feat: oauth for chrome extension (#4870)
Previously we had to create a separate API key to give access to chrome extension so we can make calls to the DB. This PR includes logic to initiate a oauth flow with PKCE method which redirects to the `Authorise` screen to give access to server tokens. Implemented in this PR- 1. make `redirectUrl` a non-nullable parameter 2. Add `NODE_ENV` to environment variable service 3. new env variable `CHROME_EXTENSION_REDIRECT_URL` on server side 4. strict checks for redirectUrl 5. try catch blocks on utils db query methods 6. refactor Apollo Client to handle `unauthorized` condition 7. input field to enter server url (for self-hosting) 8. state to show user if its already connected 9. show error if oauth flow is cancelled by user Follow up PR - Renew token logic --------- Co-authored-by: Félix Malfait <felix@twenty.com>
This commit is contained in:
@ -0,0 +1,28 @@
|
||||
import { gql } from '@apollo/client';
|
||||
|
||||
export const EXCHANGE_AUTHORIZATION_CODE = gql`
|
||||
mutation ExchangeAuthorizationCode(
|
||||
$authorizationCode: String!
|
||||
$codeVerifier: String
|
||||
$clientSecret: String
|
||||
) {
|
||||
exchangeAuthorizationCode(
|
||||
authorizationCode: $authorizationCode
|
||||
codeVerifier: $codeVerifier
|
||||
clientSecret: $clientSecret
|
||||
) {
|
||||
loginToken {
|
||||
token
|
||||
expiresAt
|
||||
}
|
||||
accessToken {
|
||||
token
|
||||
expiresAt
|
||||
}
|
||||
refreshToken {
|
||||
token
|
||||
expiresAt
|
||||
}
|
||||
}
|
||||
}
|
||||
`;
|
||||
20
packages/twenty-chrome-extension/src/graphql/auth/queries.ts
Normal file
20
packages/twenty-chrome-extension/src/graphql/auth/queries.ts
Normal file
@ -0,0 +1,20 @@
|
||||
// import { gql } from '@apollo/client';
|
||||
|
||||
// export const RENEW_TOKEN = gql`
|
||||
// query RenewToken($appToken: String!) {
|
||||
// renewToken(appToken: $appToken) {
|
||||
// loginToken {
|
||||
// token
|
||||
// expiresAt
|
||||
// }
|
||||
// accessToken {
|
||||
// token
|
||||
// expiresAt
|
||||
// }
|
||||
// refreshToken {
|
||||
// token
|
||||
// expiresAt
|
||||
// }
|
||||
// }
|
||||
// }
|
||||
// `;
|
||||
Reference in New Issue
Block a user