feat: github auth

server/src/auth/githubStrategy.js

@@ -0,0 +1,53 @@
+import GitHubStrategy from 'passport-github2'
+
+import config from '../config.js'
+import User from '../models/user.js'
+
+function verify(accessToken, refreshToken, profile, cb) {
+  process.nextTick(async () => {
+    console.log(accessToken, refreshToken, profile)
+    // cb('todo')
+    const email = profile.emails[0]?.value
+    if (!email) {
+      cb(new Error('No email found'))
+      return
+    }
+
+    let user = await User.findOne({ 'github.id': profile.id })
+    if (!user) {
+      user = await User.findOne({ email })
+      const github = {
+        id: profile.id,
+        displayName: profile.displayName,
+      }
+      if (!user) {
+        user = new User({
+          email,
+          github,
+        })
+      } else if (user.github?.id) {
+        cb(new Error('Email already used and binded to another account'))
+        return
+      } else {
+        user.github = github
+      }
+      await user.save()
+    }
+
+    cb(null, user)
+  })
+}
+
+const enabled = config.github.clientID && config.github.clientSecret
+
+export default enabled
+  ? new GitHubStrategy(
+      {
+        clientID: config.github.clientID,
+        clientSecret: config.github.clientSecret,
+        callbackURL: `${config.baseUrl}/api/v1/auth/github/callback`,
+        scope: ['user:email'],
+      },
+      verify
+    )
+  : null

server/src/auth/passport.js

@@ -2,6 +2,7 @@ import passport from 'passport'
 import passwordStrategy from './passwordStrategy.js'
 import jwtStrategy from './jwtStrategy.js'
 import googleStrategy from './googleStrategy.js'
+import githubStrategy from './githubStrategy.js'
 
 passport.use(passwordStrategy)
 passport.use(jwtStrategy)
@@ -9,6 +10,7 @@ passport.use(jwtStrategy)
 const enabledMethods = {
   local: true,
   google: googleStrategy !== null,
+  github: githubStrategy !== null,
 }
 
 console.log('Enabled login methods', enabledMethods)
@@ -17,6 +19,10 @@ if (enabledMethods.google) {
   passport.use(googleStrategy)
 }
 
+if (enabledMethods.github) {
+  passport.use(githubStrategy)
+}
+
 passport.serializeUser((user, done) => {
   process.nextTick(() => {
     done(null, {