396631ad7d
## Description Cap active sessions at `MAX_USER_SESSIONS` which defaults to existing value of `25` per user. This ensure existing user login behavior is not affected for self-hosted installations. Browser users at the cap see a session picker (409 response) to choose which session to end. Non-browser clients and partially-tracked users get silent oldest-session eviction. Depends on #14556. ## Type of change - [x] New feature (non-breaking change which adds functionality) ## How Has This Been Tested? Specs cover: under limit, at limit (browser picker, non-browser eviction), partial tracking fallback, revoke single/all sessions during login, session row creation on successful login. --------- Co-authored-by: Sony Mathew <sony@chatwoot.com>
115 lines
2.9 KiB
JavaScript
115 lines
2.9 KiB
JavaScript
import {
|
|
setAuthCredentials,
|
|
throwErrorMessage,
|
|
clearLocalStorageOnLogout,
|
|
parseAPIErrorResponse,
|
|
} from 'dashboard/store/utils/api';
|
|
import wootAPI from './apiClient';
|
|
import {
|
|
getLoginRedirectURL,
|
|
getCredentialsFromEmail,
|
|
} from '../helpers/AuthHelper';
|
|
|
|
export const login = async ({
|
|
ssoAccountId,
|
|
ssoConversationId,
|
|
...credentials
|
|
}) => {
|
|
try {
|
|
const response = await wootAPI.post('auth/sign_in', credentials);
|
|
|
|
// Check if MFA is required
|
|
if (response.status === 206 && response.data.mfa_required) {
|
|
// Return MFA data instead of throwing error
|
|
return {
|
|
mfaRequired: true,
|
|
mfaToken: response.data.mfa_token,
|
|
};
|
|
}
|
|
|
|
setAuthCredentials(response);
|
|
clearLocalStorageOnLogout();
|
|
window.location = getLoginRedirectURL({
|
|
ssoAccountId,
|
|
ssoConversationId,
|
|
user: response.data.data,
|
|
});
|
|
return null;
|
|
} catch (error) {
|
|
// Check if it's an MFA required response
|
|
if (error.response?.status === 206 && error.response?.data?.mfa_required) {
|
|
return {
|
|
mfaRequired: true,
|
|
mfaToken: error.response.data.mfa_token,
|
|
};
|
|
}
|
|
if (
|
|
error.response?.status === 409 &&
|
|
error.response?.data?.sessions_limit_reached
|
|
) {
|
|
return {
|
|
sessionsLimitReached: true,
|
|
sessions: error.response.data.sessions,
|
|
};
|
|
}
|
|
const loginError = new Error(parseAPIErrorResponse(error));
|
|
loginError.errorCode = error.response?.data?.error_code;
|
|
throw loginError;
|
|
}
|
|
};
|
|
|
|
export const register = async creds => {
|
|
try {
|
|
const { fullName, accountName } = getCredentialsFromEmail(creds.email);
|
|
const response = await wootAPI.post('api/v1/accounts.json', {
|
|
account_name: accountName,
|
|
user_full_name: fullName,
|
|
email: creds.email,
|
|
password: creds.password,
|
|
h_captcha_client_response: creds.hCaptchaClientResponse,
|
|
});
|
|
return response.data;
|
|
} catch (error) {
|
|
throwErrorMessage(error);
|
|
}
|
|
return null;
|
|
};
|
|
|
|
export const resendConfirmation = async ({ email, hCaptchaClientResponse }) => {
|
|
return wootAPI.post('resend_confirmation', {
|
|
email,
|
|
h_captcha_client_response: hCaptchaClientResponse,
|
|
});
|
|
};
|
|
|
|
export const verifyPasswordToken = async ({ confirmationToken }) => {
|
|
try {
|
|
const response = await wootAPI.post('auth/confirmation', {
|
|
confirmation_token: confirmationToken,
|
|
});
|
|
setAuthCredentials(response);
|
|
} catch (error) {
|
|
throwErrorMessage(error);
|
|
}
|
|
};
|
|
|
|
export const setNewPassword = async ({
|
|
resetPasswordToken,
|
|
password,
|
|
confirmPassword,
|
|
}) => {
|
|
try {
|
|
const response = await wootAPI.put('auth/password', {
|
|
reset_password_token: resetPasswordToken,
|
|
password_confirmation: confirmPassword,
|
|
password,
|
|
});
|
|
setAuthCredentials(response);
|
|
} catch (error) {
|
|
throwErrorMessage(error);
|
|
}
|
|
};
|
|
|
|
export const resetPassword = async ({ email }) =>
|
|
wootAPI.post('auth/password', { email });
|