[PM-1188] Server owner auth migration (#2825)

* [PM-1188] add sso project to auth

* [PM-1188] move sso api models to auth

* [PM-1188] fix sso api model namespace & imports

* [PM-1188] move core files to auth

* [PM-1188] fix core sso namespace & models

* [PM-1188] move sso repository files to auth

* [PM-1188] fix sso repo files namespace & imports

* [PM-1188] move sso sql files to auth folder

* [PM-1188] move sso test files to auth folders

* [PM-1188] fix sso tests namespace & imports

* [PM-1188] move auth api files to auth folder

* [PM-1188] fix auth api files namespace & imports

* [PM-1188] move auth core files to auth folder

* [PM-1188] fix auth core files namespace & imports

* [PM-1188] move auth email templates to auth folder

* [PM-1188] move auth email folder back into shared directory

* [PM-1188] fix auth email names

* [PM-1188] move auth core models to auth folder

* [PM-1188] fix auth model namespace & imports

* [PM-1188] add entire Identity project to auth codeowners

* [PM-1188] fix auth orm files namespace & imports

* [PM-1188] move auth orm files to auth folder

* [PM-1188] move auth sql files to auth folder

* [PM-1188] move auth tests to auth folder

* [PM-1188] fix auth test files namespace & imports

* [PM-1188] move emergency access api files to auth folder

* [PM-1188] fix emergencyaccess api files namespace & imports

* [PM-1188] move emergency access core files to auth folder

* [PM-1188] fix emergency access core files namespace & imports

* [PM-1188] move emergency access orm files to auth folder

* [PM-1188] fix emergency access orm files namespace & imports

* [PM-1188] move emergency access sql files to auth folder

* [PM-1188] move emergencyaccess test files to auth folder

* [PM-1188] fix emergency access test files namespace & imports

* [PM-1188] move captcha files to auth folder

* [PM-1188] fix captcha files namespace & imports

* [PM-1188] move auth admin files into auth folder

* [PM-1188] fix admin auth files namespace & imports
- configure mvc to look in auth folders for views

* [PM-1188] remove extra imports and formatting

* [PM-1188] fix ef auth model imports

* [PM-1188] fix DatabaseContextModelSnapshot paths

* [PM-1188] fix grant import in ef

* [PM-1188] update sqlproj

* [PM-1188] move missed sqlproj files

* [PM-1188] move auth ef models out of auth folder

* [PM-1188] fix auth ef models namespace

* [PM-1188] remove auth ef models unused imports

* [PM-1188] fix imports for auth ef models

* [PM-1188] fix more ef model imports

* [PM-1188] fix file encodings

.github/CODEOWNERS

@@ -2,5 +2,10 @@
 #
 # https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
 
+## Auth team files ##
+**/Auth @bitwarden/team-auth-dev
+bitwarden_license/src/Sso @bitwarden/team-auth-dev
+src/Identity @bitwarden/team-auth-dev
+
 **/SecretsManager @bitwarden/team-secrets-manager-dev
 **/Vault @bitwarden/team-vault-dev

bitwarden_license/src/Sso/Controllers/AccountController.cs

@@ -1,11 +1,14 @@
 using System.Security.Claims;
 using Bit.Core;
+using Bit.Core.Auth.Entities;
+using Bit.Core.Auth.Enums;
+using Bit.Core.Auth.Models;
+using Bit.Core.Auth.Models.Business.Tokenables;
+using Bit.Core.Auth.Models.Data;
+using Bit.Core.Auth.Repositories;
 using Bit.Core.Entities;
 using Bit.Core.Enums;
-using Bit.Core.Models;
 using Bit.Core.Models.Api;
-using Bit.Core.Models.Business.Tokenables;
-using Bit.Core.Models.Data;
 using Bit.Core.Repositories;
 using Bit.Core.Services;
 using Bit.Core.Settings;

bitwarden_license/src/Sso/Controllers/MetadataController.cs

@@ -1,4 +1,4 @@
-using Bit.Core.Enums;
+using Bit.Core.Auth.Enums;
 using Bit.Sso.Utilities;
 using Microsoft.AspNetCore.Authentication;
 using Microsoft.AspNetCore.Mvc;

bitwarden_license/src/Sso/Utilities/DynamicAuthenticationScheme.cs

@@ -1,4 +1,4 @@
-using Bit.Core.Enums;
+using Bit.Core.Auth.Enums;
 using Microsoft.AspNetCore.Authentication;
 using Microsoft.AspNetCore.Authentication.OpenIdConnect;
 using Sustainsys.Saml2.AspNetCore2;

bitwarden_license/src/Sso/Utilities/DynamicAuthenticationSchemeProvider.cs

@@ -1,8 +1,8 @@
 using System.Security.Cryptography.X509Certificates;
-using Bit.Core.Entities;
-using Bit.Core.Enums;
-using Bit.Core.Models.Data;
-using Bit.Core.Repositories;
+using Bit.Core.Auth.Entities;
+using Bit.Core.Auth.Enums;
+using Bit.Core.Auth.Models.Data;
+using Bit.Core.Auth.Repositories;
 using Bit.Core.Settings;
 using Bit.Core.Utilities;
 using Bit.Sso.Models;

bitwarden_license/src/Sso/Utilities/IDynamicAuthenticationScheme.cs

@@ -1,4 +1,4 @@
-using Bit.Core.Enums;
+using Bit.Core.Auth.Enums;
 using Microsoft.AspNetCore.Authentication;
 
 namespace Bit.Sso.Utilities;

bitwarden_license/src/Sso/Utilities/SsoAuthenticationMiddleware.cs

@@ -1,4 +1,4 @@
-using Bit.Core.Enums;
+using Bit.Core.Auth.Enums;
 using Microsoft.AspNetCore.Authentication;
 using Microsoft.AspNetCore.Authentication.OpenIdConnect;
 using Sustainsys.Saml2.AspNetCore2;

src/Admin/Controllers/LoginController.cs → src/Admin/Auth/Controllers/LoginController.cs

@@ -1,9 +1,9 @@
-using Bit.Admin.IdentityServer;
-using Bit.Admin.Models;
+using Bit.Admin.Auth.IdentityServer;
+using Bit.Admin.Auth.Models;
 using Microsoft.AspNetCore.Identity;
 using Microsoft.AspNetCore.Mvc;
 
-namespace Bit.Admin.Controllers;
+namespace Bit.Admin.Auth.Controllers;
 
 public class LoginController : Controller
 {

src/Admin/IdentityServer/PasswordlessSignInManager.cs → src/Admin/Auth/IdentityServer/PasswordlessSignInManager.cs

@@ -3,7 +3,7 @@
 using Microsoft.AspNetCore.Identity;
 using Microsoft.Extensions.Options;
 
-namespace Bit.Admin.IdentityServer;
+namespace Bit.Admin.Auth.IdentityServer;
 
 public class PasswordlessSignInManager<TUser> : SignInManager<TUser> where TUser : class
 {

src/Admin/Jobs/DatabaseExpiredGrantsJob.cs → src/Admin/Auth/Jobs/DatabaseExpiredGrantsJob.cs

@@ -3,7 +3,7 @@
 using Bit.Core.Repositories;
 using Quartz;
 
-namespace Bit.Admin.Jobs;
+namespace Bit.Admin.Auth.Jobs;
 
 public class DatabaseExpiredGrantsJob : BaseJob
 {

src/Admin/Jobs/DeleteAuthRequestsJob.cs → src/Admin/Auth/Jobs/DeleteAuthRequestsJob.cs

@@ -3,7 +3,7 @@
 using Bit.Core.Repositories;
 using Quartz;
 
-namespace Bit.Admin.Jobs;
+namespace Bit.Admin.Auth.Jobs;
 
 public class DeleteAuthRequestsJob : BaseJob
 {

src/Admin/Models/LoginModel.cs → src/Admin/Auth/Models/LoginModel.cs

@@ -1,6 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 
-namespace Bit.Admin.Models;
+namespace Bit.Admin.Auth.Models;
 
 public class LoginModel
 {

src/Admin/Auth/Views/_ViewImports.cshtml

@@ -0,0 +1,5 @@
+@using Microsoft.AspNetCore.Identity
+@using Bit.Admin.Auth
+@using Bit.Admin.Auth.Models
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
+@addTagHelper "*, Admin"

src/Admin/Auth/Views/_ViewStart.cshtml

@@ -0,0 +1,3 @@
+@{
+    Layout = "_Layout";
+}

src/Admin/IdentityServer/ServiceCollectionExtensions.cs

@@ -1,5 +1,6 @@
-using Bit.Core.Entities;
-using Bit.Core.Identity;
+using Bit.Admin.Auth.IdentityServer;
+using Bit.Core.Auth.Identity;
+using Bit.Core.Entities;
 using Bit.Core.Settings;
 using Microsoft.AspNetCore.Identity;
 using Microsoft.Extensions.DependencyInjection.Extensions;

src/Admin/Jobs/DeleteSendsJob.cs

@@ -1,4 +1,5 @@
-using Bit.Core;
+using Bit.Admin.Auth.Jobs;
+using Bit.Core;
 using Bit.Core.Jobs;
 using Bit.Core.Repositories;
 using Bit.Core.Services;

src/Admin/Jobs/JobsHostedService.cs

@@ -1,4 +1,5 @@
 using System.Runtime.InteropServices;
+using Bit.Admin.Auth.Jobs;
 using Bit.Core.Jobs;
 using Bit.Core.Settings;
 using Quartz;

src/Admin/Startup.cs

@@ -6,6 +6,7 @@
 using Bit.SharedWeb.Utilities;
 using Microsoft.AspNetCore.Identity;
 using Stripe;
+using Microsoft.AspNetCore.Mvc.Razor;
 
 #if !OSS
 using Bit.Commercial.Core.Utilities;
@@ -95,6 +96,11 @@ public void ConfigureServices(IServiceCollection services)
         });
         services.Configure<RouteOptions>(options => options.LowercaseUrls = true);
 
+        services.Configure<RazorViewEngineOptions>(o =>
+         {
+             o.ViewLocationFormats.Add("/Auth/Views/{1}/{0}.cshtml");
+         });
+
         // Jobs service
         Jobs.JobsHostedService.AddJobsServices(services, globalSettings.SelfHosted);
         services.AddHostedService<Jobs.JobsHostedService>();

src/Api/Controllers/AuthRequestsController.cs → src/Api/Auth/Controllers/AuthRequestsController.cs

@@ -1,7 +1,9 @@
-using Bit.Api.Models.Request;
+using Bit.Api.Auth.Models.Request;
+using Bit.Api.Auth.Models.Response;
 using Bit.Api.Models.Response;
+using Bit.Core.Auth.Entities;
+using Bit.Core.Auth.Exceptions;
 using Bit.Core.Context;
-using Bit.Core.Entities;
 using Bit.Core.Exceptions;
 using Bit.Core.Repositories;
 using Bit.Core.Services;
@@ -10,7 +12,7 @@
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 
-namespace Bit.Api.Controllers;
+namespace Bit.Api.Auth.Controllers;
 
 [Route("auth-requests")]
 [Authorize("Application")]

src/Api/Controllers/EmergencyAccessController.cs → src/Api/Auth/Controllers/EmergencyAccessController.cs

@@ -1,7 +1,9 @@
-using Bit.Api.Models.Request;
+using Bit.Api.Auth.Models.Request;
+using Bit.Api.Auth.Models.Response;
 using Bit.Api.Models.Request.Organizations;
 using Bit.Api.Models.Response;
 using Bit.Api.Vault.Models.Response;
+using Bit.Core.Auth.Services;
 using Bit.Core.Entities;
 using Bit.Core.Exceptions;
 using Bit.Core.Repositories;
@@ -10,7 +12,7 @@
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 
-namespace Bit.Api.Controllers;
+namespace Bit.Api.Auth.Controllers;
 
 [Route("emergency-access")]
 [Authorize("Application")]

src/Api/Controllers/TwoFactorController.cs → src/Api/Auth/Controllers/TwoFactorController.cs

@@ -1,12 +1,14 @@
-using Bit.Api.Models.Request;
-using Bit.Api.Models.Request.Accounts;
+using Bit.Api.Auth.Models.Request;
+using Bit.Api.Auth.Models.Request.Accounts;
+using Bit.Api.Auth.Models.Response.TwoFactor;
+using Bit.Api.Models.Request;
 using Bit.Api.Models.Response;
-using Bit.Api.Models.Response.TwoFactor;
+using Bit.Core.Auth.Enums;
+using Bit.Core.Auth.LoginFeatures.PasswordlessLogin.Interfaces;
+using Bit.Core.Auth.Utilities;
 using Bit.Core.Context;
 using Bit.Core.Entities;
-using Bit.Core.Enums;
 using Bit.Core.Exceptions;
-using Bit.Core.LoginFeatures.PasswordlessLogin.Interfaces;
 using Bit.Core.Repositories;
 using Bit.Core.Services;
 using Bit.Core.Settings;
@@ -16,7 +18,7 @@
 using Microsoft.AspNetCore.Identity;
 using Microsoft.AspNetCore.Mvc;
 
-namespace Bit.Api.Controllers;
+namespace Bit.Api.Auth.Controllers;
 
 [Route("two-factor")]
 [Authorize("Web")]

src/Api/Jobs/EmergencyAccessNotificationJob.cs → src/Api/Auth/Jobs/EmergencyAccessNotificationJob.cs

@@ -1,8 +1,8 @@
-using Bit.Core.Jobs;
-using Bit.Core.Services;
+using Bit.Core.Auth.Services;
+using Bit.Core.Jobs;
 using Quartz;
 
-namespace Bit.Api.Jobs;
+namespace Bit.Api.Auth.Jobs;
 
 public class EmergencyAccessNotificationJob : BaseJob
 {

src/Api/Jobs/EmergencyAccessTimeoutJob.cs → src/Api/Auth/Jobs/EmergencyAccessTimeoutJob.cs

@@ -1,8 +1,8 @@
-using Bit.Core.Jobs;
-using Bit.Core.Services;
+using Bit.Core.Auth.Services;
+using Bit.Core.Jobs;
 using Quartz;
 
-namespace Bit.Api.Jobs;
+namespace Bit.Api.Auth.Jobs;
 
 public class EmergencyAccessTimeoutJob : BaseJob
 {

src/Api/Models/Public/AssociationWithPermissionsBaseModel.cs → src/Api/Auth/Models/Public/AssociationWithPermissionsBaseModel.cs

@@ -1,6 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 
-namespace Bit.Api.Models.Public;
+namespace Bit.Api.Auth.Models.Public;
 
 public abstract class AssociationWithPermissionsBaseModel
 {

src/Api/Models/Public/Request/AssociationWithPermissionsRequestModel.cs → src/Api/Auth/Models/Public/Request/AssociationWithPermissionsRequestModel.cs

@@ -1,6 +1,6 @@
 using Bit.Core.Models.Data;
 
-namespace Bit.Api.Models.Public.Request;
+namespace Bit.Api.Auth.Models.Public.Request;
 
 public class AssociationWithPermissionsRequestModel : AssociationWithPermissionsBaseModel
 {

src/Api/Models/Public/Response/AssociationWithPermissionsResponseModel.cs → src/Api/Auth/Models/Public/Response/AssociationWithPermissionsResponseModel.cs

@@ -1,6 +1,6 @@
 using Bit.Core.Models.Data;
 
-namespace Bit.Api.Models.Public.Response;
+namespace Bit.Api.Auth.Models.Public.Response;
 
 public class AssociationWithPermissionsResponseModel : AssociationWithPermissionsBaseModel
 {

src/Api/Models/Request/Accounts/DeleteRecoverRequestModel.cs → src/Api/Auth/Models/Request/Accounts/DeleteRecoverRequestModel.cs

@@ -1,6 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class DeleteRecoverRequestModel
 {

src/Api/Models/Request/Accounts/EmailRequestModel.cs → src/Api/Auth/Models/Request/Accounts/EmailRequestModel.cs

@@ -1,7 +1,7 @@
 using System.ComponentModel.DataAnnotations;
 using Bit.Core.Utilities;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class EmailRequestModel : SecretVerificationRequestModel
 {

src/Api/Models/Request/Accounts/EmailTokenRequestModel.cs → src/Api/Auth/Models/Request/Accounts/EmailTokenRequestModel.cs

@@ -1,7 +1,7 @@
 using System.ComponentModel.DataAnnotations;
 using Bit.Core.Utilities;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class EmailTokenRequestModel : SecretVerificationRequestModel
 {

src/Api/Models/Request/Accounts/KdfRequestModel.cs → src/Api/Auth/Models/Request/Accounts/KdfRequestModel.cs

@@ -2,7 +2,7 @@
 using Bit.Core.Enums;
 using Bit.Core.Utilities;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class KdfRequestModel : PasswordRequestModel, IValidatableObject
 {

src/Api/Models/Request/Accounts/PasswordHintRequestModel.cs → src/Api/Auth/Models/Request/Accounts/PasswordHintRequestModel.cs

@@ -1,6 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class PasswordHintRequestModel
 {

src/Api/Models/Request/Accounts/PasswordRequestModel.cs → src/Api/Auth/Models/Request/Accounts/PasswordRequestModel.cs

@@ -1,6 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class PasswordRequestModel : SecretVerificationRequestModel
 {

src/Api/Models/Request/Accounts/RegenerateTwoFactorRequestModel.cs → src/Api/Auth/Models/Request/Accounts/RegenerateTwoFactorRequestModel.cs

@@ -1,6 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class RegenerateTwoFactorRequestModel
 {

src/Api/Models/Request/Accounts/SecretVerificationRequestModel.cs → src/Api/Auth/Models/Request/Accounts/SecretVerificationRequestModel.cs

@@ -1,6 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class SecretVerificationRequestModel : IValidatableObject
 {

src/Api/Models/Request/Accounts/SetKeyConnectorKeyRequestModel.cs → src/Api/Auth/Models/Request/Accounts/SetKeyConnectorKeyRequestModel.cs

@@ -1,10 +1,10 @@
 using System.ComponentModel.DataAnnotations;
+using Bit.Core.Auth.Models.Api.Request.Accounts;
 using Bit.Core.Entities;
 using Bit.Core.Enums;
-using Bit.Core.Models.Api.Request.Accounts;
 using Bit.Core.Utilities;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class SetKeyConnectorKeyRequestModel : IValidatableObject
 {

src/Api/Models/Request/Accounts/SetPasswordRequestModel.cs → src/Api/Auth/Models/Request/Accounts/SetPasswordRequestModel.cs

@@ -1,10 +1,10 @@
 using System.ComponentModel.DataAnnotations;
+using Bit.Core.Auth.Models.Api.Request.Accounts;
 using Bit.Core.Entities;
 using Bit.Core.Enums;
-using Bit.Core.Models.Api.Request.Accounts;
 using Bit.Core.Utilities;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class SetPasswordRequestModel : IValidatableObject
 {

src/Api/Models/Request/Accounts/UpdateKeyRequestModel.cs → src/Api/Auth/Models/Request/Accounts/UpdateKeyRequestModel.cs

@@ -1,7 +1,8 @@
 using System.ComponentModel.DataAnnotations;
+using Bit.Api.Models.Request;
 using Bit.Api.Vault.Models.Request;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class UpdateKeyRequestModel
 {

src/Api/Models/Request/Accounts/UpdateProfileRequestModel.cs → src/Api/Auth/Models/Request/Accounts/UpdateProfileRequestModel.cs

@@ -1,7 +1,7 @@
 using System.ComponentModel.DataAnnotations;
 using Bit.Core.Entities;
 
-namespace Bit.Api.Models.Request.Accounts;
+namespace Bit.Api.Auth.Models.Request.Accounts;
 
 public class UpdateProfileRequestModel
 {