rails_base 0.75.6 → 0.81.0

data/app/services/rails_base/authentication/mfa_validator.rb

@@ -1,88 +0,0 @@
-module RailsBase::Authentication
-	class MfaValidator < RailsBase::ServiceBase
-		delegate :params, to: :context
-		delegate :session_mfa_user_id, to: :context
-		delegate :current_user, to: :context
-		delegate :input_reason, to: :context
-
-		def call
-			array = convert_to_array
-			if array.length != Constants::MFA_LENGTH
-				log(level: :warn, msg: "Not enough params for MFA code. Given #{array}. Expected of length #{Constants::MFA_LENGTH}")
-				context.fail!(message: Constants::MV_FISHY, redirect_url: Constants::URL_HELPER.new_user_session_path, level: :alert)
-			end
-
-			mfa_code = array.join
-			log(level: :info, msg: "mfa code received: #{mfa_code}")
-			datum = get_short_lived_datum(mfa_code)
-			log(level: :info, msg: "Datum returned with: #{datum}")
-
-			validate_datum?(datum)
-			validate_user_consistency?(datum)
-			validate_current_user?(datum) if current_user
-
-			context.user = datum[:user]
-		end
-
-		def validate_current_user?(datum)
-			return true if current_user.id == datum[:user].id
-
-			# User MFA for a different user matched the session token
-			# However, those did not match the current user signed in
-			# Something is very 🐟
-			log(level: :error, msg: "Someone is a teapot. Current logged in user does not equal mfa code.")
-			context.fail!(message: 'You are a teapot', redirect_url: Constants::URL_HELPER.signout_path, level: :warn)
-		end
-
-		def validate_datum?(datum)
-			return true if datum[:valid]
-
-			if datum[:found]
-				# MFA is either expired or the incorrect reason. Either way it does not match
-				msg = "Errors with MFA: #{datum[:invalid_reason].join(", ")}. Please login again"
-				log(level: :warn, msg: msg)
-				context.fail!(message: msg, redirect_url: Constants::URL_HELPER.new_user_session_path, level: :warn)
-			end
-
-			# MFA does not exist for any reason type
-			log(level: :warn, msg: "Could not find MFA code. Incorrect MFA code")
-
-			context.fail!(message: "Incorrect MFA code.", redirect_url: Constants::URL_HELPER.mfa_code_path, level: :warn)
-		end
-
-		def validate_user_consistency?(datum)
-			return true if datum[:user].id == session_mfa_user_id.to_i
-			log(level: :warn, msg: "Datum user does not match session user. [#{datum[:user].id}, #{session_mfa_user_id.to_i}]")
-
-			# MFA session token user does not match the datum user
-			# Something is very 🐟
-			context.fail!(message: Constants::MV_FISHY, redirect_url: Constants::URL_HELPER.new_user_session_path, level: :alert)
-		end
-
-		def get_short_lived_datum(mfa_code)
-			log(level: :debug, msg: "Looking for #{mfa_code} with reason #{reason}")
-			ShortLivedData.find_datum(data: mfa_code, reason: reason)
-		end
-
-		def convert_to_array
-			array = []
-			return array unless params.dig(:mfa).respond_to? :keys
-
-			Constants::MFA_LENGTH.times do |index|
-				var_name = "#{Constants::MV_BASE_NAME}#{index}".to_sym
-				array << params[:mfa][var_name]
-			end
-
-			array.compact
-		end
-
-		def reason
-			input_reason || Constants::MFA_REASON
-		end
-
-		def validate!
-			raise 'Expected the params passed' if params.nil?
-			raise 'session_mfa_user_id is not present' if session_mfa_user_id.nil?
-		end
-	end
-end

data/app/views/rails_base/mfa_auth/mfa_code.html.erb

@@ -1,11 +0,0 @@
-
-<div class="row" >
-  <div class="col-md-8 offset-md-2" style="position: absolute; top:25%">
-    <%= render partial: 'rails_base/shared/mfa_input_layout', locals: { url: RailsBase.url_routes.mfa_code_verify_path, size: 30, masked_phone: @masked_phone }%>
-    <br>
-    <div class="text-center">
-      <%= button_to 'Resend MFA', RailsBase.url_routes.resend_mfa_path, method: :post, class: 'btn btn_warning', style: 'width: 25%;'  %>
-    </div>
-  </div>
-</div>
-

data/app/views/rails_base/secondary_authentication/forgot_password.html.erb

@@ -1,9 +0,0 @@
-
-<% if @mfa_flow %>
-  <h3 class='text-center'>If you did not receive a text with instructions, please go through the flow again</h2>
-  <%= render partial: 'rails_base/shared/mfa_input_layout', locals: { url: RailsBase.url_routes.forgot_password_with_mfa_auth_path(data: @data), size: 30, masked_phone: @user.masked_phone }%>
-<% else %>
-  <h2 class='text-center'>Reset your password <%= @user.full_name%></h2>
-  <%= render partial: 'rails_base/shared/reset_password_form', locals: { sign_in_flow: true, url: RailsBase.url_routes.reset_password_auth_path(data: @data) }%>
-<% end %>
-