infisical/frontend/src/components/utilities/attemptLogin.ts

/* eslint-disable prefer-destructuring */
import jsrp from "jsrp";

import { login1, login2 } from "@app/hooks/api/auth/queries";
import KeyService from "@app/services/KeyService";

import Telemetry from "./telemetry/Telemetry";
import { saveTokenToLocalStorage } from "./saveTokenToLocalStorage";
import SecurityClient from "./SecurityClient";

interface IsLoginSuccessful {
  mfaEnabled: boolean;
  success: boolean;
}

/**
 * Return whether or not login is successful for user with email [email]
 * and password [password]
 * @param {string} email - email of user to log in
 * @param {string} password - password of user to log in
 */
const attemptLogin = async ({
  email,
  orgId,
  password,
  providerAuthToken
}: {
  email: string;
  orgId?: string;
  password: string;
  providerAuthToken?: string;
}): Promise<IsLoginSuccessful> => {
  const telemetry = new Telemetry().getInstance();
  // eslint-disable-next-line new-cap
  const client = new jsrp.client();
  await new Promise((resolve) => {
    client.init({ username: email, password }, () => resolve(null));
  });
  const clientPublicKey = client.getPublicKey();

  const { serverPublicKey, salt } = await login1({
    email,
    orgId,
    clientPublicKey,
    providerAuthToken
  });

  client.setSalt(salt);
  client.setServerPublicKey(serverPublicKey);
  const clientProof = client.getProof(); // called M1

  const {
    mfaEnabled,
    encryptionVersion,
    protectedKey,
    protectedKeyIV,
    protectedKeyTag,
    token,
    publicKey,
    encryptedPrivateKey,
    iv,
    tag
  } = await login2({
    email,
    orgId,
    clientProof,
    providerAuthToken
  });

  if (mfaEnabled) {
    // case: MFA is enabled

    // set temporary (MFA) JWT token
    SecurityClient.setMfaToken(token);

    return {
      mfaEnabled,
      success: true
    };
  }
  if (!mfaEnabled && encryptionVersion && encryptedPrivateKey && iv && tag && token) {
    // case: MFA is not enabled

    // unset provider auth token in case it was used
    SecurityClient.setProviderAuthToken("");
    // set JWT token
    SecurityClient.setToken(token);

    const privateKey = await KeyService.decryptPrivateKey({
      encryptionVersion,
      encryptedPrivateKey,
      iv,
      tag,
      password,
      salt,
      protectedKey,
      protectedKeyIV,
      protectedKeyTag
    });

    saveTokenToLocalStorage({
      publicKey,
      encryptedPrivateKey,
      iv,
      tag,
      privateKey
    });

    if (email) {
      telemetry.identify(email, email);
      telemetry.capture("User Logged In");
    }

    return {
      mfaEnabled: false,
      success: true
    };
  }
  return { success: false, mfaEnabled: false };
};

export default attemptLogin;