auth.go

package main

import (
	"errors"
	"fmt"
	"net/http"

	log "github.com/sirupsen/logrus"

	"github.com/labstack/echo/v4"

	"github.com/epinio/ui-backend/src/jetstream/repository/interfaces"
)

// LoginHookFunc - function that can be hooked into a successful user login
type LoginHookFunc func(c echo.Context) error

//LogoutResponse is sent upon user logout.
//It contains a flag to indicate whether or not the user was signed in with SSO
type LogoutResponse struct {
	IsSSO bool `json:"isSSO"`
}

//InitStratosAuthService is used to instantiate an Auth service when setting up the portalProxy
func (p *portalProxy) InitStratosAuthService(t interfaces.AuthEndpointType) error {
	var auth interfaces.StratosAuth
	switch t {
	case interfaces.Local:
		auth = &localAuth{
			databaseConnectionPool: p.DatabaseConnectionPool,
			localUserScope:         p.Config.ConsoleConfig.LocalUserScope,
			p:                      p,
		}
	case interfaces.Epinio:
		auth = &epinioAuth{
			databaseConnectionPool: p.DatabaseConnectionPool,
			p:                      p,
		}
	case interfaces.Remote:
		auth = &uaaAuth{
			databaseConnectionPool: p.DatabaseConnectionPool,
			p:                      p,
		}
	case interfaces.AuthNone:
		auth = &noAuth{
			databaseConnectionPool: p.DatabaseConnectionPool,
			p:                      p,
		}
	default:
		err := fmt.Errorf("Invalid auth endpoint type: %v", t)
		return err
	}
	p.StratosAuthService = auth
	return nil
}

//GetAuthService gets the auth service from portalProxy via the Auth interface
func (p *portalProxy) GetStratosAuthService() interfaces.StratosAuth {
	return p.StratosAuthService
}

//login is used for both endpoint and direct UAA login
func (p *portalProxy) login(c echo.Context, skipSSLValidation bool, client string, clientSecret string, endpoint string) (uaaRes *interfaces.UAAResponse, u *interfaces.JWTUserTokenInfo, err error) {
	log.Debug("login")
	if c.Request().Method == http.MethodGet {
		code := c.QueryParam("code")
		state := c.QueryParam("state")
		// If this is login for a CNSI, then the redirect URL is slightly different
		cnsiGUID := c.QueryParam("guid")
		uaaRes, err = p.getUAATokenWithAuthorizationCode(skipSSLValidation, code, client, clientSecret, endpoint, state, cnsiGUID)
	} else {
		params := new(interfaces.LoginToCNSIParams)
		bindErr := interfaces.BindOnce(params, c)
		if bindErr != nil {
			return nil, nil, bindErr
		}

		if len(params.Username) == 0 || len(params.Password) == 0 {
			return uaaRes, u, errors.New("Needs username and password")
		}
		uaaRes, err = p.getUAATokenWithCreds(skipSSLValidation, params.Username, params.Password, client, clientSecret, endpoint)
	}
	if err != nil {
		return uaaRes, u, err
	}

	u, err = p.GetUserTokenInfo(uaaRes.AccessToken)
	if err != nil {
		return uaaRes, u, err
	}

	return uaaRes, u, nil
}

func (p *portalProxy) consoleLogin(c echo.Context) error {
	return p.StratosAuthService.Login(c)
}

func (p *portalProxy) consoleLogout(c echo.Context) error {
	return p.StratosAuthService.Logout(c)
}