chore: Move remaining auth methods to plugins (#4900)

* Move Google, Email, and Azure to plugins

* Move OIDC provider, remove old loading code

* Move AuthLogo to plugin

* AuthLogo -> PluginIcon

* Lazy load plugin settings

plugins/email/server/auth/email.test.ts

@@ -0,0 +1,221 @@
+import sharedEnv from "@shared/env";
+import SigninEmail from "@server/emails/templates/SigninEmail";
+import WelcomeEmail from "@server/emails/templates/WelcomeEmail";
+import env from "@server/env";
+import { buildUser, buildGuestUser, buildTeam } from "@server/test/factories";
+import { getTestServer } from "@server/test/support";
+
+const server = getTestServer();
+
+describe("email", () => {
+  it("should require email param", async () => {
+    const res = await server.post("/auth/email", {
+      body: {},
+    });
+    const body = await res.json();
+    expect(res.status).toEqual(400);
+    expect(body.error).toEqual("validation_error");
+    expect(body.ok).toEqual(false);
+  });
+
+  it("should respond with redirect location when user is SSO enabled", async () => {
+    const spy = jest.spyOn(WelcomeEmail, "schedule");
+    const user = await buildUser();
+    const res = await server.post("/auth/email", {
+      body: {
+        email: user.email,
+      },
+    });
+    const body = await res.json();
+    expect(res.status).toEqual(200);
+    expect(body.redirect).toMatch("slack");
+    expect(spy).not.toHaveBeenCalled();
+    spy.mockRestore();
+  });
+
+  it("should not send email when user is on another subdomain but respond with success", async () => {
+    env.URL = sharedEnv.URL = "http://localoutline.com";
+    env.SUBDOMAINS_ENABLED = sharedEnv.SUBDOMAINS_ENABLED = true;
+    env.DEPLOYMENT = "hosted";
+
+    const user = await buildUser();
+    const spy = jest.spyOn(WelcomeEmail, "schedule");
+    await buildTeam({
+      subdomain: "example",
+    });
+    const res = await server.post("/auth/email", {
+      body: {
+        email: user.email,
+      },
+      headers: {
+        host: "example.localoutline.com",
+      },
+    });
+
+    const body = await res.json();
+    expect(res.status).toEqual(200);
+    expect(body.success).toEqual(true);
+    expect(spy).not.toHaveBeenCalled();
+    spy.mockRestore();
+  });
+
+  it("should respond with success and email to be sent when user is not SSO enabled", async () => {
+    const spy = jest.spyOn(SigninEmail, "schedule");
+    const team = await buildTeam({
+      subdomain: "example",
+    });
+    const user = await buildGuestUser({
+      teamId: team.id,
+    });
+    const res = await server.post("/auth/email", {
+      body: {
+        email: user.email,
+      },
+      headers: {
+        host: "example.localoutline.com",
+      },
+    });
+    const body = await res.json();
+    expect(res.status).toEqual(200);
+    expect(body.success).toEqual(true);
+    expect(spy).toHaveBeenCalled();
+    spy.mockRestore();
+  });
+
+  it("should respond with success regardless of whether successful to prevent crawling email logins", async () => {
+    const spy = jest.spyOn(WelcomeEmail, "schedule");
+    await buildTeam({
+      subdomain: "example",
+    });
+    const res = await server.post("/auth/email", {
+      body: {
+        email: "user@example.com",
+      },
+      headers: {
+        host: "example.localoutline.com",
+      },
+    });
+    const body = await res.json();
+    expect(res.status).toEqual(200);
+    expect(body.success).toEqual(true);
+    expect(spy).not.toHaveBeenCalled();
+    spy.mockRestore();
+  });
+  describe("with multiple users matching email", () => {
+    it("should default to current subdomain with SSO", async () => {
+      const spy = jest.spyOn(SigninEmail, "schedule");
+      env.URL = sharedEnv.URL = "http://localoutline.com";
+      env.SUBDOMAINS_ENABLED = sharedEnv.SUBDOMAINS_ENABLED = true;
+      const email = "sso-user@example.org";
+      const team = await buildTeam({
+        subdomain: "example",
+      });
+      await buildGuestUser({
+        email,
+      });
+      await buildUser({
+        email,
+        teamId: team.id,
+      });
+      const res = await server.post("/auth/email", {
+        body: {
+          email,
+        },
+        headers: {
+          host: "example.localoutline.com",
+        },
+      });
+      const body = await res.json();
+      expect(res.status).toEqual(200);
+      expect(body.redirect).toMatch("slack");
+      expect(spy).not.toHaveBeenCalled();
+      spy.mockRestore();
+    });
+
+    it("should default to current subdomain with guest email", async () => {
+      const spy = jest.spyOn(SigninEmail, "schedule");
+      env.URL = sharedEnv.URL = "http://localoutline.com";
+      env.SUBDOMAINS_ENABLED = sharedEnv.SUBDOMAINS_ENABLED = true;
+      const email = "guest-user@example.org";
+      const team = await buildTeam({
+        subdomain: "example",
+      });
+      await buildUser({
+        email,
+      });
+      await buildGuestUser({
+        email,
+        teamId: team.id,
+      });
+      const res = await server.post("/auth/email", {
+        body: {
+          email,
+        },
+        headers: {
+          host: "example.localoutline.com",
+        },
+      });
+      const body = await res.json();
+      expect(res.status).toEqual(200);
+      expect(body.success).toEqual(true);
+      expect(spy).toHaveBeenCalled();
+      spy.mockRestore();
+    });
+
+    it("should default to custom domain with SSO", async () => {
+      const spy = jest.spyOn(WelcomeEmail, "schedule");
+      const email = "sso-user-2@example.org";
+      const team = await buildTeam({
+        domain: "docs.mycompany.com",
+      });
+      await buildGuestUser({
+        email,
+      });
+      await buildUser({
+        email,
+        teamId: team.id,
+      });
+      const res = await server.post("/auth/email", {
+        body: {
+          email,
+        },
+        headers: {
+          host: "docs.mycompany.com",
+        },
+      });
+      const body = await res.json();
+      expect(res.status).toEqual(200);
+      expect(body.redirect).toMatch("slack");
+      expect(spy).not.toHaveBeenCalled();
+      spy.mockRestore();
+    });
+
+    it("should default to custom domain with guest email", async () => {
+      const spy = jest.spyOn(SigninEmail, "schedule");
+      const email = "guest-user-2@example.org";
+      const team = await buildTeam({
+        domain: "docs.mycompany.com",
+      });
+      await buildUser({
+        email,
+      });
+      await buildGuestUser({
+        email,
+        teamId: team.id,
+      });
+      const res = await server.post("/auth/email", {
+        body: {
+          email,
+        },
+        headers: {
+          host: "docs.mycompany.com",
+        },
+      });
+      const body = await res.json();
+      expect(res.status).toEqual(200);
+      expect(body.success).toEqual(true);
+      expect(spy).toHaveBeenCalled();
+      spy.mockRestore();
+    });
+  });
+});