Lauris Skraucis
69548e6ed0
* refactor: client secret header for oauth users and webhooks * fix: platform introduction link to api reference * regenerate docs for commits above * refactor: specify request headers * refactor: specify request headers
78 lines
2.5 KiB
TypeScript
78 lines
2.5 KiB
TypeScript
import { ProviderVerifyAccessTokenOutput } from "@/ee/provider/outputs/verify-access-token.output";
|
|
import { ProviderVerifyClientOutput } from "@/ee/provider/outputs/verify-client.output";
|
|
import { API_VERSIONS_VALUES } from "@/lib/api-versions";
|
|
import { ACCESS_TOKEN_HEADER } from "@/lib/docs/headers";
|
|
import { GetUser } from "@/modules/auth/decorators/get-user/get-user.decorator";
|
|
import { ApiAuthGuard } from "@/modules/auth/guards/api-auth/api-auth.guard";
|
|
import { OAuthClientRepository } from "@/modules/oauth-clients/oauth-client.repository";
|
|
import { UserWithProfile } from "@/modules/users/users.repository";
|
|
import {
|
|
BadRequestException,
|
|
Controller,
|
|
Get,
|
|
HttpCode,
|
|
HttpStatus,
|
|
NotFoundException,
|
|
Param,
|
|
UnauthorizedException,
|
|
UseGuards,
|
|
} from "@nestjs/common";
|
|
import { ApiExcludeController, ApiHeader, ApiOperation, ApiTags as DocsTags } from "@nestjs/swagger";
|
|
|
|
import { SUCCESS_STATUS } from "@calcom/platform-constants";
|
|
|
|
@Controller({
|
|
path: "/v2/provider",
|
|
version: API_VERSIONS_VALUES,
|
|
})
|
|
// note(Lauris): this controller is used by useOAuthClient and useOAuthFlow internal hooks and if customer
|
|
// wants to know if access token is expired then the flow is to make request and then receive message it expired.
|
|
@ApiExcludeController()
|
|
@DocsTags("Platform / Cal Provider")
|
|
export class CalProviderController {
|
|
constructor(private readonly oauthClientRepository: OAuthClientRepository) {}
|
|
|
|
@Get("/:clientId")
|
|
@HttpCode(HttpStatus.OK)
|
|
@ApiOperation({ summary: "Get a provider" })
|
|
async verifyClientId(@Param("clientId") clientId: string): Promise<ProviderVerifyClientOutput> {
|
|
if (!clientId) {
|
|
throw new NotFoundException();
|
|
}
|
|
const oAuthClient = await this.oauthClientRepository.getOAuthClient(clientId);
|
|
|
|
if (!oAuthClient) throw new UnauthorizedException();
|
|
|
|
return {
|
|
status: SUCCESS_STATUS,
|
|
data: {
|
|
clientId: oAuthClient.id,
|
|
organizationId: oAuthClient.organizationId,
|
|
name: oAuthClient.name,
|
|
},
|
|
};
|
|
}
|
|
|
|
@Get("/:clientId/access-token")
|
|
@HttpCode(HttpStatus.OK)
|
|
@UseGuards(ApiAuthGuard)
|
|
@ApiOperation({ summary: "Verify an access token" })
|
|
@ApiHeader(ACCESS_TOKEN_HEADER)
|
|
async verifyAccessToken(
|
|
@Param("clientId") clientId: string,
|
|
@GetUser() user: UserWithProfile
|
|
): Promise<ProviderVerifyAccessTokenOutput> {
|
|
if (!clientId) {
|
|
throw new BadRequestException();
|
|
}
|
|
|
|
if (!user) {
|
|
throw new UnauthorizedException();
|
|
}
|
|
|
|
return {
|
|
status: SUCCESS_STATUS,
|
|
};
|
|
}
|
|
}
|