PronounsPage/server/express/grantOverrides.ts

/* eslint-disable camelcase */ // Needed due to snake-cased responses
// grant doesn't care about the specifics of some services,
// so for some services we don't care about grant :))))

import assert from 'assert';

import { Router } from 'express';

import { handleErrorAsync } from '../../src/helpers.ts';
import type { Database } from '../db.ts';

import { getUrlForLocale } from '~/src/domain.ts';

const normalizeDomainName = (domain: string): string => {
    const url = new URL(`https://${domain.replace(/^https?:\/\//, '')}`);
    assert(url.port === '');
    return url.hostname;
};

const baseUrl = getUrlForLocale('_');

const config = {
    mastodon: {
        scopes: ['read:accounts'],
        redirect_uri: `${baseUrl}/api/user/social/mastodon`,
    },
    indieauth: {
        server_uri: 'https://indieauth.com/auth',
        client_id: baseUrl,
        redirect_uri: `${baseUrl}/api/user/social/indieauth`,
    },
};

const router = Router();

const mastodonGetOAuthKeys = async (db: Database, instance: string) => {
    // TODO figure out why it doesn't work
    // const existingKeys = await db.get(SQL`
    //     SELECT client_id, client_secret
    //     FROM oauth_keys
    //     WHERE instance = ${instance}
    //     AND provider = 'mastodon'
    // `);
    // if (existingKeys) {
    //     return existingKeys;
    // }
    const keys = await fetch(`https://${instance}/api/v1/apps`, {
        method: 'POST',
        body: new URLSearchParams({
            client_name: 'pronouns.page',
            redirect_uris: config.mastodon.redirect_uri,
            scopes: config.mastodon.scopes.join(' '),
            website: getUrlForLocale('_'),
        }).toString(),
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
            'User-Agent': 'pronouns.page',
        },
    }).then((res) => res.json());
    assert(keys.client_id && keys.client_secret && !keys.error);
    // TODO figure out why it doesn't work
    // db.get(SQL`
    //     INSERT INTO oauth_keys (instance, provider, client_id, client_secret)
    //     VALUES (${instance}, 'mastodon', ${keys.client_id}, ${keys.client_secret})
    // `);
    return keys;
};

router.get('/connect/mastodon', handleErrorAsync(async (req, res) => {
    assert(req.query.instance);
    const instance = normalizeDomainName(req.query.instance as string);
    const { client_id, client_secret } = await mastodonGetOAuthKeys(req.db, instance);
    req.session.grant = { instance, client_id, client_secret };
    res.redirect(`https://${instance}/oauth/authorize?${new URLSearchParams({
        client_id,
        scope: config.mastodon.scopes.join(' '),
        redirect_uri: config.mastodon.redirect_uri,
        response_type: 'code',
    })}`);
}));

router.get('/user/social/mastodon', handleErrorAsync(async (req, res, next) => {
    if (!req.session.grant || !req.session.grant.instance || !req.query.code) {
        next();
        return;
    }
    const { instance, client_id, client_secret } = req.session.grant;
    const response = await fetch(`https://${instance}/oauth/token`, {
        method: 'POST',
        body: new URLSearchParams({
            grant_type: 'authorization_code',
            client_id: client_id!,
            client_secret: client_secret!,
            redirect_uri: config.mastodon.redirect_uri,
            scope: config.mastodon.scopes.join(' '),
            code: req.query.code as string,
        }).toString(),
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
            'User-Agent': 'pronouns.page',
        },
    }).then((res) => res.json());
    if (!response.access_token || response.error) {
        next();
        return;
    }
    const profile = await fetch(`https://${instance}/api/v1/accounts/verify_credentials`, {
        headers: {
            'Authorization': `Bearer ${response.access_token}`,
            'User-Agent': 'pronouns.page',
        },
    }).then((res) => res.json());
    response.profile = profile;
    response.instance = instance;
    req.session.grant.response = response;
    next();
}));

router.get('/connect/indieauth', handleErrorAsync(async (req, res) => {
    assert(req.query.instance);
    const instance = normalizeDomainName(req.query.instance as string);
    req.session.grant = { instance };
    res.redirect(`${config.indieauth.server_uri}?${new URLSearchParams({
        me: `https://${instance}`,
        client_id: config.indieauth.client_id,
        redirect_uri: config.indieauth.redirect_uri,
    })}`);
}));

router.get('/user/social/indieauth', handleErrorAsync(async (req, res, next) => {
    if (!req.session.grant || !req.session.grant.instance || !req.query.code) {
        next();
        return;
    }

    const response = await fetch(config.indieauth.server_uri, {
        method: 'POST',
        body: new URLSearchParams({
            code: req.query.code as string,
            client_id: config.indieauth.client_id,
            redirect_uri: config.indieauth.redirect_uri,
        }).toString(),
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
            'User-Agent': 'pronouns.page',
        },
    }).then((res) => res.text());

    const profile = JSON.parse(response);

    if (!profile || !profile.me) {
        next();
        return;
    }

    profile.domain = normalizeDomainName(profile.me);

    req.session.grant.response = {
        profile,
        instance: req.session.grant.instance,
        access_token: true,
    };
    next();
}));

export default router;