Update for optional mfa

[rubicola]

🔍 What should we check?

• Login with and without MFA on works as expected

🍒 What have you changed?

• Allow user to select MFA type if enrolled in multiple MFA options (noting that Authenticator App will always come in first, and the hasAuthy flag will indicate if also enrolled in SMS)
• If the user then selects 'SMS/AUTHY', then make another request to POST login to trigger the Authy prompt.
• Added a logout command in case the token saved to the raisely json expires - this clears it.

⚡ Which issue does this solve?
The Raisely API is changing to support multiple MFA options.

The CLI will not work once users enrol in another MFA option.

This PR makes sure to support the existing implementation and also when the Raisely API changes for the login flow which offers these multiple options.

To test, you can run this branch locally and test the package:

• check out this branch
• Temporarily hardcode the fetch url here to the Raisely development api
• then run npm install <path to cli> -g
• run raisely login (and then raisely logout if your token expires at any point)
• test scenarios on Raisely develop:
  -- your test user has an authy enrolment (you should get authy prompt)

• test different scenarios on Raisely if you checkout this branch:
  -- your test user has an authenticator app enrolment (to set up you can see test instructions on this PR)
  -- your test user has both an authenticator app enrolment and authy enrolment
  ---- selecting authenticator app and then using otp should work
  ---- selecting authy should send prompt and then using otp should work

[chrisjensen]

Haven't tested, but it looks good to me

[chrisjensen]

Is the array order guaranteed?
There's no risk here that we return
{ mfaType: 'AUTHY', hasAuthy: false } when they have both?

[rubicola]

Yes, it's guaranteed. The API will return either:

• 'MFA required:AUTHY'
• 'MFA required:AUTHENTICATOR_APP'
• 'MFA required:AUTHENTICATOR_APP:hasAuthy'

[rubicola]

And yes, sorry the preference is always 'MFA required:AUTHENTICATOR_APP' first if they have both

[rubicola]

You can see here that the API now makes the preferred app the Authenticator App, so it will throw that error first if the user has both, unless the user specifies it wants to use Authy (which doesn't happen here in the CLI until after they select Authy).