versia-pub/server
2
0
Fork 0
mirror of https://github.com/versia-pub/server.git synced 2026-03-13 22:09:16 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add full OpenID connect provider support

Browse source
This commit is contained in:
Jesse Wierzbinski 2023-12-06 12:10:22 -10:00
parent 14d96ac9e6
commit 947c1f4991
No known key found for this signature in database
47 changed files with 604 additions and 247 deletions
Download patch file Download diff file Expand all files Collapse all files

19
server/api/auth/login/index.ts
View file

@ -1,5 +1,4 @@
import { applyConfig } from "@api";
import { errorResponse } from "@response";
import type { MatchedRoute } from "bun";
import { randomBytes } from "crypto";
import { client } from "~database/datasource";
@ -38,11 +37,21 @@ export default async (
const email = formData.get("email")?.toString() || null;
const password = formData.get("password")?.toString() || null;
const redirectToLogin = (error: string) =>
Response.redirect(
`/oauth/authorize?` +
new URLSearchParams({
...matchedRoute.query,
error: encodeURIComponent(error),
}).toString(),
302
);
if (response_type !== "code")
return errorResponse("Invalid response type (try 'code')", 400);
return redirectToLogin("Invalid response_type");
if (!email || !password)
return errorResponse("Missing username or password", 400);
return redirectToLogin("Invalid username or password");
// Get user
const user = await client.user.findFirst({
@ -53,7 +62,7 @@ export default async (
});
if (!user || !(await Bun.password.verify(password, user.password || "")))
return errorResponse("Invalid username or password", 401);
return redirectToLogin("Invalid username or password");
// Get application
const application = await client.application.findFirst({
@ -62,7 +71,7 @@ export default async (
},
});
if (!application) return errorResponse("Invalid client_id", 404);
if (!application) return redirectToLogin("Invalid client_id");
const code = randomBytes(32).toString("hex");