1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
import { ActionParam, Body, Content, Controller, Ctx, Get, Post, Redirect } from "../../../../mod.ts";import { AuthService, UserModel } from "../../services/auth.service.ts";import { SecurityContext } from "../../../../src/security/context/security-context.ts";import { CookiesAuthentication } from "../../../../src/security/authentication/cookies/src/cookies-authentication.ts";
const scheme = CookiesAuthentication.DefaultScheme;
interface LoginModel {  login: string;  password: string;}
@Controller({ baseRoute: "/account", ctor: { inject: [AuthService] } })export class AccountController {  name: string | undefined = undefined;
  constructor(private service: AuthService) {  }
  @Get("/login")  @ActionParam(0, Ctx())  getLogin(context: SecurityContext) {    if (context.security.auth.identity()) {      return Redirect("/protected");    }
    return `<form method="post">                login: admin <br>                password: admin <br>              <input type="text" name="login" placeholder="login" value="admin"><br>              <input type="password" name="password" placeholder="password" value="admin"><br>              <input type="submit">            </form>            <br>            <form action="/signin-google">                <input type="submit" value="Auth with Google" />            </form>`;  }
  @Post("/login")  @ActionParam(0, Ctx())  @ActionParam(1, Body())  async postLogin(    context: SecurityContext,    account: LoginModel,  ) {    const user = this.service.validate(account.login, account.password);
    if (user) {      await context.security.auth.signInAsync<UserModel, unknown>(scheme, user);      return Redirect("/protected");    }
    return Redirect("/account/login");  }
  @Post("/login-json")  @ActionParam(0, Ctx())  @ActionParam(1, Body())  async postLoginJSON(    context: SecurityContext,    account: LoginModel,  ) {    const user = this.service.validate(account.login, account.password);
    if (user) {      await context.security.auth.signInAsync<UserModel, unknown>(scheme, user);      return Content("", 201);    }
    return Content("", 401);  }
  @Get("/external-success")  @ActionParam(0, Ctx())  async externalSuccess(context: SecurityContext) {    // Gets user info from external auth    const userinfo: any = await context.security!.session!.get(      "external_login_signin-google", // key for gets information about login  external_login_<callbackPath>    );
    // for example you can authorize this user with credentional with google profile info.    await context.security.auth.signInAsync<UserModel, unknown>(      scheme,      userinfo,    );    return Redirect("/protected");  }
  @Get("/external-error")  @ActionParam(0, Ctx())  async externalError(context: SecurityContext) {    return context.response.error;  }
  @Get("/logout")  @ActionParam(0, Ctx())  async logOut(context: SecurityContext) {    await context.security.auth.signOutAsync(scheme);    return Redirect("/account/login");  }}