@seas-computing/nestjs-harvard-key/lib/auth.controller.js

This repository provides a way to connect NestJS applications to HarvardKey and provide a rudimentary form of authorization (in the form of route guards) out of the box

"use strict";
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
var __param = (this && this.__param) || function (paramIndex, decorator) {
    return function (target, key) { decorator(target, key, paramIndex); }
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.AuthController = void 0;
const common_1 = require("@nestjs/common");
const harvardkey_module_definition_1 = require("./harvardkey.module-definition");
const cas_service_1 = require("./cas.service");
let AuthController = class AuthController {
    constructor(casConfig, cas) {
        this.casConfig = casConfig;
        this.cas = cas;
    }
    useHarvardKeyLogin(session, redirectTo) {
        session.loginOrigin = redirectTo || '/';
        const redirect = new URL(this.casConfig.casBaseURL);
        redirect.pathname += '/login';
        redirect.searchParams.set('service', this.casConfig.casServiceURL);
        return {
            url: redirect.toString(),
            statusCode: common_1.HttpStatus.SEE_OTHER,
        };
    }
    async validateHarvardKeyData(session, ticket) {
        if (!ticket) {
            throw new common_1.UnauthorizedException('No ticket specified');
        }
        const userData = await this.cas.validate(ticket);
        session.user = userData;
        const redirectURL = new URL(this.casConfig.clientBaseURL);
        if (session.loginOrigin) {
            redirectURL.pathname = session.loginOrigin;
        }
        return {
            url: redirectURL.toString(),
            statusCode: common_1.HttpStatus.FOUND,
        };
    }
    logoutUserSession(session) {
        delete session.user;
        return {
            url: `${this.casConfig.casBaseURL}/logout`,
            statusCode: common_1.HttpStatus.SEE_OTHER,
        };
    }
};
exports.AuthController = AuthController;
__decorate([
    (0, common_1.Get)('/login'),
    (0, common_1.Redirect)(''),
    __param(0, (0, common_1.Session)()),
    __param(1, (0, common_1.Query)('redirectTo')),
    __metadata("design:type", Function),
    __metadata("design:paramtypes", [Object, String]),
    __metadata("design:returntype", Object)
], AuthController.prototype, "useHarvardKeyLogin", null);
__decorate([
    (0, common_1.Get)('/validate'),
    (0, common_1.Redirect)(''),
    __param(0, (0, common_1.Session)()),
    __param(1, (0, common_1.Query)('ticket')),
    __metadata("design:type", Function),
    __metadata("design:paramtypes", [Object, String]),
    __metadata("design:returntype", Promise)
], AuthController.prototype, "validateHarvardKeyData", null);
__decorate([
    (0, common_1.Get)('/logout'),
    (0, common_1.Redirect)(''),
    __param(0, (0, common_1.Session)()),
    __metadata("design:type", Function),
    __metadata("design:paramtypes", [Object]),
    __metadata("design:returntype", Object)
], AuthController.prototype, "logoutUserSession", null);
exports.AuthController = AuthController = __decorate([
    (0, common_1.Controller)(),
    __param(0, (0, common_1.Inject)(harvardkey_module_definition_1.MODULE_OPTIONS_TOKEN)),
    __param(1, (0, common_1.Inject)(cas_service_1.CASService)),
    __metadata("design:paramtypes", [Object, cas_service_1.CASService])
], AuthController);
//# sourceMappingURL=auth.controller.js.map