loginname action

apps/login/src/lib/server/loginname.ts

@@ -0,0 +1,118 @@
+"use server";
+
+import { headers } from "next/headers";
+import { idpTypeToSlug } from "../idp";
+import {
+  getActiveIdentityProviders,
+  getLoginSettings,
+  listAuthenticationMethodTypes,
+  listUsers,
+  startIdentityProviderFlow,
+} from "../zitadel";
+import { createSessionForUserIdAndUpdateCookie } from "../../utils/session";
+import { redirect } from "next/navigation";
+
+export type SendLoginnameOptions = {
+  loginName: string;
+  authRequestId?: string;
+  organization?: string;
+};
+
+export async function sendLoginname(options: SendLoginnameOptions) {
+  const { loginName, authRequestId, organization } = options;
+  const users = await listUsers({
+    userName: loginName,
+    organizationId: organization,
+  });
+
+  if (users.details?.totalResult == BigInt(1) && users.result[0].userId) {
+    const userId = users.result[0].userId;
+    const session = await createSessionForUserIdAndUpdateCookie(
+      userId,
+      undefined,
+      undefined,
+      authRequestId,
+    );
+
+    if (!session?.factors?.user?.id) {
+      throw "No user id found in session";
+    }
+
+    const methods = await listAuthenticationMethodTypes(
+      session.factors?.user?.id,
+    );
+
+    return {
+      authMethodTypes: methods.authMethodTypes,
+      sessionId: session.id,
+      factors: session.factors,
+    };
+  }
+
+  const loginSettings = await getLoginSettings(organization);
+  // TODO: check if allowDomainDiscovery has to be allowed too, to redirect to the register page
+  // user not found, check if register is enabled on organization
+
+  if (loginSettings?.allowRegister && !loginSettings?.allowUsernamePassword) {
+    // TODO redirect to loginname page with idp hint
+    const identityProviders = await getActiveIdentityProviders(
+      organization,
+    ).then((resp) => {
+      return resp.identityProviders;
+    });
+
+    if (identityProviders.length === 1) {
+      const host = headers().get("host");
+      console.log("host", host);
+      const identityProviderType = identityProviders[0].type;
+
+      const provider = idpTypeToSlug(identityProviderType);
+
+      const params = new URLSearchParams();
+
+      if (authRequestId) {
+        params.set("authRequestId", authRequestId);
+      }
+
+      if (organization) {
+        params.set("organization", organization);
+      }
+
+      return startIdentityProviderFlow({
+        idpId: identityProviders[0].id,
+        urls: {
+          successUrl:
+            `${host}/idp/${provider}/success?` + new URLSearchParams(params),
+          failureUrl:
+            `${host}/idp/${provider}/failure?` + new URLSearchParams(params),
+        },
+      }).then((resp: any) => {
+        if (resp.authUrl) {
+          return redirect(resp.authUrl);
+        }
+      });
+    } else {
+      throw "Could not find user";
+    }
+  } else if (
+    loginSettings?.allowRegister &&
+    loginSettings?.allowUsernamePassword
+  ) {
+    const params: any = { organization };
+    if (authRequestId) {
+      params.authRequestId = authRequestId;
+    }
+    if (loginName) {
+      params.email = loginName;
+    }
+
+    const registerUrl = new URL(
+      "/register?" + new URLSearchParams(params),
+      //   request.url,
+    );
+
+    return redirect(registerUrl.toString());
+  }
+
+  throw "Could not find user";
+}