n8n
Version:
n8n Workflow Automation Tool
139 lines • 6.58 kB
JavaScript
"use strict";
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
var __param = (this && this.__param) || function (paramIndex, decorator) {
return function (target, key) { decorator(target, key, paramIndex); }
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.OAuthConsentController = void 0;
const backend_common_1 = require("@n8n/backend-common");
const decorators_1 = require("@n8n/decorators");
const n8n_workflow_1 = require("n8n-workflow");
const approve_consent_request_dto_1 = require("./dto/approve-consent-request.dto");
const oauth_consent_service_1 = require("./oauth-consent.service");
const oauth_session_service_1 = require("./oauth-session.service");
const forbidden_error_1 = require("../../errors/response-errors/forbidden.error");
let OAuthConsentController = class OAuthConsentController {
constructor(logger, consentService, oauthSessionService) {
this.logger = logger;
this.consentService = consentService;
this.oauthSessionService = oauthSessionService;
}
async getConsentDetails(req, res) {
try {
const sessionToken = this.getAndValidateSessionToken(req, res);
if (!sessionToken)
return;
const consentDetails = await this.consentService.getConsentDetails(sessionToken, req.user);
if (!consentDetails) {
this.sendInvalidSessionError(res, true);
return;
}
if (!consentDetails.ok) {
this.oauthSessionService.clearSession(res);
if (consentDetails.reason === 'forbidden') {
this.sendErrorResponse(res, 403, 'You do not have sufficient permissions to authorize this request');
}
else {
this.sendErrorResponse(res, 422, 'Authorization target is no longer available');
}
return;
}
res.json({
data: {
clientName: consentDetails.clientName,
clientId: consentDetails.clientId,
redirectUri: consentDetails.redirectUri,
resourceName: consentDetails.resourceName,
scopes: consentDetails.scopes,
previousScopes: consentDetails.previousScopes,
scopeTools: consentDetails.scopeTools,
},
});
}
catch (error) {
this.logger.error('Failed to get consent details', { error });
this.oauthSessionService.clearSession(res);
this.sendErrorResponse(res, 500, 'Failed to load authorization details');
}
}
async approveConsent(req, res, payload) {
try {
const sessionToken = this.getAndValidateSessionToken(req, res);
if (!sessionToken)
return;
const result = await this.consentService.handleConsentDecision(sessionToken, req.user, payload.approved, payload.scopes);
this.oauthSessionService.clearSession(res);
res.json({
data: {
status: 'success',
redirectUrl: result.redirectUrl,
},
});
}
catch (error) {
this.logger.error('Failed to process consent', { error });
this.oauthSessionService.clearSession(res);
if (error instanceof forbidden_error_1.ForbiddenError) {
this.sendErrorResponse(res, 403, 'You do not have sufficient permissions to authorize this request');
return;
}
const message = error instanceof Error ? error.message : 'Failed to process authorization';
this.sendErrorResponse(res, error instanceof n8n_workflow_1.UserError ? 400 : 500, message);
}
}
sendErrorResponse(res, statusCode, message) {
res.status(statusCode).json({
status: 'error',
message,
});
}
sendInvalidSessionError(res, clearCookie = false) {
if (clearCookie) {
this.oauthSessionService.clearSession(res);
}
this.sendErrorResponse(res, 400, 'Invalid or expired authorization session');
}
getAndValidateSessionToken(req, res) {
const sessionToken = this.oauthSessionService.getSessionToken(req.cookies);
if (!sessionToken) {
this.sendInvalidSessionError(res);
return null;
}
try {
this.oauthSessionService.verifySession(sessionToken);
return sessionToken;
}
catch (error) {
this.logger.debug('Invalid session token', { error });
this.sendInvalidSessionError(res, true);
return null;
}
}
};
exports.OAuthConsentController = OAuthConsentController;
__decorate([
(0, decorators_1.Get)('/details', { usesTemplates: true }),
__metadata("design:type", Function),
__metadata("design:paramtypes", [Object, Object]),
__metadata("design:returntype", Promise)
], OAuthConsentController.prototype, "getConsentDetails", null);
__decorate([
(0, decorators_1.Post)('/approve', { usesTemplates: true }),
__param(2, decorators_1.Body),
__metadata("design:type", Function),
__metadata("design:paramtypes", [Object, Object, approve_consent_request_dto_1.ApproveConsentRequestDto]),
__metadata("design:returntype", Promise)
], OAuthConsentController.prototype, "approveConsent", null);
exports.OAuthConsentController = OAuthConsentController = __decorate([
(0, decorators_1.RestController)('/consent'),
__metadata("design:paramtypes", [backend_common_1.Logger, oauth_consent_service_1.OAuthConsentService, oauth_session_service_1.OAuthSessionService])
], OAuthConsentController);
//# sourceMappingURL=oauth-consent.controller.js.map