HBA Release 04 18 2024

.circleci/config.yml

@@ -12,7 +12,7 @@ executors:
           # Never do this in production or with any sensitive / non-test data:
           POSTGRES_HOST_AUTH_METHOD: trust
           POSTGRES_DB: bloom
-          JURISDICTION_NAME: Bloomington
+          JURISDICTION_NAME: Alameda
     environment:
       PORT: "3100"
       EMAIL_API_KEY: "SG.SOME-LONG-SECRET-KEY"
@@ -23,7 +23,7 @@ executors:
       # DB URL for the jest tests per ormconfig.test.ts
       TEST_DATABASE_URL: "postgres://bloom-ci@localhost:5432/bloom"
       PARTNERS_PORTAL_URL: "http://localhost:3001"
-      JURISDICTION_NAME: Bloomington
+      JURISDICTION_NAME: Alameda
   standard-node:
     docker:
       - image: "cimg/node:18.14.2"
@@ -33,7 +33,7 @@ executors:
           # Never do this in production or with any sensitive / non-test data:
           POSTGRES_HOST_AUTH_METHOD: trust
           POSTGRES_DB: bloom_prisma
-          JURISDICTION_NAME: Bloomington
+          JURISDICTION_NAME: Alameda
 
 jobs:
   setup:
@@ -221,4 +221,4 @@ workflows:
       - cypress-partners:
           requires:
             - setup
-            - setup-backend
+            - setup-backend

.github/workflows/codeql.yml

@@ -13,10 +13,10 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ dev, master ]
+    branches: [ dev, main ]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [ dev ]
+    branches: [ dev, main ]
   schedule:
     - cron: '40 8 * * 5'
 

.prettierignore

@@ -1,4 +1,5 @@
 **/*.hbs
+**/*.md
 .github
 ui-components/CHANGELOG.md
 sites/public/CHANGELOG.md

README.md

@@ -93,6 +93,25 @@ These steps allow for two development patterns. You can edit ui-components withi
 Bloom will now be consuming the published version of @bloom-housing/ui-components specified in package.json and no local ui-component changes will be reflected.
 
 
+### Bloom's UI-Component Development
+- Because Bloom's ui-components package is a separate open source repository, developing within both repos locally requires linking the folders with the following steps:
+### Directory Setup
+1. Clone both Bloom and the [ui-components repository](https://github.com/bloom-housing/ui-components) on the same directory level. 
+### Symlinking UI-C
+1. In the Bloom directory, run `yarn link:uic`.
+2. Open the next.config.js file in the public and partner's directory.
+3. Uncomment the experimental property at the bottom of each file.
+4. Follow the directions above to run Bloom locally.
+These steps allow for two development patterns. You can edit ui-components within the node_modules of Bloom and the changes will be reflected in your local version of ui-components. Alternatively, you can edit the local version of ui-components and the changes will be reflected in the node_modules in Bloom. Both patterns will display up-to-date changes on the local server.
+
+### Unlinking UI-C
+1. In the Bloom directory, run `yarn unlink:uic`.
+2. Open the next.config.js file in the public and partner's directory.
+3. Comment out the experimental property at the bottom of each file.
+4. Follow the directions above to run Bloom locally.
+Bloom will now be consuming the published version of @bloom-housing/ui-components specified in package.json and no local ui-component changes will be reflected.
+
+
 ## Contributing
 
 Contributions to the core Bloom applications and services are welcomed. To help us meet the project's goals around quality and maintainability, we ask that all contributors read, understand, and agree to our guidelines.

api/package.json

@@ -23,11 +23,11 @@
     "db:migration:run": "yarn prisma migrate deploy",
     "db:seed:production": "npx prisma db seed -- --environment production",
     "db:seed:staging": "npx prisma db seed -- --environment staging",
-    "db:seed:development": "npx prisma db seed -- --environment development --jurisdictionName Bloomington",
+    "db:seed:development": "npx prisma db seed -- --environment development --jurisdictionName Alameda",
     "generate:client": "ts-node scripts/generate-axios-client.ts && prettier -w ../shared-helpers/src/types/backend-swagger.ts",
     "test:e2e": "yarn db:resetup && yarn db:migration:run && jest --config ./test/jest-e2e.config.js",
     "db:setup": "yarn db:resetup && yarn db:migration:run && yarn db:seed:development",
-    "db:setup:staging": "yarn db:resetup && yarn db:migration:run && yarn db:seed:staging --jurisdictionName Bloomington",
+    "db:setup:staging": "yarn db:resetup && yarn db:migration:run && yarn db:seed:staging --jurisdictionName Alameda",
     "setup": "yarn install && yarn prisma generate && yarn build && yarn db:setup:staging",
     "db:migration:skip": "yarn prisma migrate resolve --applied ",
     "setup:dev": "yarn install && yarn prisma generate && yarn build && yarn db:setup"

api/prisma/seed-staging.ts

@@ -46,9 +46,12 @@ export const stagingSeed = async (
   const jurisdiction = await prismaClient.jurisdictions.create({
     data: jurisdictionFactory(jurisdictionName, [UserRoleEnum.admin]),
   });
-  // add another jurisdiction
+  // add additional jurisdictions
   const additionalJurisdiction = await prismaClient.jurisdictions.create({
-    data: jurisdictionFactory(randomNoun()),
+    data: jurisdictionFactory('San Mateo'),
+  });
+  await prismaClient.jurisdictions.create({
+    data: jurisdictionFactory('San Jose'),
   });
   // create admin user
   await prismaClient.userAccounts.create({

api/src/controllers/auth.controller.ts

@@ -93,6 +93,19 @@ export class AuthController {
     return await this.authService.requestMfaCode(dto);
   }
 
+  @Post('request-single-use-code')
+  @ApiOperation({
+    summary: 'Request single use code',
+    operationId: 'requestSingleUseCode',
+  })
+  @ApiOkResponse({ type: SuccessDTO })
+  async requestSingleUseCode(
+    @Request() req: ExpressRequest,
+    @Body() dto: RequestSingleUseCode,
+  ): Promise<SuccessDTO> {
+    return await this.authService.requestSingleUseCode(dto, req);
+  }
+
   @Get('requestNewToken')
   @ApiOperation({
     summary: 'Requests a new token given a refresh token',

api/src/services/auth.service.ts

@@ -4,7 +4,7 @@ import {
   NotFoundException,
   UnauthorizedException,
 } from '@nestjs/common';
-import { CookieOptions, Response } from 'express';
+import { CookieOptions, Request, Response } from 'express';
 import { sign, verify } from 'jsonwebtoken';
 import { Prisma } from '@prisma/client';
 import { UpdatePassword } from '../dtos/auth/update-password.dto';
@@ -22,6 +22,8 @@ import { generateSingleUseCode } from '../utilities/generate-single-use-code';
 import { Confirm } from '../dtos/auth/confirm.dto';
 import { SmsService } from './sms.service';
 import { EmailService } from './email.service';
+import { RequestSingleUseCode } from '../dtos/single-use-code/request-single-use-code.dto';
+import { OrderByEnum } from '../enums/shared/order-by-enum';
 
 // since our local env doesn't have an https cert we can't be secure. Hosted envs should be secure
 const secure = process.env.NODE_ENV !== 'development';
@@ -244,6 +246,76 @@ export class AuthService {
         };
   }
 
+  /**
+   *
+   * @param dto the incoming request with the email
+   * @returns a SuccessDTO always, and if the user exists it will send a code to the requester
+   */
+  async requestSingleUseCode(
+    dto: RequestSingleUseCode,
+    req: Request,
+  ): Promise<SuccessDTO> {
+    const user = await this.prisma.userAccounts.findFirst({
+      where: { email: dto.email },
+      include: {
+        jurisdictions: true,
+      },
+    });
+    if (!user) {
+      return { success: true };
+    }
+
+    const jurisName = req?.headers?.jurisdictionname;
+    if (!jurisName) {
+      throw new BadRequestException(
+        'jurisdictionname is missing from the request headers',
+      );
+    }
+
+    const juris = await this.prisma.jurisdictions.findFirst({
+      select: {
+        id: true,
+        allowSingleUseCodeLogin: true,
+      },
+      where: {
+        name: jurisName as string,
+      },
+      orderBy: {
+        allowSingleUseCodeLogin: OrderByEnum.DESC,
+      },
+    });
+
+    if (!juris) {
+      throw new BadRequestException(
+        `Jurisidiction ${jurisName} does not exists`,
+      );
+    }
+
+    if (!juris.allowSingleUseCodeLogin) {
+      throw new BadRequestException(
+        `Single use code login is not setup for ${jurisName}`,
+      );
+    }
+
+    const singleUseCode = generateSingleUseCode();
+    await this.prisma.userAccounts.update({
+      data: {
+        singleUseCode,
+        singleUseCodeUpdatedAt: new Date(),
+      },
+      where: {
+        id: user.id,
+      },
+    });
+
+    await this.emailsService.sendSingleUseCode(
+      mapTo(User, user),
+      singleUseCode,
+    );
+
+    return { success: true };
+  }
+
   /*
     updates a user's password and logs them in
   */

api/src/services/sendgrid.service.ts

@@ -13,7 +13,7 @@ export class SendGridService {
     private readonly mailService: MailService,
     private readonly configService: ConfigService,
   ) {
-    this.mailService.setApiKey(configService.get<string>('EMAIL_API_KEY'));
+    this.mailService.setApiKey(this.configService.get<string>('EMAIL_API_KEY'));
   }
 
   public async send(

api/test/integration/auth.e2e-spec.ts

@@ -14,7 +14,6 @@ import {
   TOKEN_COOKIE_NAME,
 } from '../../src/services/auth.service';
 import { SmsService } from '../../src/services/sms.service';
-import { EmailService } from '../../src/services/email.service';
 import { RequestMfaCode } from '../../src/dtos/mfa/request-mfa-code.dto';
 import { UpdatePassword } from '../../src/dtos/auth/update-password.dto';
 import { Confirm } from '../../src/dtos/auth/confirm.dto';
@@ -24,7 +23,6 @@ describe('Auth Controller Tests', () => {
   let app: INestApplication;
   let prisma: PrismaService;
   let smsService: SmsService;
-  let emailService: EmailService;
 
   beforeAll(async () => {
     const moduleFixture: TestingModule = await Test.createTestingModule({
@@ -35,7 +33,6 @@ describe('Auth Controller Tests', () => {
     app.use(cookieParser());
     prisma = moduleFixture.get<PrismaService>(PrismaService);
     smsService = moduleFixture.get<SmsService>(SmsService);
-    emailService = moduleFixture.get<EmailService>(EmailService);
     await app.init();
   });