Handle web finger to get token in HomeController

Signed-off-by: dab246 <tdvu@linagora.com>
2025-07-02 15:54:29 +07:00
parent fc2265b5e5
commit 9a2f0aa356
26 changed files with 323 additions and 113 deletions
@@ -38,4 +38,6 @@ abstract class AuthenticationOIDCDataSource {
      List<String> scopes);

  Future<String> getAuthenticationInfo();
+
+  Future<void> removeAuthDestinationUrl();
 }
@@ -1,9 +1,17 @@
-import 'package:model/model.dart';
+import 'package:model/oidc/oidc_configuration.dart';
+import 'package:model/oidc/request/oidc_request.dart';
+import 'package:model/oidc/response/oidc_discovery_response.dart';
+import 'package:model/oidc/response/oidc_response.dart';
+import 'package:model/oidc/token_id.dart';
+import 'package:model/oidc/token_oidc.dart';
+import 'package:tmail_ui_user/features/caching/utils/session_storage_manager.dart';
 import 'package:tmail_ui_user/features/login/data/datasource/authentication_oidc_datasource.dart';
 import 'package:tmail_ui_user/features/login/data/local/oidc_configuration_cache_manager.dart';
 import 'package:tmail_ui_user/features/login/data/local/token_oidc_cache_manager.dart';
 import 'package:tmail_ui_user/features/login/data/network/authentication_client/authentication_client_base.dart';
+import 'package:tmail_ui_user/features/login/data/network/config/oidc_constant.dart';
 import 'package:tmail_ui_user/features/login/data/network/oidc_http_client.dart';
+import 'package:tmail_ui_user/features/login/domain/model/login_constants.dart';
 import 'package:tmail_ui_user/main/exceptions/exception_thrower.dart';

 class AuthenticationOIDCDataSourceImpl extends AuthenticationOIDCDataSource {
@@ -12,6 +20,7 @@ class AuthenticationOIDCDataSourceImpl extends AuthenticationOIDCDataSource {
  final AuthenticationClientBase _authenticationClient;
  final TokenOidcCacheManager _tokenOidcCacheManager;
  final OidcConfigurationCacheManager _oidcConfigurationCacheManager;
+  final SessionStorageManager _sessionStorageManager;
  final ExceptionThrower _exceptionThrower;
  final ExceptionThrower _cacheExceptionThrower;

@@ -20,6 +29,7 @@ class AuthenticationOIDCDataSourceImpl extends AuthenticationOIDCDataSource {
    this._authenticationClient,
    this._tokenOidcCacheManager,
    this._oidcConfigurationCacheManager,
+    this._sessionStorageManager,
    this._exceptionThrower,
    this._cacheExceptionThrower
  );
@@ -109,7 +119,7 @@ class AuthenticationOIDCDataSourceImpl extends AuthenticationOIDCDataSource {
  Future<void> deleteOidcConfiguration() {
    return Future.sync(() async {
      return await _oidcConfigurationCacheManager.deleteOidcConfiguration();
-    }).catchError(_exceptionThrower.throwException);
+    }).catchError(_cacheExceptionThrower.throwException);
  }

  @override
@@ -131,14 +141,25 @@ class AuthenticationOIDCDataSourceImpl extends AuthenticationOIDCDataSource {
  @override
  Future<String> getAuthenticationInfo() {
    return Future.sync(() async {
-      return await _authenticationClient.getAuthenticationInfo();
-    }).catchError(_exceptionThrower.throwException);
+      return await _sessionStorageManager.get(
+        OIDCConstant.authResponseKey,
+      );
+    }).catchError(_cacheExceptionThrower.throwException);
  }

  @override
  Future<void> deleteTokenOIDC() {
    return Future.sync(() async {
      return await _tokenOidcCacheManager.deleteTokenOidc();
-    }).catchError(_exceptionThrower.throwException);
+    }).catchError(_cacheExceptionThrower.throwException);
+  }
+
+  @override
+  Future<void> removeAuthDestinationUrl() {
+    return Future.sync(() async {
+      return await _sessionStorageManager.remove(
+        LoginConstants.AUTH_DESTINATION_KEY,
+      );
+    }).catchError(_cacheExceptionThrower.throwException);
  }
 }
@@ -13,8 +13,6 @@ abstract class AuthenticationClientBase {
      String discoveryUrl,
      List<String> scopes);

-  Future<String> getAuthenticationInfo();
-
  Future<TokenOIDC> getTokenOIDC(
      String clientId,
      String redirectUrl,
@@ -95,11 +95,6 @@ class AuthenticationClientMobile implements AuthenticationClientBase {
    return Future.value(null);
  }

-  @override
-  Future<String> getAuthenticationInfo() {
-    return Future.value('');
-  }
-
  @override
  Future<TokenOIDC> signInTwakeWorkplace(OIDCConfiguration oidcConfiguration) async {
    final uri = await FlutterWebAuth2.authenticate(
@@ -9,11 +9,9 @@ import 'package:model/oidc/token_oidc.dart';
 import 'package:tmail_ui_user/features/login/data/extensions/authentication_token_extension.dart';
 import 'package:tmail_ui_user/features/login/data/extensions/token_response_extension.dart';
 import 'package:tmail_ui_user/features/login/data/network/authentication_client/authentication_client_base.dart';
-import 'package:tmail_ui_user/features/login/data/network/config/oidc_constant.dart';
 import 'package:tmail_ui_user/features/login/data/utils/library_platform/app_auth_plugin/app_auth_plugin.dart';
 import 'package:tmail_ui_user/features/login/domain/exceptions/authentication_exception.dart';
 import 'package:tmail_ui_user/features/login/domain/extensions/oidc_configuration_extensions.dart';
-import 'package:universal_html/html.dart' as html;

 class AuthenticationClientWeb implements AuthenticationClientBase {

@@ -96,17 +94,6 @@ class AuthenticationClientWeb implements AuthenticationClientBase {
            scopes: scopes));
  }

-  @override
-  Future<String> getAuthenticationInfo() async {
-    final authUrl = html.window.sessionStorage[OIDCConstant.authResponseKey];
-    log('AuthenticationClientWeb::getAuthenticationInfo(): authUrl: $authUrl');
-    if (authUrl != null && authUrl.isNotEmpty) {
-      return authUrl;
-    } else {
-      throw CanNotAuthenticationInfoOnWeb();
-    }
-  }
-
  @override
  Future<TokenOIDC> signUpTwakeWorkplace(OIDCConfiguration oidcConfiguration) {
    throw UnimplementedError();
@@ -93,4 +93,9 @@ class AuthenticationOIDCRepositoryImpl extends AuthenticationOIDCRepository {
  Future<void> deleteTokenOIDC() {
    return _oidcDataSource.deleteTokenOIDC();
  }
+
+  @override
+  Future<void> removeAuthDestinationUrl() {
+    return _oidcDataSource.removeAuthDestinationUrl();
+  }
 }
@@ -42,8 +42,6 @@ class CanNotFoundUserName implements Exception {}

 class CanNotFoundPassword implements Exception {}

-class CanNotAuthenticationInfoOnWeb implements Exception {}
-
 class NotFoundAuthenticationInfoCache implements Exception {}

 class CanNotFoundSaasServerUrl implements Exception {}
@@ -38,4 +38,6 @@ abstract class AuthenticationOIDCRepository {
      List<String> scopes);

  Future<String> getAuthenticationInfo();
+
+  Future<void> removeAuthDestinationUrl();
 }
@@ -9,11 +9,16 @@ class GetTokenOIDCSuccess extends UIState {

  final TokenOIDC tokenOIDC;
  final OIDCConfiguration configuration;
+  final Uri baseUri;

-  GetTokenOIDCSuccess(this.tokenOIDC, this.configuration);
+  GetTokenOIDCSuccess(
+    this.tokenOIDC,
+    this.configuration,
+    this.baseUri,
+  );

  @override
-  List<Object> get props => [tokenOIDC, configuration];
+  List<Object> get props => [tokenOIDC, configuration, baseUri];
 }

 class GetTokenOIDCFailure extends FeatureFailure {
@@ -0,0 +1,11 @@
+import 'package:core/presentation/state/failure.dart';
+import 'package:core/presentation/state/success.dart';
+
+class RemovingAuthDestinationUrl extends LoadingState {}
+
+class RemoveAuthDestinationUrlSuccess extends UIState {}
+
+class RemoveAuthDestinationUrlFailure extends FeatureFailure {
+  RemoveAuthDestinationUrlFailure(dynamic exception)
+      : super(exception: exception);
+}
@@ -14,7 +14,7 @@ class AuthenticateOidcOnBrowserInteractor {

  AuthenticateOidcOnBrowserInteractor(this.authenticationOIDCRepository);

-  Stream<Either<Failure, Success>> execute(Uri baseUrl, OIDCConfiguration config) async* {
+  Stream<Either<Failure, Success>> execute(OIDCConfiguration config) async* {
    try {
      yield Right<Failure, Success>(AuthenticateOidcOnBrowserLoading());
      await authenticationOIDCRepository.authenticateOidcOnBrowser(
@@ -23,7 +23,7 @@ class GetTokenOIDCInteractor {

  GetTokenOIDCInteractor(this._credentialRepository, this.authenticationOIDCRepository, this._accountRepository);

-  Stream<Either<Failure, Success>> execute(Uri baseUrl, OIDCConfiguration config) async* {
+  Stream<Either<Failure, Success>> execute(Uri baseUri, OIDCConfiguration config) async* {
    try {
      yield Right<Failure, Success>(GetTokenOIDCLoading());
      final tokenOIDC = await authenticationOIDCRepository.getTokenOIDC(
@@ -33,7 +33,7 @@ class GetTokenOIDCInteractor {
          config.scopes);

      await Future.wait([
-        _credentialRepository.saveBaseUrl(baseUrl),
+        _credentialRepository.saveBaseUrl(baseUri),
        authenticationOIDCRepository.persistTokenOIDC(tokenOIDC),
        authenticationOIDCRepository.persistOidcConfiguration(config),
      ]);
@@ -45,7 +45,11 @@ class GetTokenOIDCInteractor {
          isSelected: true
        )
      );
-      yield Right<Failure, Success>(GetTokenOIDCSuccess(tokenOIDC, config));
+      yield Right<Failure, Success>(GetTokenOIDCSuccess(
+        tokenOIDC,
+        config,
+        baseUri,
+      ));
    } on PlatformException catch (e) {
      logError('GetTokenOIDCInteractor::execute(): PlatformException ${e.message} - ${e.stacktrace}');
      if (NoSuitableBrowserForOIDCException.verifyException(e)) {
@@ -0,0 +1,21 @@
+import 'package:core/presentation/state/failure.dart';
+import 'package:core/presentation/state/success.dart';
+import 'package:dartz/dartz.dart';
+import 'package:tmail_ui_user/features/login/domain/repository/authentication_oidc_repository.dart';
+import 'package:tmail_ui_user/features/login/domain/state/remove_auth_destination_url_state.dart';
+
+class RemoveAuthDestinationUrlInteractor {
+  final AuthenticationOIDCRepository _authenticationOIDCRepository;
+
+  const RemoveAuthDestinationUrlInteractor(this._authenticationOIDCRepository);
+
+  Stream<Either<Failure, Success>> execute() async* {
+    try {
+      yield Right<Failure, Success>(RemovingAuthDestinationUrl());
+      await _authenticationOIDCRepository.removeAuthDestinationUrl();
+      yield Right<Failure, Success>(RemoveAuthDestinationUrlSuccess());
+    } catch (e) {
+      yield Left<Failure, Success>(RemoveAuthDestinationUrlFailure(e));
+    }
+  }
+}
@@ -23,6 +23,7 @@ import 'package:tmail_ui_user/features/login/domain/usecases/get_authentication_
 import 'package:tmail_ui_user/features/login/domain/usecases/get_oidc_configuration_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/get_stored_oidc_configuration_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/get_token_oidc_interactor.dart';
+import 'package:tmail_ui_user/features/login/domain/usecases/remove_auth_destination_url_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/save_login_url_on_mobile_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/save_login_username_on_mobile_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/try_guessing_web_finger_interactor.dart';
@@ -54,6 +55,7 @@ class LoginBindings extends BaseBindings {
      Get.find<DNSLookupToGetJmapUrlInteractor>(),
      Get.find<SignInTwakeWorkplaceInteractor>(),
      Get.find<TryGuessingWebFingerInteractor>(),
+      Get.find<RemoveAuthDestinationUrlInteractor>(),
    ));
  }

@@ -83,26 +85,6 @@ class LoginBindings extends BaseBindings {

  @override
  void bindingsInteractor() {
-    Get.lazyPut(() => CheckOIDCIsAvailableInteractor(
-        Get.find<AuthenticationOIDCRepository>(),
-    ));
-    Get.lazyPut(() => GetOIDCConfigurationInteractor(
-        Get.find<AuthenticationOIDCRepository>(),
-    ));
-    Get.lazyPut(() => GetTokenOIDCInteractor(
-        Get.find<CredentialRepository>(),
-        Get.find<AuthenticationOIDCRepository>(),
-        Get.find<AccountRepository>()
-    ));
-    Get.lazyPut(() => AuthenticateOidcOnBrowserInteractor(
-      Get.find<AuthenticationOIDCRepository>(),
-    ));
-    Get.lazyPut(() => GetAuthenticationInfoInteractor(
-      Get.find<AuthenticationOIDCRepository>(),
-    ));
-    Get.lazyPut(() => GetStoredOidcConfigurationInteractor(
-      Get.find<AuthenticationOIDCRepository>(),
-    ));
    Get.lazyPut(() => SaveLoginUrlOnMobileInteractor(Get.find<LoginRepository>(),));
    Get.lazyPut(() => GetAllRecentLoginUrlOnMobileInteractor(Get.find<LoginRepository>()));
    Get.lazyPut(() => SaveLoginUsernameOnMobileInteractor(Get.find<LoginRepository>(),));
@@ -17,17 +17,14 @@ import 'package:model/account/password.dart';
 import 'package:model/oidc/oidc_configuration.dart';
 import 'package:model/oidc/request/oidc_request.dart';
 import 'package:model/oidc/response/oidc_response.dart';
-import 'package:model/oidc/token_oidc.dart';
 import 'package:tmail_ui_user/features/base/reloadable/reloadable_controller.dart';
 import 'package:tmail_ui_user/features/home/domain/state/auto_sign_in_via_deep_link_state.dart';
 import 'package:tmail_ui_user/features/home/domain/state/get_session_state.dart';
 import 'package:tmail_ui_user/features/login/data/network/oidc_error.dart';
 import 'package:tmail_ui_user/features/login/domain/exceptions/authentication_exception.dart';
 import 'package:tmail_ui_user/features/login/domain/exceptions/login_exception.dart';
-import 'package:tmail_ui_user/features/login/domain/model/login_constants.dart';
 import 'package:tmail_ui_user/features/login/domain/model/recent_login_url.dart';
 import 'package:tmail_ui_user/features/login/domain/model/recent_login_username.dart';
-import 'package:tmail_ui_user/features/login/domain/state/authenticate_oidc_on_browser_state.dart';
 import 'package:tmail_ui_user/features/login/domain/state/authentication_user_state.dart';
 import 'package:tmail_ui_user/features/login/domain/state/check_oidc_is_available_state.dart';
 import 'package:tmail_ui_user/features/login/domain/state/dns_lookup_to_get_jmap_url_state.dart';
@@ -49,6 +46,7 @@ import 'package:tmail_ui_user/features/login/domain/usecases/get_authentication_
 import 'package:tmail_ui_user/features/login/domain/usecases/get_oidc_configuration_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/get_stored_oidc_configuration_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/get_token_oidc_interactor.dart';
+import 'package:tmail_ui_user/features/login/domain/usecases/remove_auth_destination_url_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/save_login_url_on_mobile_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/save_login_username_on_mobile_interactor.dart';
 import 'package:tmail_ui_user/features/login/domain/usecases/try_guessing_web_finger_interactor.dart';
@@ -67,7 +65,6 @@ import 'package:tmail_ui_user/main/routes/app_routes.dart';
 import 'package:tmail_ui_user/main/routes/route_navigation.dart';
 import 'package:tmail_ui_user/main/routes/route_utils.dart';
 import 'package:tmail_ui_user/main/utils/app_config.dart';
-import 'package:universal_html/html.dart' as html;

 class LoginController extends ReloadableController {

@@ -85,6 +82,7 @@ class LoginController extends ReloadableController {
  final DNSLookupToGetJmapUrlInteractor _dnsLookupToGetJmapUrlInteractor;
  final SignInTwakeWorkplaceInteractor _signInTwakeWorkplaceInteractor;
  final TryGuessingWebFingerInteractor _tryGuessingWebFingerInteractor;
+  final RemoveAuthDestinationUrlInteractor _removeAuthDestinationUrlInteractor;

  final TextEditingController urlInputController = TextEditingController();
  final TextEditingController usernameInputController = TextEditingController();
@@ -117,6 +115,7 @@ class LoginController extends ReloadableController {
    this._dnsLookupToGetJmapUrlInteractor,
    this._signInTwakeWorkplaceInteractor,
    this._tryGuessingWebFingerInteractor,
+    this._removeAuthDestinationUrlInteractor,
  );

  @override
@@ -131,25 +130,24 @@ class LoginController extends ReloadableController {
  void onReady() {
    super.onReady();
    final arguments = Get.arguments;
+    log('LoginController::onReady: arguments = $arguments');
    if (arguments is LoginArguments) {
-      if (arguments.loginFormType == LoginFormType.passwordForm) {
-        loginFormType.value = LoginFormType.dnsLookupForm;
-      } else {
-        loginFormType.value = arguments.loginFormType;
-      }
+      loginFormType.value =
+          arguments.loginFormType == LoginFormType.passwordForm
+              ? LoginFormType.dnsLookupForm
+              : arguments.loginFormType;
+
      if (PlatformInfo.isWeb) {
        _checkOIDCIsAvailable();
      }
-    } else {
-      if (PlatformInfo.isWeb) {
-        _getAuthenticationInfo();
-      }
+    } else if (PlatformInfo.isWeb) {
+      _getAuthenticationInfo();
    }
  }

  @override
  void handleFailureViewState(Failure failure) {
-    log('LoginController::handleFailureViewState(): $failure');
+    log('$runtimeType::handleFailureViewState():Failure = $failure');
    if (failure is GetAuthenticationInfoFailure) {
      getAuthenticatedAccountAction();
    } else if (failure is CheckOIDCIsAvailableFailure) {
@@ -182,6 +180,7 @@ class LoginController extends ReloadableController {

  @override
  void handleSuccessViewState(Success success) {
+    log('$runtimeType::handleSuccessViewState:Success = ${success.runtimeType}');
    if (success is GetAuthenticationInfoSuccess) {
      _getStoredOidcConfiguration();
    } else if (success is GetStoredOidcConfigurationSuccess) {
@@ -200,7 +199,7 @@ class LoginController extends ReloadableController {
      onBaseUrlChange(success.oidcResponse.subject);
      getOIDCConfiguration(success.oidcResponse);
    } else if (success is SignInTwakeWorkplaceSuccess) {
-      _synchronizeTokenAndGetSession(
+      synchronizeTokenAndGetSession(
        baseUri: success.baseUri,
        tokenOIDC: success.tokenOIDC,
        oidcConfiguration: success.oidcConfiguration,
@@ -289,7 +288,7 @@ class LoginController extends ReloadableController {
  }

  void _handleAutoSignInViaDeepLinkSuccess(AutoSignInViaDeepLinkSuccess success) {
-    _synchronizeTokenAndGetSession(
+    synchronizeTokenAndGetSession(
      baseUri: success.baseUri,
      tokenOIDC: success.tokenOIDC,
      oidcConfiguration: success.oidcConfiguration,
@@ -438,23 +437,6 @@ class LoginController extends ReloadableController {
    }
  }

-  void _synchronizeTokenAndGetSession({
-    required Uri baseUri,
-    required TokenOIDC tokenOIDC,
-    required OIDCConfiguration oidcConfiguration,
-  }) {
-    dynamicUrlInterceptors.setJmapUrl(baseUri.toString());
-    dynamicUrlInterceptors.changeBaseUrl(baseUri.toString());
-    authorizationInterceptors.setTokenAndAuthorityOidc(
-      newToken: tokenOIDC,
-      newConfig: oidcConfiguration);
-    authorizationIsolateInterceptors.setTokenAndAuthorityOidc(
-      newToken: tokenOIDC,
-      newConfig: oidcConfiguration);
-
-    getSessionAction();
-  }
-
  void _getTokenOIDCAction(OIDCConfiguration config) {
    if (_currentBaseUrl != null) {
      consumeState(_getTokenOIDCInteractor.execute(_currentBaseUrl!, config));
@@ -463,25 +445,18 @@ class LoginController extends ReloadableController {
    }
  }

-  void _authenticateOidcOnBrowserAction(OIDCConfiguration config) async {
-    _removeAuthDestinationUrlInSessionStorage();
+  void _authenticateOidcOnBrowserAction(OIDCConfiguration config) {
+    _removeAuthDestinationUrl();

-    if (_currentBaseUrl != null) {
-      consumeState(_authenticateOidcOnBrowserInteractor.execute(_currentBaseUrl!, config));
-    } else {
-      dispatchState(Left(AuthenticateOidcOnBrowserFailure(CanNotFoundBaseUrl())));
-    }
+    consumeState(_authenticateOidcOnBrowserInteractor.execute(config));
  }

-  void _removeAuthDestinationUrlInSessionStorage() {
-    final authDestinationUrlExist = html.window.sessionStorage.containsKey(LoginConstants.AUTH_DESTINATION_KEY);
-    if (authDestinationUrlExist) {
-      html.window.sessionStorage.remove(LoginConstants.AUTH_DESTINATION_KEY);
-    }
+  void _removeAuthDestinationUrl() {
+    consumeState(_removeAuthDestinationUrlInteractor.execute());
  }

  void _getTokenOIDCSuccess(GetTokenOIDCSuccess success) {
-    _synchronizeTokenAndGetSession(
+    synchronizeTokenAndGetSession(
      baseUri: _currentBaseUrl!,
      tokenOIDC: success.tokenOIDC,
      oidcConfiguration: success.configuration,