auth.ts

import { Request, Response, Router } from 'express';
import passport from 'passport';
import jwt from 'jsonwebtoken';
import useragent from 'express-useragent';
import { db } from '../db';
import base64 from 'base-64';
const router = Router();
router.use(useragent.express());
const CLIENT_URL =
  process.env.AUTH_REDIRECT_URL ?? 'http://localhost:5173/game/random';
const JWT_SECRET = process.env.JWT_SECRET || 'your_secret_key';

interface User {
  id: string;
}

router.get('/refresh', async (req: Request, res: Response) => {
  console.log(req.headers.cookie);
  if (req.user) {
    const user = req.user as User;

    // Token is issued so it can be shared b/w HTTP and ws server
    // Todo: Make this temporary and add refresh logic here

    const userDb = await db.user.findFirst({
      where: {
        id: user.id,
      },
    });

    const token = jwt.sign({ userId: user.id }, JWT_SECRET);
    res.json({
      token,
      id: user.id,
      name: userDb?.name,
    });
  } else {
    res.status(401).json({ success: false, message: 'Unauthorized' });
  }
});

router.get('/login/failed', (req: Request, res: Response) => {
  res.status(401).json({ success: false, message: 'failure' });
});

router.get('/logout', (req: Request, res: Response) => {
  req.logout((err) => {
    if (err) {
      console.error('Error logging out:', err);
      res.status(500).json({ error: 'Failed to log out' });
    } else {
      res.clearCookie('jwt');
      res.redirect('http://localhost:5173/');
    }
  });
});

router.get(
  '/google',
  passport.authenticate('google', { scope: ['profile', 'email'] }),
);

router.get(
  '/google/callback',
  passport.authenticate('google', {
    // successRedirect: CLIENT_URL,
    failureRedirect: '/login/failed',
  }),
  (req, res) => {
    res.redirect('/auth/capture-mode');
  },
);

router.get('/capture-mode', (req, res) => {
  const cookies = req.headers.cookie?.split(';').map((cookie) => cookie.trim());
  const authCookie = cookies?.find((cookie) =>
    cookie.startsWith('connect.sid'),
  );
  const token = base64.encode(authCookie!);
  console.log('authCookie', token);

  const ua = req.useragent;
  if (ua?.isMobile) {
    res.redirect(`chess-mobile://sign-in?cookie=${token}`);
  } else {
    res.redirect(CLIENT_URL);
  }
});
router.get(
  '/github',
  passport.authenticate('github', { scope: ['read:user', 'user:email'] }),
);

router.get(
  '/github/callback',
  passport.authenticate('github', {
    // successRedirect: CLIENT_URL,
    failureRedirect: '/login/failed',
  }),
  (req, res) => {
    res.redirect('/auth/capture-mode');
  },
);

router.get(
  '/facebook',
  passport.authenticate('facebook', { scope: ['profile'] }),
);

router.get(
  '/facebook/callback',
  passport.authenticate('facebook', {
    successRedirect: CLIENT_URL,
    failureRedirect: '/login/failed',
  }),
);

export default router;