Contents

# frozen_string_literal: true

module RailsBase::Mfa
  class EvaluationController < RailsBaseApplicationController
    before_action :authenticate_user!, only: [:mfa_evaluate_authenticated]
    before_action :validate_mfa_with_event!
    OTP_TEMPLATE = "rails_base/mfa/validate/totp/totp_event_input"
    SMS_TEMPLATE = "rails_base/mfa/validate/sms/sms_event_input"

    # GET mfa/:event
    def mfa_with_event
      user = User.find(@__rails_base_mfa_event.user_id)
      decision = RailsBase::Mfa::Decision.(user: user)
      mfa_type = mfa_decision(provided: params[:type], default: decision.mfa_type, allowed: decision.mfa_options)

      if @__rails_base_mfa_event.phone_number
        phone_number = @__rails_base_mfa_event.phone_number
      else
        phone_number = User.find(@__rails_base_mfa_event.user_id).phone_number
      end

      @masked_phone = User.masked_number(phone_number)
      @mfa_options = decision.mfa_options.map do |type|
        next if type == mfa_type

        {
          text: "Switch MFA to #{type}",
          ** RailsBase::Mfa.mfa_link(mfa_event: @__rails_base_mfa_event.event, mfa: type)
        }
      end.compact

      case mfa_type
      when RailsBase::Mfa::OTP
        render OTP_TEMPLATE
      when RailsBase::Mfa::SMS
        render SMS_TEMPLATE
      end
    end

    private

    def mfa_decision(provided:, default:, allowed:)
      if Array === @__rails_base_mfa_event.only_mfa
        logger.warn("MFA Event is forcing one of #{@__rails_base_mfa_event.only_mfa}")
        return @__rails_base_mfa_event.only_mfa.sample.to_sym
      end

      # Nothing was provided by the user
      return default if provided.nil?

      # Provided input is an allowed type for the current user
      return provided.to_sym if allowed.include?(provided.to_sym)

      flash[:alert] = "Unknown MFA type #{provided}. Using #{default} instead"

      return default
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
rails_base-0.82.0	app/controllers/rails_base/mfa/evaluation_controller.rb
rails_base-0.81.1	app/controllers/rails_base/mfa/evaluation_controller.rb
rails_base-0.81.0	app/controllers/rails_base/mfa/evaluation_controller.rb
rails_base-0.80.0	app/controllers/rails_base/mfa/evaluation_controller.rb