48 lines
1.6 KiB
TypeScript
48 lines
1.6 KiB
TypeScript
import { Credentials as CredentialsFromDb } from 'db'
|
|
import { OAuth2Client, Credentials } from 'google-auth-library'
|
|
import { GoogleSheetsCredentialsData } from 'models'
|
|
import { decrypt, encrypt, isDefined } from 'utils'
|
|
import prisma from './prisma'
|
|
|
|
export const getAuthenticatedGoogleClient = async (
|
|
credentialsId: string
|
|
): Promise<OAuth2Client | undefined> => {
|
|
const credentials = (await prisma.credentials.findFirst({
|
|
where: { id: credentialsId },
|
|
})) as CredentialsFromDb | undefined
|
|
if (!credentials) return
|
|
const data = decrypt(
|
|
credentials.data,
|
|
credentials.iv
|
|
) as GoogleSheetsCredentialsData
|
|
|
|
const oauth2Client = new OAuth2Client(
|
|
process.env.GOOGLE_CLIENT_ID,
|
|
process.env.GOOGLE_CLIENT_SECRET,
|
|
`${process.env.NEXTAUTH_URL}/api/credentials/google-sheets/callback`
|
|
)
|
|
oauth2Client.setCredentials(data)
|
|
oauth2Client.on('tokens', updateTokens(credentialsId, data))
|
|
return oauth2Client
|
|
}
|
|
|
|
const updateTokens =
|
|
(credentialsId: string, existingCredentials: GoogleSheetsCredentialsData) =>
|
|
async (credentials: Credentials) => {
|
|
if (
|
|
isDefined(existingCredentials.id_token) &&
|
|
credentials.id_token !== existingCredentials.id_token
|
|
)
|
|
return
|
|
const newCredentials: GoogleSheetsCredentialsData = {
|
|
...existingCredentials,
|
|
expiry_date: credentials.expiry_date,
|
|
access_token: credentials.access_token,
|
|
}
|
|
const { encryptedData, iv } = encrypt(newCredentials)
|
|
await prisma.credentials.update({
|
|
where: { id: credentialsId },
|
|
data: { data: encryptedData, iv },
|
|
})
|
|
}
|