feat(firebase): add Google Account auth #52
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -54,9 +54,114 @@ export const signInWithPassword = async ( | |||||
| } | ||||||
| ) => { | ||||||
| const response: SignInWithPasswordResponse = await fetch( | ||||||
| `${restConfig.domain}/v1/accounts:signInWithPassword?key=${restConfig.apiKey}`, | ||||||
| { | ||||||
| method: "POST", | ||||||
| headers: { | ||||||
| "Content-Type": "application/json", | ||||||
| }, | ||||||
| body: JSON.stringify(body), | ||||||
| } | ||||||
| ); | ||||||
| return response.json(); | ||||||
| }; | ||||||
|
|
||||||
| // https://firebase.google.com/docs/reference/rest/auth#section-sign-in-email-password | ||||||
| interface SignInWithIdpResponse extends Response { | ||||||
| json(): Promise< | ||||||
| | RestError | ||||||
| | { | ||||||
| /** | ||||||
| * The unique ID identifies the IdP account. | ||||||
| */ | ||||||
| federatedId: string; | ||||||
| /** | ||||||
| * The linked provider ID (e.g. "google.com" for the Google provider). | ||||||
| */ | ||||||
| providerId: string; | ||||||
| /** | ||||||
| * The uid of the authenticated user. | ||||||
| */ | ||||||
| localId: string; | ||||||
| /** | ||||||
| * Whether the sign-in email is verified. | ||||||
| */ | ||||||
| emailVerified: boolean; | ||||||
| /** | ||||||
| * The email of the account. | ||||||
| */ | ||||||
| email: string; | ||||||
| /** | ||||||
| * The OIDC id token if available. | ||||||
| */ | ||||||
| oauthIdToken: string; | ||||||
| /** | ||||||
| * The OAuth access token if available. | ||||||
| */ | ||||||
| oauthAccessToken: string; | ||||||
| /** | ||||||
| * The OAuth 1.0 token secret if available. | ||||||
| */ | ||||||
| oauthTokenSecret: string; | ||||||
| /** | ||||||
| * The stringified JSON response containing all the IdP data corresponding to the provided OAuth credential. | ||||||
| */ | ||||||
| rawUserInfo: string; | ||||||
| /** | ||||||
| * The first name for the account. | ||||||
| */ | ||||||
| firstName: string; | ||||||
| /** | ||||||
| * The last name for the account. | ||||||
| */ | ||||||
| lastName: string; | ||||||
| /** | ||||||
| * The full name for the account. | ||||||
| */ | ||||||
| fullName: string; | ||||||
| /** | ||||||
| * The display name for the account. | ||||||
| */ | ||||||
| displayName: string; | ||||||
| /** | ||||||
| * The photo Url for the account. | ||||||
| */ | ||||||
| photoUrl: string; | ||||||
| /** | ||||||
| * A Firebase Auth ID token for the authenticated user. | ||||||
| */ | ||||||
| idToken: string; | ||||||
| /** | ||||||
| * A Firebase Auth refresh token for the authenticated user. | ||||||
| */ | ||||||
| refreshToken: string; | ||||||
| /** | ||||||
| * The number of seconds in which the ID token expires. | ||||||
| */ | ||||||
| expiresIn: string; | ||||||
| /** | ||||||
| * Whether another account with the same credential already exists. The user will need to sign in to the original account and then link the current credential to it. | ||||||
| */ | ||||||
| needConfirmation: boolean; | ||||||
| } | ||||||
| >; | ||||||
| } | ||||||
| export const signInWithIdp = async ( | ||||||
| idToken: string, | ||||||
| providerId: string, | ||||||
| restConfig: { | ||||||
| apiKey: string; | ||||||
| domain: string; | ||||||
| } | ||||||
| ) => { | ||||||
| const body = { | ||||||
| postBody: "id_token=" + idToken + "&providerId=" + providerId, | ||||||
|
Member
There was a problem hiding this comment.
Suggested change
|
||||||
| requestUri: "http://localhost", | ||||||
|
|
||||||
| returnIdpCredential: true, | ||||||
| returnSecureToken: true, | ||||||
| }; | ||||||
| const response: SignInWithIdpResponse = await fetch( | ||||||
| `${restConfig.domain}/v1/accounts:signInWithIdp?key=${restConfig.apiKey}`, | ||||||
| { | ||||||
| method: "POST", | ||||||
| headers: { | ||||||
|
|
||||||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,43 @@ | ||
| import type { LoaderArgs } from "@remix-run/node"; | ||
| import { redirect } from "@remix-run/node"; | ||
|
|
||
| import { signInWithIdp } from "~/server/auth.server"; | ||
| import { commitSession, getSession } from "~/sessions"; | ||
|
|
||
| export const loader = async ({ request }: LoaderArgs) => { | ||
| // https://developers.google.com/identity/protocols/oauth2/openid-connect | ||
| const url = new URL(request.url); | ||
| const code = url.searchParams.get("code"); | ||
|
|
||
| const host = | ||
| request.headers.get("X-Forwarded-Host") ?? request.headers.get("host"); | ||
| if (!host) { | ||
| throw new Error("Could not determine domain URL."); | ||
| } | ||
| const protocol = | ||
| host.includes("localhost") || host.includes("127.0.0.1") ? "http" : "https"; | ||
| const redirectUri = `${protocol}://${host}/auth/google`; | ||
|
|
||
| const response = await fetch("https://oauth2.googleapis.com/token", { | ||
| method: "POST", | ||
| headers: { | ||
| "Content-Type": "application/json", | ||
| }, | ||
| body: JSON.stringify({ | ||
| client_id: process.env.GOOGLE_CLIENT_ID, | ||
| client_secret: process.env.GOOGLE_CLIENT_SECRET, | ||
| code, | ||
| redirect_uri: redirectUri, | ||
| grant_type: "authorization_code", | ||
| }), | ||
| }); | ||
| const token = await response.json(); | ||
| const sessionCookie = await signInWithIdp(token.id_token, "google.com"); | ||
| const session = await getSession(request.headers.get("cookie")); | ||
| session.set("session", sessionCookie); | ||
| return redirect("/", { | ||
| headers: { | ||
| "Set-Cookie": await commitSession(session), | ||
| }, | ||
| }); | ||
| }; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||
|---|---|---|---|---|
|
|
@@ -4,6 +4,7 @@ import { | |||
| Link, | ||||
| useActionData, | ||||
| useLoaderData, | ||||
| useLocation, | ||||
|
Member
There was a problem hiding this comment.
Suggested change
|
||||
| useSubmit, | ||||
| } from "@remix-run/react"; | ||||
| import { useCallback, useState } from "react"; | ||||
|
|
@@ -27,7 +28,23 @@ export const loader = async ({ request }: LoaderArgs) => { | |||
| return redirect("/", { headers }); | ||||
| } | ||||
| const { apiKey, domain } = getRestConfig(); | ||||
| const host = | ||||
| request.headers.get("X-Forwarded-Host") ?? request.headers.get("host"); | ||||
| if (!host) { | ||||
| throw new Error("Could not determine domain URL."); | ||||
| } | ||||
| const protocol = | ||||
| host.includes("localhost") || host.includes("127.0.0.1") ? "http" : "https"; | ||||
| const redirectUri = `${protocol}://${host}/auth/google`; | ||||
| return json( | ||||
| { | ||||
| apiKey, | ||||
| domain, | ||||
| GOOGLE_CLIENT_ID: process.env.GOOGLE_CLIENT_ID, | ||||
| redirectUri, | ||||
| }, | ||||
| { headers } | ||||
| ); | ||||
| }; | ||||
|
|
||||
| type ActionData = { | ||||
|
|
@@ -70,6 +87,8 @@ export default function Login() { | |||
| const restConfig = useLoaderData<typeof loader>(); | ||||
| const submit = useSubmit(); | ||||
|
|
||||
| const { GOOGLE_CLIENT_ID, redirectUri } = restConfig; | ||||
|
|
||||
| const handleSubmit = useCallback( | ||||
| async (event: React.FormEvent<HTMLFormElement>) => { | ||||
| event.preventDefault(); | ||||
|
|
@@ -113,6 +132,17 @@ export default function Login() { | |||
| Login | ||||
| </button> | ||||
| </form> | ||||
| <p> | ||||
| <a | ||||
| href={`https://accounts.google.com/o/oauth2/v2/auth\ | ||||
| ?response_type=code\ | ||||
| &client_id=${GOOGLE_CLIENT_ID}\ | ||||
| &redirect_uri=${redirectUri}\ | ||||
| &scope=openid%20email%20profile`} | ||||
| > | ||||
| Login with Google | ||||
| </a> | ||||
| </p> | ||||
| <p> | ||||
| Do you want to <Link to="/join">join</Link>? | ||||
| </p> | ||||
|
|
||||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -41,6 +41,11 @@ export const signInWithToken = async (idToken: string) => { | |
| return sessionCookie; | ||
| }; | ||
|
|
||
| export const signInWithIdp = async (token: string, providerId: string) => { | ||
| const { idToken } = await auth.signInWithIdp(token, providerId); | ||
| return signInWithToken(idToken); | ||
| }; | ||
|
|
||
| export const signUp = async (name: string, email: string, password: string) => { | ||
| await auth.server.createUser({ | ||
| email, | ||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -72,7 +72,22 @@ const signInWithPassword = async (email: string, password: string) => { | |
| return signInResponse; | ||
| }; | ||
|
|
||
| const signInWithIdp = async (token: string, providerId: string) => { | ||
| const signInResponse = await firebaseRest.signInWithIdp( | ||
| token, | ||
| providerId, | ||
| restConfig | ||
| ); | ||
|
|
||
| if (firebaseRest.isError(signInResponse)) { | ||
| throw new Error(signInResponse.error.message); | ||
| } | ||
|
|
||
| return signInResponse; | ||
| }; | ||
|
|
||
| export const auth = { | ||
| server: getServerAuth(), | ||
| signInWithPassword, | ||
| signInWithIdp, | ||
| }; | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -6,6 +6,7 @@ | |
| "build": "remix build", | ||
| "dev": "remix dev", | ||
| "emulators": "firebase emulators:start --project remix-emulator --import=firebase-fixtures", | ||
| "firebase": "firebase", | ||
| "start": "remix-serve build", | ||
| "typecheck": "tsc" | ||
| }, | ||
|
|
||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.