fix(GIST-18): auth flow with redirection to frontend

* wip(GIST-18): added registration + login on github and google

* wip(GIST-18): added local auth

* fix(GIST-18): set redirection and cookie storage for auth

* fix(GIST-18): redirection to frontend

Author: Courtcircuits

auth/controller.go

@@ -1,6 +1,7 @@
 package auth
 
 import (
+	"github.com/gistapp/api/utils"
 	"github.com/gofiber/fiber/v2"
 )
 
@@ -17,7 +18,16 @@ type AuthLocalVerificationValidator struct {
 
 func (a *AuthControllerImpl) Callback() fiber.Handler {
 	return func(c *fiber.Ctx) error {
-		return AuthService.Callback(c)
+		token, err := AuthService.Callback(c)
+		if err != nil {
+			return c.Status(400).SendString(err.Error())
+		}
+		token_cookie := new(fiber.Cookie)
+		token_cookie.Name = "gists.access_token"
+		token_cookie.HTTPOnly = false
+		token_cookie.Value = token
+		c.Cookie(token_cookie)
+		return c.Redirect(utils.Get("FRONTEND_URL"))
 	}
 }
 
@@ -59,7 +69,12 @@ func (a *AuthControllerImpl) VerifyAuthToken() fiber.Handler {
 			return c.Status(400).SendString(err.Error())
 		}
 
-		return c.JSON(fiber.Map{"token": jwt_token})
+		token_cookie := new(fiber.Cookie)
+		token_cookie.Name = "gists.access_token"
+		token_cookie.HTTPOnly = true
+		token_cookie.Value = jwt_token
+		c.Cookie(token_cookie)
+		return c.Status(200).JSON(fiber.Map{"message": "You are now logged in"})
 	}
 }
 

auth/service.go

@@ -90,39 +90,35 @@ func (a *AuthServiceImpl) VerifyLocalAuthToken(token string, email string) (stri
 	return jwt_token, err
 }
 
-func (a *AuthServiceImpl) Callback(c *fiber.Ctx) error {
+func (a *AuthServiceImpl) Callback(c *fiber.Ctx) (string, error) {
 	auth_user, err := goth_fiber.CompleteUserAuth(c)
 	if err != nil {
 		log.Error(err)
-		return ErrCantCompleteAuth
+		return "", ErrCantCompleteAuth
 	}
 
 	user_md, _, err := a.GetUser(auth_user)
 
 	if err == nil {
 		token, err := utils.CreateToken(user_md.Email, user_md.ID)
 		if err != nil {
-			return err
+			return "", err
 		}
-		return c.JSON(fiber.Map{
-			"token": token,
-		})
+		return token, nil
 	}
 
 	user_md, err = a.Register(auth_user)
 
 	if err != nil {
-		return err
+		return "", err
 	}
 
 	jwt, err := utils.CreateToken(user_md.Email, user_md.ID)
 	if err != nil {
-		return err
+		return "", err
 	}
 
-	return c.JSON(fiber.Map{
-		"token": jwt,
-	})
+	return jwt, nil
 }
 
 func (a *AuthServiceImpl) GetUser(auth_user goth.User) (*user.User, *AuthIdentity, error) {

server/server.go

@@ -2,6 +2,7 @@ package server
 
 import (
 	"github.com/MarceloPetrucio/go-scalar-api-reference"
+	"github.com/gistapp/api/utils"
 	"github.com/gofiber/fiber/v2"
 	"github.com/gofiber/fiber/v2/log"
 	"github.com/gofiber/fiber/v2/middleware/cors"
@@ -44,7 +45,8 @@ func (s *Server) Ignite(routers ...DomainRouter) {
 	})
 
 	s.app.Use(cors.New(cors.Config{
-		AllowOrigins: "*",
+		AllowCredentials: true,
+		AllowOrigins:     utils.Get("FRONTEND_URL"),
 	}))
 
 	s.app.Use(logger.New())