uibee 1.5.0 → 1.6.1

package/dist/src/utils/auth/callback.d.ts

@@ -0,0 +1,2 @@
+import type { AuthCallbackProps } from 'uibee/utils';
+export default function authCallback({ req, tokenURL, clientID, clientSecret, redirectURI, userInfoURL, tokenRedirectURL }: AuthCallbackProps): Promise<Response>;

package/dist/src/utils/auth/callback.js

@@ -0,0 +1,60 @@
+import { NextResponse } from 'next/server';
+export default async function authCallback({ req, tokenURL, clientID, clientSecret, redirectURI, userInfoURL, tokenRedirectURL }) {
+    const searchParams = new URL(req.url).searchParams;
+    if (!searchParams) {
+        return NextResponse.json({ error: 'No search parameters found.' }, { status: 400 });
+    }
+    const code = searchParams.get('code');
+    if (!code) {
+        return NextResponse.json({ error: 'No authorization code found.' }, { status: 400 });
+    }
+    try {
+        // Exchanges callback code for access token
+        const tokenResponse = await fetch(tokenURL, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                client_id: clientID,
+                client_secret: clientSecret,
+                code: code,
+                redirect_uri: redirectURI,
+                grant_type: 'authorization_code',
+            }).toString()
+        });
+        const tokenResponseBody = await tokenResponse.text();
+        if (!tokenResponse.ok) {
+            return new Response(JSON.stringify(`Failed to obtain token: ${tokenResponseBody}`), {
+                status: 500,
+                headers: { 'Content-Type': 'application/json' }
+            });
+        }
+        const token = JSON.parse(tokenResponseBody);
+        // Fetches user info using access token
+        const userInfoResponse = await fetch(userInfoURL, {
+            headers: { Authorization: `Bearer ${token.access_token}` }
+        });
+        if (!userInfoResponse.ok) {
+            const userInfoError = await userInfoResponse.text();
+            return new Response(`No user info found: ${userInfoError}`, {
+                status: 500,
+                headers: { 'Content-Type': 'application/json' }
+            });
+        }
+        const userInfo = await userInfoResponse.json();
+        const redirectUrl = new URL(tokenRedirectURL);
+        const params = new URLSearchParams({
+            id: userInfo.sub,
+            name: userInfo.name,
+            email: userInfo.email,
+            groups: userInfo.groups.join(','),
+            access_token: token.access_token,
+        });
+        redirectUrl.search = params.toString();
+        return NextResponse.redirect(redirectUrl.toString());
+    }
+    catch (err) {
+        const error = err;
+        console.error('Error during OAuth flow:', error.message);
+        return NextResponse.json({ error: 'Authentication failed' }, { status: 500 });
+    }
+}

package/dist/src/utils/auth/login.d.ts

@@ -0,0 +1,3 @@
+import { NextResponse } from 'next/server';
+import type { AuthLoginProps } from 'uibee/utils';
+export default function AuthLogin({ clientID, redirectURI, authURL }: AuthLoginProps): Promise<NextResponse<unknown>>;

package/dist/src/utils/auth/login.js

@@ -0,0 +1,12 @@
+import { NextResponse } from 'next/server';
+export default async function AuthLogin({ clientID, redirectURI, authURL }) {
+    const state = Math.random().toString(36).substring(5);
+    const authQueryParams = new URLSearchParams({
+        client_id: clientID,
+        redirect_uri: redirectURI,
+        response_type: 'code',
+        scope: 'openid profile email',
+        state: state,
+    }).toString();
+    return NextResponse.redirect(`${authURL}?${authQueryParams}`);
+}

package/dist/src/utils/auth/logout.d.ts

@@ -0,0 +1,3 @@
+import { NextResponse } from 'next/server';
+import type { AuthLogoutProps } from 'uibee/utils';
+export default function AuthLogout({ frontendURL }: AuthLogoutProps): Promise<NextResponse<unknown>>;

package/dist/src/utils/auth/logout.js

@@ -0,0 +1,18 @@
+import { NextResponse } from 'next/server';
+export default async function AuthLogout({ frontendURL }) {
+    const response = NextResponse.redirect(new URL('/', frontendURL));
+    // Remove all authentication cookies
+    const cookiesToRemove = [
+        'access_token',
+        'access_token_expires',
+        'refresh_token',
+        'refresh_token_expires',
+        'user_id',
+        'user_name',
+        'user_roles'
+    ];
+    cookiesToRemove.forEach(cookieName => {
+        response.cookies.delete(cookieName);
+    });
+    return response;
+}

package/dist/src/utils/auth/token.d.ts

@@ -0,0 +1,3 @@
+import { NextResponse } from 'next/server';
+import type { AuthTokenProps } from 'uibee/utils';
+export default function AuthToken({ request, frontendURL }: AuthTokenProps): Promise<NextResponse<unknown>>;

package/dist/src/utils/auth/token.js

@@ -0,0 +1,28 @@
+import { NextResponse } from 'next/server';
+export default async function AuthToken({ request, frontendURL }) {
+    const url = new URL(request.url);
+    const token = url.searchParams.get('access_token');
+    const btg = url.searchParams.get('btg');
+    if (!token) {
+        return NextResponse.json({ error: 'No access token provided' }, { status: 400 });
+    }
+    if (btg) {
+        return NextResponse.redirect(new URL('/dashboard', frontendURL));
+    }
+    const accessToken = url.searchParams.get('access_token');
+    const accessTokenExpires = url.searchParams.get('access_token_expires');
+    const refreshToken = url.searchParams.get('refresh_token');
+    const refreshTokenExpires = url.searchParams.get('refresh_token_expires');
+    const userId = url.searchParams.get('user_id');
+    const userName = url.searchParams.get('user_name');
+    const userRoles = url.searchParams.get('user_roles');
+    const response = NextResponse.redirect(new URL('/dashboard', frontendURL));
+    response.cookies.set('access_token', accessToken);
+    response.cookies.set('access_token_expires', accessTokenExpires);
+    response.cookies.set('refresh_token', refreshToken);
+    response.cookies.set('refresh_token_expires', refreshTokenExpires);
+    response.cookies.set('user_id', userId);
+    response.cookies.set('user_name', userName);
+    response.cookies.set('user_roles', userRoles);
+    return response;
+}

package/dist/src/utils/index.d.ts

@@ -2,3 +2,7 @@ export { default as alertSlowQuery } from './sql/alertSlowQuery';
 export { default as discordAlert } from './discord/discordAlert';
 export { getCookie, setCookie, removeCookie } from './cookies/cookies';
 export { LogoConsoleOutput } from './LogoConsoleOutput/LogoConsoleOutput';
+export { default as authLogin } from './auth/login';
+export { default as authCallback } from './auth/callback';
+export { default as authToken } from './auth/token';
+export { default as authLogout } from './auth/logout';

package/dist/src/utils/index.js

@@ -2,3 +2,8 @@ export { default as alertSlowQuery } from './sql/alertSlowQuery';
 export { default as discordAlert } from './discord/discordAlert';
 export { getCookie, setCookie, removeCookie } from './cookies/cookies';
 export { LogoConsoleOutput } from './LogoConsoleOutput/LogoConsoleOutput';
+// Auth
+export { default as authLogin } from './auth/login';
+export { default as authCallback } from './auth/callback';
+export { default as authToken } from './auth/token';
+export { default as authLogout } from './auth/logout';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uibee",
-  "version": "1.5.0",
+  "version": "1.6.1",
   "description": "Shared components, functions and hooks for reuse across Login projects",
   "homepage": "https://github.com/Login-Linjeforening-for-IT/uibee#readme",
   "bugs": {

package/src/types/utils.d.ts

@@ -1,4 +1,6 @@
 /* eslint-disable @stylistic/semi */
+import { NextRequest } from 'next/server'
+
 declare module 'uibee/utils' {
     export interface SlowQueryProps {
         application: string
@@ -29,6 +31,35 @@ declare module 'uibee/utils' {
         webhookURL: string
     }
 
+    export interface AuthLoginProps {
+        clientID: string
+        redirectURI: string
+        authURL: string
+    }
+
+    export interface AuthCallbackProps {
+        req: Request
+        tokenURL: string
+        clientID: string
+        clientSecret: string
+        redirectURI: string
+        userInfoURL: string
+        tokenRedirectURL: string
+    }
+
+    export interface AuthTokenProps {
+        request: NextRequest
+        frontendURL: string
+    }
+    export interface AuthLogoutProps {
+        request: NextRequest
+        frontendURL: string
+    }
+
     export default async function alertSlowQuery(props: SlowQueryProps): Promise<void>;
     export default async function discordAlert(props: DiscordAlertProps): Promise<number>;
+    export default async function authLogin(props: AuthLoginProps): Promise<Response>;
+    export default async function authCallback(props: AuthCallbackProps): Promise<Response>;
+    export default async function authToken(props: AuthTokenProps): Promise<Response>;
+    export default async function authLogout(props: AuthLogoutProps): Promise<Response>;
 }

package/src/utils/auth/callback.ts

@@ -0,0 +1,87 @@
+import { NextResponse } from 'next/server'
+import type { AuthCallbackProps } from 'uibee/utils'
+
+type UserInfo = {
+    sub: string
+    name: string
+    email: string
+    groups: string[]
+}
+
+export default async function authCallback({
+    req,
+    tokenURL,
+    clientID,
+    clientSecret,
+    redirectURI,
+    userInfoURL,
+    tokenRedirectURL
+}: AuthCallbackProps) {
+    const searchParams = new URL(req.url).searchParams
+
+    if (!searchParams) {
+        return NextResponse.json({ error: 'No search parameters found.' }, { status: 400 })
+    }
+    const code = searchParams.get('code')
+
+    if (!code) {
+        return NextResponse.json({ error: 'No authorization code found.' }, { status: 400 })
+    }
+
+    try {
+        // Exchanges callback code for access token
+        const tokenResponse = await fetch(tokenURL, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                client_id: clientID,
+                client_secret: clientSecret,
+                code: code as string,
+                redirect_uri: redirectURI,
+                grant_type: 'authorization_code',
+            }).toString()
+        })
+
+        const tokenResponseBody = await tokenResponse.text()
+
+        if (!tokenResponse.ok) {
+            return new Response(JSON.stringify(`Failed to obtain token: ${tokenResponseBody}`), {
+                status: 500,
+                headers: { 'Content-Type': 'application/json' }
+            })
+        }
+
+        const token = JSON.parse(tokenResponseBody)
+
+        // Fetches user info using access token
+        const userInfoResponse = await fetch(userInfoURL, {
+            headers: { Authorization: `Bearer ${token.access_token}` }
+        })
+
+        if (!userInfoResponse.ok) {
+            const userInfoError = await userInfoResponse.text()
+            return new Response(`No user info found: ${userInfoError}`, {
+                status: 500,
+                headers: { 'Content-Type': 'application/json' }
+            })
+        }
+
+        const userInfo = await userInfoResponse.json() as UserInfo
+
+        const redirectUrl = new URL(tokenRedirectURL)
+        const params = new URLSearchParams({
+            id: userInfo.sub,
+            name: userInfo.name,
+            email: userInfo.email,
+            groups: userInfo.groups.join(','),
+            access_token: token.access_token,
+        })
+
+        redirectUrl.search = params.toString()
+        return NextResponse.redirect(redirectUrl.toString())
+    } catch (err: unknown) {
+        const error = err as Error
+        console.error('Error during OAuth flow:', error.message)
+        return NextResponse.json({ error: 'Authentication failed' }, { status: 500 })
+    }
+}

package/src/utils/auth/login.ts

@@ -0,0 +1,17 @@
+import { NextResponse } from 'next/server'
+import type { AuthLoginProps } from 'uibee/utils'
+
+export default async function AuthLogin({ clientID, redirectURI, authURL }: AuthLoginProps) {
+    const state = Math.random().toString(36).substring(5)
+    const authQueryParams = new URLSearchParams({
+        client_id: clientID,
+        redirect_uri: redirectURI,
+        response_type: 'code',
+        scope: 'openid profile email',
+        state: state,
+    }).toString()
+
+    return NextResponse.redirect(
+        `${authURL}?${authQueryParams}`
+    )
+}

package/src/utils/auth/logout.tsx

@@ -0,0 +1,23 @@
+import { NextResponse } from 'next/server'
+import type { AuthLogoutProps } from 'uibee/utils'
+
+export default async function AuthLogout({ frontendURL }: AuthLogoutProps) {
+    const response = NextResponse.redirect(new URL('/', frontendURL))
+
+    // Remove all authentication cookies
+    const cookiesToRemove = [
+        'access_token',
+        'access_token_expires',
+        'refresh_token',
+        'refresh_token_expires',
+        'user_id',
+        'user_name',
+        'user_roles'
+    ]
+
+    cookiesToRemove.forEach(cookieName => {
+        response.cookies.delete(cookieName)
+    })
+
+    return response
+}

package/src/utils/auth/token.ts

@@ -0,0 +1,34 @@
+import { NextResponse } from 'next/server'
+import type { AuthTokenProps } from 'uibee/utils'
+
+export default async function AuthToken({ request, frontendURL }: AuthTokenProps) {
+    const url = new URL(request.url)
+    const token = url.searchParams.get('access_token')
+    const btg = url.searchParams.get('btg')
+    if (!token) {
+        return NextResponse.json({ error: 'No access token provided' }, { status: 400 })
+    }
+
+    if (btg) {
+        return NextResponse.redirect(new URL('/dashboard', frontendURL))
+    }
+
+    const accessToken = url.searchParams.get('access_token')!
+    const accessTokenExpires = url.searchParams.get('access_token_expires')!
+    const refreshToken = url.searchParams.get('refresh_token')!
+    const refreshTokenExpires = url.searchParams.get('refresh_token_expires')!
+    const userId = url.searchParams.get('user_id')!
+    const userName = url.searchParams.get('user_name')!
+    const userRoles = url.searchParams.get('user_roles')!
+
+    const response = NextResponse.redirect(new URL('/dashboard', frontendURL))
+    response.cookies.set('access_token', accessToken)
+    response.cookies.set('access_token_expires', accessTokenExpires)
+    response.cookies.set('refresh_token', refreshToken)
+    response.cookies.set('refresh_token_expires', refreshTokenExpires)
+    response.cookies.set('user_id', userId)
+    response.cookies.set('user_name', userName)
+    response.cookies.set('user_roles', userRoles)
+
+    return response
+}

package/src/utils/index.ts

@@ -1,4 +1,10 @@
 export { default as alertSlowQuery } from './sql/alertSlowQuery'
 export { default as discordAlert } from './discord/discordAlert'
 export { getCookie, setCookie, removeCookie } from './cookies/cookies'
-export { LogoConsoleOutput } from './LogoConsoleOutput/LogoConsoleOutput'
+export { LogoConsoleOutput } from './LogoConsoleOutput/LogoConsoleOutput'
+
+// Auth
+export { default as authLogin } from './auth/login'
+export { default as authCallback } from './auth/callback'
+export { default as authToken } from './auth/token'
+export { default as authLogout } from './auth/logout'

package/tsconfig.json

@@ -6,7 +6,6 @@
     "declaration": true,
     "outDir": "dist",
     "rootDir": ".",
-    "baseUrl": ".",
     "esModuleInterop": true,
     "forceConsistentCasingInFileNames": true,
     "strict": true,
@@ -15,7 +14,7 @@
     "resolveJsonModule": true,
     "paths": {
       "@images/*": [
-        "images/*"
+        "./images/*"
       ]
     }
   },