ac547bbf7c
* feat: add Google OAuth login support (#2625) * 🔧 Add login via google * 🔧 Update code style and docs * Add fix for db migrate * 🔧 Update docker-compose * 🔧 Fix sqlite" * 🔧 Update docker-compose * ⚰️ Remove environments * 🔧 Fix: remove ensureGoogleIdColumn workaround from sqlite.ts * 🔧 Remove space * move oauth section * add openid client * wip make oauth more generic * properly allow multiple providers * fix type import * github login flow * adjust github logo with theme * move docs to own page * nullable password, prevent timing attack this prevents timing attacks by always checking hash even if there is none prevents using basic auth if 2fa is enabled * support generic oidc * add ability to set password for oidc users this allows oidc users to add password login cant be removed after * move password login route move password login route from /api/session to /api/auth/password align with oauth * unique index on oauth * link/unlink logic * improve docs * support allowed domains * support auto register * refactoring * disable pw auth * move 2fa to its own page * 2fa for oauth, rework 2fa system * fix design, fix link Closes #2650 * add auto launch * improve docs * improvements --------- Co-authored-by: Daniel Molenda <dm@fotc.com>
37 lines
883 B
TypeScript
37 lines
883 B
TypeScript
export default definePermissionEventHandler(
|
|
'me',
|
|
'update',
|
|
async ({ event, user, checkPermissions }) => {
|
|
checkPermissions(user);
|
|
|
|
const { config, provider, providerConfig } = await buildOauthConfig(event);
|
|
|
|
const session = await useWGSession(event);
|
|
if (
|
|
!session.data.oauth_nonce ||
|
|
!session.data.oauth_verifier ||
|
|
!session.data.oauth_state
|
|
) {
|
|
throw createError({
|
|
statusCode: 400,
|
|
statusMessage: 'Missing OAuth State',
|
|
});
|
|
}
|
|
|
|
const userInfo = await getUserInfo(
|
|
event,
|
|
config,
|
|
{
|
|
oauth_nonce: session.data.oauth_nonce,
|
|
oauth_verifier: session.data.oauth_verifier,
|
|
oauth_state: session.data.oauth_state,
|
|
},
|
|
providerConfig
|
|
);
|
|
|
|
await Database.users.linkOauth(user.id, provider, userInfo.sub);
|
|
|
|
return sendRedirect(event, '/me');
|
|
}
|
|
);
|