@cocalc/server/dist/auth/sso/public-strategies.js

CoCalc server functionality: functions used by either the hub and the next.js server

"use strict";
/*
 *  This file is part of CoCalc: Copyright © 2022 Sagemath, Inc.
 *  License: AGPLv3 s.t. "Commons Clause" – see LICENSE.md for details
 */
Object.defineProperty(exports, "__esModule", { value: true });
exports.TwitterStrategyConf = exports.FacebookStrategyConf = exports.GithubStrategyConf = exports.GoogleStrategyConf = void 0;
const passport_google_oauth2_1 = require("@passport-next/passport-google-oauth2");
const passport_facebook_1 = require("passport-facebook");
const passport_github2_1 = require("passport-github2");
const passport_twitter_1 = require("passport-twitter");
// docs for getting these for your app
// https://developers.google.com/identity/protocols/oauth2/openid-connect#appsetup
// and https://console.developers.google.com/apis/credentials
//
// You must then put them in the database, via
//
// require 'c'; db()
// db.set_passport_settings(strategy:'google', conf:{clientID:'...',clientSecret:'...'}, cb:console.log)
// Scope:
// Enabling "profile" below I think required that I explicitly go to Google Developer Console for the project,
// then select API&Auth, then API's, then Google+, then explicitly enable it.  Otherwise, stuff just mysteriously
// didn't work.  To figure out that this was the problem, I had to grep the source code of the passport-google-oauth
// library and put in print statements to see what the *REAL* errors were, since that
// library hid the errors (**WHY**!!?).
exports.GoogleStrategyConf = {
    name: "google",
    type: "@passport-next/passport-google-oauth2",
    PassportStrategyConstructor: passport_google_oauth2_1.Strategy,
    auth_opts: { scope: "openid email profile" },
    login_info: {
        id: (profile) => profile.id,
        first_name: (profile) => profile.name.givenName,
        last_name: (profile) => profile.name.familyName,
        emails: (profile) => profile.emails.map((x) => x.value),
    },
};
// Get these here:
//      https://github.com/settings/applications/new
// You must then put them in the database, via
//   db.set_passport_settings(strategy:'github', conf:{clientID:'...',clientSecret:'...'}, cb:console.log)
exports.GithubStrategyConf = {
    name: "github",
    type: "passport-github2",
    PassportStrategyConstructor: passport_github2_1.Strategy,
    auth_opts: {
        scope: ["user:email"],
    },
    login_info: {
        id: (profile) => profile.id,
        full_name: (profile) => profile.name || profile.displayName || profile.username,
        emails: (profile) => (profile.emails ?? []).map((x) => x.value),
    },
};
// Get these by going to https://developers.facebook.com/ and creating a new application.
// For that application, set the url to the site CoCalc will be served from.
// The Facebook "App ID" and is clientID and the Facebook "App Secret" is the clientSecret
// for oauth2, as I discovered by a lucky guess... (sigh).
//
// You must then put them in the database, via
//   db.set_passport_settings(strategy:'facebook', conf:{clientID:'...',clientSecret:'...'}, cb:console.log)
exports.FacebookStrategyConf = {
    name: "facebook",
    type: "passport-facebook",
    PassportStrategyConstructor: passport_facebook_1.Strategy,
    extra_opts: {
        enableProof: false,
        profileFields: ["id", "email", "name", "displayName"],
    },
    auth_opts: { scope: "email" },
    login_info: {
        id: (profile) => profile.id,
        full_name: (profile) => profile.displayName,
        emails: (profile) => (profile.emails ?? []).map((x) => x.value),
    },
};
// Get these by:
//    (1) Go to https://apps.twitter.com/ and create a new application.
//    (2) Click on Keys and Access Tokens
//
// You must then put them in the database, via
//   db.set_passport_settings(strategy:'twitter', conf:{clientID:'...',clientSecret:'...'}, cb:console.log)
class TwitterWrapper extends passport_twitter_1.Strategy {
    constructor({ clientID: consumerKey, clientSecret: consumerSecret, callbackURL }, verify) {
        super({ consumerKey, consumerSecret, callbackURL }, verify);
    }
}
exports.TwitterStrategyConf = {
    name: "twitter",
    type: "passport-twitter",
    PassportStrategyConstructor: TwitterWrapper,
    login_info: {
        id: (profile) => profile.id,
        full_name: (profile) => profile.displayName,
        emails: (profile) => (profile.emails ?? []).map((x) => x.value),
    },
    extra_opts: {
        includeEmail: true,
    },
};
//# sourceMappingURL=public-strategies.js.map