W25/tony/deprecate o auth

backend/typescript/rest/authRoutes.ts

@@ -34,10 +34,8 @@ const cookieOptions: CookieOptions = {
 /* Returns access token and user info in response body and sets refreshToken as an httpOnly cookie */
 authRouter.post("/login", loginRequestValidator, async (req, res) => {
   try {
-    const authDTO = req.body.idToken
-      ? // OAuth
-        await authService.generateTokenOAuth(req.body.idToken)
-      : await authService.generateToken(req.body.email, req.body.password);
+    const authDTO = req.body.idToken;
+    await authService.generateToken(req.body.email, req.body.password);
 
     const { refreshToken, ...rest } = authDTO;
 
@@ -58,7 +56,6 @@ authRouter.post(
     try {
       if (isAuthorizedByEmail(req.body.email)) {
         const user = await userService.getUserByEmail(req.body.email);
-
         const activatedUser = user;
         activatedUser.status = UserStatus.ACTIVE;
         await userService.updateUserById(user.id, activatedUser);
@@ -146,7 +143,7 @@ authRouter.post(
       } else {
         res.status(400).json(responseSuccess);
       }
-    } catch (error) {
+    } catch (error: unknown) {
       res.status(500).json({ error: getErrorMessage(error) });
     }
   },

backend/typescript/services/implementations/authService.ts

@@ -38,40 +38,6 @@
     }
   }
 
-  /* eslint-disable class-methods-use-this */
-  async generateTokenOAuth(idToken: string): Promise<AuthDTO> {
-    try {
-      const googleUser = await FirebaseRestClient.signInWithGoogleOAuth(
-        idToken,
-      );
-      // googleUser.idToken refers to the Firebase Auth access token for the user
-      const token = {
-        accessToken: googleUser.idToken,
-        refreshToken: googleUser.refreshToken,
-      };
-      // If user already has a login with this email, just return the token
-      try {
-        // Note: an error message will be logged from UserService if this lookup fails.
-        // You may want to silence the logger for this special OAuth user lookup case
-        const user = await this.userService.getUserByEmail(googleUser.email);
-        return { ...token, ...user };
-        /* eslint-disable-next-line no-empty */
-      } catch (error) {}
-
-      const user = await this.userService.createUser({
-        firstName: googleUser.firstName,
-        lastName: googleUser.lastName,
-        email: googleUser.email,
-        role: Role.STAFF,
-      });
-
-      return { ...token, ...user };
-    } catch (error) {
-      Logger.error(`Failed to generate token for user with OAuth ID token`);
-      throw error;
-    }
-  }
-
   async revokeTokens(userId: string): Promise<void> {
     try {
       const authId = await this.userService.getAuthIdById(userId);
@@ -298,7 +264,7 @@
         password: newPassword,
       });
       return { success: true } as ResponseSuccessDTO;
     } catch (error: any) {
       Logger.error(`Failed to update password. Error: ${error}`);
       if (error.code === "auth/invalid-password") {
         errorMessage =

backend/typescript/services/interfaces/authService.ts

@@ -11,15 +11,6 @@ interface IAuthService {
    */
   generateToken(email: string, password: string): Promise<AuthDTO>;
 
-  /**
-   * Generate a short-lived JWT access token and a long-lived refresh token
-   * when supplied OAuth ID token
-   * @param idToken user's ID token
-   * @returns AuthDTO object containing the access token, refresh token, and user info
-   * @throws Error if token generation fails
-   */
-  generateTokenOAuth(idToken: string): Promise<AuthDTO>;
-
   /**
    * Revoke all refresh tokens of a user
    * @param userId userId of user whose refresh tokens are to be revoked

backend/typescript/utilities/firebaseRestClient.ts

@@ -9,8 +9,6 @@ const FIREBASE_SIGN_IN_URL =
   "https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword";
 const FIREBASE_REFRESH_TOKEN_URL =
   "https://securetoken.googleapis.com/v1/token";
-const FIREBASE_OAUTH_SIGN_IN_URL =
-  "https://identitytoolkit.googleapis.com/v1/accounts:signInWithIdp";
 
 type PasswordSignInResponse = {
   idToken: string;
@@ -21,27 +19,6 @@ type PasswordSignInResponse = {
   registered: boolean;
 };
 
-type OAuthSignInResponse = {
-  federatedId: string;
-  providerId: string;
-  localId: string;
-  emailVerified: boolean;
-  email: string;
-  oauthIdToken: string;
-  oauthAccessToken: string;
-  oauthTokenSecret: string;
-  rawUserInfo: string;
-  firstName: string;
-  lastName: string;
-  fullName: string;
-  displayName: string;
-  photoUrl: string;
-  idToken: string;
-  refreshToken: string;
-  expiresIn: string;
-  needConfirmation: boolean;
-};
-
 type RefreshTokenResponse = {
   expires_in: string;
   token_type: string;
@@ -103,45 +80,6 @@ const FirebaseRestClient = {
     };
   },
 
-  // Docs: https://firebase.google.com/docs/reference/rest/auth/#section-sign-in-with-oauth-credential
-  signInWithGoogleOAuth: async (
-    idToken: string,
-  ): Promise<OAuthSignInResponse> => {
-    const response: Response = await fetch(
-      `${FIREBASE_OAUTH_SIGN_IN_URL}?key=${process.env.FIREBASE_WEB_API_KEY}`,
-      {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-        },
-        body: JSON.stringify({
-          postBody: `id_token=${idToken}&providerId=google.com`,
-          requestUri: process.env.FIREBASE_REQUEST_URI,
-          returnIdpCredential: true,
-          returnSecureToken: true,
-        }),
-      },
-    );
-
-    const responseJson:
-      | OAuthSignInResponse
-      | RequestError = await response.json();
-
-    if (!response.ok) {
-      const errorMessage = [
-        "Failed to sign-in via Firebase REST API with OAuth, status code =",
-        `${response.status},`,
-        "error message =",
-        (responseJson as RequestError).error.message,
-      ];
-      Logger.error(errorMessage.join(" "));
-
-      throw new Error("Failed to sign-in via Firebase REST API");
-    }
-
-    return responseJson as OAuthSignInResponse;
-  },
-
   // Docs: https://firebase.google.com/docs/reference/rest/auth/#section-refresh-token
   refreshToken: async (refreshToken: string): Promise<Token> => {
     const response: Response = await fetch(

frontend/package.json

@@ -36,7 +36,6 @@
     "react": "^18.2.0",
     "react-bootstrap": "^1.5.2",
     "react-dom": "^18.2.0",
-    "react-google-login": "^5.2.2",
     "react-icons": "^3.10.0",
     "react-json-schema": "^1.2.2",
     "react-jsonschema-form": "^1.8.1",

frontend/src/APIClients/AuthAPIClient.ts

@@ -47,7 +47,7 @@
         error.code === "auth/invalid-action-code" ||
         error.code === "auth/expired-action-code"
       ) {
         console.log(
           `Attempt to use invalidated sign-in link, ask administrator for new link: ${error.message}`,
         ); // link has already been used once or has expired
       }
@@ -57,20 +57,6 @@
   }
 };
 
-const loginWithGoogle = async (idToken: string): Promise<AuthenticatedUser> => {
-  try {
-    const { data } = await baseAPIClient.post(
-      "/auth/login",
-      { idToken },
-      { withCredentials: true },
-    );
-    localStorage.setItem(AUTHENTICATED_USER_KEY, JSON.stringify(data));
-    return data;
-  } catch (error) {
-    return null;
-  }
-};
-
 const logout = async (userId: number | undefined): Promise<boolean> => {
   const bearerToken = `Bearer ${getLocalStorageObjProperty(
     AUTHENTICATED_USER_KEY,
@@ -177,7 +163,6 @@
   login,
   loginWithSignInLink,
   logout,
-  loginWithGoogle,
   register,
   resetPassword,
   refresh,