// ...
let LibAuth = require("libauth");
let libauth = LibAuth.create(issuer, privkey, { cookiePath: "/api/authn/" });

// ...
app.post("/api/authn/session/credentials", setCookieByCredentials);
app.post("/api/authn/session/id_token", sendIdTokenBySession);
app.post("/api/authn/access_token", sendAccessTokenByIdToken);
app.delete("/api/authn/session", revokeCookieAndIdToken);

app.use("/.well-known/openid-configuration", libauth.wellKnownOidc());
app.use("/.well-known/jwks.json", libauth.wellKnownJwks());

"use strict";

let FsSync = require("fs");

let issuer = process.env.BASE_URL || `http://localhost:${process.env.PORT}`;
let privkey = JSON.parse(FsSync.readFileSync("./key.jwk.json", "utf8"));

let bodyParser = require("body-parser");
app.use("/api/authn", bodyParser.json({ limit: "100kb" }));

let cookieParser = require("cookie-parser");
let cookieSecret = process.env.COOKIE_SECRET;
app.use("/api/authn/session", cookieParser(cookieSecret));

let authRoutes = require("./auth-routes.js").create(issuer, privkey, {
  cookiePath: "/api/authn/session/",
});

app.post("/api/authn/session/credentials", authRoutes.setCookieByCredentials);
app.post("/api/authn/session/id_token", authRoutes.sendIdTokenBySession);
app.delete("/api/authn/session", authRoutes.revokeCookieAndIdToken);

app.post("/api/authn/access_token", authRoutes.sendAccessTokenByIdToken);

app.get("/.well-known/openid-configuration", authRoutes.wellKnownOidc);
app.get("/.well-known/jwks.json", authRoutes.wellKnownJwks);

module.exports = app;

"use strict";

let AuthRoutes = module.exports;

let LibAuth = require("libauth");

AuthRoutes.create = function () {
  let authRoutes = {};

  let libauth = LibAuth.create(issuer, privkey, {
    cookiePath: "/api/authn/",
    /*
    refreshCookiePath: "/api/authn/",
    accessCookiePath: "/api/assets/",
    */
  });

  // Create session by login credentials
  AuthRoutes.setCookieByCredentials = [
    libauth.readCredentials(),
    MyDB.getUserClaimsByPassword,
    libauth.newSession(),
    libauth.initClaims(),
    libauth.initTokens(),
    libauth.initCookie(),
    MyDB.expireCurrentSession,
    MyDB.saveNewSession,
    libauth.setCookieHeader(),
    libauth.sendTokens(),
  ];

  // Refresh ID Token via Session
  AuthRoutes.sendIdTokenBySession = [
    libauth.requireCookie(),
    MyDB.getUserClaimsBySub,
    libauth.initClaims({ idClaims: {} }),
    libauth.initTokens(),
    libauth.sendTokens(),
  ];

  // Exchange Access Token via ID Token
  AuthRoutes.sendAccessTokenByIdToken = [
    libauth.requireBearerClaims(),
    MyDB.getUserClaimsBySub,
    libauth.initClaims({ accessClaims: {} }),
    libauth.initTokens(),
    libauth.sendTokens(),
  ];

  // Logout (delete session cookie)
  AuthRoutes.revokeCookieAndIdToken = [
    libauth.readCookie(),
    MyDB.expireCurrentSession,
    libauth.expireCookie(),
    libauth.sendOk({ success: true }),
    libauth.sendError({ success: true }),
  ];

  AuthRoutes.wellKnownOidc = libauth.wellKnownOidc();
  AuthRoutes.wellKnownJwks = libauth.wellKnownJwks();

  return authRoutes;
};

"use strict";

require("dotenv").config({ path: ".env" });

let Http = require("http");
let Express = require("express");

let server = Express();
let app = new Express.Router();

let port = process.env.PORT || 3000;
Http.createServer(server).listen(port, function () {
  /* jshint validthis:true */
  console.info("Listening on", this.address());
});