payload-auth-plugin-fix/dist/esm/core/protocols/oauth/oauth2_callback.js

Authentication plugin for Payload CMS

// src/core/protocols/oauth/oauth2_callback.ts
import { parseCookies } from "payload";
import * as oauth from "oauth4webapi";
import { getCallbackURL } from "../../utils/cb.js";
import { MissingOrInvalidSession } from "../../errors/consoleErrors.js";
async function OAuth2Callback(request, providerConfig, session_callback) {
  const parsedCookies = parseCookies(request.headers);
  const code_verifier = parsedCookies.get("__session-code-verifier");
  const state = parsedCookies.get("__session-oauth-state");
  if (!code_verifier) {
    throw new MissingOrInvalidSession;
  }
  const { client_id, client_secret, authorization_server, profile, client_auth_type } = providerConfig;
  const client = {
    client_id
  };
  const clientAuth = client_auth_type === "client_secret_basic" ? oauth.ClientSecretBasic(client_secret ?? "") : oauth.ClientSecretPost(client_secret ?? "");
  const current_url = new URL(request.url);
  const callback_url = getCallbackURL(request.payload.config.serverURL, "admin", providerConfig.id);
  const as = authorization_server;
  const params = oauth.validateAuthResponse(as, client, current_url, state);
  const response = await oauth.authorizationCodeGrantRequest(as, client, clientAuth, params, callback_url.toString(), code_verifier);
  const token_result = await oauth.processAuthorizationCodeResponse(as, client, response);
  const userInfoResponse = await oauth.userInfoRequest(as, client, token_result.access_token);
  const userInfo = await userInfoResponse.json();
  return session_callback(profile(userInfo));
}
export {
  OAuth2Callback
};