@pubinfo/module-auth 2.0.13 → 2.0.14

package/src/providers/ding-zj.ts

@@ -1,21 +1,27 @@
-import type { Authorization, ProviderConfig, ProviderUserConfig } from '../interface';
+import type { Authorization, ProviderOptions, ProviderUserOptions } from '../interface';
 
-interface DingZJConfig extends ProviderUserConfig {
+export interface DingZJOptions extends ProviderUserOptions {
   /**
    * 登录方式
    * - `redirect` 跳转浙政钉的扫码页面
    * - `embed` 内嵌浙政钉的登录二维码
    */
   mode: 'redirect' | 'embed'
+
+  /** `client_id` */
+  clientId?: string
+
+  /** `redirect_uri` */
+  redirectUri?: string
 }
 
 /**
  * 浙政钉扫码登录
  */
-export default function DingZJ(options: DingZJConfig): ProviderConfig {
+export default function DingZJ(options: DingZJOptions): ProviderOptions {
   const { clientId, redirectUri } = options;
 
-  const authorization: Record<string, Authorization> = {
+  const signIn: Record<string, Authorization> = {
     /** 跳转外部页面 */
     redirect: {
       url: 'https://openplatform-pro.ding.zj.gov.cn/oauth2/auth.htm',
@@ -42,7 +48,7 @@ export default function DingZJ(options: DingZJConfig): ProviderConfig {
     },
   };
 
-  const initQRCode: ProviderConfig['initQRCode'] = (url, options) => {
+  const initQRCode: ProviderOptions['initQRCode'] = (url, options) => {
     const target = document.getElementById(options.id);
 
     if (!target) {
@@ -68,8 +74,8 @@ export default function DingZJ(options: DingZJConfig): ProviderConfig {
     id: 'ding-zj',
     name: '浙政钉登录',
     type: 'oauth',
-    authorization: authorization[options.mode],
-    callbackUrl: '/bs/loginByDingZJ',
+    signIn: signIn[options.mode],
+    authenticate: '/bs/loginByDingZJ',
     initQRCode: options.mode === 'embed' ? initQRCode : undefined,
     ...options,
   };

package/src/providers/sso.ts

@@ -0,0 +1,44 @@
+import type { ProviderOptions, ProviderUserOptions } from '@/interface';
+
+export interface SsoOptions extends ProviderUserOptions {
+  /**
+   * 登录类型，根据调用 `/app/oauth/generateCode` 接口时传递的 `grantType` 参数值判断：
+   *
+   * - `OAUTH2` -> `defaultOauth2`
+   * - `SIMPLE_ENCRYPT` -> `encrypt`
+   *
+   * @default `defaultOauth2`
+   */
+  loginType?: 'defaultOauth2' | 'encrypt'
+}
+
+/**
+ * `SSO 统一账号登录`
+ *
+ * - 主系统调用 `/app/oauth/generateCode?appKey=xxx` 获取 `code`，并作为参数跳转至子系统；
+ * - 当前 `provider` 将获取 `code` 并调用 `/auth/ssoLogin` 完成登录认证。
+ */
+export default function Sso(options: SsoOptions = {}): ProviderOptions {
+  const { loginType = 'defaultOauth2' } = options;
+
+  return {
+    id: 'sso',
+    name: 'SSO统一账号登录',
+    type: 'custom',
+    authenticate: async (params, baseURL) => {
+      const res = await fetch(
+        `${baseURL}/auth/ssoLogin`,
+        {
+          headers: { 'Content-Type': 'application/json' },
+          method: 'POST',
+          body: JSON.stringify({
+            ...params,
+            loginType,
+          }),
+        },
+      );
+      return await res.json();
+    },
+    ...options,
+  };
+}