Merge pull request #95 from dadosfera/feat/mfa

FEAT: MFA finished + better error handling

src/modules/auth/auth.controller.ts

@@ -3,15 +3,21 @@ import {
   Controller,
   Headers,
   Post,
+  HttpCode,
+  HttpStatus,
   UnauthorizedException,
 } from '@nestjs/common';
 import {
+  AuthSignInRequest,
+  AuthRefreshAccessTokenRequest,
   AuthEnableTotpMfaRequest,
+  AuthDisableTotpMfaRequest,
   AuthVerifyTotpMfaRequest,
 } from '@victorradael/protospack';
 
 import { AuthClientService } from 'src/clients/auth/client.service';
-import { ISignIn, IRefreshAccessToken } from 'src/clients/auth/interfaces';
+
+import ErrorBuilder from '../../utils/ErrorBuilder';
 
 @Controller('auth')
 export class AuthController {
@@ -19,82 +25,124 @@ export class AuthController {
 
   // DEPRECADO!
   @Post()
-  async signIn_old(@Body() body: ISignIn) {
+  @HttpCode(HttpStatus.OK)
+  async signIn_old(@Body() body: AuthSignInRequest) {
     console.log(`/auth`, 'SignIn_old');
 
     return this.signIn(body);
   }
 
   @Post('login')
-  async signIn_login(@Body() body: ISignIn) {
+  @HttpCode(HttpStatus.OK)
+  async signIn_login(@Body() body: AuthSignInRequest) {
     console.log(`/auth`, 'SignIn_login');
 
     return this.signIn(body);
   }
 
   @Post('sign-in')
-  async signIn(@Body() { username, password, totp }: ISignIn) {
+  @HttpCode(HttpStatus.OK)
+  async signIn(@Body() { username, password, totp }: AuthSignInRequest) {
     console.log(`/auth`, 'SignIn');
 
     const tokens = await this.authClient
       .signIn({ username, password, totp })
-      .then((result) => result)
       .catch((err) => {
-        throw new UnauthorizedException(err.message);
+        throw ErrorBuilder(err);
       });
 
     return tokens;
   }
 
   @Post('refresh-access-token')
+  @HttpCode(HttpStatus.OK)
   async refreshAccessToken(
-    @Body() { username, refreshToken }: IRefreshAccessToken,
+    @Body() { username, refreshToken }: AuthRefreshAccessTokenRequest,
   ) {
     console.log(`/auth`, 'RefreshAccessToken');
 
     const accessToken = await this.authClient
       .refreshAccessToken({ username, refreshToken })
-      .then((result) => result)
       .catch((err) => {
-        throw new UnauthorizedException(err.message);
+        throw ErrorBuilder(err);
       });
 
     return accessToken;
   }
 
   @Post('enable-totp')
+  @HttpCode(HttpStatus.OK)
   async enableTotpMFA(
-    @Body() { username, password }: AuthEnableTotpMfaRequest,
+    @Body() body: AuthEnableTotpMfaRequest,
+    @Headers() headers,
   ) {
     console.log(`/auth`, 'enable-totp');
 
-    const enableTotpResponse = await this.authClient
-      .enableTotpMFA({ username, password })
-      .then((result) => result)
+    const { password } = body;
+    const { authorization: accessToken } = headers;
+
+    const response = await this.authClient
+      .enableTotpMFA({ accessToken, password })
       .catch((err) => {
-        throw new UnauthorizedException(err.message);
+        throw ErrorBuilder(err);
       });
 
-    return enableTotpResponse;
+    return response;
+  }
+
+  @Post('disable-totp')
+  @HttpCode(HttpStatus.OK)
+  async disableTotpMFA(
+    @Body() body: AuthDisableTotpMfaRequest,
+    @Headers() headers,
+  ) {
+    console.log(`/auth`, 'disable-totp');
+
+    const { password } = body;
+    const { authorization: accessToken } = headers;
+
+    const response = await this.authClient
+      .disableTotpMFA({ accessToken, password })
+      .catch((err) => {
+        throw ErrorBuilder(err);
+      });
+
+    return response;
+  }
+
+  @Post('dismiss-totp')
+  @HttpCode(HttpStatus.OK)
+  async dismissTotpMFA(@Headers() headers) {
+    console.log(`/auth`, 'disable-totp');
+
+    const { authorization: accessToken } = headers;
+
+    const response = await this.authClient
+      .dismissTotpMFA({ accessToken })
+      .catch((err) => {
+        throw ErrorBuilder(err);
+      });
+
+    return response;
   }
 
   @Post('verify-totp')
+  @HttpCode(HttpStatus.OK)
   async verifyTotp(
     @Body() body: AuthVerifyTotpMfaRequest,
     @Headers() headers,
   ): Promise<any> {
     console.log(`/auth`, 'enable-totp');
 
-    const { username, totp } = body;
-    const { Authorization } = headers;
+    const { totp } = body;
+    const { authorization: accessToken } = headers;
 
-    const enableTotpResponse = await this.authClient
-      .verifyTotp({ username, totp, accessToken: Authorization })
-      .then((result) => result)
+    const response = await this.authClient
+      .verifyTotp({ accessToken, totp })
       .catch((err) => {
-        throw new UnauthorizedException(err.message);
+        throw ErrorBuilder(err);
       });
 
-    return enableTotpResponse;
+    return response;
   }
 }