106 lines
3.4 KiB
JavaScript
106 lines
3.4 KiB
JavaScript
// import config from '../../config/environment';
|
|
// import { v1 } from 'ember-uuid';
|
|
import { Response } from 'miragejs';
|
|
|
|
// /**
|
|
// * Simulates a cookie-based response to authentication requests. Any user/pass
|
|
// * values are allowed *except* when `username` equals `error`, in which case a
|
|
// * simulated error response is returned.
|
|
// * @param {object} schema
|
|
// * @param {object} request
|
|
// * @return {Response}
|
|
// */
|
|
// export default function authenticateHandler(schema, request) {
|
|
// const payload = JSON.parse(request.requestBody);
|
|
// if (payload.credentials.login_name === 'error') {
|
|
// return new Response(400);
|
|
// } else {
|
|
// const cookieName = config.auth.passwordCookieName;
|
|
// const cookieValue = v1();
|
|
// const cookiePath = config.rootURL;
|
|
// document.cookie = `${cookieName}=${cookieValue};path=${cookiePath}`;
|
|
// return new Response(200);
|
|
// }
|
|
// }
|
|
|
|
// Quick and dirty counter system to simulate the polling behavior
|
|
// of the API. If the OIDC flow is pending, the route returns 100.
|
|
// If complete it returns 200 with the token JSON.
|
|
let oidcAttemptCounter = 0;
|
|
const oidcRequiredAttempts = 3;
|
|
|
|
const methodHandlers = {
|
|
password: {
|
|
authenticate: (payload, scopeAttrs) => {
|
|
if (payload.credentials.login_name === 'error') {
|
|
return new Response(400);
|
|
} else {
|
|
return new Response(200, {}, {
|
|
scope: scopeAttrs,
|
|
id: 'token123',
|
|
token: 'thetokenstring',
|
|
account_id: '1',
|
|
user_id: 'user123',
|
|
auth_method_id: 'authmethod123',
|
|
created_time: '',
|
|
updated_time: '',
|
|
last_used_time: '',
|
|
expiration_time: ''
|
|
});
|
|
}
|
|
}
|
|
},
|
|
|
|
/**
|
|
* OIDC authentication is a two-step process:
|
|
*
|
|
* 1. `authenticate:start` kicks of authentication by requesting some details
|
|
* from the Boundary server about the request, including the third-party
|
|
* URL to which to redirect the user.
|
|
* 2. `authenticate` accepts the token_request_id and state parameters in
|
|
* order to retrieve a Boundary token. This endpoint may be polled until
|
|
* the authentication flow is completed.
|
|
*/
|
|
oidc: {
|
|
'authenticate:start': () =>
|
|
new Response(200, {}, {
|
|
authorization_request_url: 'https://www.duckduckgo.com',
|
|
retreival_url: '',
|
|
token_request_id: 'token_request_1234',
|
|
state: 'base_58_encoded_string'
|
|
}),
|
|
authenticate: (_, scopeAttrs) => {
|
|
oidcAttemptCounter++;
|
|
if (oidcAttemptCounter < oidcRequiredAttempts) {
|
|
return new Response(100);
|
|
} else {
|
|
return new Response(200, {}, {
|
|
scope: scopeAttrs,
|
|
id: 'token123',
|
|
token: 'thetokenstring',
|
|
account_id: '1',
|
|
user_id: 'user123',
|
|
auth_method_id: 'authmethod123',
|
|
created_time: '',
|
|
updated_time: '',
|
|
last_used_time: '',
|
|
expiration_time: ''
|
|
});
|
|
}
|
|
}
|
|
}
|
|
};
|
|
|
|
export function authHandler({ scopes, authMethods }, request) {
|
|
const payload = JSON.parse(request.requestBody);
|
|
const [, id, method] = request.params.id_method.match(/(?<id>.[^:]*)(?::)?(?<method>.*)?/);
|
|
const authMethod = authMethods.find(id);
|
|
const scope = scopes.find(authMethod.scopeId);
|
|
const scopeAttrs = this.serialize(scopes.find(scope.id));
|
|
return methodHandlers[authMethod.type][method](payload, scopeAttrs);
|
|
}
|
|
|
|
export function deauthHandler() {
|
|
return new Response(200);
|
|
}
|