qiao-z-nuser 6.0.0 → 6.0.2

package/index.js

@@ -6,6 +6,7 @@ const logger = Logger('qiao-z-nuser');
 const userController = require('./src/controller/UserController.js');
 const userInfoController = require('./src/controller/UserInfoController.js');
 const githubController = require('./src/controller/GithubController.js');
+const googleController = require('./src/controller/GoogleController.js');
 
 /**
  * init
@@ -51,3 +52,18 @@ exports.initGithub = function (app) {
   // init controller
   githubController(app);
 };
+
+/**
+ * initGoogle
+ * @param {*} app qz app
+ */
+exports.initGoogle = function (app) {
+  // check app
+  if (!app) {
+    logger.info('init', 'need app');
+    return;
+  }
+
+  // init controller
+  googleController(app);
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qiao-z-nuser",
-  "version": "6.0.0",
+  "version": "6.0.2",
   "description": "qiao-z new user module",
   "keywords": [
     "qiao-z",
@@ -19,7 +19,7 @@
   },
   "scripts": {},
   "dependencies": {
-    "qiao-z-service": "^6.0.0"
+    "qiao-z-service": "^6.0.1"
   },
-  "gitHead": "90e26035be508cf4b0fc5141a36beab26f2bcb28"
+  "gitHead": "90d0d8a0ac77969aa38f5d4518a1461a8d2611f4"
 }

package/src/controller/GoogleController.js

@@ -0,0 +1,17 @@
+// service
+const service = require('../service/GoogleService.js');
+
+/**
+ * google controller
+ */
+module.exports = (app) => {
+  // /google/auth
+  app.get('/google/auth', (req, res) => {
+    service.googleAuth(req, res);
+  });
+
+  // /google/callback
+  app.get('/google/callback', (req, res) => {
+    service.googleCallback(req, res);
+  });
+};

package/src/service/GoogleService.js

@@ -0,0 +1,87 @@
+// qiao
+const { userGoogle } = require('qiao-z-service');
+
+// google
+const { getGoogleAuthUrl } = require('../util/google.js');
+
+/**
+ * googleAuth
+ * @param {*} req
+ * @param {*} res
+ */
+exports.googleAuth = (req, res) => {
+  // auth
+  const authObj = getGoogleAuthUrl();
+
+  // set cookie
+  res.setCookie('state', authObj.state);
+
+  // redirect
+  res.redirect(authObj.finalUrl);
+};
+
+/**
+ * googleCallback
+ * @param {*} req
+ * @param {*} res
+ */
+exports.googleCallback = async (req, res) => {
+  const methodName = 'googleCallback';
+
+  // fallback url
+  const fallbackUrl = global.QZ_CONFIG.google.fallbackUrl;
+
+  // check
+  if (!req.cookies) {
+    req.logger.error(methodName, 'req.cookies is null');
+    res.redirect(fallbackUrl);
+    return;
+  }
+  if (!req.query) {
+    req.logger.error(methodName, 'req.query is null');
+    res.redirect(fallbackUrl);
+    return;
+  }
+
+  // check error
+  if (req.query.error) {
+    req.logger.error(methodName, 'google auth error', req.query.error);
+    res.redirect(fallbackUrl);
+    return;
+  }
+
+  // check state
+  const cookieState = req.cookies.state;
+  const queryState = req.query.state;
+  if (cookieState !== queryState) {
+    req.logger.info(methodName, 'cookieState', cookieState);
+    req.logger.info(methodName, 'queryState', queryState);
+    req.logger.error(methodName, 'cookieState !== queryState');
+    res.redirect(fallbackUrl);
+    return;
+  }
+
+  // check code
+  const queryCode = req.query.code;
+  if (!queryCode) {
+    req.logger.error(methodName, 'queryCode is null');
+    res.redirect(fallbackUrl);
+    return;
+  }
+
+  // send
+  const json = await userGoogle({
+    url: global.QZ_CONFIG.user.url,
+    from: global.QZ_CONFIG.user.from,
+    code: queryCode,
+  });
+
+  // r
+  if (json.type === 'success') {
+    // params
+    const params = new URLSearchParams(json.obj);
+    res.redirect(`${fallbackUrl}?${params.toString()}`);
+  } else {
+    res.redirect(fallbackUrl);
+  }
+};

package/src/util/google.js

@@ -0,0 +1,23 @@
+// crypto
+const crypto = require('crypto');
+
+/**
+ * getGoogleAuthUrl
+ * @returns
+ */
+exports.getGoogleAuthUrl = () => {
+  const state = crypto.randomBytes(16).toString('hex');
+  const params = new URLSearchParams({
+    client_id: global.QZ_CONFIG.google.clientID,
+    redirect_uri: global.QZ_CONFIG.google.callbackUrl,
+    response_type: 'code',
+    scope: 'openid email profile',
+    state: state,
+    access_type: 'offline',
+    prompt: 'consent',
+  });
+  const finalUrl = `${global.QZ_CONFIG.google.authUrl}?${params.toString()}`;
+
+  // r
+  return { state, finalUrl };
+};