Support OIDC (#6661)

* Support OIDC

* tweak to the Configure button

* fix the type import

apps/web/package.json

@@ -23,7 +23,7 @@
     "yarn": ">=1.19.0 < 2.0.0"
   },
   "dependencies": {
-    "@boxyhq/saml-jackson": "1.3.6",
+    "@boxyhq/saml-jackson": "1.7.1",
     "@calcom/app-store": "*",
     "@calcom/app-store-cli": "*",
     "@calcom/core": "*",

apps/web/pages/api/auth/oidc.ts

@@ -0,0 +1,37 @@
+import { NextApiRequest, NextApiResponse } from "next";
+
+import jackson from "@calcom/features/ee/sso/lib/jackson";
+
+import { HttpError } from "@lib/core/http/error";
+
+// This is the callback endpoint for the OIDC provider
+// A team must set this endpoint in the OIDC provider's configuration
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  if (req.method !== "GET") {
+    return res.status(400).send("Method not allowed");
+  }
+
+  const { code, state } = req.query as {
+    code: string;
+    state: string;
+  };
+
+  const { oauthController } = await jackson();
+
+  try {
+    const { redirect_url } = await oauthController.oidcAuthzResponse({ code, state });
+
+    if (!redirect_url) {
+      throw new HttpError({
+        message: "No redirect URL found",
+        statusCode: 500,
+      });
+    }
+
+    return res.redirect(302, redirect_url);
+  } catch (err) {
+    const { message, statusCode = 500 } = err as HttpError;
+
+    return res.status(statusCode).send(message);
+  }
+}

apps/web/public/static/locales/en/common.json

@@ -1375,15 +1375,6 @@
   "error_editing_availability": "Error editing availability",
   "dont_have_permission": "You don't have permission to access this resource.",
   "saml_config": "Single Sign-On",
-  "saml_description": "Allow team members to login using an Identity Provider",
-  "saml_config_deleted_successfully": "SAML configuration deleted successfully",
-  "saml_config_updated_successfully": "SAML configuration updated successfully",
-  "saml_configuration": "SAML configuration",
-  "delete_saml_configuration": "Delete SAML configuration",
-  "delete_saml_configuration_confirmation_message": "Are you sure you want to delete the SAML configuration? Your team members who use SAML login will no longer be able to access Cal.com.",
-  "confirm_delete_saml_configuration": "Yes, delete SAML configuration",
-  "saml_not_configured_yet": "SAML not configured yet",
-  "saml_configuration_description": "Please paste the SAML metadata from your Identity Provider in the textbox below to update your SAML configuration.",
   "saml_configuration_placeholder": "Please paste the SAML metadata from your Identity Provider here",
   "saml_email_required": "Please enter an email so we can find your SAML Identity Provider",
   "saml_sp_title": "Service Provider Details",
@@ -1523,5 +1514,24 @@
   "reporting": "Reporting",
   "reporting_feature": "See all incoming from data and download it as a CSV",
   "teams_plan_required": "Teams plan required",
-  "routing_forms_are_a_great_way": "Routing forms are a great way to route your incoming leads to the right person. Upgrade to a Teams plan to access this feature."
+  "routing_forms_are_a_great_way": "Routing forms are a great way to route your incoming leads to the right person. Upgrade to a Teams plan to access this feature.",
+  "configure": "Configure",
+  "sso_configuration": "Single Sign-On",
+  "sso_configuration_description": "Configure SAML/OIDC SSO and allow team members to login using an Identity Provider",
+  "sso_oidc_heading": "SSO with OIDC",
+  "sso_oidc_description": "Configure OIDC SSO with Identity Provider of your choice.",
+  "sso_oidc_configuration_title": "OIDC Configuration",
+  "sso_oidc_configuration_description": "Configure OIDC connection to your identity provider. You can find the required information in your identity provider.",
+  "sso_oidc_callback_copied": "Callback URL copied",
+  "sso_saml_heading": "SSO with SAML",
+  "sso_saml_description": "Configure SAML SSO with Identity Provider of your choice.",
+  "sso_saml_configuration_title": "SAML Configuration",
+  "sso_saml_configuration_description": "Configure SAML connection to your identity provider. You can find the required information in your identity provider.",
+  "sso_saml_acsurl_copied": "ACS URL copied",
+  "sso_saml_entityid_copied": "Entity ID copied",
+  "sso_connection_created_successfully": "{{connectionType}} configuration created successfully",
+  "sso_connection_deleted_successfully": "{{connectionType}} configuration deleted successfully",
+  "delete_sso_configuration": "Delete {{connectionType}} configuration",
+  "delete_sso_configuration_confirmation": "Yes, delete {{connectionType}} configuration",
+  "delete_sso_configuration_confirmation_description": "Are you sure you want to delete the {{connectionType}} configuration? Your team members who use {{connectionType}} login will no longer be able to access Cal.com."
 }