Implement Two-Factor Authentication (2FA) (#13141)

Implementation is very simple

Established authentication dynamic is intercepted at
getAuthTokensFromLoginToken. If 2FA is required, a pattern similar to
EmailVerification is executed. That is, getAuthTokensFromLoginToken
mutation fails with either of the following errors:

1. TWO_FACTOR_AUTHENTICATION_VERIFICATION_REQUIRED
2. TWO_FACTOR_AUTHENTICATION_PROVISION_REQUIRED

UI knows how to respond accordingly.

2FA provisioning occurs at the 2FA resolver.
2FA verification, currently only OTP, is handled by auth.resolver's
getAuthTokensFromOTP

---------

Co-authored-by: Charles Bochet <charlesBochet@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions <github-actions@twenty.com>
Co-authored-by: Jean-Baptiste Ronssin <65334819+jbronssin@users.noreply.github.com>
Co-authored-by: Lucas Bordeau <bordeau.lucas@gmail.com>
Co-authored-by: Félix Malfait <felix.malfait@gmail.com>
Co-authored-by: Félix Malfait <felix@twenty.com>

packages/twenty-front/src/modules/auth/graphql/mutations/getAuthTokenFromOTP.ts

@@ -0,0 +1,21 @@
+import { gql } from '@apollo/client';
+
+export const GET_AUTH_TOKENS_FROM_OTP = gql`
+  mutation getAuthTokensFromOTP(
+    $loginToken: String!
+    $otp: String!
+    $captchaToken: String
+    $origin: String!
+  ) {
+    getAuthTokensFromOTP(
+      loginToken: $loginToken
+      otp: $otp
+      captchaToken: $captchaToken
+      origin: $origin
+    ) {
+      tokens {
+        ...AuthTokensFragment
+      }
+    }
+  }
+`;

packages/twenty-front/src/modules/auth/graphql/mutations/initiateOTPProvisioning.ts

@@ -0,0 +1,17 @@
+import { gql } from '@apollo/client';
+
+export const INITIATE_OTP_PROVISIONING = gql`
+  mutation initiateOTPProvisioning($loginToken: String!, $origin: String!) {
+    initiateOTPProvisioning(loginToken: $loginToken, origin: $origin) {
+      uri
+    }
+  }
+`;
+
+export const INITIATE_OTP_PROVISIONING_FOR_AUTHENTICATED_USER = gql`
+  mutation initiateOTPProvisioningForAuthenticatedUser {
+    initiateOTPProvisioningForAuthenticatedUser {
+      uri
+    }
+  }
+`;

packages/twenty-front/src/modules/auth/graphql/mutations/resetTwoFactorAuthentication.ts

@@ -0,0 +1,13 @@
+import { gql } from '@apollo/client';
+
+export const DELETE_TWO_FACTOR_AUTHENTICATION_METHOD = gql`
+  mutation deleteTwoFactorAuthenticationMethod(
+    $twoFactorAuthenticationMethodId: UUID!
+  ) {
+    deleteTwoFactorAuthenticationMethod(
+      twoFactorAuthenticationMethodId: $twoFactorAuthenticationMethodId
+    ) {
+      success
+    }
+  }
+`;