Files
Reactive-Resume/apps/web/src/features/auth/components/social-auth.tsx
T
Amruth Pillai fe9b59e111 fix: restore MCP OAuth registration and authorization (#3421)
* fix: align MCP OAuth provider schema and authorization flow

* test: isolate OpenAPI generation from OAuth initialization

* fix: accept auth routes without a callback query

* fix: require explicit OAuth consent and preserve signed requests

* test: verify OAuth audiences through real MCP initialization

* test(e2e): isolate OAuth token audience validation
2026-09-05 09:33:15 -07:00

168 lines
4.8 KiB
TypeScript

import type { RouterOutput } from "@/libs/orpc/client";
import { t } from "@lingui/core/macro";
import { Trans } from "@lingui/react/macro";
import { FingerprintIcon, GithubLogoIcon, GoogleLogoIcon, LinkedinLogoIcon, VaultIcon } from "@phosphor-icons/react";
import { useQuery } from "@tanstack/react-query";
import { useRouter, useSearch } from "@tanstack/react-router";
import { Button } from "@reactive-resume/ui/components/button";
import { Skeleton } from "@reactive-resume/ui/components/skeleton";
import { toast } from "@reactive-resume/ui/components/toast";
import { cn } from "@reactive-resume/utils/style";
import { authClient } from "@/libs/auth/client";
import { orpc } from "@/libs/orpc/client";
import { getAuthRedirectOptions, getOAuthPasskeyOptions, getOAuthSignInOptions, isOAuthRedirect } from "../redirect";
export function SocialAuth() {
const { data: providers = {}, isLoading } = useQuery(orpc.auth.providers.list.queryOptions());
return (
<>
<div className="flex items-center gap-x-2">
<hr className="flex-1" />
<span className="font-medium text-xs tracking-wide">
<Trans context="Choose to authenticate with a social provider (Google, GitHub, etc.) instead of email and password">
or continue with
</Trans>
</span>
<hr className="flex-1" />
</div>
{isLoading ? <SocialAuthSkeleton /> : <SocialAuthButtons providers={providers} />}
</>
);
}
function SocialAuthSkeleton() {
return (
<div className="grid grid-cols-2 gap-4">
<Skeleton className="h-9 w-full" />
<Skeleton className="h-9 w-full" />
<Skeleton className="h-9 w-full" />
<Skeleton className="h-9 w-full" />
</div>
);
}
type SocialAuthButtonsProps = {
providers: RouterOutput["auth"]["providers"]["list"];
};
function SocialAuthButtons({ providers }: SocialAuthButtonsProps) {
const router = useRouter();
const { callbackURL } = useSearch({ from: "/auth" });
const runSignIn = async (
fn: () => Promise<{ data?: unknown; error: { message?: string } | null }>,
isPasskey = false,
) => {
const toastId = toast.add({ type: "loading", description: t`Signing in...` });
const { data, error } = await fn();
if (error) {
toast.add({
type: "error",
description:
error.message ||
t({
comment: "Fallback toast when sign-in fails without an error message",
message: "Failed to sign in. Please try again.",
}),
id: toastId,
});
return;
}
toast.close(toastId);
if (isOAuthRedirect(data)) return;
await router.invalidate();
if (isPasskey) void router.navigate(getAuthRedirectOptions(callbackURL));
};
return (
<div className="grid grid-cols-2 gap-4">
<Button
variant="secondary"
onClick={() =>
runSignIn(() =>
authClient.signIn.social({
provider: "custom",
callbackURL: callbackURL ?? "/dashboard",
...getOAuthSignInOptions(callbackURL),
}),
)
}
className={cn("hidden", "custom" in providers && "inline-flex")}
>
<VaultIcon />
{providers.custom}
</Button>
<Button
variant="secondary"
onClick={() =>
runSignIn(() => authClient.signIn.passkey({ autoFill: false, ...getOAuthPasskeyOptions(callbackURL) }), true)
}
className={cn("hidden", "passkey" in providers && "inline-flex")}
>
<FingerprintIcon />
<Trans comment="Label for passkey sign-in button">Passkey</Trans>
</Button>
<Button
onClick={() =>
runSignIn(() =>
authClient.signIn.social({
provider: "google",
callbackURL: callbackURL ?? "/dashboard",
...getOAuthSignInOptions(callbackURL),
}),
)
}
className={cn(
"hidden flex-1 bg-[#4285F4] text-white hover:bg-[#4285F4]/80",
"google" in providers && "inline-flex",
)}
>
<GoogleLogoIcon />
<Trans comment="Brand name label for Google social sign-in button">Google</Trans>
</Button>
<Button
onClick={() =>
runSignIn(() =>
authClient.signIn.social({
provider: "github",
callbackURL: callbackURL ?? "/dashboard",
...getOAuthSignInOptions(callbackURL),
}),
)
}
className={cn(
"hidden flex-1 bg-[#2b3137] text-white hover:bg-[#2b3137]/80",
"github" in providers && "inline-flex",
)}
>
<GithubLogoIcon />
<Trans comment="Brand name label for GitHub social sign-in button">GitHub</Trans>
</Button>
<Button
onClick={() =>
runSignIn(() =>
authClient.signIn.social({
provider: "linkedin",
callbackURL: callbackURL ?? "/dashboard",
...getOAuthSignInOptions(callbackURL),
}),
)
}
className={cn(
"hidden flex-1 bg-[#0A66C2] text-white hover:bg-[#0A66C2]/80",
"linkedin" in providers && "inline-flex",
)}
>
<LinkedinLogoIcon />
<Trans comment="Brand name label for LinkedIn social sign-in button">LinkedIn</Trans>
</Button>
</div>
);
}