mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-20 18:30:15 +01:00
bf80cf30b3
* feat: integrate OpenID Connect support with token reuse
- Added `jwks-rsa` and `new-openid-client` dependencies for OpenID Connect functionality.
- Implemented OpenID token refresh logic in `AuthController`.
- Enhanced `LogoutController` to handle OpenID logout and session termination.
- Updated JWT authentication middleware to support OpenID token provider.
- Modified OAuth routes to accommodate OpenID authentication and token management.
- Created `setOpenIDAuthTokens` function to manage OpenID tokens in cookies.
- Upgraded OpenID strategy with user info fetching and token exchange protocol.
- Introduced `openIdJwtLogin` strategy for handling OpenID JWT tokens.
- Added caching mechanism for exchanged OpenID tokens.
- Updated configuration to include OpenID exchanged tokens cache key.
- updated .env.example to include the new env variables needed for the feature.
* fix: update return type in downloadImage documentation for clarity and fixed openIdJwtLogin env variables
* fix: update Jest configuration and tests for OpenID strategy integration
* fix: update OpenID strategy to include callback URL in setup
* fix: fix optionalJwtAuth middleware to support OpenID token reuse and improve currentUrl method in CustomOpenIDStrategy to override the dynamic host issue related to proxy (e.g. cloudfront)
* fix: fixed code formatting
* Fix: Add mocks for openid-client and passport strategy in Jest configuration to fix unit tests
* fix eslint errors: Format mock file openid-client.
* ✨ feat: Add PKCE support for OpenID and default handling in strategy setup
---------
Co-authored-by: Atef Bellaaj <slalom.bellaaj@external.daimlertruck.com>
Co-authored-by: Ruben Talstra <RubenTalstra1211@outlook.com>
91 lines
3.6 KiB
JavaScript
91 lines
3.6 KiB
JavaScript
jest.mock('~/cache/getLogStores');
|
|
const request = require('supertest');
|
|
const express = require('express');
|
|
const configRoute = require('../config');
|
|
// file deepcode ignore UseCsurfForExpress/test: test
|
|
const app = express();
|
|
app.disable('x-powered-by');
|
|
app.use('/api/config', configRoute);
|
|
|
|
afterEach(() => {
|
|
delete process.env.APP_TITLE;
|
|
delete process.env.GOOGLE_CLIENT_ID;
|
|
delete process.env.GOOGLE_CLIENT_SECRET;
|
|
delete process.env.FACEBOOK_CLIENT_ID;
|
|
delete process.env.FACEBOOK_CLIENT_SECRET;
|
|
delete process.env.OPENID_CLIENT_ID;
|
|
delete process.env.OPENID_CLIENT_SECRET;
|
|
delete process.env.OPENID_ISSUER;
|
|
delete process.env.OPENID_SESSION_SECRET;
|
|
delete process.env.OPENID_BUTTON_LABEL;
|
|
delete process.env.OPENID_AUTO_REDIRECT;
|
|
delete process.env.OPENID_AUTH_URL;
|
|
delete process.env.GITHUB_CLIENT_ID;
|
|
delete process.env.GITHUB_CLIENT_SECRET;
|
|
delete process.env.DISCORD_CLIENT_ID;
|
|
delete process.env.DISCORD_CLIENT_SECRET;
|
|
delete process.env.DOMAIN_SERVER;
|
|
delete process.env.ALLOW_REGISTRATION;
|
|
delete process.env.ALLOW_SOCIAL_LOGIN;
|
|
delete process.env.ALLOW_PASSWORD_RESET;
|
|
delete process.env.LDAP_URL;
|
|
delete process.env.LDAP_BIND_DN;
|
|
delete process.env.LDAP_BIND_CREDENTIALS;
|
|
delete process.env.LDAP_USER_SEARCH_BASE;
|
|
delete process.env.LDAP_SEARCH_FILTER;
|
|
});
|
|
|
|
//TODO: This works/passes locally but http request tests fail with 404 in CI. Need to figure out why.
|
|
|
|
// eslint-disable-next-line jest/no-disabled-tests
|
|
describe.skip('GET /', () => {
|
|
it('should return 200 and the correct body', async () => {
|
|
process.env.APP_TITLE = 'Test Title';
|
|
process.env.GOOGLE_CLIENT_ID = 'Test Google Client Id';
|
|
process.env.GOOGLE_CLIENT_SECRET = 'Test Google Client Secret';
|
|
process.env.FACEBOOK_CLIENT_ID = 'Test Facebook Client Id';
|
|
process.env.FACEBOOK_CLIENT_SECRET = 'Test Facebook Client Secret';
|
|
process.env.OPENID_CLIENT_ID = 'Test OpenID Id';
|
|
process.env.OPENID_CLIENT_SECRET = 'Test OpenID Secret';
|
|
process.env.OPENID_ISSUER = 'Test OpenID Issuer';
|
|
process.env.OPENID_SESSION_SECRET = 'Test Secret';
|
|
process.env.OPENID_BUTTON_LABEL = 'Test OpenID';
|
|
process.env.OPENID_AUTH_URL = 'http://test-server.com';
|
|
process.env.GITHUB_CLIENT_ID = 'Test Github client Id';
|
|
process.env.GITHUB_CLIENT_SECRET = 'Test Github client Secret';
|
|
process.env.DISCORD_CLIENT_ID = 'Test Discord client Id';
|
|
process.env.DISCORD_CLIENT_SECRET = 'Test Discord client Secret';
|
|
process.env.DOMAIN_SERVER = 'http://test-server.com';
|
|
process.env.ALLOW_REGISTRATION = 'true';
|
|
process.env.ALLOW_SOCIAL_LOGIN = 'true';
|
|
process.env.ALLOW_PASSWORD_RESET = 'true';
|
|
process.env.LDAP_URL = 'Test LDAP URL';
|
|
process.env.LDAP_BIND_DN = 'Test LDAP Bind DN';
|
|
process.env.LDAP_BIND_CREDENTIALS = 'Test LDAP Bind Credentials';
|
|
process.env.LDAP_USER_SEARCH_BASE = 'Test LDAP User Search Base';
|
|
process.env.LDAP_SEARCH_FILTER = 'Test LDAP Search Filter';
|
|
|
|
const response = await request(app).get('/');
|
|
|
|
expect(response.statusCode).toBe(200);
|
|
expect(response.body).toEqual({
|
|
appTitle: 'Test Title',
|
|
socialLogins: ['google', 'facebook', 'openid', 'github', 'discord'],
|
|
discordLoginEnabled: true,
|
|
facebookLoginEnabled: true,
|
|
githubLoginEnabled: true,
|
|
googleLoginEnabled: true,
|
|
openidLoginEnabled: true,
|
|
openidLabel: 'Test OpenID',
|
|
openidImageUrl: 'http://test-server.com',
|
|
ldap: {
|
|
enabled: true,
|
|
},
|
|
serverDomain: 'http://test-server.com',
|
|
emailLoginEnabled: 'true',
|
|
registrationEnabled: 'true',
|
|
passwordResetEnabled: 'true',
|
|
socialLoginEnabled: 'true',
|
|
});
|
|
});
|
|
});
|