infisical/backend/src/utils/auth.ts

import express from 'express';
import passport from 'passport';
import { AuthData } from '../interfaces/middleware';
import {
    AuthProvider,
    User,
    ServiceAccount,
    ServiceTokenData,
} from '../models';
import { createToken } from '../helpers/auth';
import {
    getClientIdGoogle,
    getClientSecretGoogle,
    getJwtProviderAuthLifetime,
    getJwtProviderAuthSecret
} from '../config';

// eslint-disable-next-line @typescript-eslint/no-var-requires
const GoogleStrategy = require('passport-google-oidc');

// TODO: find a more optimal folder structure to store these types of functions

/**
 * Returns an object containing the id of the authentication data payload
 * @param {AuthData} authData - authentication data object
 * @returns 
 */
const getAuthDataPayloadIdObj = (authData: AuthData) => {
    if (authData.authPayload instanceof User) {
        return { userId: authData.authPayload._id };
    }

    if (authData.authPayload instanceof ServiceAccount) {
        return { serviceAccountId: authData.authPayload._id };
    }

    if (authData.authPayload instanceof ServiceTokenData) {
        return { serviceTokenDataId: authData.authPayload._id };
    }
};


/**
 * Returns an object containing the user associated with the authentication data payload
 * @param {AuthData} authData - authentication data object
 * @returns 
 */
const getAuthDataPayloadUserObj = (authData: AuthData) => {

    if (authData.authPayload instanceof User) {
        return { user: authData.authPayload._id };
    }

    if (authData.authPayload instanceof ServiceAccount) {
        return { user: authData.authPayload.user };
    }

    if (authData.authPayload instanceof ServiceTokenData) {
        return { user: authData.authPayload.user };
    }
}

const initializePassport = async () => {
    const googleClientSecret = await getClientSecretGoogle();
    const googleClientId = await getClientIdGoogle();

    passport.use(new GoogleStrategy({
        passReqToCallback: true,
        clientID: googleClientId,
        clientSecret: googleClientSecret,
        callbackURL: '/api/v1/oauth/callback/google',
      }, async (req: express.Request, issuer: any, profile: any, cb: any) => {
        const email = profile.emails[0].value;
        let user = await User.findOne({
          authProvider: AuthProvider.GOOGLE,
          authId: profile.id,
        })
      
        if (!user) {
          user = await new User({
            email,
            authProvider: AuthProvider.GOOGLE,
            authId: profile.id,
          }).save();
        }
      
        const providerAuthToken = createToken({
          payload: {
            userId: user._id.toString(),
            email: user.email,
            authProvider: user.authProvider,
          },
          expiresIn: await getJwtProviderAuthLifetime(),
          secret: await getJwtProviderAuthSecret(),
        });
      
        req.providerAuthToken = providerAuthToken;
        cb(null, profile);
      }));
}

export {
    getAuthDataPayloadIdObj,
    getAuthDataPayloadUserObj,
    initializePassport,
}