You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
83 lines
2.9 KiB
TypeScript
83 lines
2.9 KiB
TypeScript
import 'hydrooj';
|
|
|
|
import superagent from 'superagent';
|
|
import { ForbiddenError } from 'hydrooj/src/error';
|
|
|
|
declare module 'hydrooj' {
|
|
interface SystemKeys {
|
|
'login-with-github.id': string;
|
|
'login-with-github.secret': string;
|
|
'login-with-github.endpoint': string;
|
|
}
|
|
interface Lib {
|
|
oauth_github: typeof import('./lib');
|
|
}
|
|
}
|
|
|
|
async function get() {
|
|
const { system, token } = global.Hydro.model;
|
|
const [appid, [state]] = await Promise.all([
|
|
system.get('login-with-github.id'),
|
|
token.add(token.TYPE_OAUTH, 600, { redirect: this.request.referer }),
|
|
]);
|
|
this.response.redirect = `https://github.com/login/oauth/authorize?client_id=${appid}&state=${state}&scope=read:user,user:email`;
|
|
}
|
|
|
|
async function callback({ state, code }) {
|
|
const { system, token } = global.Hydro.model;
|
|
const { UserFacingError } = global.Hydro.error;
|
|
const [[appid, secret, endpoint, url], s] = await Promise.all([
|
|
system.getMany([
|
|
'login-with-github.id',
|
|
'login-with-github.secret',
|
|
'login-with-github.endpoint',
|
|
'server.url',
|
|
]),
|
|
token.get(state, token.TYPE_OAUTH),
|
|
]);
|
|
const res = await superagent.post(`${endpoint || 'https://github.com'}/login/oauth/access_token`)
|
|
.send({
|
|
client_id: appid,
|
|
client_secret: secret,
|
|
code,
|
|
redirect_uri: `${url}oauth/github/callback`,
|
|
state,
|
|
})
|
|
.set('accept', 'application/json');
|
|
if (res.body.error) {
|
|
throw new UserFacingError(
|
|
res.body.error, res.body.error_description, res.body.error_uri,
|
|
);
|
|
}
|
|
const t = res.body.access_token;
|
|
const userInfo = await superagent.get(`${endpoint ? `${endpoint}/api` : 'https://api.github.com'}/user`)
|
|
.set('User-Agent', 'Hydro-OAuth')
|
|
.set('Accept', 'application/vnd.github.v3+json')
|
|
.set('Authorization', `token ${t}`);
|
|
const ret = {
|
|
_id: `${userInfo.body.id}@github.local`,
|
|
email: userInfo.body.email,
|
|
bio: userInfo.body.bio,
|
|
uname: [userInfo.body.name, userInfo.body.login].filter((i) => i),
|
|
avatar: `github:${userInfo.body.login}`,
|
|
};
|
|
if (!ret.email) {
|
|
const emailInfo = await superagent.get(`${endpoint ? `${endpoint}/api` : 'https://api.github.com'}/user/emails`)
|
|
.set('User-Agent', 'Hydro-OAuth')
|
|
.set('Accept', 'application/vnd.github.v3+json')
|
|
.set('Authorization', `token ${t}`);
|
|
if (emailInfo.body.length) {
|
|
ret.email = emailInfo.body.find((e) => e.primary && e.verified).email;
|
|
}
|
|
}
|
|
await token.del(s._id, token.TYPE_OAUTH);
|
|
if (!ret.email) throw new ForbiddenError("You don't have a verified email.");
|
|
return ret;
|
|
}
|
|
|
|
global.Hydro.lib.oauth_github = {
|
|
text: 'Login with Github',
|
|
callback,
|
|
get,
|
|
};
|