* refactor: plugin manager page * fix: bug * feat: addByNpm api * fix: improve the addByNpm * feat: improve applicationPlugins:list api * fix: re-download npm package when restart app * fix: plugin delete api * feat: plugin detail api * feat: zipUrl add api * fix: upload api bug * fix: plugin detail info * feat: upgrade api * fix: upload api * feat: handle plugin load error * feat: support authToken * feat: muti lang * fix: build error * fix: self review * Update plugin-manager.ts * fix: bug * fix: bug * fix: bug * fix: bug * fix: bug * fix: bugs * fix: detail click and remove isOfficial * fix: upgrade no refresh * fix: file size and type check * fix: bug * fix: upgrade error * fix: bug * fix: bug * fix: plugin card layout * fix: handling exceptional cases * fix: tgz file support * fix: macos compress file * fix: bug * fix: bug * fix: bug * fix: bug * fix: add upgrade npm type * fix: bugs * fix: bug * fix: change plugins static expose url * fix: api prefix * fix: bug * fix: add nginx `/static/plugin/` path * fix: bugs and pr docker build no dts * fix: bug * fix: build tools bug * fix: improve code * fix: build bug * feat: improve plugin info * fix: ui bug * fix: plugin document bug * feat: improve code * feat: improve code * feat: process dev deps check * feat: improve code * feat: process.env.IS_DEV_CMD * fix: do not delete the plugin package * feat: plugin symlink * fix: tsx watch --ignore=./storage/plugins/** * fix: test error * fix: improve code * fix: improve code * fix: emitStartedEvent * fix: improve code * fix: type error * fix: test error * test: console.log * fix: createStoragePluginSymLink * fix: clientStaticMiddleware rename to clientStaticUtils * feat: build tools support plugins folder * fix: 350px * fix: error * feat: client dev support plugin folder * fix: clear cli options * fix: typeError: Converting circular structure to JSON * fix: plugin name * chore: restart application after command * feat: upgrade error & docs * Update v14-changelog.md * Update v14-changelog.md * Update v14-changelog.md * fix: gateway test * refactor(plugin-workflow): add ready state for gracefully tearing down * Revert "chore: restart application after command" This reverts commit 5015274f8e4e06e506e15754b672330330e8c7f8. * chore: stop application whe restart * T 1218 change plugin folder (#2629) * feat: change folder name * feat: change `pm create` command * feat: revert plugin name change * fix: delete samples * feat: change plugins folder * fix: pm create * feat: update docs * fix: link package error * fix: docs * fix: create command * fix: pm add error * fix: create add build * fix: pm creatre + add * feat: add tar command * fix: docs * fix: bug * fix: docs --------- Co-authored-by: chenos <chenlinxh@gmail.com> * feat: docs * Update your-fisrt-plugin.md * Update your-fisrt-plugin.md * chore: application reload * chore: test * fix: pm add error * chore: preset install skip exists plugin * fix: createIfNotExists --------- Co-authored-by: chenos <chenlinxh@gmail.com> Co-authored-by: chareice <chareice@live.com> Co-authored-by: Zhou <zhou.working@gmail.com> Co-authored-by: mytharcher <mytharcher@gmail.com>
94 lines
2.7 KiB
TypeScript
94 lines
2.7 KiB
TypeScript
import { AuthConfig, BaseAuth } from '@nocobase/auth';
|
|
import { Issuer } from 'openid-client';
|
|
import { cookieName } from '../constants';
|
|
|
|
export class OIDCAuth extends BaseAuth {
|
|
constructor(config: AuthConfig) {
|
|
const { ctx } = config;
|
|
super({
|
|
...config,
|
|
userCollection: ctx.db.getCollection('users'),
|
|
});
|
|
}
|
|
|
|
getRedirectUri() {
|
|
const ctx = this.ctx;
|
|
const { http, port } = this.getOptions();
|
|
const protocol = http ? 'http' : 'https';
|
|
const host = port ? `${ctx.hostname}${port ? `:${port}` : ''}` : ctx.host;
|
|
return `${protocol}://${host}/api/oidc:redirect`;
|
|
}
|
|
|
|
getOptions() {
|
|
return this.options?.oidc || {};
|
|
}
|
|
|
|
mapField(userInfo: { [source: string]: any }) {
|
|
const { fieldMap } = this.getOptions();
|
|
if (!fieldMap) {
|
|
return userInfo;
|
|
}
|
|
fieldMap.forEach((item: { source: string; target: string }) => {
|
|
const { source, target } = item;
|
|
if (userInfo[source]) {
|
|
userInfo[target] = userInfo[source];
|
|
}
|
|
});
|
|
return userInfo;
|
|
}
|
|
|
|
async createOIDCClient() {
|
|
const { issuer, clientId, clientSecret, idTokenSignedResponseAlg } = this.getOptions();
|
|
const oidc = await Issuer.discover(issuer);
|
|
return new oidc.Client({
|
|
client_id: clientId,
|
|
client_secret: clientSecret,
|
|
id_token_signed_response_alg: idTokenSignedResponseAlg || 'RS256',
|
|
});
|
|
}
|
|
|
|
async validate() {
|
|
const ctx = this.ctx;
|
|
const {
|
|
params: { values },
|
|
} = ctx.action;
|
|
const token = ctx.cookies.get(cookieName);
|
|
const search = new URLSearchParams(values.state);
|
|
if (search.get('token') !== token) {
|
|
ctx.app.logger.warn('odic-auth: state mismatch');
|
|
return null;
|
|
}
|
|
const client = await this.createOIDCClient();
|
|
const tokens = await client.callback(this.getRedirectUri(), {
|
|
code: values.code,
|
|
iss: values.iss,
|
|
});
|
|
const userInfo: { [key: string]: any } = await client.userinfo(tokens.access_token);
|
|
const mappedUserInfo = this.mapField(userInfo);
|
|
const { nickname, name, sub, email, phone } = mappedUserInfo;
|
|
const username = nickname || name || sub;
|
|
// Compatible processing
|
|
// When email is provided, use email to find user
|
|
// If found, associate the user with the current authenticator
|
|
if (email) {
|
|
const user = await this.userRepository.findOne({
|
|
filter: { email },
|
|
});
|
|
if (user) {
|
|
await this.authenticator.addUser(user, {
|
|
through: {
|
|
uuid: sub,
|
|
},
|
|
});
|
|
return user;
|
|
}
|
|
}
|
|
|
|
return await this.authenticator.findOrCreateUser(sub, {
|
|
nickname: username,
|
|
email: email ?? null,
|
|
phone: phone ?? null,
|
|
});
|
|
}
|
|
}
|