mirror of
https://github.com/bitwarden/browser
synced 2025-12-06 00:13:28 +00:00
* move pinKeyEncryptedUserKey * move pinKeyEncryptedUserKeyEphemeral * remove comments, move docs * cleanup * use UserKeyDefinition * refactor methods * add migration * fix browser dependency * add tests for migration * rename to pinService * move state to PinService * add PinService dep to CryptoService * move protectedPin to state provider * update service deps * renaming * move decryptUserKeyWithPin to pinService * update service injection * move more methods our of crypto service * remove CryptoService dep from PinService and update service injection * remove cryptoService reference * add method to FakeMasterPasswordService * fix circular dependency * fix desktop service injection * update browser dependencies * add protectedPin to migrations * move storePinKey to pinService * update and clarify documentation * more jsdoc updates * update import paths * refactor isPinLockSet method * update state definitions * initialize service before injecting into other services * initialize service before injecting into other services (bw.ts) * update clearOn and do additional cleanup * clarify docs and naming * assign abstract & private methods, add clarity to decryptAndMigrateOldPinKeyEncryptedMasterKey() method * derived state (attempt) * fix typos * use accountService to get active user email * use constant userId * add derived state * add get and clear for oldPinKeyEncryptedMasterKey * require userId * move pinProtected * add clear methods * remove pinProtected from account.ts and replace methods * add methods to create and store pinKeyEncryptedUserKey * add pinProtected/oldPinKeyEncrypterMasterKey to migration * update migration tests * update migration rollback tests * update to systemService and decryptAndMigrate... method * remove old test * increase length of state definition name to meet test requirements * rename 'TRANSIENT' to 'EPHEMERAL' for consistency * fix tests for login strategies, vault-export, and fake MP service * more updates to login-strategy tests * write new tests for core pinKeyEncrypterUserKey methods and isPinSet * write new tests for pinProtected and oldPinKeyEncryptedMasterKey methods * minor test reformatting * update test for decryptUserKeyWithPin() * fix bug with oldPinKeyEncryptedMasterKey * fix tests for vault-timeout-settings.service * fix bitwarden-password-protected-importer test * fix login strategy tests and auth-request.service test * update pinService tests * fix crypto service tests * add jsdoc * fix test file import * update jsdocs for decryptAndMigrateOldPinKeyEncryptedMasterKey() * update error messages and jsdocs * add null checks, move userId retrievals * update migration tests * update stateService calls to require userId * update test for decryptUserKeyWithPin() * update oldPinKeyEncryptedMasterKey migration tests * more test updates * fix factory import * update tests for isPinSet() and createProtectedPin() * add test for makePinKey() * add test for createPinKeyEncryptedUserKey() * add tests for getPinLockType() * consolidate userId verification tests * add tests for storePinKeyEncryptedUserKey() * fix service dep * get email based on userId * use MasterPasswordService instead of internal * rename protectedPin to userKeyEncryptedPin * rename to pinKeyEncryptedUserKeyPersistent * update method params * fix CryptoService tests * jsdoc update * use EncString for userKeyEncryptedPin * remove comment * use cryptoFunctionService.compareFast() * update tests * cleanup, remove comments * resolve merge conflict * fix DI of MasterPasswordService * more DI fixes
137 lines
5.0 KiB
TypeScript
137 lines
5.0 KiB
TypeScript
import { DialogConfig, DialogRef, DIALOG_DATA } from "@angular/cdk/dialog";
|
|
import { Component, OnDestroy, OnInit, Inject, Input } from "@angular/core";
|
|
import { FormBuilder, Validators } from "@angular/forms";
|
|
import { takeUntil } from "rxjs";
|
|
|
|
import { ChangePasswordComponent } from "@bitwarden/angular/auth/components/change-password.component";
|
|
import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
|
|
import { KdfConfigService } from "@bitwarden/common/auth/abstractions/kdf-config.service";
|
|
import { InternalMasterPasswordServiceAbstraction } from "@bitwarden/common/auth/abstractions/master-password.service.abstraction";
|
|
import { CryptoService } from "@bitwarden/common/platform/abstractions/crypto.service";
|
|
import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
|
|
import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
|
|
import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
|
|
import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
|
|
import { StateService } from "@bitwarden/common/platform/abstractions/state.service";
|
|
import { KdfType } from "@bitwarden/common/platform/enums";
|
|
import { PasswordGenerationServiceAbstraction } from "@bitwarden/common/tools/generator/password";
|
|
import { DialogService } from "@bitwarden/components";
|
|
|
|
import { EmergencyAccessService } from "../../../emergency-access";
|
|
|
|
export enum EmergencyAccessTakeoverResultType {
|
|
Done = "done",
|
|
}
|
|
type EmergencyAccessTakeoverDialogData = {
|
|
/** display name of the account requesting emergency access takeover */
|
|
name: string;
|
|
/** email of the account requesting emergency access takeover */
|
|
email: string;
|
|
/** traces a unique emergency request */
|
|
emergencyAccessId: string;
|
|
};
|
|
@Component({
|
|
selector: "emergency-access-takeover",
|
|
templateUrl: "emergency-access-takeover.component.html",
|
|
})
|
|
// eslint-disable-next-line rxjs-angular/prefer-takeuntil
|
|
export class EmergencyAccessTakeoverComponent
|
|
extends ChangePasswordComponent
|
|
implements OnInit, OnDestroy
|
|
{
|
|
@Input() kdf: KdfType;
|
|
@Input() kdfIterations: number;
|
|
takeoverForm = this.formBuilder.group({
|
|
masterPassword: ["", [Validators.required]],
|
|
masterPasswordRetype: ["", [Validators.required]],
|
|
});
|
|
|
|
constructor(
|
|
@Inject(DIALOG_DATA) protected params: EmergencyAccessTakeoverDialogData,
|
|
private formBuilder: FormBuilder,
|
|
i18nService: I18nService,
|
|
cryptoService: CryptoService,
|
|
messagingService: MessagingService,
|
|
stateService: StateService,
|
|
passwordGenerationService: PasswordGenerationServiceAbstraction,
|
|
platformUtilsService: PlatformUtilsService,
|
|
policyService: PolicyService,
|
|
private emergencyAccessService: EmergencyAccessService,
|
|
private logService: LogService,
|
|
dialogService: DialogService,
|
|
private dialogRef: DialogRef<EmergencyAccessTakeoverResultType>,
|
|
kdfConfigService: KdfConfigService,
|
|
masterPasswordService: InternalMasterPasswordServiceAbstraction,
|
|
) {
|
|
super(
|
|
i18nService,
|
|
cryptoService,
|
|
messagingService,
|
|
passwordGenerationService,
|
|
platformUtilsService,
|
|
policyService,
|
|
stateService,
|
|
dialogService,
|
|
kdfConfigService,
|
|
masterPasswordService,
|
|
);
|
|
}
|
|
|
|
async ngOnInit() {
|
|
const policies = await this.emergencyAccessService.getGrantorPolicies(
|
|
this.params.emergencyAccessId,
|
|
);
|
|
this.policyService
|
|
.masterPasswordPolicyOptions$(policies)
|
|
.pipe(takeUntil(this.destroy$))
|
|
.subscribe((enforcedPolicyOptions) => (this.enforcedPolicyOptions = enforcedPolicyOptions));
|
|
}
|
|
|
|
// eslint-disable-next-line rxjs-angular/prefer-takeuntil
|
|
ngOnDestroy(): void {
|
|
super.ngOnDestroy();
|
|
}
|
|
|
|
submit = async () => {
|
|
if (this.takeoverForm.invalid) {
|
|
this.takeoverForm.markAllAsTouched();
|
|
return;
|
|
}
|
|
this.masterPassword = this.takeoverForm.get("masterPassword").value;
|
|
this.masterPasswordRetype = this.takeoverForm.get("masterPasswordRetype").value;
|
|
if (!(await this.strongPassword())) {
|
|
return;
|
|
}
|
|
|
|
try {
|
|
await this.emergencyAccessService.takeover(
|
|
this.params.emergencyAccessId,
|
|
this.masterPassword,
|
|
this.params.email,
|
|
);
|
|
} catch (e) {
|
|
this.logService.error(e);
|
|
this.platformUtilsService.showToast(
|
|
"error",
|
|
this.i18nService.t("errorOccurred"),
|
|
this.i18nService.t("unexpectedError"),
|
|
);
|
|
}
|
|
this.dialogRef.close(EmergencyAccessTakeoverResultType.Done);
|
|
};
|
|
/**
|
|
* Strongly typed helper to open a EmergencyAccessTakeoverComponent
|
|
* @param dialogService Instance of the dialog service that will be used to open the dialog
|
|
* @param config Configuration for the dialog
|
|
*/
|
|
static open = (
|
|
dialogService: DialogService,
|
|
config: DialogConfig<EmergencyAccessTakeoverDialogData>,
|
|
) => {
|
|
return dialogService.open<EmergencyAccessTakeoverResultType>(
|
|
EmergencyAccessTakeoverComponent,
|
|
config,
|
|
);
|
|
};
|
|
}
|