Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(oauth2): support server-side callback #381

Merged
merged 13 commits into from
Jun 23, 2019
Merged

feat(oauth2): support server-side callback #381

Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
f60a58f
chore(pkg): Add is-https package
atinux Jun 18, 2019
e6eda84
chore(plugin): inject auth after strategies
atinux Jun 18, 2019
d580649
feat(oauth2): Handle server-side
atinux Jun 18, 2019
2662c1e
hotfix(oauth2): No need to get parseQuery anymore
atinux Jun 18, 2019
4f92d5a
hotifx: remove baseURL since it's not needed anymore
atinux Jun 18, 2019
bb9ab03
hotfix: Avoid regressions
atinux Jun 18, 2019
5153631
fix: use ctx.route
atinux Jun 18, 2019
93860c0
feat: add transform_credentials_endpoint option
atinux Jun 21, 2019
3cc9f17
hotfix: lint issue
atinux Jun 21, 2019
265f20c
feat: expose in the context
atinux Jun 21, 2019
d4e1a17
fix: revert transform_credentials_endpoint
atinux Jun 21, 2019
bcc399b
chore(docs): Updating docs to reflect context.$auth
atinux Jun 21, 2019
c9b6cd1
Merge branch 'dev' into ssr-oauth2
Jun 23, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 20 additions & 9 deletions lib/schemes/oauth2.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,8 @@ const isHttps = process.server ? require('is-https') : null
const DEFAULTS = {
token_type: 'Bearer',
response_type: 'token',
tokenName: 'Authorization'
tokenName: 'Authorization',
transform_credentials_endpoint: null
}

export default class Oauth2Scheme {
Expand Down Expand Up @@ -139,9 +140,16 @@ export default class Oauth2Scheme {
// refresh token
let refreshToken = parsedQuery[this.options.refresh_token_key || 'refresh_token']

// Validate state
atinux marked this conversation as resolved.
Show resolved Hide resolved
const state = this.$auth.$storage.getUniversal(this.name + '.state')
this.$auth.$storage.setUniversal(this.name + '.state', null)
if (state && parsedQuery.state !== state) {
return
}

// -- Authorization Code Grant --
if (this.options.response_type === 'code' && parsedQuery.code) {
const data = await this.$auth.request({
let data = await this.$auth.request({
method: 'post',
url: this.options.access_token_endpoint,
baseURL: process.server ? undefined : false,
Expand All @@ -155,6 +163,16 @@ export default class Oauth2Scheme {
})
})

// Transform credentials (SSR Oauth on API side)
if (this.options.transform_credentials_endpoint) {
atinux marked this conversation as resolved.
Show resolved Hide resolved
data = await this.$auth.request({
method: 'post',
url: this.options.transform_credentials_endpoint,
data
})
}


if (data.access_token) {
token = data.access_token
}
Expand All @@ -168,13 +186,6 @@ export default class Oauth2Scheme {
return
}

// Validate state
const state = this.$auth.$storage.getUniversal(this.name + '.state')
this.$auth.$storage.setUniversal(this.name + '.state', null)
if (state && parsedQuery.state !== state) {
return
}

// Append token_type
if (this.options.token_type) {
token = this.options.token_type + ' ' + token
Expand Down