Class: RailsBase::Authentication::VerifyForgotPassword

Inherits:
ServiceBase
  • Object
show all
Defined in:
app/services/rails_base/authentication/verify_forgot_password.rb

Instance Method Summary collapse

Methods inherited from ServiceBase

inherited, #internal_validate, #service_base_logging

Methods included from ServiceLogging

#aletered_message, #class_name, #log, #log_prefix, #logger, #service_id

Instance Method Details

#call ⇒ Object 



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
 
# File 'app/services/rails_base/authentication/verify_forgot_password.rb', line 5

def call
	data_point = short_lived_data
	validate_datum?(data_point)

	log(level: :info, msg: "Validated user 2fa email #{data_point[:user].full_name}")

	context.user = data_point[:user]
	mfa_decision = RailsBase::Mfa::Decision.(force_mfa: true, user: data_point[:user])

	if context.mfa_flow = mfa_decision.mfa_require
		log(level: :info, msg: "User has #{mfa_decision.mfa_options} mfa options enabled. MFA is required to reset password")
	else
		log(level: :info, msg: "User has no MFA options enabled. MFA is NOT required to reset password")
	end
end

#short_lived_data ⇒ Object 



35
36
37
 
# File 'app/services/rails_base/authentication/verify_forgot_password.rb', line 35

def short_lived_data
	ShortLivedData.find_datum(data: data, reason: Constants::VFP_REASON)
end

#validate! ⇒ Object 



39
40
41
 
# File 'app/services/rails_base/authentication/verify_forgot_password.rb', line 39

def validate!
	raise "Expected data to be a String. Received #{data.class}" unless data.is_a? String
end

#validate_datum?(datum) ⇒ Boolean

Returns:

  • (Boolean) 


21
22
23
24
25
26
27
28
29
30
31
32
33
 
# File 'app/services/rails_base/authentication/verify_forgot_password.rb', line 21

def validate_datum?(datum)
	return true if datum[:valid]

	if datum[:found]
		msg = "Errors with email validation: #{datum[:invalid_reason].join(", ")}. Please go through forget password flow again."
		log(level: :warn, msg: msg)
		context.fail!(message: msg, redirect_url: Constants::URL_HELPER.new_user_password_path, level: :warn)
	end

	log(level: :warn, msg: "Could not find MFA code. Incorrect MFA code. User is doing something fishy.")

	context.fail!(message: Constants::MV_FISHY, redirect_url: Constants::URL_HELPER.unauthenticated_root_path, level: :warn)
end