@lucidcms/core/dist/libs/http/controllers/auth/providers/oidc-callback.mjs.map

The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.

{"version":3,"file":"oidc-callback.mjs","names":["constants","authServices.providers.errorRedirectUrl","authServices.providers.oidcCallback","authServices.refreshToken.generateToken","authServices.accessToken.generateToken","userLoginServices.createSingle"],"sources":["../../../../../../src/libs/http/controllers/auth/providers/oidc-callback.ts"],"sourcesContent":["import { minutesToMilliseconds } from \"date-fns\";\nimport { createFactory } from \"hono/factory\";\nimport { describeRoute } from \"hono-openapi\";\nimport constants from \"../../../../../constants/constants.js\";\nimport { AuthStatesRepository } from \"../../../../../libs/repositories/index.js\";\nimport { controllerSchemas } from \"../../../../../schemas/auth.js\";\nimport {\n\tauthServices,\n\tuserLoginServices,\n} from \"../../../../../services/index.js\";\nimport urlAddPath from \"../../../../../utils/helpers/url-add-path.js\";\nimport serviceWrapper from \"../../../../../utils/services/service-wrapper.js\";\nimport { copy } from \"../../../../i18n/index.js\";\nimport rateLimiter from \"../../../middleware/rate-limiter.js\";\nimport validate from \"../../../middleware/validate.js\";\nimport openAPI from \"../../../openapi/index.js\";\nimport buildErrorURL from \"../../../utils/build-error-url.js\";\nimport createServiceContext from \"../../../utils/create-service-context.js\";\nimport getRequestBaseUrl from \"../../../utils/get-request-base-url.js\";\n\nconst factory = createFactory();\n\nconst providerOIDCCallbackController = factory.createHandlers(\n\tdescribeRoute({\n\t\tdescription: \"Handle OAuth callback from authentication provider.\",\n\t\ttags: [\"auth\"],\n\t\tsummary: \"OIDC Provider Authentication Callback\",\n\t\tresponses: openAPI.responses(),\n\t\tparameters: openAPI.parameters({\n\t\t\tparams: controllerSchemas.providerOIDCCallback.params,\n\t\t\tquery: controllerSchemas.providerOIDCCallback.query.string,\n\t\t}),\n\t}),\n\trateLimiter({\n\t\tmode: \"ip\",\n\t\tlimit: constants.rateLimit.scopes.sensitive.limit,\n\t\tscope: constants.rateLimit.scopes.sensitive.scopeKey,\n\t\twindowMs: minutesToMilliseconds(1),\n\t}),\n\tvalidate(\"param\", controllerSchemas.providerOIDCCallback.params),\n\tvalidate(\"query\", controllerSchemas.providerOIDCCallback.query.string),\n\tasync (c) => {\n\t\tconst { providerKey } = c.req.valid(\"param\");\n\t\tconst { code, state } = c.req.valid(\"query\");\n\t\tconst context = createServiceContext(c);\n\t\tconst AuthStates = new AuthStatesRepository(\n\t\t\tcontext.db.client,\n\t\t\tcontext.config.db,\n\t\t);\n\n\t\t//* scrub so callback redirect behavior is preserved even if this fails.\n\t\tconst scrubInvitationToken = async () => {\n\t\t\tawait AuthStates.updateMultiple({\n\t\t\t\tdata: {\n\t\t\t\t\tinvitation_token: null,\n\t\t\t\t},\n\t\t\t\twhere: [\n\t\t\t\t\t{\n\t\t\t\t\t\tkey: \"state\",\n\t\t\t\t\t\toperator: \"=\",\n\t\t\t\t\t\tvalue: state,\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\tkey: \"provider_key\",\n\t\t\t\t\t\toperator: \"=\",\n\t\t\t\t\t\tvalue: providerKey,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t});\n\t\t};\n\n\t\tconst errorRedirectURLRes = await serviceWrapper(\n\t\t\tauthServices.providers.errorRedirectUrl,\n\t\t\t{\n\t\t\t\ttransaction: false,\n\t\t\t\tdefaultError: {\n\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\tname: copy(\"server:core.routes.callback.auth.error.name\"),\n\t\t\t\t\tmessage: copy(\"server:core.routes.callback.auth.error.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t)(context, {\n\t\t\tproviderKey,\n\t\t\tstate,\n\t\t});\n\t\tif (errorRedirectURLRes.error) {\n\t\t\tconst baseRedirectUrl = urlAddPath(\n\t\t\t\tgetRequestBaseUrl(c),\n\t\t\t\tconstants.authState.defaultRedirectPath,\n\t\t\t);\n\t\t\tawait scrubInvitationToken();\n\t\t\treturn c.redirect(\n\t\t\t\tbuildErrorURL(\n\t\t\t\t\tbaseRedirectUrl,\n\t\t\t\t\terrorRedirectURLRes.error,\n\t\t\t\t\tcontext.translate,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tconst callbackAuthRes = await serviceWrapper(\n\t\t\tauthServices.providers.oidcCallback,\n\t\t\t{\n\t\t\t\ttransaction: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\tname: copy(\"server:core.routes.callback.auth.error.name\"),\n\t\t\t\t\tmessage: copy(\"server:core.routes.callback.auth.error.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t)(context, {\n\t\t\tproviderKey,\n\t\t\tcode,\n\t\t\tstate,\n\t\t});\n\t\tif (callbackAuthRes.error) {\n\t\t\tawait scrubInvitationToken();\n\t\t\treturn c.redirect(\n\t\t\t\tbuildErrorURL(\n\t\t\t\t\terrorRedirectURLRes.data.redirectUrl,\n\t\t\t\t\tcallbackAuthRes.error,\n\t\t\t\t\tcontext.translate,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tif (callbackAuthRes.data.grantAuthentication) {\n\t\t\tconst [refreshRes, accessRes] = await Promise.all([\n\t\t\t\tauthServices.refreshToken.generateToken(c, callbackAuthRes.data.userId),\n\t\t\t\tauthServices.accessToken.generateToken(c, callbackAuthRes.data.userId),\n\t\t\t]);\n\t\t\tif (refreshRes.error) {\n\t\t\t\tawait scrubInvitationToken();\n\t\t\t\treturn c.redirect(\n\t\t\t\t\tbuildErrorURL(\n\t\t\t\t\t\terrorRedirectURLRes.data.redirectUrl,\n\t\t\t\t\t\trefreshRes.error,\n\t\t\t\t\t\tcontext.translate,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (accessRes.error) {\n\t\t\t\tawait scrubInvitationToken();\n\t\t\t\treturn c.redirect(\n\t\t\t\t\tbuildErrorURL(\n\t\t\t\t\t\terrorRedirectURLRes.data.redirectUrl,\n\t\t\t\t\t\taccessRes.error,\n\t\t\t\t\t\tcontext.translate,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst connectionInfo = c.get(\"runtimeContext\").getConnectionInfo(c);\n\t\t\tconst userAgent = c.req.header(\"user-agent\") || null;\n\n\t\t\tconst userLoginTrackRes = await serviceWrapper(\n\t\t\t\tuserLoginServices.createSingle,\n\t\t\t\t{\n\t\t\t\t\ttransaction: false,\n\t\t\t\t\tdefaultError: {\n\t\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\t\tname: copy(\"server:core.routes.login.error.name\"),\n\t\t\t\t\t\tmessage: copy(\"server:core.routes.login.error.message\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t)(context, {\n\t\t\t\tuserId: callbackAuthRes.data.userId,\n\t\t\t\ttokenId: refreshRes.data.tokenId,\n\t\t\t\tauthMethod: providerKey,\n\t\t\t\tipAddress: connectionInfo.address ?? null,\n\t\t\t\tuserAgent: userAgent,\n\t\t\t});\n\t\t\tif (userLoginTrackRes.error) {\n\t\t\t\tawait scrubInvitationToken();\n\t\t\t\treturn c.redirect(\n\t\t\t\t\tbuildErrorURL(\n\t\t\t\t\t\terrorRedirectURLRes.data.redirectUrl,\n\t\t\t\t\t\tuserLoginTrackRes.error,\n\t\t\t\t\t\tcontext.translate,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tawait scrubInvitationToken();\n\t\treturn c.redirect(callbackAuthRes.data.redirectUrl);\n\t},\n);\n\nexport default providerOIDCCallbackController;\n"],"mappings":"+oCAsBA,MAAM,EAFU,EAE6B,CAAC,CAAC,eAC9C,EAAc,CACb,YAAa,sDACb,KAAM,CAAC,MAAM,EACb,QAAS,wCACT,UAAW,EAAQ,UAAU,EAC7B,WAAY,EAAQ,WAAW,CAC9B,OAAQ,EAAkB,qBAAqB,OAC/C,MAAO,EAAkB,qBAAqB,MAAM,MACrD,CAAC,CACF,CAAC,EACD,EAAY,CACX,KAAM,KACN,MAAOA,EAAU,UAAU,OAAO,UAAU,MAC5C,MAAOA,EAAU,UAAU,OAAO,UAAU,SAC5C,SAAU,EAAsB,CAAC,CAClC,CAAC,EACD,EAAS,QAAS,EAAkB,qBAAqB,MAAM,EAC/D,EAAS,QAAS,EAAkB,qBAAqB,MAAM,MAAM,EACrE,KAAO,IAAM,CACZ,GAAM,CAAE,eAAgB,EAAE,IAAI,MAAM,OAAO,EACrC,CAAE,OAAM,SAAU,EAAE,IAAI,MAAM,OAAO,EACrC,EAAU,EAAqB,CAAC,EAChC,EAAa,IAAI,EACtB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EAGM,EAAuB,SAAY,CACxC,MAAM,EAAW,eAAe,CAC/B,KAAM,CACL,iBAAkB,IACnB,EACA,MAAO,CACN,CACC,IAAK,QACL,SAAU,IACV,MAAO,CACR,EACA,CACC,IAAK,eACL,SAAU,IACV,MAAO,CACR,CACD,CACD,CAAC,CACF,EAEM,EAAsB,MAAM,EACjCC,EACA,CACC,YAAa,GACb,aAAc,CACb,KAAM,QACN,KAAM,EAAK,6CAA6C,EACxD,QAAS,EAAK,gDAAgD,CAC/D,CACD,CACD,CAAC,CAAC,EAAS,CACV,cACA,OACD,CAAC,EACD,GAAI,EAAoB,MAAO,CAC9B,IAAM,EAAkB,EACvB,EAAkB,CAAC,EACnBD,EAAU,UAAU,mBACrB,EAEA,OADA,MAAM,EAAqB,EACpB,EAAE,SACR,EACC,EACA,EAAoB,MACpB,EAAQ,SACT,CACD,CACD,CAEA,IAAM,EAAkB,MAAM,EAC7BE,EACA,CACC,YAAa,GACb,aAAc,CACb,KAAM,QACN,KAAM,EAAK,6CAA6C,EACxD,QAAS,EAAK,gDAAgD,CAC/D,CACD,CACD,CAAC,CAAC,EAAS,CACV,cACA,OACA,OACD,CAAC,EACD,GAAI,EAAgB,MAEnB,OADA,MAAM,EAAqB,EACpB,EAAE,SACR,EACC,EAAoB,KAAK,YACzB,EAAgB,MAChB,EAAQ,SACT,CACD,EAGD,GAAI,EAAgB,KAAK,oBAAqB,CAC7C,GAAM,CAAC,EAAY,GAAa,MAAM,QAAQ,IAAI,CACjDC,EAAwC,EAAG,EAAgB,KAAK,MAAM,EACtEC,EAAuC,EAAG,EAAgB,KAAK,MAAM,CACtE,CAAC,EACD,GAAI,EAAW,MAEd,OADA,MAAM,EAAqB,EACpB,EAAE,SACR,EACC,EAAoB,KAAK,YACzB,EAAW,MACX,EAAQ,SACT,CACD,EAED,GAAI,EAAU,MAEb,OADA,MAAM,EAAqB,EACpB,EAAE,SACR,EACC,EAAoB,KAAK,YACzB,EAAU,MACV,EAAQ,SACT,CACD,EAGD,IAAM,EAAiB,EAAE,IAAI,gBAAgB,CAAC,CAAC,kBAAkB,CAAC,EAC5D,EAAY,EAAE,IAAI,OAAO,YAAY,GAAK,KAE1C,EAAoB,MAAM,EAC/BC,EACA,CACC,YAAa,GACb,aAAc,CACb,KAAM,QACN,KAAM,EAAK,qCAAqC,EAChD,QAAS,EAAK,wCAAwC,CACvD,CACD,CACD,CAAC,CAAC,EAAS,CACV,OAAQ,EAAgB,KAAK,OAC7B,QAAS,EAAW,KAAK,QACzB,WAAY,EACZ,UAAW,EAAe,SAAW,KAC1B,WACZ,CAAC,EACD,GAAI,EAAkB,MAErB,OADA,MAAM,EAAqB,EACpB,EAAE,SACR,EACC,EAAoB,KAAK,YACzB,EAAkB,MAClB,EAAQ,SACT,CACD,CAEF,CAGA,OADA,MAAM,EAAqB,EACpB,EAAE,SAAS,EAAgB,KAAK,WAAW,CACnD,CACD"}