refactor: auth

server/src/auth/githubStrategy.ts

@@ -0,0 +1,29 @@
+import { Strategy as GitHubStrategy } from 'passport-github2'
+import type { Profile } from 'passport'
+import type { VerifyCallback } from 'passport-oauth2'
+
+import config from '../config.js'
+import oauthVerify from './oauthVerify.js'
+
+function verify(
+  accessToken: string,
+  refreshToken: string,
+  profile: Profile,
+  cb: VerifyCallback
+) {
+  oauthVerify('github', profile, { 'socialLogins.github.id': profile.id }, cb)
+}
+
+const enabled = config.github.clientID && config.github.clientSecret
+
+export default enabled
+  ? new GitHubStrategy(
+      {
+        clientID: config.github.clientID,
+        clientSecret: config.github.clientSecret,
+        callbackURL: `${config.baseUrl}/api/v1/auth/github/callback`,
+        scope: ['user:email'],
+      },
+      verify
+    )
+  : null