latest dev

pusher/src/Controller/AuthenticateController.ts

@@ -2,7 +2,7 @@ import { v4 } from "uuid";
 import { HttpRequest, HttpResponse, TemplatedApp } from "uWebSockets.js";
 import { BaseController } from "./BaseController";
 import { adminApi } from "../Services/AdminApi";
-import { jwtTokenManager } from "../Services/JWTTokenManager";
+import { AuthTokenData, jwtTokenManager } from "../Services/JWTTokenManager";
 import { parse } from "query-string";
 import { openIDClient } from "../Services/OpenIDClient";
 
@@ -17,6 +17,7 @@ export class AuthenticateController extends BaseController {
         this.openIDCallback();
         this.register();
         this.anonymLogin();
+        this.profileCallback();
     }
 
     openIDLogin() {
@@ -48,14 +49,31 @@ export class AuthenticateController extends BaseController {
             res.onAborted(() => {
                 console.warn("/message request was aborted");
             });
-            const { code, nonce } = parse(req.getQuery());
+            const { code, nonce, token } = parse(req.getQuery());
             try {
+                //verify connected by token
+                if (token != undefined) {
+                    try {
+                        const authTokenData: AuthTokenData = jwtTokenManager.verifyJWTToken(token as string, false);
+                        if (authTokenData.hydraAccessToken == undefined) {
+                            throw Error("Token cannot to be check on Hydra");
+                        }
+                        await openIDClient.checkTokenAuth(authTokenData.hydraAccessToken);
+                        res.writeStatus("200");
+                        this.addCorsHeaders(res);
+                        return res.end(JSON.stringify({ authToken: token }));
+                    } catch (err) {
+                        console.info("User was not connected", err);
+                    }
+                }
+
+                //user have not token created, check data on hydra and create token
                 const userInfo = await openIDClient.getUserInfo(code as string, nonce as string);
                 const sub = userInfo.sub;
                 if (!sub) {
                     throw new Error("No sub in the response");
                 }
-                const authToken = jwtTokenManager.createAuthToken(sub);
+                const authToken = jwtTokenManager.createAuthToken(sub, userInfo.access_token);
                 res.writeStatus("200");
                 this.addCorsHeaders(res);
                 return res.end(JSON.stringify({ authToken }));
@@ -63,6 +81,30 @@ export class AuthenticateController extends BaseController {
                 return this.errorToResponse(e, res);
             }
         });
+
+        // eslint-disable-next-line @typescript-eslint/no-misused-promises
+        this.App.get("/logout-callback", async (res: HttpResponse, req: HttpRequest) => {
+            res.onAborted(() => {
+                console.warn("/message request was aborted");
+            });
+
+            const { token } = parse(req.getQuery());
+
+            try {
+                const authTokenData: AuthTokenData = jwtTokenManager.verifyJWTToken(token as string, false);
+                if (authTokenData.hydraAccessToken == undefined) {
+                    throw Error("Token cannot to be logout on Hydra");
+                }
+                await openIDClient.logoutUser(authTokenData.hydraAccessToken);
+            } catch (error) {
+                console.error("openIDCallback => logout-callback", error);
+            } finally {
+                res.writeStatus("200");
+                this.addCorsHeaders(res);
+                // eslint-disable-next-line no-unsafe-finally
+                return res.end();
+            }
+        });
     }
 
     //Try to login with an admin token
@@ -136,4 +178,39 @@ export class AuthenticateController extends BaseController {
             );
         });
     }
+
+    profileCallback() {
+        //eslint-disable-next-line @typescript-eslint/no-misused-promises
+        // @ts-ignore
+        // eslint-disable-next-line @typescript-eslint/no-misused-promises
+        this.App.get("/profile-callback", async (res: HttpResponse, req: HttpRequest) => {
+            res.onAborted(() => {
+                console.warn("/message request was aborted");
+            });
+            const { userIdentify, token } = parse(req.getQuery());
+            try {
+                //verify connected by token
+                if (token != undefined) {
+                    try {
+                        const authTokenData: AuthTokenData = jwtTokenManager.verifyJWTToken(token as string, false);
+                        if (authTokenData.hydraAccessToken == undefined) {
+                            throw Error("Token cannot to be check on Hydra");
+                        }
+                        await openIDClient.checkTokenAuth(authTokenData.hydraAccessToken);
+
+                        //get login profile
+                        res.writeStatus("302");
+                        res.writeHeader("Location", adminApi.getProfileUrl(authTokenData.hydraAccessToken));
+                        this.addCorsHeaders(res);
+                        // eslint-disable-next-line no-unsafe-finally
+                        return res.end();
+                    } catch (error) {
+                        return this.errorToResponse(error, res);
+                    }
+                }
+            } catch (error) {
+                this.errorToResponse(error, res);
+            }
+        });
+    }
 }