bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2025-12-10 05:13:29 +00:00
Code Issues Releases Wiki Activity

Auth/PM-8111 - LoginComponent Refactor Bug - Fix Extension SSO (#11699)

Browse Source 
* PM-8111 - LoginComponent Refactor - I broke the browser SSO flow - fixing it as clientId doesn't persist unless it is in state qParam.

* PM-8111 - Fix DefaultLoginComponentService tests
This commit is contained in:
Jared Snider
2024-10-24 19:02:10 -04:00
committed by GitHub
parent 1fb1be56b3
commit 877d379f86
3 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
libs/auth/src/angular/login/default-login-component.service.spec.ts
View File

@@ -83,12 +83,14 @@ describe("DefaultLoginComponentService", () => {
describe("launchSsoBrowserWindow", () => {
const email = "test@bitwarden.com";
const state = "testState";
let state = "testState";
const codeVerifier = "testCodeVerifier";
const codeChallenge = "testCodeChallenge";
const baseUrl = "https://webvault.bitwarden.com/#/sso";
beforeEach(() => {
state = "testState";
passwordGenerationService.generatePassword.mockResolvedValueOnce(state);
passwordGenerationService.generatePassword.mockResolvedValueOnce(codeVerifier);
jest.spyOn(Utils, "fromBufferToUrlB64").mockReturnValue(codeChallenge);
@@ -112,6 +114,10 @@ describe("DefaultLoginComponentService", () => {
await service.launchSsoBrowserWindow(email, clientId as "browser" | "desktop");
if (clientType === ClientType.Browser) {
state += ":clientId=browser";
}
const expectedUrl = `${baseUrl}?clientId=${clientId}&redirectUri=${encodeURIComponent(expectedRedirectUri)}&state=${state}&codeChallenge=${codeChallenge}&email=${encodeURIComponent(email)}`;
expect(ssoLoginService.setSsoEmail).toHaveBeenCalledWith(email);

7
libs/auth/src/angular/login/default-login-component.service.ts
View File

@@ -50,7 +50,12 @@ export class DefaultLoginComponentService implements LoginComponentService {
special: false,
};
const state = await this.passwordGenerationService.generatePassword(passwordOptions);
let state = await this.passwordGenerationService.generatePassword(passwordOptions);
if (clientId === "browser") {
// Need to persist the clientId in the state for the extension
state += ":clientId=browser";
}
const codeVerifier = await this.passwordGenerationService.generatePassword(passwordOptions);
const codeVerifierHash = await this.cryptoFunctionService.hash(codeVerifier, "sha256");