How to Integrate LastPass with V0

1// app/api/lastpass/security-report/route.ts
2import { NextResponse } from 'next/server';
3
4const LASTPASS_API_URL = 'https://lastpass.com/enterpriseapi.php';
5
6interface LastPassUser {
7  username: string;
8  fullname: string;
9  mpstrength: number; // Master password strength 0-100
10  last_pw_change: number; // Unix timestamp
11  last_login: number; // Unix timestamp
12  neverloggedin: boolean;
13  disabled: boolean;
14  admin: boolean;
15  sites: number; // Number of stored passwords
16  weakpasswords: number;
17  reusedpasswords: number;
18}
19
20async function callLastPassAPI(cmd: string, data: Record<string, unknown> = {}) {
21  const cid = process.env.LASTPASS_ACCOUNT_NUMBER;
22  const provisioninghash = process.env.LASTPASS_PROVISIONING_HASH;
23
24  if (!cid || !provisioninghash) {
25    throw new Error('LASTPASS_ACCOUNT_NUMBER and LASTPASS_PROVISIONING_HASH must be set');
26  }
27
28  const response = await fetch(LASTPASS_API_URL, {
29    method: 'POST',
30    headers: { 'Content-Type': 'application/json' },
31    body: JSON.stringify({ cid, provisioninghash, cmd, ...data }),
32  });
33
34  if (!response.ok) {
35    throw new Error(`LastPass API HTTP error: ${response.status}`);
36  }
37
38  const result = await response.json();
39
40  if (result.status !== 'OK') {
41    throw new Error(`LastPass API error: ${result.error || result.status}`);
42  }
43
44  return result;
45}
46
47export async function GET() {
48  try {
49    const data = await callLastPassAPI('getuserdata');
50    const users: LastPassUser[] = Object.values(data.Users || {});
51
52    // Calculate organization-wide statistics
53    const stats = {
54      totalUsers: users.length,
55      activeUsers: users.filter((u) => !u.neverloggedin && !u.disabled).length,
56      usersWithWeakPasswords: users.filter((u) => u.weakpasswords > 0).length,
57      averageSecurityScore: users.length
58        ? Math.round(users.reduce((sum, u) => sum + (u.mpstrength || 0), 0) / users.length)
59        : 0,
60      totalWeakPasswords: users.reduce((sum, u) => sum + u.weakpasswords, 0),
61      totalReusedPasswords: users.reduce((sum, u) => sum + u.reusedpasswords, 0),
62    };
63
64    // Sanitize user list for dashboard (don't expose full details)
65    const userList = users.map((u) => ({
66      email: u.username,
67      name: u.fullname,
68      securityScore: u.mpstrength,
69      weakPasswords: u.weakpasswords,
70      lastLogin: u.last_login ? new Date(u.last_login * 1000).toISOString() : null,
71      isDisabled: u.disabled,
72      isAdmin: u.admin,
73    }));
74
75    return NextResponse.json({ stats, users: userList });
76  } catch (error) {
77    const message = error instanceof Error ? error.message : 'Unknown error';
78    console.error('LastPass security report failed:', message);
79    return NextResponse.json({ error: message }, { status: 500 });
80  }
81}

1// app/api/lastpass/provision-user/route.ts
2import { NextRequest, NextResponse } from 'next/server';
3
4const LASTPASS_API_URL = 'https://lastpass.com/enterpriseapi.php';
5
6const DEPARTMENT_GROUPS: Record<string, string> = {
7  Engineering: 'Engineering-Team',
8  Sales: 'Sales-Team',
9  Marketing: 'Marketing-Team',
10  HR: 'HR-Team',
11  Finance: 'Finance-Team',
12  Legal: 'Legal-Team',
13};
14
15async function callLastPassAPI(cmd: string, data: Record<string, unknown> = {}) {
16  const response = await fetch(LASTPASS_API_URL, {
17    method: 'POST',
18    headers: { 'Content-Type': 'application/json' },
19    body: JSON.stringify({
20      cid: process.env.LASTPASS_ACCOUNT_NUMBER!,
21      provisioninghash: process.env.LASTPASS_PROVISIONING_HASH!,
22      cmd,
23      ...data,
24    }),
25  });
26  const result = await response.json();
27  if (result.status !== 'OK') throw new Error(result.error || result.status);
28  return result;
29}
30
31export async function POST(request: NextRequest) {
32  try {
33    const { firstName, lastName, email, department, additionalGroups = [] } =
34      await request.json();
35
36    if (!firstName || !lastName || !email || !department) {
37      return NextResponse.json({ error: 'Missing required fields' }, { status: 400 });
38    }
39
40    // Create the LastPass account
41    await callLastPassAPI('batchaddusers', {
42      usernames: [{ username: email, fullname: `${firstName} ${lastName}` }],
43    });
44
45    // Add to department group and any additional groups
46    const groups: Record<string, string[]> = {};
47    const deptGroup = DEPARTMENT_GROUPS[department];
48    if (deptGroup) groups[deptGroup] = [email];
49    additionalGroups.forEach((g: string) => (groups[g] = [email]));
50
51    if (Object.keys(groups).length > 0) {
52      await callLastPassAPI('batchupdategroups', { groups });
53    }
54
55    return NextResponse.json({
56      success: true,
57      user: { email, name: `${firstName} ${lastName}`, department },
58    });
59  } catch (error) {
60    const message = error instanceof Error ? error.message : 'Unknown error';
61    console.error('LastPass provisioning failed:', message);
62    return NextResponse.json({ error: message }, { status: 500 });
63  }
64}