+
Enter your email below to login to your account
+
Don't Have An Account? Signup{' '} + class="hover:text-primary underline underline-offset-4"> Here
diff --git a/frontend/src/routes/(auth)/login/google/+server.ts b/frontend/src/routes/(auth)/login/google/+server.ts new file mode 100644 index 0000000..2b33d55 --- /dev/null +++ b/frontend/src/routes/(auth)/login/google/+server.ts @@ -0,0 +1,36 @@ +import { google } from '$lib/server/auth' +import { generateState, generateCodeVerifier } from 'arctic' +import { serializeCookie } from 'oslo/cookie' +import { env } from '$env/dynamic/private' +import { redirect } from '@sveltejs/kit' + +export const GET = async (event) => { + const state = generateState() + const codeVerifier = generateCodeVerifier() + + const url = await google.createAuthorizationURL( + state, + codeVerifier, + { + scopes: ['email', 'profile'], + }, + ) + + event.cookies.set('google_oauth_state', state, { + httpOnly: true, + secure: env.APP_ENV === 'prod', + maxAge: 60 * 10, // 10 minutes + path: '/', + sameSite: 'lax', + }) + + event.cookies.set('google_oauth_code_verifier', codeVerifier, { + httpOnly: true, + secure: env.APP_ENV === 'prod', + maxAge: 60 * 10, // 10 minutes + path: '/', + sameSite: 'lax', + }) + + return redirect(302, url.toString()) +} diff --git a/frontend/src/routes/(auth)/login/google/callback/+server.ts b/frontend/src/routes/(auth)/login/google/callback/+server.ts new file mode 100644 index 0000000..85ff945 --- /dev/null +++ b/frontend/src/routes/(auth)/login/google/callback/+server.ts @@ -0,0 +1,127 @@ +import { OAuth2RequestError } from 'arctic' +import { google, lucia } from '$lib/server/auth' +import { db } from '$lib/db' +import { user } from '$lib/db/schema' +import { eq } from 'drizzle-orm' + +interface GoogleUser { + sub: string // Unique identifier for the user + name: string // Full name of the user + email: string // Email address of the user +} + +export async function GET(event) { + const code = event.url.searchParams.get('code') + const state = event.url.searchParams.get('state') + const codeVerifier = event.cookies.get('google_oauth_code_verifier') + const storedState = event.cookies.get('google_oauth_state') ?? null + + if ( + !code || + !state || + !storedState || + !codeVerifier || + state !== storedState + ) { + return new Response(null, { + status: 400, + }) + } + + try { + const tokens = await google.validateAuthorizationCode( + code, + codeVerifier, + ) + const googleUserResponse = await fetch( + 'https://www.googleapis.com/oauth2/v3/userinfo', + { + headers: { + Authorization: `Bearer ${tokens.accessToken}`, + }, + }, + ) + const googleUser: GoogleUser = await googleUserResponse.json() + + const existingGoogleUser = await db.query.user.findFirst({ + where: (user, { eq }) => eq(user.googleId, googleUser.sub), + }) + + if (existingGoogleUser) { + const session = await lucia.createSession( + existingGoogleUser.id, + {}, + ) + const sessionCookie = lucia.createSessionCookie(session.id) + event.cookies.set(sessionCookie.name, sessionCookie.value, { + path: '.', + ...sessionCookie.attributes, + }) + + return new Response(null, { + status: 302, + headers: { + Location: '/dashboard', + }, + }) + } + + const existingUser = await db.query.user.findFirst({ + where: (user, { eq }) => eq(user.email, googleUser.email), + }) + + if (existingUser) { + const updateUser = await db + .update(user) + .set({ + email_verified: true, + password: null, + username: googleUser.name, + }) + .where(eq(user.id, existingUser.id)) + .returning() + + const newUser = updateUser[0] + + const session = await lucia.createSession(newUser.id, {}) + const sessionCookie = lucia.createSessionCookie(session.id) + event.cookies.set(sessionCookie.name, sessionCookie.value, { + path: '.', + ...sessionCookie.attributes, + }) + } else { + const insertUser = await db + .insert(user) + .values({ + email: googleUser.email, // Using email as username + email_verified: true, + googleId: googleUser.sub, + username: googleUser.name, // Name field may not always be present, handle accordingly + }) + .returning() + + const newUser = insertUser[0] + + const session = await lucia.createSession(newUser.id, {}) + const sessionCookie = lucia.createSessionCookie(session.id) + event.cookies.set(sessionCookie.name, sessionCookie.value, { + path: '.', + ...sessionCookie.attributes, + }) + } + + return new Response(null, { + status: 302, + headers: { + Location: '/dashboard', + }, + }) + } catch (e) { + return new Response(null, { + status: 302, + headers: { + Location: '/login', + }, + }) + } +} diff --git a/frontend/src/routes/(auth)/signup/+page.server.ts b/frontend/src/routes/(auth)/signup/+page.server.ts index 62181ad..4179452 100644 --- a/frontend/src/routes/(auth)/signup/+page.server.ts +++ b/frontend/src/routes/(auth)/signup/+page.server.ts @@ -37,6 +37,13 @@ export const actions: Actions = { const user = users[0] if (user) { + if (user.googleId) { + return setError( + form, + 'email', + 'This email is detected on Google login, please login via Google', + ) + } return setError(form, 'email', 'Email Already Exist') }