Provision elastic users (#3635)

## Description

<!--- Please provide a summary of your changes. Make sure to include
relevant motivation, context, and link related documents/conversations.
-->

<!--- Use [linking
keywords](https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue)
like `Resolves #<issue_number>` to automatically close issues. -->

When you submit the onboarding form you now have the option to
automatically create an elastic account and connect with the WATonomous
Elastic Organization.
Resolves WATonomous/infra-config#3404

## Checklist
- [x] I have read and understood the [WATcloud
Guidelines](https://cloud.watonomous.ca/docs/community-docs/watcloud/guidelines)
- [x] I have performed a self-review of my code

---------

Co-authored-by: Copilot <[email protected]>
Co-authored-by: Ben Zhang <[email protected]>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: 4 people

components/onboarding-form.tsx

@@ -35,7 +35,7 @@ import { ariaDescribedByIds, toPathSchema } from "@rjsf/utils";
 import { CheckedState } from "@radix-ui/react-checkbox";
 import { Code, Pre } from "nextra/components";
 import { Textarea } from "@/components/ui/textarea";
-import { debounce, deepSet, encryptUnixPassword, getDayjsRelative, getObjectPaths, getValuesFromPath, isCryptFormat } from "@/lib/utils";
+import { debounce, deepSet, encryptUnixPassword, getDayjsRelative, encryptBcryptPassword, getObjectPaths, getValuesFromPath, isCryptFormat, isBcryptFormat } from "@/lib/utils";
 import { Toaster } from "@/components/ui/sonner";
 import { toast } from "sonner";
 import { useRouter } from "next/router";
@@ -68,6 +68,7 @@ function getFormState() {
 }
 
 const cryptPaths = getObjectPaths(userSchemaJSON as JSONSchema7, (property: Record<string, any>) => property["$transform"] === "crypt");
+const bcryptPaths = getObjectPaths(userSchemaJSON as JSONSchema7, (property: Record<string, any>) => property["$transform"] === "bcrypt");
 
 const validator = createPrecompiledValidator(
   userSchemaValidate,
@@ -80,7 +81,7 @@ function string_to_mdx(str: string) {
 
 function postprocessFormData(data: Record<string, unknown>) {
   for (const path of cryptPaths) {
-    for (const { value, path: actualPath } of getValuesFromPath(
+    for (const {value, path: actualPath } of getValuesFromPath(
       data,
       path
     )) {
@@ -91,7 +92,19 @@ function postprocessFormData(data: Record<string, unknown>) {
       }
     }
   }
-
+  for (const path of bcryptPaths) {
+    for (const {value, path: actualPath } of getValuesFromPath(
+      data,
+      path
+    )) {
+      // If the password is already encrypted, we don't need to do anything.
+      // Else, encrypt it.
+      if (value && !isBcryptFormat(value)) {
+        const encryptedValue = encryptBcryptPassword(value);
+        deepSet(data, actualPath, encryptedValue);
+      }
+    }
+  }
   return data;
 }
 

lib/bcrypt-ts.d.ts

@@ -0,0 +1,4 @@
+declare module 'bcrypt-ts/browser' {
+    export function genSaltSync(rounds?: number): string;
+    export function hashSync(data: string, salt: string): string;
+}

lib/utils.ts

@@ -6,6 +6,7 @@ import dayjsTimezone from "dayjs/plugin/timezone";
 import dayjsRelativeTime from "dayjs/plugin/relativeTime";
 import { JSONSchema7 } from "json-schema";
 import { sha512crypt } from 'sha512crypt-node';
+import { genSaltSync, hashSync } from "bcrypt-ts/browser";
 
 export function cn(...inputs: ClassValue[]) {
   return twMerge(clsx(inputs))
@@ -269,6 +270,11 @@ export function encryptUnixPassword(password: string): string {
   return sha512crypt(password, genRanHex(16));
 }
 
+export function encryptBcryptPassword(password: string): string {
+  const salt = genSaltSync(10)
+  return hashSync(password, salt);
+}
+
 export function isCryptFormat(s: string) {
   // Regular expression for crypt format
   var pattern = new RegExp(
@@ -278,6 +284,13 @@ export function isCryptFormat(s: string) {
   return match;
 }
 
+export function isBcryptFormat(s: string) {
+  // Regular expression for bcrypt format
+  const pattern: RegExp = /^\$2[ayb]\$\d{2}\$[A-Za-z0-9./]{53}$/;
+  var match = pattern.test(s);
+  return match;
+}
+
 export function flatMap<T, U>(arr: T[], f: (t: T, index: number) => U[]): U[] {
   return arr.reduce<U[]>((acc, val, index) => acc.concat(f(val, index)), []);
 }

package-lock.json

@@ -51,6 +51,7 @@
     "@uppy/aws-s3": "^3.6.2",
     "@uppy/dashboard": "^3.7.5",
     "@uppy/react": "^3.2.2",
+    "bcrypt-ts": "^5.0.3",
     "class-variance-authority": "^0.7.0",
     "clsx": "^2.0.0",
     "cmdk": "^0.2.0",