ServiceAuthentication.java

/*
 * Copyright (C) 2000 - 2025 Silverpeas
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 *
 * As a special exception to the terms and conditions of version 3.0 of
 * the GPL, you may redistribute this Program in connection with Free/Libre
 * Open Source Software ("FLOSS") applications as described in Silverpeas's
 * FLOSS exception.  You should have received a copy of the text describing
 * the FLOSS exception, and it is also available here:
 * "https://www.silverpeas.org/legal/floss_exception.html"
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

package org.silverpeas.mobile.shared.services.rest;

import jsinterop.base.JsPropertyMap;
import elemental2.core.JsArray;
import java.util.ArrayList;
import java.util.List;
import org.silverpeas.mobile.client.common.network.rest.RestCallback;
import org.silverpeas.mobile.shared.dto.authentication.UserProfileDTO;

/**
 * @author svu
 */
//@Path("/authentication")
public class ServiceAuthentication extends AbstractService {

  public final static String PATH = "/silverpeas/services/authentication";

  /*@POST
  @Path("/")
  public void authentication(MethodCallback<UserProfileDTO> callback);*/

  public void authentication(RestCallback<UserProfileDTO> callback) {
    postBasic(PATH,
        null,
        result -> UserProfileDTO.fromJSON((JsPropertyMap<Object>) result),
        callback);
  }

  public void authenticateTwoFactor(String code, boolean trustDevice, RestCallback<UserProfileDTO> callback) {
    postBasic(PATH + "/two-factor",
        twoFactorRequestBody(code, trustDevice),
        result -> UserProfileDTO.fromJSON((JsPropertyMap<Object>) result),
        callback);
  }

  public void authenticateTrustedDevice(RestCallback<UserProfileDTO> callback) {
    postBasic(PATH + "/trusted-device",
        null,
        result -> UserProfileDTO.fromJSON((JsPropertyMap<Object>) result),
        callback);
  }

  public void startEnrollment(RestCallback<EnrollmentSetup> callback) {
    postBasic(PATH + "/enrollment", null,
        result -> {
          JsPropertyMap<Object> json = (JsPropertyMap<Object>) result;
          return new EnrollmentSetup((String) json.get("secret"), (String) json.get("qrCode"));
        }, callback);
  }

  public void confirmEnrollment(String code, boolean trustDevice,
      RestCallback<EnrollmentResult> callback) {
    postBasic(PATH + "/enrollment/confirm",
        twoFactorRequestBody(code, trustDevice), result -> {
          JsPropertyMap<Object> json = (JsPropertyMap<Object>) result;
          UserProfileDTO profile = UserProfileDTO.fromJSON(
              (JsPropertyMap<Object>) json.get("profile"));
          JsArray<Object> rawCodes = (JsArray<Object>) json.get("recoveryCodes");
          List<String> codes = new ArrayList<>();
          for (int i = 0; i < rawCodes.length; i++) {
            codes.add((String) rawCodes.getAt(i));
          }
          return new EnrollmentResult(profile, codes);
        }, callback);
  }

  private String twoFactorRequestBody(final String code, final boolean trustDevice) {
    return "{\"code\":\"" + escapeJson(code) + "\",\"trustDevice\":" + trustDevice + "}";
  }

  public static class EnrollmentSetup {
    public final String secret;
    public final String qrCode;

    public EnrollmentSetup(String secret, String qrCode) {
      this.secret = secret;
      this.qrCode = qrCode;
    }
  }

  public static class EnrollmentResult {
    public final UserProfileDTO profile;
    public final List<String> recoveryCodes;

    public EnrollmentResult(UserProfileDTO profile, List<String> recoveryCodes) {
      this.profile = profile;
      this.recoveryCodes = recoveryCodes;
    }
  }
}