Something went wrong. Try again.
a tool for shared writing and social publishing
Something went wrong. Try again.
TypeScript
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120import { NodeOAuthClient, NodeSavedSession, NodeSavedState, RuntimeLock, OAuthSession,} from "@atproto/oauth-client-node";import { JoseKey } from "@atproto/jwk-jose";import { oauth_metadata } from "app/api/oauth/[route]/oauth-metadata";import { supabaseServerClient } from "supabase/serverClient";
import Client from "ioredis";import Redlock from "redlock";import { Result, Ok, Err } from "./result";export async function createOauthClient() { let keyset = process.env.NODE_ENV === "production" ? await Promise.all([ JoseKey.fromImportable(process.env.JOSE_PRIVATE_KEY_1!), ]) : undefined; let requestLock: RuntimeLock | undefined; if (process.env.NODE_ENV === "production" && process.env.REDIS_URL) { const client = new Client(process.env.REDIS_URL); const redlock = new Redlock([client]); requestLock = async (key, fn) => { // 30 seconds should be enough. Since we will be using one lock per user id // we can be quite liberal with the lock duration here. const lock = await redlock.acquire([key], 45e3); try { return await fn(); } finally { await lock.release(); } }; } return new NodeOAuthClient({ // This object will be used to build the payload of the /client-metadata.json // endpoint metadata, exposing the client metadata to the OAuth server. clientMetadata: oauth_metadata,
// Used to authenticate the client to the token endpoint. Will be used to // build the jwks object to be exposed on the "jwks_uri" endpoint. keyset,
// Interface to store authorization state data (during authorization flows) stateStore, // Interface to store authenticated session data sessionStore, requestLock, });}
let stateStore = { async set(key: string, state: NodeSavedState): Promise<void> { await supabaseServerClient.from("oauth_state_store").upsert({ key, state }); }, async get(key: string): Promise<NodeSavedState | undefined> { let { data } = await supabaseServerClient .from("oauth_state_store") .select("state") .eq("key", key) .single(); return (data?.state as NodeSavedState) || undefined; }, async del(key: string): Promise<void> { await supabaseServerClient .from("oauth_state_store") .delete() .eq("key", key); },};
let sessionStore = { async set(key: string, session: NodeSavedSession): Promise<void> { await supabaseServerClient .from("oauth_session_store") .upsert({ key, session }); }, async get(key: string): Promise<NodeSavedSession | undefined> { let { data } = await supabaseServerClient .from("oauth_session_store") .select("session") .eq("key", key) .single(); return (data?.session as NodeSavedSession) || undefined; }, async del(key: string): Promise<void> { await supabaseServerClient .from("oauth_session_store") .delete() .eq("key", key); },};
export type OAuthSessionError = { type: "oauth_session_expired"; message: string; did: string;};
export async function restoreOAuthSession( did: string): Promise<Result<OAuthSession, OAuthSessionError>> { try { const oauthClient = await createOauthClient(); const session = await oauthClient.restore(did); return Ok(session); } catch (error) { return Err({ type: "oauth_session_expired", message: error instanceof Error ? error.message : "OAuth session expired or invalid", did, }); }}