infisical/backend/src/utils/auth.ts

import express from "express";
import passport from "passport";
import { AuthData } from "../interfaces/middleware";
import {
  AuthProvider,
  ServiceAccount,
  ServiceTokenData,
  User,
} from "../models";
import { createToken } from "../helpers/auth";
import {
  getClientIdGoogle,
  getClientSecretGoogle,
  getJwtProviderAuthLifetime,
  getJwtProviderAuthSecret,
} from "../config";

// eslint-disable-next-line @typescript-eslint/no-var-requires
const GoogleStrategy = require("passport-google-oauth20").Strategy;

// TODO: find a more optimal folder structure to store these types of functions

/**
 * Returns an object containing the id of the authentication data payload
 * @param {AuthData} authData - authentication data object
 * @returns 
 */
const getAuthDataPayloadIdObj = (authData: AuthData) => {
  if (authData.authPayload instanceof User) {
    return { userId: authData.authPayload._id };
  }

  if (authData.authPayload instanceof ServiceAccount) {
    return { serviceAccountId: authData.authPayload._id };
  }

  if (authData.authPayload instanceof ServiceTokenData) {
    return { serviceTokenDataId: authData.authPayload._id };
  }
};


/**
 * Returns an object containing the user associated with the authentication data payload
 * @param {AuthData} authData - authentication data object
 * @returns 
 */
const getAuthDataPayloadUserObj = (authData: AuthData) => {

  if (authData.authPayload instanceof User) {
    return { user: authData.authPayload._id };
  }

  if (authData.authPayload instanceof ServiceAccount) {
    return { user: authData.authPayload.user };
  }

  if (authData.authPayload instanceof ServiceTokenData) {
    return { user: authData.authPayload.user };
  }
}

const initializePassport = async () => {
  const googleClientSecret = await getClientSecretGoogle();
  const googleClientId = await getClientIdGoogle();

  passport.use(new GoogleStrategy({
    passReqToCallback: true,
    clientID: googleClientId,
    clientSecret: googleClientSecret,
    callbackURL: "/api/v1/auth/callback/google",
    scope: ["profile", " email"],
  }, async (
    req: express.Request,
    accessToken: string,
    refreshToken: string,
    profile: any,
    cb: any
  ) => {
    try {
      const email = profile.emails[0].value;
      let user = await User.findOne({
        authProvider: AuthProvider.GOOGLE,
        authId: profile.id,
      }).select("+publicKey")

      if (!user) {
        user = await new User({
          email,
          authProvider: AuthProvider.GOOGLE,
          authId: profile.id,
        }).save();
      }

      const providerAuthToken = createToken({
        payload: {
          userId: user._id.toString(),
          email: user.email,
          authProvider: user.authProvider,
          isUserCompleted: !!user.publicKey,
        },
        expiresIn: await getJwtProviderAuthLifetime(),
        secret: await getJwtProviderAuthSecret(),
      });

      req.providerAuthToken = providerAuthToken;
      cb(null, profile);
    } catch (err) {
      cb(null, false);
    }
  }));
}

export {
  getAuthDataPayloadIdObj,
  getAuthDataPayloadUserObj,
  initializePassport,
}