Flatten

apps/link/app/api/auth/[...nextauth]/route.ts

@@ -1,21 +1,111 @@
 import NextAuth from "next-auth";
 import Google from "next-auth/providers/google";
-// import Apple from "next-auth/providers/apple";
+import Credentials from "next-auth/providers/credentials";
+import Apple from "next-auth/providers/apple";
+
+const headers = { Authorization: `Token ${process.env.ZAMMAD_API_TOKEN}` };
+
+const fetchRoles = async () => {
+  const url = `${process.env.ZAMMAD_URL}/api/v1/roles`;
+  const res = await fetch(url, { headers });
+  const roles = await res.json();
+  const formattedRoles = roles.reduce((acc: any, role: any) => {
+    acc[role.id] = role.name;
+    return acc;
+  }, {});
+  return formattedRoles;
+};
+
+const fetchUser = async (email: string) => {
+  const url = `${process.env.ZAMMAD_URL}/api/v1/users/search?query=email:${email}&limit=1`;
+  const res = await fetch(url, { headers });
+  const users = await res.json();
+  const user = users?.[0];
+  return user;
+};
+
+const getUserRoles = async (email: string) => {
+  const user = await fetchUser(email);
+  const allRoles = await fetchRoles();
+  const roles = user.role_ids.map((roleID: number) => {
+    const role = allRoles[roleID];
+    return role ? role.toLowerCase().replace(" ", "_") : null;
+  });
+  return roles.filter((role: string) => role !== null);
+};
+
+const login = async (email: string, password: string) => {
+  console.log({ email, password });
+  const url = `${process.env.ZAMMAD_URL}/api/v1/users/me`;
+  const authorization = 'Basic ' + Buffer.from(email + ":" + password).toString('base64');
+  const res = await fetch(url, {
+    headers: {
+      authorization
+    }
+  });
+  const user = await res.json();
+  console.log({ user });
+
+  if (user && !user.error && user.id) {
+    return user;
+  } else {
+    return null;
+  }
+};
 
 const handler = NextAuth({
+  pages: {
+    signIn: "/login",
+    error: "/login",
+    signOut: "/logout",
+  },
   providers: [
     Google({
       clientId: process.env.GOOGLE_CLIENT_ID,
       clientSecret: process.env.GOOGLE_CLIENT_SECRET,
     }),
-    /*
     Apple({
       clientId: process.env.APPLE_CLIENT_ID,
       clientSecret: process.env.APPLE_CLIENT_SECRET
     }),
-    */
+    Credentials({
+      name: "Zammad",
+      credentials: {
+        email: { label: "Email", type: "text", },
+        password: { label: "Password", type: "password" }
+      },
+      async authorize(credentials, req) {
+        const user = await login(credentials.email, credentials.password);
+        if (user) {
+          return user;
+        } else {
+          return null;
+        }
+      }
+    })
   ],
   secret: process.env.NEXTAUTH_SECRET,
+
+  callbacks: {
+    signIn: async ({ user, account, profile }) => {
+      const roles = await getUserRoles(user.email);
+      return roles.includes("admin") || roles.includes("agent");
+    },
+    session: async ({ session, user, token }) => {
+      // @ts-ignore
+      session.user.roles = token.roles;
+      // @ts-ignore
+      session.user.leafcutter = token.leafcutter;
+      return session;
+    },
+    jwt: async ({ token, user, account, profile, trigger }) => {
+      if (user) {
+        token.roles = await getUserRoles(user.email);
+      }
+      return token;
+    }
+  },
+
 });
 
 

apps/link/app/api/v1/users/route.ts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 
 const handler = (req: NextRequest) => {
-  NextResponse.redirect('/proxy/zammad/api/v1' + req.url.substring('/api/v1'.length));
+  NextResponse.redirect('/zammad/api/v1' + req.url.substring('/api/v1'.length));
 };
 
 export { handler as GET, handler as POST };