budibase/packages/worker/src/api/routes/global/auth.ts at ff1a1daa6a2c0036b33139e15a1f1a8f3a9b9f12 · Budibase/budibase · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
import * as authController from "../../controllers/global/auth"
import { auth } from "@budibase/backend-core"
import Joi from "joi"
import { loggedInRoutes } from "../endpointGroups"
import { emailLockout, ipLockout } from "../../../middleware"

function buildAuthValidation() {
  // prettier-ignore
  return auth.joiValidator.body(Joi.object({
    username: Joi.string().required(),
    password: Joi.string().required(),
  }).required().unknown(false))
}

function buildResetValidation() {
  // prettier-ignore
  return auth.joiValidator.body(Joi.object({
    email: Joi.string().required(),
  }).required().unknown(false))
}

function buildResetUpdateValidation() {
  // prettier-ignore
  return auth.joiValidator.body(Joi.object({
    resetCode: Joi.string().required(),
    password: Joi.string().required(),
  }).required().unknown(false))
}

loggedInRoutes
  // PASSWORD
  .post(
    "/api/global/auth/:tenantId/login",
    buildAuthValidation(),
    ipLockout,
    emailLockout,
    authController.login
  )
  .post("/api/global/auth/logout", authController.logout)
  .post(
    "/api/global/auth/:tenantId/reset",
    buildResetValidation(),
    authController.reset
  )
  .post(
    "/api/global/auth/:tenantId/reset/update",
    buildResetUpdateValidation(),
    authController.resetUpdate
  )
  // INIT
  .post("/api/global/auth/init", authController.setInitInfo)
  .get("/api/global/auth/init", authController.getInitInfo)

  // DATASOURCE - MULTI TENANT
  .get(
    "/api/global/auth/:tenantId/datasource/:provider",
    authController.datasourcePreAuth
  )
  .get(
    "/api/global/auth/:tenantId/datasource/:provider/callback",
    authController.datasourceAuth
  )

  // DATASOURCE - SINGLE TENANT - DEPRECATED
  .get(
    "/api/global/auth/datasource/:provider/callback",
    authController.datasourceAuth
  )

  // GOOGLE - MULTI TENANT
  .get("/api/global/auth/:tenantId/google", authController.googlePreAuth)
  .get(
    "/api/global/auth/:tenantId/google/callback",
    authController.googleCallback
  )

  // GOOGLE - SINGLE TENANT - DEPRECATED
  .get("/api/global/auth/google/callback", authController.googleCallback)
  .get("/api/admin/auth/google/callback", authController.googleCallback)

  // OIDC - MULTI TENANT
  .get(
    "/api/global/auth/:tenantId/oidc/configs/:configId",
    authController.oidcPreAuth
  )
  .get("/api/global/auth/:tenantId/oidc/callback", authController.oidcCallback)

  // OIDC - SINGLE TENANT - DEPRECATED
  .get("/api/global/auth/oidc/callback", authController.oidcCallback)
  .get("/api/admin/auth/oidc/callback", authController.oidcCallback)