"
+  if (apiKey) {
+    return { authMode: AuthMode.API_KEY, authTokenValue: apiKey };
+  }
+
+  if (!authHeader)
+    throw UnauthorizedRequestError({
+      message: "Failed to authenticate unknown authentication method"
     });
 
-    if (!authHeader.startsWith("Bearer ")) throw UnauthorizedRequestError({
-        message: "Failed to authenticate unknown authentication method"
+  if (!authHeader.startsWith("Bearer "))
+    throw UnauthorizedRequestError({
+      message: "Failed to authenticate unknown authentication method"
     });
 
-    const authTokenValue = authHeader.slice(7);
-    
-    if (authTokenValue.startsWith("st.")) {
-        return { authMode: AuthMode.SERVICE_TOKEN, authTokenValue };
-    }
+  const authTokenValue = authHeader.slice(7);
 
-    const decodedToken = <jwt.AuthnJwtPayload>(
-        jwt.verify(authTokenValue, await getAuthSecret())
-    );
+  if (authTokenValue.startsWith("st.")) {
+    return { authMode: AuthMode.SERVICE_TOKEN, authTokenValue };
+  }
 
     switch (decodedToken.authTokenType) {
         case AuthTokenType.ACCESS_TOKEN:
@@ -87,13 +84,18 @@ export const extractAuthMode = async ({
 }
 
 export const getAuthData = async ({
-    authMode,
-    authTokenValue,
-    ipAddress,
-    userAgent
+  authMode,
+  authTokenValue,
+  ipAddress,
+  userAgent
 }: GetAuthDataParams): Promise<AuthData> => {
+  const userAgentType = getUserAgentType(userAgent);
 
-    const userAgentType = getUserAgentType(userAgent);
+  switch (authMode) {
+    case AuthMode.SERVICE_TOKEN: {
+      const serviceTokenData = await validateServiceTokenV2({
+        authTokenValue
+      });
 
     switch (authMode) {
         case AuthMode.SERVICE_TOKEN: {
@@ -193,4 +195,81 @@ export const getAuthData = async ({
             }
         }
     }
-}
+    case AuthMode.SERVICE_ACCESS_TOKEN: {
+      const serviceTokenData = await validateServiceTokenV3({
+        authTokenValue
+      });
+
+      return {
+        actor: {
+          type: ActorType.SERVICE_V3,
+          metadata: {
+            serviceId: serviceTokenData._id.toString(),
+            name: serviceTokenData.name
+          }
+        },
+        authPayload: serviceTokenData,
+        ipAddress,
+        userAgent,
+        userAgentType
+      };
+    }
+    case AuthMode.API_KEY: {
+      const user = await validateAPIKey({
+        authTokenValue
+      });
+
+      return {
+        actor: {
+          type: ActorType.USER,
+          metadata: {
+            userId: user._id.toString(),
+            email: user.email
+          }
+        },
+        authPayload: user,
+        ipAddress,
+        userAgent,
+        userAgentType
+      };
+    }
+    case AuthMode.API_KEY_V2: {
+      const user = await validateAPIKeyV2({
+        authTokenValue
+      });
+
+      return {
+        actor: {
+          type: ActorType.USER,
+          metadata: {
+            userId: user._id.toString(),
+            email: user.email
+          }
+        },
+        authPayload: user,
+        ipAddress,
+        userAgent,
+        userAgentType
+      };
+    }
+    case AuthMode.JWT: {
+      const user = await validateJWT({
+        authTokenValue
+      });
+
+      return {
+        actor: {
+          type: ActorType.USER,
+          metadata: {
+            userId: user._id.toString(),
+            email: user.email
+          }
+        },
+        authPayload: user,
+        ipAddress,
+        userAgent,
+        userAgentType
+      };
+    }
+  }
+};