google.ts

/*
 * @poppinss/oauth-client
 *
 * (c) Poppinss
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

import { Request, Response } from 'express'

import { googleConfig } from './config.js'
import { Oauth2Client } from '../src/clients/oauth2/main.js'

export function renderRedirect(_: Request, res: Response) {
  /**
   * Instantiate the driver
   */
  const driver = new Oauth2Client(googleConfig)

  /**
   * Get the state to avoid CSRF
   */
  const state = driver.getState()

  /**
   * Make the redirect URL. We also send the state in the URL query string,
   * along with a github specific "allow_signup" option.
   */
  const redirectUrl = driver.getRedirectUrl((request) => {
    request.param('state', state)
    request.param('response_type', 'code')
    request.param('access_type', 'offline')
    request.param('prompt', 'select_account')
    request.param(
      'scope',
      'openid https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/calendar.events'
    )
  })

  /**
   * Store state inside cookie for later verification
   */
  res.cookie('google_oauth_state', state, { sameSite: false })
  res.type('html').send(`<a href="${redirectUrl}">Login with Google</a>`)
}

export async function handleCallback(req: Request, res: Response) {
  if (!req.query.code) {
    res.status(400).send('Missing authorization code')
    return
  }

  /**
   * Instantiate the driver
   */
  const driver = new Oauth2Client(googleConfig)
  try {
    driver.verifyState(req.cookies.google_oauth_state, req.query.state as string)
    const accessToken = await driver.getAccessToken((request) => {
      request.param('code', req.query.code)
    })
    res.type('json').send(accessToken)
  } catch (error) {
    res.send(error.response && error.response.body ? error.response.body : error.response || error)
  }
}