Camille Moussu
82 lines
2.4 KiB
TypeScript
82 lines
2.4 KiB
TypeScript
import * as client from "openid-client";
|
|
import { getLocation } from "../../utils/apiUtils";
|
|
|
|
export const clientConfig = {
|
|
url: (window as any).SSO_BASE_URL ?? "",
|
|
client_id: (window as any).SSO_CLIENT_ID ?? "",
|
|
scope: (window as any).SSO_SCOPE ?? "",
|
|
redirect_uri: (window as any).SSO_REDIRECT_URI ?? "",
|
|
response_type: (window as any).SSO_RESPONSE_TYPE ?? "",
|
|
code_challenge_method: (window as any).SSO_CODE_CHALLENGE_METHOD ?? "",
|
|
post_logout_redirect_uri: (window as any).SSO_POST_LOGOUT_REDIRECT ?? "",
|
|
};
|
|
|
|
export async function getClientConfig() {
|
|
return await client.discovery(
|
|
new URL(clientConfig.url),
|
|
clientConfig.client_id
|
|
);
|
|
}
|
|
|
|
export async function Auth() {
|
|
let code_verifier = client.randomPKCECodeVerifier();
|
|
let code_challenge = await client.calculatePKCECodeChallenge(code_verifier);
|
|
const openIdClientConfig = await getClientConfig();
|
|
let parameters: Record<string, string> = {
|
|
redirect_uri: clientConfig.redirect_uri,
|
|
scope: clientConfig.scope!,
|
|
code_challenge,
|
|
code_challenge_method: clientConfig.code_challenge_method,
|
|
};
|
|
let state!: string;
|
|
if (!openIdClientConfig.serverMetadata().supportsPKCE()) {
|
|
state = client.randomState();
|
|
parameters.state = state;
|
|
}
|
|
let redirectTo = client.buildAuthorizationUrl(openIdClientConfig, parameters);
|
|
|
|
return { redirectTo, code_verifier, state };
|
|
}
|
|
|
|
export async function Logout() {
|
|
const openIdClientConfig = await getClientConfig();
|
|
const endSessionUrl = client.buildEndSessionUrl(openIdClientConfig, {
|
|
post_logout_redirect_uri: clientConfig.post_logout_redirect_uri,
|
|
});
|
|
|
|
return endSessionUrl;
|
|
}
|
|
|
|
export async function Callback(code_verifier: string, state: any) {
|
|
try {
|
|
const openIdClientConfig = await getClientConfig();
|
|
const currentLocation = getLocation();
|
|
|
|
console.log("Callback URL:", currentLocation);
|
|
console.log("Code verifier:", code_verifier);
|
|
|
|
const tokenSet = await client.authorizationCodeGrant(
|
|
openIdClientConfig,
|
|
new URL(currentLocation),
|
|
{
|
|
pkceCodeVerifier: code_verifier,
|
|
expectedState: state,
|
|
}
|
|
);
|
|
|
|
const { access_token } = tokenSet;
|
|
const claims = tokenSet.claims()!;
|
|
const { sub } = claims;
|
|
|
|
const userinfo = await client.fetchUserInfo(
|
|
openIdClientConfig,
|
|
access_token,
|
|
sub
|
|
);
|
|
|
|
return { tokenSet, userinfo };
|
|
} catch (e) {
|
|
console.error("Token grant error:", e);
|
|
}
|
|
}
|