mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
563e2da323
This URL is used when user access the authentication domain without providing the 'redirect' query parameter. In that case, Authelia does not know where to redirect the user. If the parameter is defined, Authelia can redirect the user to a default page when no redirect parameter is provided. When user is already authenticated and tries to access the authentication domain, the "already logged in" page is rendered and it now tells the user he is to be redirected in few seconds and uses this URL to redirect. This parameter is optional. If it is not provided, there is only a notification message at the end of the authentication process, as before, and the user is not redirected when visiting the authentication domain while already authenticated.
70 lines
2.6 KiB
TypeScript
70 lines
2.6 KiB
TypeScript
|
|
import U2fApi = require("u2f-api");
|
|
import U2f = require("u2f");
|
|
import BluebirdPromise = require("bluebird");
|
|
import { SignMessage } from "../../../../shared/SignMessage";
|
|
import Endpoints = require("../../../../shared/api");
|
|
import UserMessages = require("../../../../shared/UserMessages");
|
|
import { INotifier } from "../INotifier";
|
|
import { RedirectionMessage } from "../../../../shared/RedirectionMessage";
|
|
import { ErrorMessage } from "../../../../shared/ErrorMessage";
|
|
|
|
function finishU2fAuthentication(responseData: U2fApi.SignResponse, $: JQueryStatic): BluebirdPromise<string> {
|
|
return new BluebirdPromise<string>(function (resolve, reject) {
|
|
$.ajax({
|
|
url: Endpoints.SECOND_FACTOR_U2F_SIGN_POST,
|
|
data: responseData,
|
|
method: "POST",
|
|
dataType: "json"
|
|
} as JQueryAjaxSettings)
|
|
.done(function (body: RedirectionMessage | ErrorMessage) {
|
|
if (body && "error" in body) {
|
|
reject(new Error((body as ErrorMessage).error));
|
|
return;
|
|
}
|
|
resolve((body as RedirectionMessage).redirect);
|
|
})
|
|
.fail(function (xhr: JQueryXHR, textStatus: string) {
|
|
reject(new Error(textStatus));
|
|
});
|
|
});
|
|
}
|
|
|
|
function startU2fAuthentication($: JQueryStatic, notifier: INotifier, u2fApi: typeof U2fApi): BluebirdPromise<string> {
|
|
return new BluebirdPromise<string>(function (resolve, reject) {
|
|
$.get(Endpoints.SECOND_FACTOR_U2F_SIGN_REQUEST_GET, {}, undefined, "json")
|
|
.done(function (signResponse: SignMessage) {
|
|
notifier.info(UserMessages.PLEASE_TOUCH_TOKEN);
|
|
|
|
const signRequest: U2fApi.SignRequest = {
|
|
appId: signResponse.request.appId,
|
|
challenge: signResponse.request.challenge,
|
|
keyHandle: signResponse.keyHandle, // linked to the client session cookie
|
|
version: "U2F_V2"
|
|
};
|
|
|
|
u2fApi.sign([signRequest], 60)
|
|
.then(function (signResponse: U2fApi.SignResponse) {
|
|
finishU2fAuthentication(signResponse, $)
|
|
.then(function (redirect: string) {
|
|
resolve(redirect);
|
|
}, function (err) {
|
|
notifier.error(UserMessages.U2F_TRANSACTION_FINISH_FAILED);
|
|
reject(err);
|
|
});
|
|
})
|
|
.catch(function (err: Error) {
|
|
reject(err);
|
|
});
|
|
})
|
|
.fail(function (xhr: JQueryXHR, textStatus: string) {
|
|
reject(new Error(textStatus));
|
|
});
|
|
});
|
|
}
|
|
|
|
|
|
export function validate($: JQueryStatic, notifier: INotifier, u2fApi: typeof U2fApi): BluebirdPromise<string> {
|
|
return startU2fAuthentication($, notifier, u2fApi);
|
|
}
|