Camille Moussu
88 lines
2.6 KiB
TypeScript
88 lines
2.6 KiB
TypeScript
import * as client from "openid-client";
|
|
|
|
export const clientConfig = {
|
|
url: process.env.REACT_APP_SSO_BASE_URL || "",
|
|
client_id: process.env.REACT_APP_SSO_CLIENT_ID || "",
|
|
client_secret: process.env.REACT_APP_SSO_CLIENT_SECRET || "",
|
|
scope: process.env.REACT_APP_SSO_SCOPE || "",
|
|
redirect_uri: process.env.REACT_APP_SSO_REDIRECT_URI || "",
|
|
response_type: process.env.REACT_APP_SSO_RESPONSE_TYPE || "",
|
|
code_challenge_method: process.env.REACT_APP_SSO_CODE_CHALLENGE_METHOD || "",
|
|
post_logout_redirect_uri:
|
|
process.env.REACT_APP_SSO_POST_LOGOUT_REDIRECT || "",
|
|
};
|
|
|
|
export async function getClientConfig() {
|
|
console.log(process.env.REACT_APP_SSO_BASE_URL)
|
|
return await client.discovery(
|
|
new URL(clientConfig.url),
|
|
clientConfig.client_id,
|
|
clientConfig.client_secret
|
|
);
|
|
}
|
|
|
|
export async function Auth() {
|
|
console.log("bap");
|
|
let code_verifier = client.randomPKCECodeVerifier();
|
|
let code_challenge = await client.calculatePKCECodeChallenge(code_verifier);
|
|
const openIdClientConfig = await getClientConfig();
|
|
let parameters: Record<string, string> = {
|
|
redirect_uri: clientConfig.redirect_uri,
|
|
scope: clientConfig.scope!,
|
|
code_challenge,
|
|
code_challenge_method: clientConfig.code_challenge_method,
|
|
};
|
|
let state!: string;
|
|
if (!openIdClientConfig.serverMetadata().supportsPKCE()) {
|
|
state = client.randomState();
|
|
parameters.state = state;
|
|
}
|
|
let redirectTo = client.buildAuthorizationUrl(openIdClientConfig, parameters);
|
|
console.log(redirectTo);
|
|
|
|
return { redirectTo, code_verifier, state };
|
|
}
|
|
|
|
export async function Logout() {
|
|
const openIdClientConfig = await getClientConfig();
|
|
const endSessionUrl = client.buildEndSessionUrl(openIdClientConfig, {
|
|
post_logout_redirect_uri: clientConfig.post_logout_redirect_uri,
|
|
});
|
|
|
|
return endSessionUrl;
|
|
}
|
|
|
|
export async function Callback(code_verifier: string, state: any) {
|
|
try {
|
|
const openIdClientConfig = await getClientConfig();
|
|
const currentUrl = new URL(window.location.href);
|
|
|
|
console.log("Callback URL:", currentUrl.toString());
|
|
console.log("Code verifier:", code_verifier);
|
|
console.log("State:", state);
|
|
|
|
const tokenSet = await client.authorizationCodeGrant(
|
|
openIdClientConfig,
|
|
currentUrl,
|
|
{
|
|
pkceCodeVerifier: code_verifier,
|
|
expectedState: state,
|
|
}
|
|
);
|
|
|
|
const { access_token } = tokenSet;
|
|
const claims = tokenSet.claims()!;
|
|
const { sub } = claims;
|
|
|
|
const userinfo = await client.fetchUserInfo(
|
|
openIdClientConfig,
|
|
access_token,
|
|
sub
|
|
);
|
|
|
|
return { tokenSet, userinfo };
|
|
} catch (e) {
|
|
console.error("Token grant error:", e);
|
|
}
|
|
}
|