auth.controller.ts

import { Controller, Get, Request, Response, UseGuards } from '@nestjs/common';
import {
  Response as ExpressResponse,
  Request as ExpressRequest,
} from 'express';
import { Issuer } from 'openid-client';

import { BrokerOidcRedirectGuard } from './broker-oidc-redirect.guard';

@Controller('auth')
export class AuthController {
  /**
   * API for triggering OIDC login
   */
  @UseGuards(BrokerOidcRedirectGuard)
  @Get('/login')
  // eslint-disable-next-line @typescript-eslint/no-empty-function
  login() {}

  /**
   * Get user details of person currently logged in
   */
  @UseGuards(BrokerOidcRedirectGuard)
  @Get('/user')
  user(@Request() req: any) {
    return req.user;
  }

  /**
   * OIDC callback endpoint
   */
  @UseGuards(BrokerOidcRedirectGuard)
  @Get('/callback')
  loginCallback(@Response() res: ExpressResponse) {
    res.redirect('/');
  }

  /**
   * Logout user from OIDC
   */
  @Get('/logout')
  async logout(
    @Request() req: ExpressRequest,
    @Response() res: ExpressResponse,
  ) {
    const id_token = req.user ? (req.user as any).id_token : undefined;
    req.logout(() => {
      req.session.destroy(async () => {
        const TrustIssuer = await Issuer.discover(
          `${process.env.OAUTH2_CLIENT_PROVIDER_OIDC_ISSUER}/.well-known/openid-configuration`,
        );
        const end_session_endpoint = TrustIssuer.metadata.end_session_endpoint;
        if (end_session_endpoint) {
          res.redirect(
            end_session_endpoint +
              '?post_logout_redirect_uri=' +
              process.env
                .OAUTH2_CLIENT_REGISTRATION_LOGIN_POST_LOGOUT_REDIRECT_URI +
              (id_token ? '&id_token_hint=' + id_token : ''),
          );
        } else {
          res.redirect('/');
        }
      });
    });
  }
}