blomios/NodecastV2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix safe login submission, mobile fullscreen, and OIDC discovery

Browse Source
This commit is contained in:
Technomancer702
2026-10-13 18:31:48 -07:00
parent b85b160013
commit ce122eb34b
16 changed files with 479 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
server/routes/auth.js
View File

@ -21,24 +21,33 @@ auth.configureSessionSerialization(
async (id) => await db.users.getById(id)
);
// Configure OIDC Strategy
auth.configureOidcStrategy(
// Configure OIDC once; SSO routes wait until discovery and registration finish.
let oidcAvailable = false;
const oidcReady = auth.configureOidcStrategy(
async (oidcId) => await db.users.getByOidcId(oidcId),
async (email) => await db.users.getByEmail(email),
async (userData) => await db.users.create(userData)
);
).then(available => { oidcAvailable = available; }).catch(error => {
console.error('[OIDC] SSO unavailable:', error.message);
});
router.oidcReady = oidcReady;
async function requireOidc(req, res, next) {
await oidcReady;
if (!oidcAvailable) return res.status(503).json({ error: 'Single sign-on is unavailable. Contact your administrator.' });
next();
}
/**
* Start OIDC Login
* GET /api/auth/oidc/login
*/
router.get('/oidc/login', auth.passport.authenticate('openidconnect'));
router.get('/oidc/login', requireOidc, auth.passport.authenticate('openidconnect'));
/**
* OIDC Callback
* GET /api/auth/oidc/callback
*/
router.get('/oidc/callback',
router.get('/oidc/callback', requireOidc,
auth.passport.authenticate('openidconnect', { session: false, failureRedirect: '/login.html?error=SSO+Failed' }),
(req, res) => {
// Successful authentication