feat(auth): implement OIDC auth for frontend

[jescalada]

This is a preliminary PR for #1. It adds the OIDC login button to the login page (/login) and the internals for OIDC. Note that the MongoDB implementation is missing at the moment (since this will be refactored soon).

In order to get this to work, you'll have to modify the proxy.config.json in the project (assuming you're executing in dev). Look for the authentication entry, and fill it in with your own OIDC data. If you want to use my own config from below, let me know your email so I can register you in my Google client.

  "authentication": [
    {
      "type": "local",
      "enabled": false
    },
    {
      "type": "ActiveDirectory",
      "enabled": false,
      "adminGroup": "",
      "userGroup": "",
      "domain": "",
      "adConfig": {
        "url": "",
        "baseDN": "",
        "searchBase": ""
      }
    },
    {
      "type": "openidconnect",
      "enabled": true,
      "oidcConfig": {
        "issuer": "https://accounts.google.com",
        "clientID": "1009968223893-u92qq6itk7ej5008o4174gjubs5lhorg.apps.googleusercontent.com",
        "clientSecret": "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",
        "authorizationURL": "https://accounts.google.com/o/oauth2/auth",
        "tokenURL": "https://oauth2.googleapis.com/token",
        "userInfoURL": "https://openidconnect.googleapis.com/v1/userinfo",
        "callbackURL": "http://localhost:8080/api/auth/oidc/callback",
        "scope": "email profile"
      }
    }
  ],

Note: The new config will cause several unit tests to fail. To make those pass again, set the local authentication in the config to "enabled": false. I'll patch this up when implementing the multiple auth strategy (#6) system.

Changelog

• Add OIDC login backend (endpoints, filesystem database functions) and frontend
  • Add trivial E2E test for OIDC
• Add checks for easier development
• Fix minor issues to complete OIDC auth flow

[fabiovincenzi]

Also if there is a local user with the same username

[fabiovincenzi]

is this fallback to findUser necessary? If we are logging with OIDC shouldn't we only care about OIDC users?

[fabiovincenzi]

It generally looks really good, and I think the OIDC strategy works well, I see problems with the local authentications, I couldn't manage to login with the admin profile, but I'm not sure if this is related to this pr.

[jescalada]

It generally looks really good, and I think the OIDC strategy works well, I see problems with the local authentications, I couldn't manage to login with the admin profile, but I'm not sure if this is related to this pr.

I believe this is because in this PR, only one auth method can be active at a time. It's fixed in #24!

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

Attention: Patch coverage is 21.59091% with 69 lines in your changes missing coverage. Please review.

Please upload report for BASE (main@c67387c). Learn more about missing BASE report.

Files with missing lines	Patch %	Lines
src/service/passport/oidc.js	13.46%	45 Missing ⚠️
src/service/routes/auth.js	27.77%	13 Missing ⚠️
src/db/file/users.js	12.50%	7 Missing ⚠️
src/service/passport/index.js	40.00%	3 Missing ⚠️
src/service/routes/users.js	0.00%	1 Missing ⚠️

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@           Coverage Diff           @@
##             main       #7   +/-   ##
=======================================
  Coverage        ?   61.06%           
=======================================
  Files           ?       48           
  Lines           ?     1767           
  Branches        ?        0           
=======================================
  Hits            ?     1079           
  Misses          ?      688           
  Partials        ?        0           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[jescalada]

Closing as upstream PR finos#936 got merged.