snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/lib/oauth/addPassportCustomOAuth.ts

@@ -0,0 +1,62 @@
+import type { OAuthConfiguration } from '@rocket.chat/core-typings';
+import passport from 'passport';
+import type { DoneCallback, Profile } from 'passport';
+
+import { allowPassportOAuthMiddleware } from './allowPassportOAuthMiddleware';
+import { passportOAuthCallback } from './passportOAuthCallback';
+import { removeOAuthRoutes } from './removeOAuthRoutes';
+import { verifyFunction } from './verifyFunction';
+import { oAuthRouter } from '../../configuration/configurePassport';
+import { settings } from '../../settings';
+import { CustomOAuthStrategy } from '../auth-providers/custom-oauth/customOAuth';
+
+export const addPassportCustomOAuth = (
+	serviceName: string,
+	config: Partial<OAuthConfiguration & { clientSecret: string }>,
+	isCustomOAuth: boolean = false,
+) => {
+	passport.unuse(serviceName);
+	removeOAuthRoutes(serviceName);
+
+	if (!config.clientId || !config.clientSecret || !config.serverURL) {
+		return;
+	}
+
+	passport.use(
+		serviceName,
+		new CustomOAuthStrategy(
+			serviceName,
+			config as OAuthConfiguration & { clientSecret: string },
+			(accessToken: string, refreshToken: string, profile: Profile, done: DoneCallback) =>
+				verifyFunction(accessToken, refreshToken, profile, done, serviceName),
+		),
+	);
+
+	const siteUrl = settings.get<string>('Site_Url').replace(/\/$/, '');
+
+	oAuthRouter.get(
+		`/oauth/${serviceName}`,
+		allowPassportOAuthMiddleware(serviceName, isCustomOAuth),
+		(req, _res, next) => {
+			const { loginClient } = req.query;
+			if (loginClient === 'mobile' || loginClient === 'desktop') {
+				req.session.loginClient = loginClient;
+				req.session.save(() => {
+					next();
+				});
+			} else {
+				//delete stale value from previous sessions if any
+				delete req.session.loginClient;
+				next();
+			}
+		},
+		passport.authenticate(serviceName, { scope: config.scope, prompt: 'consent', failureRedirect: '/login', keepSessionInfo: true }),
+	);
+
+	oAuthRouter.get(
+		`/_oauth/${serviceName}`,
+		allowPassportOAuthMiddleware(serviceName, isCustomOAuth),
+		passport.authenticate(serviceName, { failureRedirect: '/login', failWithError: true, keepSessionInfo: true }),
+		passportOAuthCallback(siteUrl, config.loginStyle ? config.loginStyle : undefined),
+	);
+};