passbolt-styleguide/src/shared/services/api/sso/GetUrlForSsoIdentificationService.js

Passbolt styleguide contains common styling assets used by the different sites, plugin, etc.

/**
 * Passbolt ~ Open source password manager for teams
 * Copyright (c) 2022 Passbolt SA (https://www.passbolt.com)
 *
 * Licensed under GNU Affero General Public License version 3 of the or any later version.
 * For full copyright and license information, please see the LICENSE.txt
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright     Copyright (c) 2022 Passbolt SA (https://www.passbolt.com)
 * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
 * @link          https://www.passbolt.com Passbolt(tm)
 * @since         3.11.0
 */

import {ApiClient} from "../../../lib/apiClient/apiClient";

const SSO_LOGIN_SUPPORTED_URLS = [
  'https://login.microsoftonline.com',
  'https://login.microsoftonline.us',
  'https://login.partner.microsoftonline.cn',
];

/**
 * Handles query to the API to get an SSO login URL to identify the current user
 */
class GetUrlForSsoIdentificationService {
  /**
   * GetUrlForSsoIdentificationService constructor
   * @param {ApiClientOptions} apiClientOptions
   */
  constructor(apiClientOptions) {
    this.apiClientOptions = apiClientOptions;
  }

  /**
   * Requests the API to get an URL to start a recover process via SSO.
   * @param {string} providerId the id of the SSO provider
   * @returns {Promise<URL>}
   */
  async getUrl(providerId) {
    this.apiClientOptions.setResourceName(`/sso/recover/${providerId}`);
    const apiClient = new ApiClient(this.apiClientOptions);

    const response = await apiClient.create();
    const url = new URL(response.body.url);

    const isValidUrl = SSO_LOGIN_SUPPORTED_URLS.some(supportedUrl => supportedUrl === url.origin);
    if (!isValidUrl) {
      throw new Error('The url should be part of the list of supported single sign-on urls.');
    }

    return url;
  }
}

export default GetUrlForSsoIdentificationService;