Class: RailsBase::Authentication::DecisionTwofaType

Inherits:
ServiceBase
  • Object
show all
Includes:
ActionView::Helpers::DateHelper
Defined in:
app/services/rails_base/authentication/decision_twofa_type.rb

Instance Method Summary collapse

Methods inherited from ServiceBase

inherited, #internal_validate, #service_base_logging

Methods included from ServiceLogging

#aletered_message, #class_name, #log, #log_prefix, #logger, #service_id

Instance Method Details

#call ⇒ Object 



7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 7

def call
	# default return values
	context.set_mfa_randomized_token = false
	context. = false
	unless user.email_validated
		email_context = validate_email_context!
		check_success!(result: email_context)
		log(level: :info, msg: "User #{user.id}: redirect_url: #{context.redirect_url}, sign_in_user: #{context.}, flash: #{context.flash}")
		log_exit
		return
	end

	unless RailsBase.config.mfa.enable?
		log(level: :info, msg: "MFA on app is not enabled. Bypassing")
		
		context.flash = { notice: "Welcome. You have succesfully signed in." }
		log_exit
		return
	end

	mfa_decision = RailsBase::Mfa::Decision.(user: user)
	check_success!(result: mfa_decision)
	mfa_type_result = nil
	case mfa_decision.mfa_type
	when RailsBase::Mfa::SMS
		mfa_type_result = sms_enabled_context!(decision: mfa_decision)
	when RailsBase::Mfa::OTP
		totp_enabled_context!(decision: mfa_decision)
	when RailsBase::Mfa::NONE
		# no MFA type enabled on account
		
		context.flash = { notice: "Welcome. You have succesfully signed in." }
		if RailsBase.config.mfa.enable?
			context.add_mfa_button = true
		end
	else
		raise "Unknown MFA type provided"
	end
	check_success!(result: mfa_type_result)
	log_exit
end

#check_success!(result:) ⇒ Object 



53
54
55
56
57
58
59
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 53

def check_success!(result:)
	return if result.nil?
	return if result.success?

	log(level: :error, msg: "Service error bubbled up. Failing with: #{result.message}")
	context.fail!(message: result.message)
end

#log_exit ⇒ Object 



49
50
51
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 49

def log_exit
	log(level: :info, msg: "User #{user.id}: redirect_url: #{context.redirect_url}, sign_in_user: #{context.}, flash: #{context.flash}")
end

#sign_in_user_context! ⇒ Object 



71
72
73
74
75
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 71

def 
	log(level: :warn, msg: "Will log in user #{user.id} and bypass 2fa")
	context.redirect_url = Constants::URL_HELPER.authenticated_root_path
	context. = true
end

#sms_enabled_context!(decision:) ⇒ Object 



90
91
92
93
94
95
96
97
98
99
100
101
102
103
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 90

def sms_enabled_context!(decision:)
	if decision.mfa_require
		log(level: :warn, msg: "SMS MFA required for user")
		context.redirect_url = RailsBase.url_routes.mfa_with_event_path(mfa_event: :login)
		context.flash = { notice: "Please check your mobile device. We sent an SMS for MFA verification" }
		result = RailsBase::Mfa::Sms::Send.call(user: user)
		context.token_ttl = result.short_lived_data.death_time if result.success?
		result
	else
		
		context.flash = { notice: "Welcome. You have succesfully signed in" }
		nil
	end
end

#totp_enabled_context!(decision:) ⇒ Object 



77
78
79
80
81
82
83
84
85
86
87
88
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 77

def totp_enabled_context!(decision:)
	if decision.mfa_require
		log(level: :warn, msg: "TOTP MFA required for user")
		context.redirect_url = RailsBase.url_routes.mfa_with_event_path(mfa_event: :login)
		context.flash = { notice: "Additional Verification requested" }
		context.token_ttl = 2.minutes.from_now
	else
		
		context.flash = { notice: "Welcome. You have succesfully signed in" }
		nil
	end
end

#validate! ⇒ Object 



105
106
107
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 105

def validate!
	raise "Expected user to be a User. Received #{user.class}" unless user.is_a? User
end

#validate_email_context! ⇒ Object 



61
62
63
64
65
66
67
68
69
 
# File 'app/services/rails_base/authentication/decision_twofa_type.rb', line 61

def validate_email_context!
	# user has signed up but have not validated their email
	context.redirect_url = Constants::URL_HELPER.auth_static_path
	context.set_mfa_randomized_token = true
	context.mfa_purpose = Constants::SSOVE_PURPOSE
	context.flash = { notice: Constants::STATIC_WAIT_FLASH }
	context.token_ttl = Time.zone.now + 5.minutes
	SendVerificationEmail.call(user: user, reason: Constants::SVE_LOGIN_REASON)
end