netlify-cli/src/functions-templates/js/oauth-passport/utils/auth.js

Netlify command line tool

const { sign } = require('jsonwebtoken')
const passport = require('passport')
const { Strategy: GitHubStrategy } = require('passport-github2')
const passportJwt = require('passport-jwt')

const { BASE_URL, ENDPOINT, GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET, SECRET } = require('./config')

const authJwt = function (email) {
  return sign({ user: { email } }, SECRET)
}

const applyPassportStrategies = function () {
  passport.use(getGitHubStrategy())
  passport.use(getJwtStrategy())
}

const getGitHubStrategy = function () {
  return new GitHubStrategy(
    {
      clientID: GITHUB_CLIENT_ID,
      clientSecret: GITHUB_CLIENT_SECRET,
      callbackURL: `${BASE_URL}${ENDPOINT}/auth/github/callback`,
      scope: ['user:email'],
    },
    async (accessToken, refreshToken, profile, done) => {
      try {
        const email = profile.emails[0].value
        // Here you'd typically create a new or load an existing user and
        // store the bare necessary informations about the user in the JWT.
        const jwt = authJwt(email)

        return done(null, { email, jwt })
      } catch (error) {
        return done(error)
      }
    },
  )
}

const getJwtStrategy = function () {
  return new passportJwt.Strategy(
    {
      jwtFromRequest(req) {
        if (!req.cookies) throw new Error('Missing cookie-parser middleware')
        return req.cookies.jwt
      },
      secretOrKey: SECRET,
    },
    async ({ user: { email } }, done) => {
      try {
        // Here you'd typically load an existing user
        // and use the data to create the JWT.
        const jwt = authJwt(email)

        return done(null, { email, jwt })
      } catch (error) {
        return done(error)
      }
    },
  )
}

module.exports = {
  applyPassportStrategies,
}