mirror of
https://github.com/OpenSquawk/OpenSquawk
synced 2026-08-03 07:26:22 +08:00
65718ce21a
Remove the transitional website auth, admin hooks, SEO and hosted analytics together, then align the app routes, runtime configuration, tests and dependencies. These changes form one atomic cleanup because the filtered app must switch its identity and runtime surfaces as a unit.
33 lines
1.2 KiB
TypeScript
33 lines
1.2 KiB
TypeScript
import { createError, defineEventHandler } from 'h3'
|
|
import { AppUser } from '../../models/AppUser'
|
|
import { getAuthMode, getLocalAppUser } from '../../utils/authMode'
|
|
import { createAppAccessToken, issueAppSession, readAppSession } from '../../utils/session'
|
|
|
|
/**
|
|
* Hands the client a fresh bearer token for whatever session it already has.
|
|
*
|
|
* The client calls exactly this one endpoint in every mode; deciding what a
|
|
* "session" means is the server's job:
|
|
* open → the single local identity, no credentials involved
|
|
* sso → the app's own session cookie, minted at the SSO exchange
|
|
*/
|
|
export default defineEventHandler(async (event) => {
|
|
if (getAuthMode() === 'open') {
|
|
const localUser = await getLocalAppUser()
|
|
issueAppSession(event, localUser)
|
|
return { accessToken: createAppAccessToken(localUser) }
|
|
}
|
|
|
|
const session = readAppSession(event)
|
|
if (session) {
|
|
const appUser = await AppUser.findById(session.sub)
|
|
if (appUser) {
|
|
// Slide the cookie forward so an active user is never logged out mid-use.
|
|
issueAppSession(event, appUser)
|
|
return { accessToken: createAppAccessToken(appUser) }
|
|
}
|
|
}
|
|
|
|
throw createError({ statusCode: 401, statusMessage: 'No app session present' })
|
|
})
|