fix(console): u2f, mfa, loginpolicy, auth and mgmt passwordless, clockskew, userinfo within idtoken (#1108)

* fix 2fa,mfa config, self management

* u2f enable when otp

* passwordless grpc auth

* clockskew, passwordless container, util class

* passwordless, i18n

* passwordless auth and mgmt

* lint ts

* chore(deps-dev): bump ts-node from 9.1.0 to 9.1.1 in /console (#1089)

Bumps [ts-node](https://github.com/TypeStrong/ts-node) from 9.1.0 to 9.1.1.
- [Release notes](https://github.com/TypeStrong/ts-node/releases)
- [Commits](https://github.com/TypeStrong/ts-node/compare/v9.1.0...v9.1.1)

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump @angular/cli from 11.0.3 to 11.0.4 in /console (#1094)

Bumps [@angular/cli](https://github.com/angular/angular-cli) from 11.0.3 to 11.0.4.
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Commits](https://github.com/angular/angular-cli/compare/v11.0.3...v11.0.4)

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Peintner <[email protected]>

* chore(deps): bump uuid from 8.3.1 to 8.3.2 in /console (#1098)

Bumps [uuid](https://github.com/uuidjs/uuid) from 8.3.1 to 8.3.2.
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v8.3.1...v8.3.2)

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Peintner <[email protected]>

* chore(deps-dev): bump @angular/language-service in /console (#1099)

Bumps [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service) from 11.0.3 to 11.0.4.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/master/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/11.0.4/packages/language-service)

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump @types/node from 14.14.10 to 14.14.13 in /console (#1100)

Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 14.14.10 to 14.14.13.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump @angular-devkit/build-angular in /console (#1088)

Bumps [@angular-devkit/build-angular](https://github.com/angular/angular-cli) from 0.1100.3 to 0.1100.4.
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Commits](https://github.com/angular/angular-cli/commits)

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Peintner <[email protected]>

* fix: replace regex check for projectid (#1064)

* update lock

* fix app detail

* logs

* fix login policy update

* fix error message

* decode excluded cred id

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Livio Amstutz <[email protected]>

console/src/app/services/admin.service.ts

@@ -11,6 +11,7 @@ import {
     DefaultLabelPolicyUpdate,
     DefaultLabelPolicyView,
     DefaultLoginPolicy,
+    DefaultLoginPolicyRequest,
     DefaultLoginPolicyView,
     DefaultPasswordAgePolicyRequest,
     DefaultPasswordAgePolicyView,
@@ -214,7 +215,7 @@ export class AdminService {
         return this.grpcService.admin.getDefaultLoginPolicy(req);
     }
 
-    public UpdateDefaultLoginPolicy(req: DefaultLoginPolicy): Promise<DefaultLoginPolicy> {
+    public UpdateDefaultLoginPolicy(req: DefaultLoginPolicyRequest): Promise<DefaultLoginPolicy> {
         return this.grpcService.admin.updateDefaultLoginPolicy(req);
     }
 

console/src/app/services/grpc-auth.service.ts

@@ -5,37 +5,38 @@ import { BehaviorSubject, from, merge, Observable, of, Subject } from 'rxjs';
 import { catchError, filter, finalize, first, map, mergeMap, switchMap, take, timeout } from 'rxjs/operators';
 
 import {
-  Changes,
-  ChangesRequest,
-  ExternalIDPRemoveRequest,
-  ExternalIDPSearchRequest,
-  ExternalIDPSearchResponse,
-  Gender,
-  MfaOtpResponse,
-  MultiFactors,
-  MyPermissions,
-  MyProjectOrgSearchQuery,
-  MyProjectOrgSearchRequest,
-  MyProjectOrgSearchResponse,
-  Org,
-  PasswordChange,
-  PasswordComplexityPolicy,
-  UpdateUserAddressRequest,
-  UpdateUserEmailRequest,
-  UpdateUserPhoneRequest,
-  UpdateUserProfileRequest,
-  UserAddress,
-  UserEmail,
-  UserPhone,
-  UserProfile,
-  UserProfileView,
-  UserSessionViews,
-  UserView,
-  VerifyMfaOtp,
-  VerifyUserPhoneRequest,
-  VerifyWebAuthN,
-  WebAuthNResponse,
-  WebAuthNTokenID,
+    Changes,
+    ChangesRequest,
+    ExternalIDPRemoveRequest,
+    ExternalIDPSearchRequest,
+    ExternalIDPSearchResponse,
+    Gender,
+    MfaOtpResponse,
+    MultiFactors,
+    MyPermissions,
+    MyProjectOrgSearchQuery,
+    MyProjectOrgSearchRequest,
+    MyProjectOrgSearchResponse,
+    Org,
+    PasswordChange,
+    PasswordComplexityPolicy,
+    UpdateUserAddressRequest,
+    UpdateUserEmailRequest,
+    UpdateUserPhoneRequest,
+    UpdateUserProfileRequest,
+    UserAddress,
+    UserEmail,
+    UserPhone,
+    UserProfile,
+    UserProfileView,
+    UserSessionViews,
+    UserView,
+    VerifyMfaOtp,
+    VerifyUserPhoneRequest,
+    VerifyWebAuthN,
+    WebAuthNResponse,
+    WebAuthNTokenID,
+    WebAuthNTokens,
 } from '../proto/generated/auth_pb';
 import { GrpcService } from './grpc.service';
 import { StorageKey, StorageService } from './storage.service';
@@ -338,9 +339,9 @@ export class GrpcAuthService {
     }
 
     public RemoveMyMfaU2F(id: string): Promise<Empty> {
-      const req = new WebAuthNTokenID();
-      req.setId(id);
-      return this.grpcService.auth.removeMyMfaU2F(req);
+        const req = new WebAuthNTokenID();
+        req.setId(id);
+        return this.grpcService.auth.removeMyMfaU2F(req);
     }
 
     public VerifyMyMfaU2F(credential: string, tokenname: string): Promise<Empty> {
@@ -353,9 +354,37 @@ export class GrpcAuthService {
         );
     }
 
+    public GetMyPasswordless(): Promise<WebAuthNTokens> {
+        return this.grpcService.auth.getMyPasswordless(
+            new Empty(),
+        );
+    }
+
+    public AddMyPasswordless(): Promise<WebAuthNResponse> {
+        return this.grpcService.auth.addMyPasswordless(
+            new Empty(),
+        );
+    }
+
+    public RemoveMyPasswordless(id: string): Promise<Empty> {
+        const req = new WebAuthNTokenID();
+        req.setId(id);
+        return this.grpcService.auth.removeMyPasswordless(req);
+    }
+
+    public verifyMyPasswordless(credential: string, tokenname: string): Promise<Empty> {
+        const req = new VerifyWebAuthN();
+        req.setPublicKeyCredential(credential);
+        req.setTokenName(tokenname);
+
+        return this.grpcService.auth.verifyMyPasswordless(
+            req,
+        );
+    }
+
     public RemoveMfaOTP(): Promise<Empty> {
         return this.grpcService.auth.removeMfaOTP(
-          new Empty(),
+            new Empty(),
         );
     }
 

console/src/app/services/mgmt.service.ts

@@ -2,8 +2,8 @@ import { Injectable } from '@angular/core';
 import { Empty } from 'google-protobuf/google/protobuf/empty_pb';
 import { Timestamp } from 'google-protobuf/google/protobuf/timestamp_pb';
 import { BehaviorSubject } from 'rxjs';
-import { MultiFactorsResult } from '../proto/generated/admin_pb';
 
+import { MultiFactorsResult } from '../proto/generated/admin_pb';
 import {
     AddMachineKeyRequest,
     AddMachineKeyResponse,
@@ -157,6 +157,7 @@ import {
     UserView,
     ValidateOrgDomainRequest,
     WebAuthNTokenID,
+    WebAuthNTokens,
     ZitadelDocs,
 } from '../proto/generated/management_pb';
 import { GrpcService } from './grpc.service';
@@ -190,6 +191,19 @@ export class ManagementService {
         return this.grpcService.mgmt.searchIdps(req);
     }
 
+    public GetPasswordless(userId: string): Promise<WebAuthNTokens> {
+        const req = new UserID();
+        req.setId(userId);
+        return this.grpcService.mgmt.getPasswordless(req);
+    }
+
+    public RemovePasswordless(id: string, userId: string): Promise<Empty> {
+        const req = new WebAuthNTokenID();
+        req.setId(id);
+        req.setUserId(userId);
+        return this.grpcService.mgmt.removePasswordless(req);
+    }
+
     public GetLoginPolicyMultiFactors(): Promise<MultiFactorsResult> {
         const req = new Empty();
         return this.grpcService.mgmt.getLoginPolicyMultiFactors(req);
@@ -714,9 +728,10 @@ export class ManagementService {
         return this.grpcService.mgmt.removeMfaOTP(req);
     }
 
-    public RemoveMfaU2F(id: string): Promise<Empty> {
+    public RemoveMfaU2F(userid: string, id: string): Promise<Empty> {
         const req = new WebAuthNTokenID();
         req.setId(id);
+        req.setUserId(userid);
         return this.grpcService.mgmt.removeMfaU2F(req);
     }
 
@@ -1344,21 +1359,7 @@ export class ManagementService {
         return this.grpcService.mgmt.updateApplication(req);
     }
 
-    public UpdateOIDCAppConfig(projectId: string,
-        appId: string, oidcConfig: OIDCConfig.AsObject): Promise<OIDCConfig> {
-        const req = new OIDCConfigUpdate();
-        req.setProjectId(projectId);
-        req.setApplicationId(appId);
-        req.setRedirectUrisList(oidcConfig.redirectUrisList);
-        req.setResponseTypesList(oidcConfig.responseTypesList);
-        req.setAuthMethodType(oidcConfig.authMethodType);
-        req.setPostLogoutRedirectUrisList(oidcConfig.postLogoutRedirectUrisList);
-        req.setGrantTypesList(oidcConfig.grantTypesList);
-        req.setApplicationType(oidcConfig.applicationType);
-        req.setDevMode(oidcConfig.devMode);
-        req.setAccessTokenType(oidcConfig.accessTokenType);
-        req.setAccessTokenRoleAssertion(oidcConfig.accessTokenRoleAssertion);
-        req.setIdTokenRoleAssertion(oidcConfig.idTokenRoleAssertion);
+    public UpdateOIDCAppConfig(req: OIDCConfigUpdate): Promise<OIDCConfig> {
         return this.grpcService.mgmt.updateApplicationOIDCConfig(req);
     }
 }