subhendukundu / worker-auth-providers Goto Github PK

worker-auth-providers is an open-source providers to make authentication easy with workers. Very lightweight script which doesn't need a lot of dependencies. Plug it with any framework or template of workers.

Home Page: https://authc1.com

JavaScript 1.18% TypeScript 95.19% HTML 1.03% CSS 1.76% MDX 0.84%

authentication oauth2 cloudflare-workers cloudflare google-login github-login spotify auth worker-discord-login discord-login

worker-auth-providers's Introduction

worker-auth-providers's People

Contributors

Stargazers

Watchers

worker-auth-providers's Issues

Redirect Options inconsistency with facebook

Every other redirect options looks like:

  const location = await github.redirect({
    options: {
    }
  })

Facebooks looks like:

  const location = await facebook.redirect({

  })

Can we make this consistent please

Webpack 5 breaking changes

I`m using webpack and unable to compile this.

Errors are:

ERROR in ./node_modules/worker-auth-providers/src/index.js 1:0-45
Module not found: Error: Can't resolve './providers/github' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/github' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 2:0-45
Module not found: Error: Can't resolve './providers/google' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/google' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 3:0-46
Module not found: Error: Can't resolve './providers/aws-sns' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/aws-sns' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 4:0-45
Module not found: Error: Can't resolve './providers/twilio' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/twilio' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 5:0-49
Module not found: Error: Can't resolve './providers/facebook' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/facebook' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 6:0-47
Module not found: Error: Can't resolve './providers/discord' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/discord' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 7:0-47
Module not found: Error: Can't resolve './providers/spotify' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/spotify' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 8:0-60
Module not found: Error: Can't resolve './providers/sendgrid-email' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/sendgrid-email' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

ERROR in ./node_modules/worker-auth-providers/src/index.js 9:0-58
Module not found: Error: Can't resolve './providers/mailgun-email' in '/.../node_modules/worker-auth-providers/src'
Did you mean 'index.js'?
BREAKING CHANGE: The request './providers/mailgun-email' failed to resolve only because it was resolved as fully specified
(probably because the origin is strict EcmaScript Module, e. g. a module with javascript mimetype, a '*.mjs' file, or a '*.js' file where the package.json contains '"type": "module"').
The extension in the request is mandatory for it to be fully specified.
Add the extension to the request.
 @ ./src/worker.ts 10:32-64
 @ ./src/index.ts 3:17-36

webpack.config.js

const path = require('path')

module.exports = {
  entry: './src/index.ts',
  output: {
    filename: 'worker.js',
    path: path.join(__dirname, 'dist'),
  },
  devtool: 'cheap-module-source-map',
  mode: 'production',
  resolve: {
    extensions: ['.ts', '.tsx', '.js'],
  },
  module: {
    rules: [
      {
        test: /\.tsx?$/,
        loader: 'ts-loader',
        options: {
          // transpileOnly is useful to skip typescript checks occasionally:
          // transpileOnly: true,
        },
      },
    ],
  },
}

tsconfig.json

{
  "compilerOptions": {
    "outDir": "./dist",
    "module": "commonjs",
    "target": "esnext",
    "lib": ["esnext"],
    "alwaysStrict": true,
    "strict": true,
    "preserveConstEnums": true,
    "moduleResolution": "node",
    "sourceMap": true,
    "esModuleInterop": true,
    "types": [
      "@cloudflare/workers-types",
      "@types/service-worker-mock",
	  "@types/node"
    ],
	"noImplicitAny": false,
	"useUnknownInCatchVariables": false,
  },
  "include": ["src"],
  "exclude": ["node_modules", "dist", "test"]
}

package.json

"webpack": "^5.38.1",
"webpack-cli": "^4.7.0"

Tries messing with webpack rules but no success.

Add Apple to the TODO

One of the most popular services.

Add twitter to the TODOD

Twitter or X is another massive platform

Add Microsoft OAuth to TODO

https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow

Missing state parameter in facebook/spotify/github

Can't add it to redirect

Can we make it so we can also pass the code in, instead of the request object?

I would like to an endpoint like:

/github/:userId

And use a post request so I can link user accounts via ouath. I understand I could do GET but it just doesn't feel right.

Add Auth0 as a provider

https://developers.cloudflare.com/workers/tutorials/authorize-users-with-auth0
With help of this tutorial, it would not be too difficult to add it.

Paypal

want to confirm paypal transaction statuses.

Remove console.logs?

It is annoying seeing these pop up when running code/writing tests

Add GitLab to the TODO

subj

Without user:email in the scope will cause an error of github provider

worker-auth-providers/src/providers/github/users.ts

Lines 53 to 63 in 605febe

 if (!data.email) { 

 // If the user does not have a public email, get another via the GitHub API 

 // See https://docs.github.com/en/rest/users/emails#list-public-email-addresses-for-the-authenticated-user 

 const res: any = await fetch("https://api.github.com/user/emails", { 

 method: 'GET', 

 headers, 

 }); 

 const emails = await res.json() 

 data.emails = emails 

 data.email = (emails.find((e: any) => e.primary) ?? emails[0]).email 

 }

Without user:email in the scope:

const githubLoginUrl = await github.redirect({
    options: {
        scope: ['read:user'],

And when I'm a github user without public emails, I will get an error:

TypeError: o.find is not a function

I hope email could be optional.

The 'redirectUrl' option is deprecated. Please use 'redirectTo' instead.

Google oAuth provider

URGENT You definitely shouldn't be logging the private apple key

It is being logged in:

convertPrivateKeyToClientSecret

It doesn't actually show they key contents just the js object representation but it shouldn't be logged anyway

new release

Hello there, is there a plan to create a new npm release soon?

getTokensFromCode, in the apple provider, is not exported in the latest release available at npmjs

Thanks!

Add Notion to the TODOD

Notion is an amazing platform and would be great if we can add that in there!

Replace `@tsndr/cloudflare-worker-jwt` with `Jose`?

Usage clarification / examples / documentation

Hello,

Could you please clarify a bit on the following:

// or send otp

What do you mean by that? As far as I'm aware, if you have 2FA enabled on your account, GitHub will prompt you for it. How can I know this and use the "// or send otp" as mentioned?

Can you also add some examples for those that have no idea:

How to get clientSecret, clientId (for several apps)
What is VITEDGE (and do we really need it?)
What KV namespaces to create (I see WORKER_AUTH_PROVIDERS_STORE hardcoded)

Many thanks

URGENT Apple OAUTH implementation incorrect

async function getUser(token) {
    try {
        const data = decodeJwt(token);
        logger.log(`[provider user data], ${JSON.stringify(data)}`, "info");
        return data;
    }
    catch (e) {
        logger.log(`[error], ${JSON.stringify(e.stack)}`, "error");
        throw new ProviderGetUserError({
            message: "There was an error fetching the user",
        });
    }
}

export default async function callback({ options, request, }) {
    const { query } = parseQuerystring(request);
    logger.setEnabled(options?.isLogEnabled || false);
    logger.log(`[code], ${JSON.stringify(query.code)}`, "info");
    if (!query.code) {
        throw new ConfigError({
            message: "No code is passed!",
        });
    }
    const tokens = await getTokensFromCode(query.code, options);
    const accessToken = tokens.access_token;
    logger.log(`[access_token], ${JSON.stringify(accessToken)}`, "info");
    const providerUser = await getUser(accessToken);
    return {
        user: providerUser,
        tokens,
    };
}

Current, implementation tries to get the user information by decoding the access token from Apple.

It should be decoding the id_token.

GitHub provider only returns public emails

Currently, the GitHub provider only returns an email if the user has a public email address shared on their profile.

Even though the user:email is part of the scope, to get the user, there needs to be a subsequent call to get their email address. See https://docs.github.com/en/rest/users/emails#list-public-email-addresses-for-the-authenticated-user for additional context.

Something like this in https://github.com/subhendukundu/worker-auth-providers/blob/main/src/providers/github/users.js:

    const getUserResponse = await fetch('https://api.github.com/user', {
      method: 'GET',
      headers,
    });
    const data = await getUserResponse.json();
    console.log('[provider user data]', data);
    if (!data.email) {
          // If the user does not have a public email, get another via the GitHub API
          // See https://docs.github.com/en/rest/users/emails#list-public-email-addresses-for-the-authenticated-user
          const res = await fetch("https://api.github.com/user/emails", {
                method: 'GET',
                headers,
          });
          const emails: GithubEmail[] = await res.json()
          console.log('[provider user emails]', emails);
          data.email = emails
    }
    return data;

If you think it looks good, I'll make a PR

	if (!data.email) {
	// If the user does not have a public email, get another via the GitHub API
	// See https://docs.github.com/en/rest/users/emails#list-public-email-addresses-for-the-authenticated-user
	const res: any = await fetch("https://api.github.com/user/emails", {
	method: 'GET',
	headers,
	});
	const emails = await res.json()
	data.emails = emails
	data.email = (emails.find((e: any) => e.primary) ?? emails[0]).email
	}

subhendukundu / worker-auth-providers Goto Github PK

worker-auth-providers's Introduction

worker-auth-providers

🚀 Demo

🧐 Features

🛠️ Installation

📃 Documentation

👩‍💻 Tech

🍰 Contributing

Roadmap

How to persist login?

How to logout?

Feedback

✍️ Authors

💼 License

worker-auth-providers's People

Contributors

Stargazers

Watchers

Forkers

worker-auth-providers's Issues

Recommend Projects

Recommend Topics

Recommend Org