feat: align with upstream 1.5.9.9

server/services/oauthConfigService.ts

@@ -0,0 +1,130 @@
+import { db } from '~/drizzle/db'
+import { systemSettings } from '~/drizzle/schema'
+import { getAggregateOAuthLoginTypesOrDefault } from '~~/server/utils/oauth-providers'
+
+export type { OAuthProvider } from '~~/server/utils/oauth-providers'
+export {
+  SUPPORTED_OAUTH_PROVIDERS,
+  isSupportedOAuthProvider
+} from '~~/server/utils/oauth-providers'
+
+export interface ProviderRuntimeConfig {
+  clientId?: string
+  clientSecret?: string
+  endpoint?: string
+  authorizeUrl?: string
+  tokenUrl?: string
+  userInfoUrl?: string
+  scope?: string
+  displayName?: string
+  userIdField?: string
+  usernameField?: string
+  nameField?: string
+  emailField?: string
+  avatarField?: string
+  loginType?: string
+  loginTypes?: string[]
+}
+
+const getSettings = async () => {
+  const settingsResult = await db.select().from(systemSettings).limit(1)
+  return settingsResult[0] || null
+}
+
+export const isOAuthProviderEnabled = async (provider: OAuthProvider): Promise<boolean> => {
+  const settings = await getSettings()
+  if (!settings) return false
+
+  if (provider === 'github') return !!settings.githubOAuthEnabled
+  if (provider === 'casdoor') return !!settings.casdoorOAuthEnabled
+  if (provider === 'google') return !!settings.googleOAuthEnabled
+  if (provider === 'oauth2') return !!settings.customOAuthEnabled
+  if (provider === 'aggregate') return !!settings.aggregateOAuthEnabled
+
+  return false
+}
+
+export const getProviderRuntimeConfig = async (
+  provider: OAuthProvider
+): Promise<ProviderRuntimeConfig> => {
+  const settings = await getSettings()
+
+  if (!settings) return {}
+
+  if (provider === 'github') {
+    return {
+      clientId: settings.githubClientId || undefined,
+      clientSecret: settings.githubClientSecret || undefined
+    }
+  }
+
+  if (provider === 'casdoor') {
+    return {
+      clientId: settings.casdoorClientId || undefined,
+      clientSecret: settings.casdoorClientSecret || undefined,
+      endpoint: settings.casdoorServerUrl || undefined
+    }
+  }
+
+  if (provider === 'oauth2') {
+    return {
+      clientId: settings.customOAuthClientId || undefined,
+      clientSecret: settings.customOAuthClientSecret || undefined,
+      authorizeUrl: settings.customOAuthAuthorizeUrl || undefined,
+      tokenUrl: settings.customOAuthTokenUrl || undefined,
+      userInfoUrl: settings.customOAuthUserInfoUrl || undefined,
+      scope: settings.customOAuthScope || undefined,
+      displayName: settings.customOAuthDisplayName || undefined,
+      userIdField: settings.customOAuthUserIdField || undefined,
+      usernameField: settings.customOAuthUsernameField || undefined,
+      nameField: settings.customOAuthNameField || undefined,
+      emailField: settings.customOAuthEmailField || undefined,
+      avatarField: settings.customOAuthAvatarField || undefined
+    }
+  }
+
+  if (provider === 'aggregate') {
+    const loginTypes = getAggregateOAuthLoginTypesOrDefault(settings.aggregateOAuthLoginType)
+    return {
+      clientId: settings.aggregateOAuthAppId || undefined,
+      clientSecret: settings.aggregateOAuthAppKey || undefined,
+      loginTypes,
+      endpoint: settings.aggregateOAuthEndpoint || undefined
+    }
+  }
+
+  return {
+    clientId: settings.googleClientId || undefined,
+    clientSecret: settings.googleClientSecret || undefined
+  }
+}
+
+export const getOAuthProviderDisplayName = async (provider: OAuthProvider): Promise<string> => {
+  if (provider !== 'oauth2') {
+    if (provider === 'github') return 'GitHub'
+    if (provider === 'casdoor') return 'Casdoor'
+    if (provider === 'google') return 'Google'
+    if (provider === 'aggregate') return '聚合登陆'
+  }
+
+  const settings = await getSettings()
+  return settings?.customOAuthDisplayName || '第三方 OAuth'
+}
+
+export const getOAuthBaseConfig = async (): Promise<{
+  stateSecret?: string
+  redirectUriTemplate?: string
+}> => {
+  const settings = await getSettings()
+  if (!settings) {
+    return {
+      stateSecret: undefined,
+      redirectUriTemplate: undefined
+    }
+  }
+
+  return {
+    stateSecret: settings.oauthStateSecret || undefined,
+    redirectUriTemplate: settings.oauthRedirectUri || undefined
+  }
+}