@lucidcms/core
Version:
The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.
1 lines • 7.26 kB
Source Map (JSON)
{"version":3,"file":"initiate.mjs","names":["constants","formatter"],"sources":["../../../../src/services/auth/providers/initiate.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { addMilliseconds } from \"date-fns\";\nimport constants from \"../../../constants/constants.js\";\nimport getAuthProviderAdapter from \"../../../libs/auth-providers/get-adapter.js\";\nimport getAvailableProviders from \"../../../libs/auth-providers/get-available-providers.js\";\nimport buildCallbackRedirectUrl from \"../../../libs/auth-providers/helpers/build-callback-redirect-url.js\";\nimport formatter from \"../../../libs/formatters/index.js\";\nimport { copy } from \"../../../libs/i18n/index.js\";\nimport {\n\tAuthStatesRepository,\n\tUsersRepository,\n\tUserTokensRepository,\n} from \"../../../libs/repositories/index.js\";\nimport type { AuthStateActionType, InitiateAuth } from \"../../../types.js\";\nimport hashUserToken from \"../../../utils/helpers/hash-user-token.js\";\nimport { getBaseUrl } from \"../../../utils/helpers/index.js\";\nimport type { ServiceFn } from \"../../../utils/services/types.js\";\n\nconst initiate: ServiceFn<\n\t[\n\t\t{\n\t\t\tproviderKey: string;\n\t\t\tactionType: AuthStateActionType;\n\t\t\tredirectPath?: string;\n\t\t\tinvitationToken?: string;\n\t\t\tauthenticatedUserId?: number;\n\t\t},\n\t],\n\tInitiateAuth\n> = async (context, data) => {\n\tconst UserTokens = new UserTokensRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\tconst AuthStates = new AuthStatesRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\tconst Users = new UsersRepository(context.db.client, context.config.db);\n\n\t//* check if the provider is enabled and exists\n\tconst availableProviders = getAvailableProviders(context.config);\n\tconst provider = availableProviders.providers.find(\n\t\t(p) => p.key === data.providerKey,\n\t);\n\n\tif (!provider) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 404,\n\t\t\t\tname: copy(\"server:core.auth.providers.not.found.name\"),\n\t\t\t\tmessage: copy(\"server:core.auth.providers.not.found.message\"),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\t//* validate invitation token if provided\n\tlet invitationTokenId: number | undefined;\n\tif (data.invitationToken) {\n\t\tconst invitationTokenRes = await UserTokens.selectSingle({\n\t\t\tselect: [\"id\", \"user_id\", \"expiry_date\"],\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"token\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: hashUserToken(data.invitationToken),\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tkey: \"token_type\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: constants.userTokens.invitation,\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tkey: \"expiry_date\",\n\t\t\t\t\toperator: \">\",\n\t\t\t\t\tvalue: new Date().toISOString(),\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tkey: \"revoked_at\",\n\t\t\t\t\toperator: \"is\",\n\t\t\t\t\tvalue: null,\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tkey: \"consumed_at\",\n\t\t\t\t\toperator: \"is\",\n\t\t\t\t\tvalue: null,\n\t\t\t\t},\n\t\t\t],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\tstatus: 404,\n\t\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\t\tif (invitationTokenRes.error) return invitationTokenRes;\n\n\t\tconst userRes = await Users.selectSingle({\n\t\t\tselect: [\"invitation_accepted\"],\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: invitationTokenRes.data.user_id,\n\t\t\t\t},\n\t\t\t],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\tstatus: 404,\n\t\t\t\t\tmessage: copy(\"server:core.user.not.found.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\t\tif (userRes.error) return userRes;\n\n\t\tif (formatter.formatBoolean(userRes.data.invitation_accepted)) {\n\t\t\treturn {\n\t\t\t\terror: {\n\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\tstatus: 400,\n\t\t\t\t\tname: copy(\"server:core.auth.invitations.user.already.accepted.name\"),\n\t\t\t\t\tmessage: copy(\n\t\t\t\t\t\t\"server:core.auth.invitations.user.already.accepted.message\",\n\t\t\t\t\t),\n\t\t\t\t},\n\t\t\t\tdata: undefined,\n\t\t\t};\n\t\t}\n\n\t\tinvitationTokenId = invitationTokenRes.data.id;\n\t}\n\n\tconst stateToken = randomUUID();\n\tconst stateRes = await AuthStates.createSingle({\n\t\tdata: {\n\t\t\tstate: stateToken,\n\t\t\tprovider_key: data.providerKey,\n\t\t\tinvitation_token_id: invitationTokenId,\n\t\t\tinvitation_token:\n\t\t\t\tdata.actionType === constants.authState.actionTypes.invitation\n\t\t\t\t\t? data.invitationToken\n\t\t\t\t\t: undefined,\n\t\t\taction_type: data.actionType,\n\t\t\tauthenticated_user_id: data.authenticatedUserId,\n\t\t\texpiry_date: addMilliseconds(\n\t\t\t\tnew Date(),\n\t\t\t\tconstants.authState.ttl,\n\t\t\t).toISOString(),\n\t\t\tredirect_path: data.redirectPath,\n\t\t},\n\t});\n\tif (stateRes.error) return stateRes;\n\n\tconst adapterRes = getAuthProviderAdapter(provider);\n\tif (adapterRes.error) return adapterRes;\n\n\tconst redirectUrl = await adapterRes.data.getAuthUrl({\n\t\tredirectUri: buildCallbackRedirectUrl(\n\t\t\tgetBaseUrl(context),\n\t\t\tdata.providerKey,\n\t\t),\n\t\tstate: stateToken,\n\t});\n\tif (redirectUrl.error) return redirectUrl;\n\n\treturn {\n\t\terror: undefined,\n\t\tdata: {\n\t\t\tredirectUrl: redirectUrl.data,\n\t\t},\n\t};\n};\n\nexport default initiate;\n"],"mappings":"0tBAkBA,MAAM,EAWF,MAAO,EAAS,IAAS,CAC5B,IAAM,EAAa,IAAI,EACtB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EACM,EAAa,IAAI,EACtB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EACM,EAAQ,IAAI,EAAgB,EAAQ,GAAG,OAAQ,EAAQ,OAAO,EAAE,EAIhE,EADqB,EAAsB,EAAQ,MACvB,CAAC,CAAC,UAAU,KAC5C,GAAM,EAAE,MAAQ,EAAK,WACvB,EAEA,GAAI,CAAC,EACJ,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,KAAM,EAAK,2CAA2C,EACtD,QAAS,EAAK,8CAA8C,CAC7D,EACA,KAAM,IAAA,EACP,EAID,IAAI,EACJ,GAAI,EAAK,gBAAiB,CACzB,IAAM,EAAqB,MAAM,EAAW,aAAa,CACxD,OAAQ,CAAC,KAAM,UAAW,aAAa,EACvC,MAAO,CACN,CACC,IAAK,QACL,SAAU,IACV,MAAO,EAAc,EAAK,eAAe,CAC1C,EACA,CACC,IAAK,aACL,SAAU,IACV,MAAOA,EAAU,WAAW,UAC7B,EACA,CACC,IAAK,cACL,SAAU,IACV,MAAO,IAAI,KAAK,CAAA,CAAE,YAAY,CAC/B,EACA,CACC,IAAK,aACL,SAAU,KACV,MAAO,IACR,EACA,CACC,IAAK,cACL,SAAU,KACV,MAAO,IACR,CACD,EACA,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACD,GAAI,EAAmB,MAAO,OAAO,EAErC,IAAM,EAAU,MAAM,EAAM,aAAa,CACxC,OAAQ,CAAC,qBAAqB,EAC9B,MAAO,CACN,CACC,IAAK,KACL,SAAU,IACV,MAAO,EAAmB,KAAK,OAChC,CACD,EACA,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,QAAS,EAAK,oCAAoC,CACnD,CACD,CACD,CAAC,EACD,GAAI,EAAQ,MAAO,OAAO,EAE1B,GAAIC,EAAU,cAAc,EAAQ,KAAK,mBAAmB,EAC3D,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,KAAM,EAAK,yDAAyD,EACpE,QAAS,EACR,4DACD,CACD,EACA,KAAM,IAAA,EACP,EAGD,EAAoB,EAAmB,KAAK,EAC7C,CAEA,IAAM,EAAa,EAAW,EACxB,EAAW,MAAM,EAAW,aAAa,CAC9C,KAAM,CACL,MAAO,EACP,aAAc,EAAK,YACnB,oBAAqB,EACrB,iBACC,EAAK,aAAeD,EAAU,UAAU,YAAY,WACjD,EAAK,gBACL,IAAA,GACJ,YAAa,EAAK,WAClB,sBAAuB,EAAK,oBAC5B,YAAa,EACZ,IAAI,KACJA,EAAU,UAAU,GACrB,CAAC,CAAC,YAAY,EACd,cAAe,EAAK,YACrB,CACD,CAAC,EACD,GAAI,EAAS,MAAO,OAAO,EAE3B,IAAM,EAAa,EAAuB,CAAQ,EAClD,GAAI,EAAW,MAAO,OAAO,EAE7B,IAAM,EAAc,MAAM,EAAW,KAAK,WAAW,CACpD,YAAa,EACZ,EAAW,CAAO,EAClB,EAAK,WACN,EACA,MAAO,CACR,CAAC,EAGD,OAFI,EAAY,MAAc,EAEvB,CACN,MAAO,IAAA,GACP,KAAM,CACL,YAAa,EAAY,IAC1B,CACD,CACD"}