public commit

app/src/auth/api/AuthApi.ts

@@ -0,0 +1,41 @@
+import type { AppAuthSchema, AppAuthStrategies } from "auth/auth-schema";
+import type { AuthResponse, SafeUser, Strategy } from "auth/authenticate/Authenticator";
+import { type BaseModuleApiOptions, ModuleApi } from "modules/ModuleApi";
+
+export type AuthApiOptions = BaseModuleApiOptions & {
+   onTokenUpdate?: (token: string) => void | Promise<void>;
+};
+
+export class AuthApi extends ModuleApi<AuthApiOptions> {
+   protected override getDefaultOptions(): Partial<AuthApiOptions> {
+      return {
+         basepath: "/api/auth"
+      };
+   }
+
+   async loginWithPassword(input: any) {
+      const res = await this.post<AuthResponse>(["password", "login"], input);
+      if (res.res.ok && res.body.token) {
+         await this.options.onTokenUpdate?.(res.body.token);
+      }
+      return res;
+   }
+
+   async registerWithPassword(input: any) {
+      const res = await this.post<AuthResponse>(["password", "register"], input);
+      if (res.res.ok && res.body.token) {
+         await this.options.onTokenUpdate?.(res.body.token);
+      }
+      return res;
+   }
+
+   async me() {
+      return this.get<{ user: SafeUser | null }>(["me"]);
+   }
+
+   async strategies() {
+      return this.get<{ strategies: AppAuthSchema["strategies"] }>(["strategies"]);
+   }
+
+   async logout() {}
+}

app/src/auth/api/AuthController.ts

@@ -0,0 +1,57 @@
+import type { AppAuth } from "auth";
+import type { ClassController } from "core";
+import { Hono, type MiddlewareHandler } from "hono";
+
+export class AuthController implements ClassController {
+   constructor(private auth: AppAuth) {}
+
+   getMiddleware: MiddlewareHandler = async (c, next) => {
+      // @todo: consider adding app name to the payload, because user is not refetched
+
+      //try {
+      if (c.req.raw.headers.has("Authorization")) {
+         const bearerHeader = String(c.req.header("Authorization"));
+         const token = bearerHeader.replace("Bearer ", "");
+         const verified = await this.auth.authenticator.verify(token);
+
+         // @todo: don't extract user from token, but from the database or cache
+         this.auth.ctx.guard.setUserContext(this.auth.authenticator.getUser());
+         /*console.log("jwt verified?", {
+            verified,
+            auth: this.auth.authenticator.isUserLoggedIn()
+         });*/
+      } else {
+         this.auth.authenticator.__setUserNull();
+      }
+      /* } catch (e) {
+         this.auth.authenticator.__setUserNull();
+      }*/
+
+      await next();
+   };
+
+   getController(): Hono<any> {
+      const hono = new Hono();
+      const strategies = this.auth.authenticator.getStrategies();
+      //console.log("strategies", strategies);
+
+      for (const [name, strategy] of Object.entries(strategies)) {
+         //console.log("registering", name, "at", `/${name}`);
+         hono.route(`/${name}`, strategy.getController(this.auth.authenticator));
+      }
+
+      hono.get("/me", async (c) => {
+         if (this.auth.authenticator.isUserLoggedIn()) {
+            return c.json({ user: await this.auth.authenticator.getUser() });
+         }
+
+         return c.json({ user: null }, 403);
+      });
+
+      hono.get("/strategies", async (c) => {
+         return c.json({ strategies: this.auth.toJSON(false).strategies });
+      });
+
+      return hono;
+   }
+}