starred/planka
1
0
Fork 0
mirror of https://github.com/plankanban/planka.git synced 2025-12-20 09:15:39 +03:00
Code Issues 418 Packages Projects Releases 12 Wiki Activity

feat: Add OAuth callback support for OIDC (#1290)

Browse Source 
Closes #593, closes #690, closes #1289
This commit is contained in:
Luis Chacón
2025-08-09 10:58:55 -06:00
committed by GitHub
parent b4f6e24442
commit cbb00d1d59
6 changed files with 31 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
server/api/helpers/users/get-or-create-one-with-oidc.js
View File

@@ -34,16 +34,29 @@ module.exports = {
let tokenSet;
try {
tokenSet = await client.callback(
sails.config.custom.oidcRedirectUri,
{
iss: sails.config.custom.oidcIssuer,
code: inputs.code,
},
{
nonce: inputs.nonce,
},
);
if (sails.config.custom.oidcUseOauthCallback) {
tokenSet = await client.oauthCallback(
sails.config.custom.oidcRedirectUri,
{
iss: sails.config.custom.oidcIssuer,
code: inputs.code,
},
{
nonce: inputs.nonce,
},
);
} else {
tokenSet = await client.callback(
sails.config.custom.oidcRedirectUri,
{
iss: sails.config.custom.oidcIssuer,
code: inputs.code,
},
{
nonce: inputs.nonce,
},
);
}
} catch (error) {
sails.log.warn(`Error while exchanging OIDC code: ${error}`);
throw 'invalidCodeOrNonce';
@@ -93,7 +106,6 @@ module.exports = {
if (configRoles.includes('*')) {
return true;
}
return configRoles.some((configRole) => claimsRolesSet.has(configRole));
},
);
@@ -148,7 +160,7 @@ module.exports = {
identityProviderUser = await IdentityProviderUser.qm.createOne({
userId: user.id,
issuer: sails.config.custom.oidcIssuer,
sub: claims.sub,
sub: claims.sub || `${user.id}@${sails.config.custom.oidcIssuer}`,
});
}