@robelest/convex-auth 0.0.4-preview.22 → 0.0.4-preview.24

package/src/server/context.ts

@@ -0,0 +1,90 @@
+import type { UserIdentity } from "convex/server";
+
+import { userIdFromIdentitySubject } from "./identity";
+import type { AuthContext, AuthLike, OptionalAuthContext, UserDoc } from "./auth";
+
+type AuthIdentityCtx = {
+  auth: {
+    getUserIdentity: () => Promise<UserIdentity | null>;
+  };
+};
+
+type AuthContextResolverLike = {
+  user: {
+    get: (ctx: any, userId: string) => Promise<UserDoc>;
+    getActiveGroup: (
+      ctx: any,
+      args: { userId: string },
+    ) => Promise<string | null>;
+  };
+  member: {
+    inspect: (
+      ctx: any,
+      args: { userId: string; groupId: string },
+    ) => Promise<{
+      membership: unknown;
+      roleIds: string[];
+      grants: string[];
+    }>;
+  };
+};
+
+/** @internal */
+export async function getSessionUserId(
+  ctx: AuthIdentityCtx,
+): Promise<string | null> {
+  const identity = await ctx.auth.getUserIdentity();
+  if (identity === null) {
+    return null;
+  }
+  return userIdFromIdentitySubject(identity.subject);
+}
+
+/** @internal */
+export async function getAuthContextForUser(
+  auth: AuthContextResolverLike,
+  ctx: any,
+  userId: string,
+): Promise<AuthContext> {
+  const user = await auth.user.get(ctx, userId);
+  const groupId = await auth.user.getActiveGroup(ctx, { userId });
+  let role: string | null = null;
+  let grants: string[] = [];
+  if (groupId) {
+    const resolved = await auth.member.inspect(ctx, { userId, groupId });
+    if (resolved.membership) {
+      role = resolved.roleIds[0] ?? null;
+      grants = resolved.grants;
+    }
+  }
+  return {
+    userId: userId as AuthContext["userId"],
+    user,
+    groupId,
+    role,
+    grants,
+  };
+}
+
+/** @internal */
+export async function getAuthContext(
+  auth: AuthLike,
+  ctx: AuthIdentityCtx & Record<string, unknown>,
+): Promise<AuthContext | null> {
+  const userId = await getSessionUserId(ctx);
+  if (userId === null) {
+    return null;
+  }
+  return await getAuthContextForUser(auth, ctx, userId);
+}
+
+/** @internal */
+export function createUnauthenticatedAuthContext(): OptionalAuthContext {
+  return {
+    userId: null,
+    user: null,
+    groupId: null,
+    role: null,
+    grants: [],
+  };
+}