@promptbook/remote-server 0.98.0 → 0.99.0-0

package/README.md

@@ -25,6 +25,10 @@ Write AI applications using plain human language across multiple models and plat
 
 
 
+<blockquote style="color: #ff8811">
+    <b>⚠ Warning:</b> This is a pre-release version of the library. It is not yet ready for production use. Please look at <a href="https://www.npmjs.com/package/@promptbook/core?activeTab=versions">latest stable release</a>.
+</blockquote>
+
 ## 📦 Package `@promptbook/remote-server`
 
 - Promptbooks are [divided into several](#-packages) packages, all are published from [single monorepo](https://github.com/webgptorg/promptbook).

package/esm/index.es.js

@@ -33,7 +33,7 @@ const BOOK_LANGUAGE_VERSION = '1.0.0';
  * @generated
  * @see https://github.com/webgptorg/promptbook
  */
-const PROMPTBOOK_ENGINE_VERSION = '0.98.0';
+const PROMPTBOOK_ENGINE_VERSION = '0.99.0-0';
 /**
  * TODO: string_promptbook_version should be constrained to the all versions of Promptbook engine
  * Note: [💞] Ignore a discrepancy between file name and entity name
@@ -8061,6 +8061,152 @@ function startRemoteServer(options) {
             response.status(400).send({ error: serializeError(error) });
         }
     });
+    // OAuth Authentication Endpoints
+    // These endpoints provide social authentication support (Facebook, Google, etc.)
+    app.get('/auth/:provider', async (request, response) => {
+        const { provider } = request.params;
+        if (!isApplicationModeAllowed) {
+            response.status(400).json({
+                error: 'Application mode is not allowed',
+                message: 'Social authentication requires application mode to be enabled'
+            });
+            return;
+        }
+        try {
+            // Get OAuth configuration from query params or environment
+            const { redirectUri, clientId, appId } = request.query;
+            if (!redirectUri || !clientId) {
+                response.status(400).json({
+                    error: 'Missing OAuth parameters',
+                    message: 'redirectUri and clientId are required for OAuth flow'
+                });
+                return;
+            }
+            let authUrl;
+            const state = Buffer.from(JSON.stringify({
+                appId: appId || 'default',
+                timestamp: Date.now()
+            })).toString('base64');
+            switch (provider.toLowerCase()) {
+                case 'facebook':
+                    authUrl = `https://www.facebook.com/v18.0/dialog/oauth?` +
+                        `client_id=${encodeURIComponent(clientId)}&` +
+                        `redirect_uri=${encodeURIComponent(redirectUri)}&` +
+                        `scope=email,public_profile&` +
+                        `response_type=code&` +
+                        `state=${encodeURIComponent(state)}`;
+                    break;
+                case 'google':
+                    authUrl = `https://accounts.google.com/o/oauth2/v2/auth?` +
+                        `client_id=${encodeURIComponent(clientId)}&` +
+                        `redirect_uri=${encodeURIComponent(redirectUri)}&` +
+                        `scope=openid%20email%20profile&` +
+                        `response_type=code&` +
+                        `state=${encodeURIComponent(state)}`;
+                    break;
+                default:
+                    response.status(400).json({
+                        error: 'Unsupported provider',
+                        message: `Social authentication provider '${provider}' is not supported. Supported providers: facebook, google`
+                    });
+                    return;
+            }
+            // Log the OAuth attempt for debugging
+            if (isVerbose) {
+                console.info(colors.cyan(`OAuth ${provider} flow started for app ${appId || 'default'}`));
+            }
+            response.json({
+                authUrl,
+                provider,
+                state,
+                message: `Redirect user to authUrl to complete ${provider} authentication`
+            });
+        }
+        catch (error) {
+            assertsError(error);
+            console.warn(`OAuth ${provider} initialization failed:`, error);
+            response.status(500).json({
+                error: 'OAuth initialization failed',
+                message: error.message
+            });
+        }
+    });
+    app.post('/auth/:provider/callback', async (request, response) => {
+        const { provider } = request.params;
+        if (!isApplicationModeAllowed || login === null) {
+            response.status(400).json({
+                error: 'Application mode is not allowed',
+                message: 'Social authentication requires application mode and login handler to be configured'
+            });
+            return;
+        }
+        try {
+            const { code, state, error: oauthError } = request.body;
+            if (oauthError) {
+                response.status(400).json({
+                    isSuccess: false,
+                    error: 'OAuth authorization failed',
+                    message: `${provider} authentication was denied or failed: ${oauthError}`
+                });
+                return;
+            }
+            if (!code || !state) {
+                response.status(400).json({
+                    isSuccess: false,
+                    error: 'Missing OAuth callback parameters',
+                    message: 'code and state parameters are required'
+                });
+                return;
+            }
+            // Decode state to get app information
+            let appInfo;
+            try {
+                appInfo = JSON.parse(Buffer.from(state, 'base64').toString());
+            }
+            catch (_a) {
+                response.status(400).json({
+                    isSuccess: false,
+                    error: 'Invalid state parameter',
+                    message: 'The OAuth state parameter is malformed'
+                });
+                return;
+            }
+            // Log the OAuth callback for debugging
+            if (isVerbose) {
+                console.info(colors.cyan(`OAuth ${provider} callback received for app ${appInfo.appId}`));
+            }
+            // Note: In a real implementation, you would:
+            // 1. Exchange the code for an access token with the OAuth provider
+            // 2. Use the access token to get user information
+            // 3. Create or find the user in your system
+            // 4. Call the login function with the user's information
+            // For now, we provide a framework that the implementer can extend
+            const mockUserInfo = {
+                username: `${provider}_user_${code.substring(0, 8)}`,
+                password: '',
+                appId: appInfo.appId
+            };
+            const loginResult = await login({
+                ...mockUserInfo,
+                rawRequest: request,
+                rawResponse: response,
+            });
+            response.status(200).json({
+                ...loginResult,
+                provider,
+                message: loginResult.message || `${provider} authentication completed`,
+            });
+        }
+        catch (error) {
+            assertsError(error);
+            console.warn(`OAuth ${provider} callback failed:`, error);
+            response.status(500).json({
+                isSuccess: false,
+                error: 'OAuth callback processing failed',
+                message: error.message
+            });
+        }
+    });
     app.get(`/books`, async (request, response) => {
         if (collection === null) {
             response.status(500).send('No collection available');