@tiledesk/tiledesk-server 2.10.103 → 2.11.0

package/CHANGELOG.md

@@ -5,8 +5,12 @@
 🚀        IN PRODUCTION                        🚀
 (https://www.npmjs.com/package/@tiledesk/tiledesk-server/v/2.3.77) 
 
-# 2.10.103
+# 2.11.0
+- Added: authentication via Keycloak
+
+# 2.10.104
 - Update: standard/hybrid namespace management
+- Update: tybot-connector to 2.0.21
 
 # 2.10.102
 - Update: substituted encode with DOMPurify.sanitize for direct email

package/app.js

@@ -344,7 +344,12 @@ if (process.env.DISABLE_SESSION_STRATEGY==true ||  process.env.DISABLE_SESSION_S
           store: redisStore,
           resave: false, // required: force lightweight session keep alive (touch)
           saveUninitialized: false, // recommended: only save session when data exists
-          secret: sessionSecret
+          secret: sessionSecret,
+          cookie: {
+            secure: true,           // ✅ Use HTTPS
+            httpOnly: true,         // ✅ Only accessible by the server (not client-side JS)
+            sameSite: 'None'        // ✅ Allows cross-origin (e.g., Keycloak on a different domain)
+          }
         })
       )
       winston.info("Express Session with Redis enabled with Secret: " + sessionSecret);

package/deploy.sh

@@ -1,5 +1,5 @@
 git pull
-npm version patch
+npm version minor
 version=`node -e 'console.log(require("./package.json").version)'`
 echo "version $version"
 

package/middleware/passport.js

@@ -641,7 +641,8 @@ if (enableOauth2Signin==true) {
     tokenURL: process.env.OAUTH2_TOKEN_URL, 
     clientID: process.env.OAUTH2_CLIENT_ID,
     clientSecret: process.env.OAUTH2_CLIENT_SECRET, 
-    callbackURL: process.env.OAUTH2_CALLBACK_URL || "http://localhost:3000/auth/oauth2/callback"    
+    callbackURL: process.env.OAUTH2_CALLBACK_URL || "http://localhost:3000/auth/oauth2/callback",
+    scope: ['openid'],
   },
   function(accessToken, refreshToken, params, profile, cb) {
     winston.debug("params", params);
@@ -650,7 +651,7 @@ if (enableOauth2Signin==true) {
     const token = jwt.decode(accessToken); // user id lives in here
     winston.debug("token", token);
 
-    const profileInfo = jwt.decode(params.id_token); // user email lives in here
+    const profileInfo = jwt.decode(params.access_token); // user email lives in here
     winston.debug("profileInfo", profileInfo);
 
     winston.debug("profile", profile);
@@ -673,7 +674,7 @@ if (enableOauth2Signin==true) {
         // new user record and link it to the oauth account.
           var password = uniqid()
         // signup ( email, password, firstname, lastname, emailverified) {
-          userService.signup(email, password,  profile.displayName, "", true)
+          userService.signup(email, password,  profileInfo.name || profileInfo.preferred_username, "", true)
           .then(function (savedUser) {
 
           winston.debug("savedUser", savedUser)    

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tiledesk/tiledesk-server",
   "description": "The Tiledesk server module",
-  "version": "2.10.103",
+  "version": "2.11.0",
   "scripts": {
     "start": "node ./bin/www",
     "pretest": "mongodb-runner start",
@@ -49,7 +49,7 @@
     "@tiledesk/tiledesk-rasa-connector": "^1.0.10",
     "@tiledesk/tiledesk-sms-connector": "^0.1.11",
     "@tiledesk/tiledesk-telegram-connector": "^0.1.14",
-    "@tiledesk/tiledesk-tybot-connector": "^2.0.19",
+    "@tiledesk/tiledesk-tybot-connector": "^2.0.21",
     "@tiledesk/tiledesk-voice-twilio-connector": "^0.1.22",
     "@tiledesk/tiledesk-vxml-connector": "^0.1.76",
     "@tiledesk/tiledesk-whatsapp-connector": "^0.1.84",

package/routes/auth.js

@@ -781,23 +781,23 @@ router.get("/oauth2", function(req,res,next){
   req.session.forced_redirect_url = req.query.forced_redirect_url;
 
   passport.authenticate(
-      'oauth2'
+    'oauth2'
   )(req,res,next);
 });
 
 // router.get('/oauth2',
 //   passport.authenticate('oauth2'));
 
-  router.get('/oauth2/callback',
+router.get('/oauth2/callback',
   passport.authenticate('oauth2', { session: false}),
   function(req, res) {
-    winston.debug("'/oauth2/callback: ");
-    
+    winston.debug("'/oauth2/callback: ", req.query);
+    winston.debug("/oauth2/callback --> req.session.redirect_url", req.session.redirect_url);
+    winston.debug("/oauth2/callback --> req.session.forced_redirect_url", req.session.forced_redirect_url);
+
     var user = req.user;
     winston.debug("user", user);
-    winston.debug("req.session.redirect_url: "+ req.session.redirect_url);
-    
-  
+    winston.debug("req.session.redirect_url: "+ req.session.redirect_url); 
     var userJson = user.toObject();
     
     delete userJson.password;