@lobehub/lobehub 2.0.0-next.47 → 2.0.0-next.48

package/src/layout/AuthProvider/MarketAuth/MarketAuthProvider.tsx

@@ -0,0 +1,364 @@
+'use client';
+
+import { ReactNode, createContext, useContext, useEffect, useState } from 'react';
+
+import { MARKET_OIDC_ENDPOINTS } from '@/services/_url';
+
+import { MarketAuthError } from './errors';
+import { MarketOIDC } from './oidc';
+import { MarketAuthContextType, MarketAuthSession, MarketUserInfo, OIDCConfig } from './types';
+
+const MarketAuthContext = createContext<MarketAuthContextType | null>(null);
+
+interface MarketAuthProviderProps {
+  children: ReactNode;
+  isDesktop: boolean;
+}
+
+/**
+ * 从 cookie 中获取 token
+ */
+const getTokenFromCookie = (): string | null => {
+  if (typeof document === 'undefined') return null;
+
+  // eslint-disable-next-line unicorn/no-document-cookie
+  const cookies = document.cookie.split(';');
+  for (const cookie of cookies) {
+    const [name, value] = cookie.trim().split('=');
+    if (name === 'market-bearertoken') {
+      console.log('[MarketAuth] Found market token in cookie');
+      return value;
+    }
+  }
+  return null;
+};
+
+/**
+ * 将 token 存储到 cookie
+ */
+const setTokenToCookie = (token: string, expiresIn: number) => {
+  console.log('[MarketAuth] Storing token to cookie');
+  const expiresAt = new Date(Date.now() + expiresIn * 1000);
+  // eslint-disable-next-line unicorn/no-document-cookie
+  document.cookie = `market-bearertoken=${token}; expires=${expiresAt.toUTCString()}; path=/; secure; samesite=strict`;
+};
+
+/**
+ * 从 cookie 中删除 token
+ */
+const removeTokenFromCookie = () => {
+  console.log('[MarketAuth] Removing token from cookie');
+  // eslint-disable-next-line unicorn/no-document-cookie
+  document.cookie = 'market-bearertoken=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;';
+};
+
+/**
+ * 获取用户信息
+ */
+const fetchUserInfo = async (accessToken: string): Promise<MarketUserInfo | null> => {
+  try {
+    const response = await fetch(MARKET_OIDC_ENDPOINTS.userinfo, {
+      body: JSON.stringify({ token: accessToken }),
+      headers: {
+        'Content-Type': 'application/json',
+      },
+      method: 'POST',
+    });
+
+    console.log('[MarketAuth] User info response:', response);
+
+    if (!response.ok) {
+      console.error(
+        '[MarketAuth] Failed to fetch user info:',
+        response.status,
+        response.statusText,
+      );
+      return null;
+    }
+
+    const userInfo = (await response.json()) as MarketUserInfo;
+    console.log('[MarketAuth] User info fetched successfully:', userInfo);
+
+    return userInfo;
+  } catch (error) {
+    console.error('[MarketAuth] Error fetching user info:', error);
+    return null;
+  }
+};
+
+/**
+ * 刷新令牌（暂时简化，后续可以实现 refresh token 逻辑）
+ */
+const refreshToken = async (): Promise<boolean> => {
+  console.log('[MarketAuth] Refresh token not implemented yet');
+  return false;
+};
+
+/**
+ * Market 授权上下文提供者
+ */
+export const MarketAuthProvider = ({ children, isDesktop }: MarketAuthProviderProps) => {
+  const [session, setSession] = useState<MarketAuthSession | null>(null);
+  const [status, setStatus] = useState<'loading' | 'authenticated' | 'unauthenticated'>('loading');
+  const [oidcClient, setOidcClient] = useState<MarketOIDC | null>(null);
+  const [shouldReauthorize, setShouldReauthorize] = useState(false);
+
+  // 初始化 OIDC 客户端（仅在客户端）
+  useEffect(() => {
+    if (typeof window !== 'undefined') {
+      const baseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'http://127.0.0.1:8787';
+      const desktopRedirectUri = new URL(MARKET_OIDC_ENDPOINTS.desktopCallback, baseUrl).toString();
+
+      // 桌面端使用 Market 手动维护的 Web 回调，Web 端使用当前域名
+      const redirectUri = isDesktop
+        ? desktopRedirectUri
+        : `${window.location.origin}/market-auth-callback`;
+
+      const oidcConfig: OIDCConfig = {
+        baseUrl,
+        clientId: isDesktop ? 'lobehub-desktop' : 'lobechat-com',
+        redirectUri,
+        scope: 'openid profile email',
+      };
+      setOidcClient(new MarketOIDC(oidcConfig));
+    }
+  }, [isDesktop]);
+
+  /**
+   * 检查并恢复会话
+   */
+  const restoreSession = () => {
+    console.log('[MarketAuth] Attempting to restore session');
+    const token = getTokenFromCookie();
+
+    if (token) {
+      // 从 sessionStorage 中获取完整的会话信息
+      const sessionData = sessionStorage.getItem('market_auth_session');
+      if (sessionData) {
+        try {
+          const parsedSession = JSON.parse(sessionData) as MarketAuthSession;
+
+          // 检查 token 是否过期
+          if (parsedSession.expiresAt > Date.now()) {
+            console.log('[MarketAuth] Session restored from storage');
+
+            console.log('parsedSession', parsedSession);
+            console.log('parsedSession.userInfo', parsedSession.userInfo);
+            console.log(
+              "sessionStorage.getItem('market_user_info')",
+              sessionStorage.getItem('market_user_info'),
+            );
+
+            // 如果 session 中没有 userInfo，尝试从单独的存储中获取
+            if (!parsedSession.userInfo) {
+              const userInfoData = sessionStorage.getItem('market_user_info');
+              if (userInfoData) {
+                try {
+                  parsedSession.userInfo = JSON.parse(userInfoData);
+                } catch (error) {
+                  console.error('[MarketAuth] Failed to parse stored user info:', error);
+                }
+              } else {
+                setShouldReauthorize(true);
+              }
+            }
+
+            setSession(parsedSession);
+            setStatus('authenticated');
+            return;
+          } else {
+            console.log('[MarketAuth] Stored session has expired, will trigger re-authorization');
+            sessionStorage.removeItem('market_auth_session');
+            removeTokenFromCookie();
+            // 标记需要重新授权，等待 oidcClient 准备好
+            setShouldReauthorize(true);
+            return;
+          }
+        } catch (error) {
+          console.error('[MarketAuth] Failed to parse stored session:', error);
+          sessionStorage.removeItem('market_auth_session');
+          removeTokenFromCookie();
+        }
+      }
+    }
+
+    console.log('[MarketAuth] No valid session found');
+    setStatus('unauthenticated');
+  };
+
+  /**
+   * 登录方法
+   */
+  const signIn = async (): Promise<number | null> => {
+    console.log('[MarketAuth] Starting sign in process');
+
+    if (!oidcClient) {
+      console.error('[MarketAuth] OIDC client not initialized');
+      throw new MarketAuthError('oidcNotReady', { message: 'OIDC client not initialized' });
+    }
+
+    try {
+      setStatus('loading');
+
+      // 启动 OIDC 授权流程并获取授权码
+      const authResult = await oidcClient.startAuthorization();
+      console.log('[MarketAuth] Authorization successful, exchanging code for token', authResult);
+
+      // 用授权码换取访问令牌
+      const tokenResponse = await oidcClient.exchangeCodeForToken(
+        authResult.code,
+        authResult.state,
+      );
+
+      console.log('[MarketAuth] Token response:', tokenResponse);
+
+      // 获取用户信息
+      const userInfo = await fetchUserInfo(tokenResponse.accessToken);
+
+      // 创建会话对象
+      const newSession: MarketAuthSession = {
+        accessToken: tokenResponse.accessToken,
+        expiresAt: Date.now() + tokenResponse.expiresIn * 1000,
+        expiresIn: tokenResponse.expiresIn,
+        scope: tokenResponse.scope,
+        tokenType: tokenResponse.tokenType as 'Bearer',
+        userInfo: userInfo || undefined,
+      };
+
+      // 存储 token 到 cookie 和 sessionStorage
+      setTokenToCookie(tokenResponse.accessToken, tokenResponse.expiresIn);
+      sessionStorage.setItem('market_auth_session', JSON.stringify(newSession));
+
+      // 单独存储用户信息到 sessionStorage 供其他地方使用
+      if (userInfo) {
+        sessionStorage.setItem('market_user_info', JSON.stringify(userInfo));
+      }
+
+      setSession(newSession);
+      setStatus('authenticated');
+
+      console.log('[MarketAuth] Sign in completed successfully');
+      return userInfo?.accountId ?? null;
+    } catch (error) {
+      console.error('[MarketAuth] Sign in failed:', error);
+      setStatus('unauthenticated');
+      throw error;
+    }
+  };
+
+  /**
+   * 登出方法
+   */
+  const signOut = () => {
+    setSession(null);
+    setStatus('unauthenticated');
+    removeTokenFromCookie();
+    sessionStorage.removeItem('market_auth_session');
+    sessionStorage.removeItem('market_user_info');
+  };
+
+  /**
+   * 获取当前用户信息
+   */
+  const getCurrentUserInfo = (): MarketUserInfo | null => {
+    console.log('getCurrentUserInfo-session', session, session?.userInfo);
+    if (session?.userInfo) {
+      return session.userInfo;
+    }
+
+    // 如果 session 中没有，尝试从 sessionStorage 中获取
+    try {
+      const userInfoData = sessionStorage.getItem('market_user_info');
+      if (userInfoData) {
+        return JSON.parse(userInfoData) as MarketUserInfo;
+      }
+    } catch (error) {
+      console.error('[MarketAuth] Failed to get user info from storage:', error);
+    }
+
+    return null;
+  };
+
+  /**
+   * 初始化时恢复会话
+   */
+  useEffect(() => {
+    restoreSession();
+  }, []);
+
+  /**
+   * 当需要重新授权且 OIDC 客户端准备好时，自动触发重新授权
+   */
+  useEffect(() => {
+    const handleAutoReauthorization = async () => {
+      if (shouldReauthorize && oidcClient) {
+        setShouldReauthorize(false); // 重置标识，避免重复触发
+        try {
+          setStatus('loading');
+          // 启动 OIDC 授权流程并获取授权码
+          const authResult = await oidcClient.startAuthorization();
+          // 用授权码换取访问令牌
+          const tokenResponse = await oidcClient.exchangeCodeForToken(
+            authResult.code,
+            authResult.state,
+          );
+
+          // 获取用户信息
+          const userInfo = await fetchUserInfo(tokenResponse.accessToken);
+          // 创建会话对象
+          const newSession: MarketAuthSession = {
+            accessToken: tokenResponse.accessToken,
+            expiresAt: Date.now() + tokenResponse.expiresIn * 1000,
+            expiresIn: tokenResponse.expiresIn,
+            scope: tokenResponse.scope,
+            tokenType: tokenResponse.tokenType as 'Bearer',
+            userInfo: userInfo || undefined,
+          };
+
+          // 存储 token 到 cookie 和 sessionStorage
+          setTokenToCookie(tokenResponse.accessToken, tokenResponse.expiresIn);
+          sessionStorage.setItem('market_auth_session', JSON.stringify(newSession));
+
+          // 单独存储用户信息到 sessionStorage 供其他地方使用
+          if (userInfo) {
+            sessionStorage.setItem('market_user_info', JSON.stringify(userInfo));
+          }
+
+          setSession(newSession);
+          setStatus('authenticated');
+
+          console.log('[MarketAuth] Auto re-authorization completed successfully');
+        } catch (error) {
+          console.error('[MarketAuth] Auto re-authorization failed:', error);
+          setStatus('unauthenticated');
+        }
+      }
+    };
+
+    handleAutoReauthorization();
+  }, [shouldReauthorize, oidcClient]);
+
+  const contextValue: MarketAuthContextType = {
+    getCurrentUserInfo,
+    isAuthenticated: status === 'authenticated',
+    isLoading: status === 'loading',
+    refreshToken,
+    session,
+    signIn,
+    signOut,
+    status,
+  };
+
+  return <MarketAuthContext.Provider value={contextValue}>{children}</MarketAuthContext.Provider>;
+};
+
+/**
+ * 使用 Market 授权的 Hook
+ */
+export const useMarketAuth = (): MarketAuthContextType => {
+  const context = useContext(MarketAuthContext);
+  if (!context) {
+    throw new Error('useMarketAuth must be used within a MarketAuthProvider');
+  }
+  return context;
+};

package/src/layout/AuthProvider/MarketAuth/errors.ts

@@ -0,0 +1,75 @@
+export type MarketAuthErrorCode =
+  | 'authorizationFailed'
+  | 'browserOnly'
+  | 'codeConsumed'
+  | 'codeVerifierMissing'
+  | 'general'
+  | 'handoffFailed'
+  | 'handoffTimeout'
+  | 'oidcNotReady'
+  | 'openBrowserFailed'
+  | 'openPopupFailed'
+  | 'popupClosed'
+  | 'sessionExpired'
+  | 'stateMissing'
+  | 'stateMismatch';
+
+interface MarketAuthErrorOptions {
+  cause?: unknown;
+  message?: string;
+  meta?: Record<string, unknown>;
+}
+
+export class MarketAuthError extends Error {
+  public readonly code: MarketAuthErrorCode;
+
+  public readonly meta?: Record<string, unknown>;
+
+  constructor(code: MarketAuthErrorCode, options: MarketAuthErrorOptions = {}) {
+    super(options.message ?? code);
+    this.name = 'MarketAuthError';
+    this.code = code;
+    this.meta = options.meta;
+
+    if (options.cause) {
+      this.cause = options.cause;
+    }
+  }
+}
+
+const PATTERN_CODE_MAP: Array<[RegExp, MarketAuthErrorCode]> = [
+  [/authorization can only be initiated in a browser environment/i, 'browserOnly'],
+  [/authorization code already consumed/i, 'codeConsumed'],
+  [/authorization popup was closed/i, 'popupClosed'],
+  [/authorization session expired/i, 'sessionExpired'],
+  [/authorization state not found/i, 'stateMissing'],
+  [/state mismatch/i, 'stateMismatch'],
+  [/code verifier not found/i, 'codeVerifierMissing'],
+  [/failed to open authorization popup/i, 'openPopupFailed'],
+  [/failed to open system browser/i, 'openBrowserFailed'],
+  [/oidc client not initialized/i, 'oidcNotReady'],
+  [/failed to retrieve authorization result from handoff endpoint/i, 'handoffFailed'],
+  [/invalid state parameter/i, 'stateMismatch'],
+  [/timeout/i, 'handoffTimeout'],
+];
+
+export const resolveMarketAuthError = (error: unknown): MarketAuthError => {
+  if (error instanceof MarketAuthError) {
+    return error;
+  }
+
+  if (error instanceof Error) {
+    const matchedPattern = PATTERN_CODE_MAP.find(([pattern]) => pattern.test(error.message));
+
+    if (matchedPattern) {
+      return new MarketAuthError(matchedPattern[1], { cause: error });
+    }
+
+    return new MarketAuthError('authorizationFailed', {
+      cause: error,
+      meta: { message: error.message },
+    });
+  }
+
+  return new MarketAuthError('general');
+};

package/src/layout/AuthProvider/MarketAuth/index.ts

@@ -0,0 +1,2 @@
+export { MarketAuthProvider, useMarketAuth } from './MarketAuthProvider';
+export type { MarketAuthContextType, MarketAuthSession, MarketAuthState } from './types';