twenty_crm/packages/twenty-server/src/engine/modules/auth/controllers/google-auth.controller.ts

import { Controller, Get, Req, Res, UseGuards } from '@nestjs/common';
import { InjectRepository } from '@nestjs/typeorm';

import { Response } from 'express';
import { Repository } from 'typeorm';

import { GoogleRequest } from 'src/engine/modules/auth/strategies/google.auth.strategy';
import { TokenService } from 'src/engine/modules/auth/services/token.service';
import { GoogleProviderEnabledGuard } from 'src/engine/modules/auth/guards/google-provider-enabled.guard';
import { GoogleOauthGuard } from 'src/engine/modules/auth/guards/google-oauth.guard';
import { User } from 'src/engine/modules/user/user.entity';
import { Workspace } from 'src/engine/modules/workspace/workspace.entity';
import { AuthService } from 'src/engine/modules/auth/services/auth.service';
import { TypeORMService } from 'src/database/typeorm/typeorm.service';
import { EnvironmentService } from 'src/engine/integrations/environment/environment.service';

@Controller('auth/google')
export class GoogleAuthController {
  constructor(
    private readonly tokenService: TokenService,
    private readonly environmentService: EnvironmentService,
    private readonly typeORMService: TypeORMService,
    private readonly authService: AuthService,
    @InjectRepository(Workspace, 'core')
    @InjectRepository(User, 'core')
    private readonly userRepository: Repository<User>,
  ) {}

  @Get()
  @UseGuards(GoogleProviderEnabledGuard, GoogleOauthGuard)
  async googleAuth() {
    // As this method is protected by Google Auth guard, it will trigger Google SSO flow
    return;
  }

  @Get('redirect')
  @UseGuards(GoogleProviderEnabledGuard, GoogleOauthGuard)
  async googleAuthRedirect(@Req() req: GoogleRequest, @Res() res: Response) {
    const { firstName, lastName, email, picture, workspaceInviteHash } =
      req.user;

    const mainDataSource = this.typeORMService.getMainDataSource();

    const existingUser = await mainDataSource
      .getRepository(User)
      .findOneBy({ email: email });

    if (existingUser) {
      const loginToken = await this.tokenService.generateLoginToken(
        existingUser.email,
      );

      return res.redirect(
        this.tokenService.computeRedirectURI(loginToken.token),
      );
    }

    const user = await this.authService.signUp({
      email,
      firstName,
      lastName,
      picture,
      workspaceInviteHash,
    });

    const loginToken = await this.tokenService.generateLoginToken(user.email);

    return res.redirect(this.tokenService.computeRedirectURI(loginToken.token));
  }
}