mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-07-02 04:25:21 +02:00
e426c89cb2
- Introduced a new field `giteaInternalUrl` in the Gitea provider settings to allow users to specify an internal URL for OAuth token exchange when Gitea runs on the same instance as Dokploy. - Updated the Gitea provider forms to include the new field with appropriate descriptions. - Modified the token exchange logic to utilize the internal URL if provided, enhancing connectivity options for users. - Updated database schema to accommodate the new field.
96 lines
2.7 KiB
TypeScript
96 lines
2.7 KiB
TypeScript
import { updateGitea } from "@dokploy/server";
|
|
import type { NextApiRequest, NextApiResponse } from "next";
|
|
import { findGitea, type Gitea, redirectWithError } from "./helper";
|
|
|
|
// Helper to parse the state parameter
|
|
const parseState = (state: string): string | null => {
|
|
try {
|
|
const stateObj =
|
|
state.startsWith("{") && state.endsWith("}") ? JSON.parse(state) : {};
|
|
return stateObj.giteaId || state || null;
|
|
} catch {
|
|
return null;
|
|
}
|
|
};
|
|
|
|
// Helper to fetch access token from Gitea
|
|
const fetchAccessToken = async (gitea: Gitea, code: string) => {
|
|
// Use internal URL for token exchange when Gitea is on same instance as Dokploy
|
|
const baseUrl = gitea.giteaInternalUrl || gitea.giteaUrl;
|
|
const response = await fetch(`${baseUrl}/login/oauth/access_token`, {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/x-www-form-urlencoded",
|
|
Accept: "application/json",
|
|
},
|
|
body: new URLSearchParams({
|
|
client_id: gitea.clientId as string,
|
|
client_secret: gitea.clientSecret as string,
|
|
code,
|
|
grant_type: "authorization_code",
|
|
redirect_uri: gitea.redirectUri || "",
|
|
}),
|
|
});
|
|
|
|
const responseText = await response.text();
|
|
return response.ok
|
|
? JSON.parse(responseText)
|
|
: { error: "Token exchange failed", responseText };
|
|
};
|
|
|
|
export default async function handler(
|
|
req: NextApiRequest,
|
|
res: NextApiResponse,
|
|
) {
|
|
const { code, state } = req.query;
|
|
|
|
if (!code || Array.isArray(code) || !state || Array.isArray(state)) {
|
|
return redirectWithError(
|
|
res,
|
|
"Invalid authorization code or state parameter",
|
|
);
|
|
}
|
|
|
|
const giteaId = parseState(state as string);
|
|
if (!giteaId) return redirectWithError(res, "Invalid state format");
|
|
|
|
const gitea = await findGitea(giteaId);
|
|
if (!gitea) return redirectWithError(res, "Failed to find Gitea provider");
|
|
|
|
// Fetch the access token from Gitea
|
|
const result = await fetchAccessToken(gitea, code as string);
|
|
|
|
if (result.error) {
|
|
console.error("Token exchange failed:", result);
|
|
return redirectWithError(res, result.error);
|
|
}
|
|
|
|
if (!result.access_token) {
|
|
console.error("Missing access token:", result);
|
|
return redirectWithError(res, "No access token received");
|
|
}
|
|
|
|
const expiresAt = result.expires_in
|
|
? Math.floor(Date.now() / 1000) + result.expires_in
|
|
: null;
|
|
|
|
try {
|
|
await updateGitea(gitea.giteaId, {
|
|
accessToken: result.access_token,
|
|
refreshToken: result.refresh_token,
|
|
expiresAt,
|
|
...(result.organizationName
|
|
? { organizationName: result.organizationName }
|
|
: {}),
|
|
});
|
|
|
|
return res.redirect(
|
|
307,
|
|
"/dashboard/settings/git-providers?connected=true",
|
|
);
|
|
} catch (updateError) {
|
|
console.error("Failed to update Gitea provider:", updateError);
|
|
return redirectWithError(res, "Failed to store access token");
|
|
}
|
|
}
|