import { Component, OnInit, ViewChild, ViewContainerRef } from '@angular/core'; import { ToasterService } from 'angular2-toaster'; import { ApiService } from 'jslib-common/abstractions/api.service'; import { CryptoService } from 'jslib-common/abstractions/crypto.service'; import { I18nService } from 'jslib-common/abstractions/i18n.service'; import { LogService } from 'jslib-common/abstractions/log.service'; import { MessagingService } from 'jslib-common/abstractions/messaging.service'; import { PlatformUtilsService } from 'jslib-common/abstractions/platformUtils.service'; import { StorageService } from 'jslib-common/abstractions/storage.service'; import { UserService } from 'jslib-common/abstractions/user.service'; import { EmergencyAccessStatusType } from 'jslib-common/enums/emergencyAccessStatusType'; import { EmergencyAccessType } from 'jslib-common/enums/emergencyAccessType'; import { Utils } from 'jslib-common/misc/utils'; import { EmergencyAccessConfirmRequest } from 'jslib-common/models/request/emergencyAccessConfirmRequest'; import { EmergencyAccessGranteeDetailsResponse, EmergencyAccessGrantorDetailsResponse } from 'jslib-common/models/response/emergencyAccessResponse'; import { ConstantsService } from 'jslib-common/services/constants.service'; import { UserNamePipe } from 'jslib-angular/pipes/user-name.pipe'; import { EmergencyAccessAddEditComponent } from './emergency-access-add-edit.component'; import { EmergencyAccessConfirmComponent } from './emergency-access-confirm.component'; import { EmergencyAccessTakeoverComponent } from './emergency-access-takeover.component'; import { ModalService } from 'jslib-angular/services/modal.service'; @Component({ selector: 'emergency-access', templateUrl: 'emergency-access.component.html', }) export class EmergencyAccessComponent implements OnInit { @ViewChild('addEdit', { read: ViewContainerRef, static: true }) addEditModalRef: ViewContainerRef; @ViewChild('takeoverTemplate', { read: ViewContainerRef, static: true}) takeoverModalRef: ViewContainerRef; @ViewChild('confirmTemplate', { read: ViewContainerRef, static: true }) confirmModalRef: ViewContainerRef; canAccessPremium: boolean; trustedContacts: EmergencyAccessGranteeDetailsResponse[]; grantedContacts: EmergencyAccessGrantorDetailsResponse[]; emergencyAccessType = EmergencyAccessType; emergencyAccessStatusType = EmergencyAccessStatusType; actionPromise: Promise; isOrganizationOwner: boolean; constructor(private apiService: ApiService, private i18nService: I18nService, private modalService: ModalService, private platformUtilsService: PlatformUtilsService, private toasterService: ToasterService, private cryptoService: CryptoService, private storageService: StorageService, private userService: UserService, private messagingService: MessagingService, private userNamePipe: UserNamePipe, private logService: LogService) { } async ngOnInit() { this.canAccessPremium = await this.userService.canAccessPremium(); const orgs = await this.userService.getAllOrganizations(); this.isOrganizationOwner = orgs.some(o => o.isOwner); this.load(); } async load() { this.trustedContacts = (await this.apiService.getEmergencyAccessTrusted()).data; this.grantedContacts = (await this.apiService.getEmergencyAccessGranted()).data; } async premiumRequired() { if (!this.canAccessPremium) { this.messagingService.send('premiumRequired'); return; } } async edit(details: EmergencyAccessGranteeDetailsResponse) { const [modal] = await this.modalService.openViewRef(EmergencyAccessAddEditComponent, this.addEditModalRef, comp => { comp.name = this.userNamePipe.transform(details); comp.emergencyAccessId = details?.id; comp.readOnly = !this.canAccessPremium; comp.onSaved.subscribe(() => { modal.close(); this.load(); }); comp.onDeleted.subscribe(() => { modal.close(); this.remove(details); }); }); } invite() { this.edit(null); } async reinvite(contact: EmergencyAccessGranteeDetailsResponse) { if (this.actionPromise != null) { return; } this.actionPromise = this.apiService.postEmergencyAccessReinvite(contact.id); await this.actionPromise; this.toasterService.popAsync('success', null, this.i18nService.t('hasBeenReinvited', contact.email)); this.actionPromise = null; } async confirm(contact: EmergencyAccessGranteeDetailsResponse) { function updateUser() { contact.status = EmergencyAccessStatusType.Confirmed; } if (this.actionPromise != null) { return; } const autoConfirm = await this.storageService.get(ConstantsService.autoConfirmFingerprints); if (autoConfirm == null || !autoConfirm) { const [modal] = await this.modalService.openViewRef(EmergencyAccessConfirmComponent, this.confirmModalRef, comp => { comp.name = this.userNamePipe.transform(contact); comp.emergencyAccessId = contact.id; comp.userId = contact?.granteeId; comp.onConfirmed.subscribe(async () => { modal.close(); comp.formPromise = this.doConfirmation(contact); await comp.formPromise; updateUser(); this.toasterService.popAsync('success', null, this.i18nService.t('hasBeenConfirmed', this.userNamePipe.transform(contact))); }); }); return; } this.actionPromise = this.doConfirmation(contact); await this.actionPromise; updateUser(); this.toasterService.popAsync('success', null, this.i18nService.t('hasBeenConfirmed', this.userNamePipe.transform(contact))); this.actionPromise = null; } async remove(details: EmergencyAccessGranteeDetailsResponse | EmergencyAccessGrantorDetailsResponse) { const confirmed = await this.platformUtilsService.showDialog( this.i18nService.t('removeUserConfirmation'), this.userNamePipe.transform(details), this.i18nService.t('yes'), this.i18nService.t('no'), 'warning'); if (!confirmed) { return false; } try { await this.apiService.deleteEmergencyAccess(details.id); this.toasterService.popAsync('success', null, this.i18nService.t('removedUserId', this.userNamePipe.transform(details))); if (details instanceof EmergencyAccessGranteeDetailsResponse) { this.removeGrantee(details); } else { this.removeGrantor(details); } } catch (e) { this.logService.error(e); } } async requestAccess(details: EmergencyAccessGrantorDetailsResponse) { const confirmed = await this.platformUtilsService.showDialog( this.i18nService.t('requestAccessConfirmation', details.waitTimeDays.toString()), this.userNamePipe.transform(details), this.i18nService.t('requestAccess'), this.i18nService.t('no'), 'warning', ); if (!confirmed) { return false; } await this.apiService.postEmergencyAccessInitiate(details.id); details.status = EmergencyAccessStatusType.RecoveryInitiated; this.toasterService.popAsync('success', null, this.i18nService.t('requestSent', this.userNamePipe.transform(details))); } async approve(details: EmergencyAccessGranteeDetailsResponse) { const type = this.i18nService.t(details.type === EmergencyAccessType.View ? 'view' : 'takeover'); const confirmed = await this.platformUtilsService.showDialog( this.i18nService.t('approveAccessConfirmation', this.userNamePipe.transform(details), type), this.userNamePipe.transform(details), this.i18nService.t('approve'), this.i18nService.t('no'), 'warning', ); if (!confirmed) { return false; } await this.apiService.postEmergencyAccessApprove(details.id); details.status = EmergencyAccessStatusType.RecoveryApproved; this.toasterService.popAsync('success', null, this.i18nService.t('emergencyApproved', this.userNamePipe.transform(details))); } async reject(details: EmergencyAccessGranteeDetailsResponse) { await this.apiService.postEmergencyAccessReject(details.id); details.status = EmergencyAccessStatusType.Confirmed; this.toasterService.popAsync('success', null, this.i18nService.t('emergencyRejected', this.userNamePipe.transform(details))); } async takeover(details: EmergencyAccessGrantorDetailsResponse) { const [modal] = await this.modalService.openViewRef(EmergencyAccessTakeoverComponent, this.takeoverModalRef, comp => { comp.name = this.userNamePipe.transform(details); comp.email = details.email; comp.emergencyAccessId = details != null ? details.id : null; comp.onDone.subscribe(() => { modal.close(); this.toasterService.popAsync('success', null, this.i18nService.t('passwordResetFor', this.userNamePipe.transform(details))); }); }); } private removeGrantee(details: EmergencyAccessGranteeDetailsResponse) { const index = this.trustedContacts.indexOf(details); if (index > -1) { this.trustedContacts.splice(index, 1); } } private removeGrantor(details: EmergencyAccessGrantorDetailsResponse) { const index = this.grantedContacts.indexOf(details); if (index > -1) { this.grantedContacts.splice(index, 1); } } // Encrypt the master password hash using the grantees public key, and send it to bitwarden for escrow. private async doConfirmation(details: EmergencyAccessGranteeDetailsResponse) { const encKey = await this.cryptoService.getEncKey(); const publicKeyResponse = await this.apiService.getUserPublicKey(details.granteeId); const publicKey = Utils.fromB64ToArray(publicKeyResponse.publicKey); try { this.logService.debug('User\'s fingerprint: ' + (await this.cryptoService.getFingerprint(details.granteeId, publicKey.buffer)).join('-')); } catch { // Ignore errors since it's just a debug message } const encryptedKey = await this.cryptoService.rsaEncrypt(encKey.key, publicKey.buffer); const request = new EmergencyAccessConfirmRequest(); request.key = encryptedKey.encryptedString; await this.apiService.postEmergencyAccessConfirm(details.id, request); } }