mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-16 16:30:15 +01:00
dbe4dd96b4
* 🧹 chore: Update logger imports to use @librechat/data-schemas across multiple files and remove unused sleep function from queue.js (#9930) * chore: Replace local isEnabled utility with @librechat/api import across multiple files, update test files * chore: Replace local logger import with @librechat/data-schemas logger in countTokens.js and fork.js * chore: Update logs volume path in docker-compose.yml to correct directory * chore: import order of isEnabled in static.js
49 lines
1.7 KiB
JavaScript
49 lines
1.7 KiB
JavaScript
const jwt = require('jsonwebtoken');
|
|
const { logger } = require('@librechat/data-schemas');
|
|
const { Strategy: AppleStrategy } = require('passport-apple');
|
|
const socialLogin = require('./socialLogin');
|
|
|
|
/**
|
|
* Extract profile details from the decoded idToken
|
|
* @param {Object} params - Parameters from the verify callback
|
|
* @param {string} params.idToken - The ID token received from Apple
|
|
* @param {Object} params.profile - The profile object (may contain partial info)
|
|
* @returns {Object} - The extracted user profile details
|
|
*/
|
|
const getProfileDetails = ({ idToken, profile }) => {
|
|
if (!idToken) {
|
|
logger.error('idToken is missing');
|
|
throw new Error('idToken is missing');
|
|
}
|
|
|
|
const decoded = jwt.decode(idToken);
|
|
|
|
logger.debug(`Decoded Apple JWT: ${JSON.stringify(decoded, null, 2)}`);
|
|
|
|
return {
|
|
email: decoded.email,
|
|
id: decoded.sub,
|
|
avatarUrl: null, // Apple does not provide an avatar URL
|
|
username: decoded.email ? decoded.email.split('@')[0].toLowerCase() : `user_${decoded.sub}`,
|
|
name: decoded.name
|
|
? `${decoded.name.firstName} ${decoded.name.lastName}`
|
|
: profile.displayName || null,
|
|
emailVerified: true, // Apple verifies the email
|
|
};
|
|
};
|
|
|
|
// Initialize the social login handler for Apple
|
|
const appleLogin = socialLogin('apple', getProfileDetails);
|
|
|
|
module.exports = () =>
|
|
new AppleStrategy(
|
|
{
|
|
clientID: process.env.APPLE_CLIENT_ID,
|
|
teamID: process.env.APPLE_TEAM_ID,
|
|
callbackURL: `${process.env.DOMAIN_SERVER}${process.env.APPLE_CALLBACK_URL}`,
|
|
keyID: process.env.APPLE_KEY_ID,
|
|
privateKeyLocation: process.env.APPLE_PRIVATE_KEY_PATH,
|
|
passReqToCallback: false, // Set to true if you need to access the request in the callback
|
|
},
|
|
appleLogin,
|
|
);
|