gitlab-acebase/dist/esm/oauth-providers/google.js

AceBase realtime database server (webserver endpoint to allow remote connections)

import { OAuth2Provider } from './oauth-provider.js';
import { fetch } from '../shared/simple-fetch.js';
export class GoogleAuthProvider extends OAuth2Provider {
    constructor(settings) {
        super(settings);
        if (!settings.scopes) {
            settings.scopes = [];
        }
        if (!settings.scopes.includes('email')) {
            settings.scopes.push('email');
        }
        if (!settings.scopes.includes('profile')) {
            settings.scopes.push('profile');
        }
        if (!settings.scopes.includes('openid')) {
            settings.scopes.push('openid');
        }
    }
    async getOpenIDConfig() {
        // Get Open ID config ("The Discovery document")
        if (this._config) {
            return this._config;
        }
        this._config = await fetch(`https://accounts.google.com/.well-known/openid-configuration`).then(res => res.json());
        return this._config;
    }
    /**
     * Starts auth flow by getting the url the user should be redirected to
     * @param info.redirectUrl Url spotify will redirect to after authorizing, should be the url
     * @param info.state Optional state that will be passed to redirectUri by spotify
     */
    async init(info) {
        // Return url to get authorization code with
        // See https://developers.google.com/identity/protocols/oauth2/web-server#httprest
        const config = await this.getOpenIDConfig();
        // https://accounts.google.com/o/oauth2/v2/auth
        const authUrl = `${config.authorization_endpoint}?response_type=code&access_type=offline&include_granted_scopes=true&client_id=${this.settings.client_id}&scope=${encodeURIComponent(this.settings.scopes.join(' '))}&redirect_uri=${encodeURIComponent(info.redirect_url)}&state=${encodeURIComponent(info.state)}`;
        // optional: login_hint=email@server.com
        // optional: prompt=none|consent|select_account
        return authUrl;
    }
    async getAccessToken(params) {
        // Request access & refresh tokens with authorization code, or refresh token
        const config = await this.getOpenIDConfig();
        // 'https://oauth2.googleapis.com/token'
        const response = await fetch(config.token_endpoint, {
            method: 'POST',
            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
            body: `client_id=${this.settings.client_id}&client_secret=${this.settings.client_secret}&code=`
                + (params.type === 'refresh'
                    ? `${params.refresh_token}&grant_type=refresh_token`
                    : `${params.auth_code}&grant_type=authorization_code&redirect_uri=${encodeURIComponent(params.redirect_url)}`),
        });
        const result = await response.json();
        if (result.error) {
            throw new Error(result.error);
        }
        const secondsToExpiry = result.expires_in;
        result.expires = new Date(Date.now() + (secondsToExpiry * 1000));
        return result;
    }
    async revokeAccess(access_token) {
        const config = await this.getOpenIDConfig();
        // https://oauth2.googleapis.com/revoke
        const response = await fetch(`${config.revocation_endpoint}?token=${access_token}`);
        if (response.status !== 200) {
            throw new Error(`Revoke failed, error ${response.status}`);
        }
    }
    async getUserInfo(access_token) {
        const config = await this.getOpenIDConfig();
        // https://openidconnect.googleapis.com/v1/userinfo
        const response = await fetch(config.userinfo_endpoint, {
            method: 'GET',
            headers: { 'Authorization': `Bearer ${access_token}` },
        });
        const result = await response.json();
        if (response.status !== 200) {
            const error = result;
            throw new Error(`${error.error}: ${error.error_description}`);
        }
        const user = result;
        return {
            id: user.sub,
            name: user.name,
            display_name: user.nickname || user.given_name,
            picture: user.picture ? [{ url: user.picture }] : [],
            email: user.email,
            email_verified: user.email_verified,
            other: Object.keys(user)
                .filter(key => !['sub', 'name', 'picture', 'email', 'email_verified'].includes(key))
                .reduce((obj, key) => { obj[key] = user[key]; return obj; }, {}),
        };
    }
}
export const AuthProvider = GoogleAuthProvider;
//# sourceMappingURL=google.js.map