iceshrimp/packages/backend/src/server/api/mastodon/endpoints/auth.ts

import Router from "@koa/router";
import { AuthHelpers } from "@/server/api/mastodon/helpers/auth.js";
import { convertId, IdType } from "@/misc/convert-id.js";

const readScope = [
    "read:account",
    "read:drive",
    "read:blocks",
    "read:favorites",
    "read:following",
    "read:messaging",
    "read:mutes",
    "read:notifications",
    "read:reactions",
    "read:pages",
    "read:page-likes",
    "read:user-groups",
    "read:channels",
    "read:gallery",
    "read:gallery-likes",
];
const writeScope = [
    "write:account",
    "write:drive",
    "write:blocks",
    "write:favorites",
    "write:following",
    "write:messaging",
    "write:mutes",
    "write:notes",
    "write:notifications",
    "write:reactions",
    "write:votes",
    "write:pages",
    "write:page-likes",
    "write:user-groups",
    "write:channels",
    "write:gallery",
    "write:gallery-likes",
];

export function setupEndpointsAuth(router: Router): void {
    router.post("/v1/apps", async (ctx) => {
        const body: any = ctx.request.body || ctx.request.query;
        try {
            let scope = body.scopes;
            if (typeof scope === "string") scope = scope.split(" ");
            const pushScope = new Set<string>();
            for (const s of scope) {
                if (s.match(/^read/)) for (const r of readScope) pushScope.add(r);
                if (s.match(/^write/)) for (const r of writeScope) pushScope.add(r);
            }
            const scopeArr = Array.from(pushScope);

            const red = body.redirect_uris;
            const appData = await AuthHelpers.registerApp(body['client_name'], scopeArr, red, body['website']);
            const returns = {
                id: convertId(appData.id, IdType.MastodonId),
                name: appData.name,
                website: body.website,
                redirect_uri: red,
                client_id: Buffer.from(appData.url ?? "").toString("base64"),
                client_secret: appData.clientSecret,
            };
            ctx.body = returns;
        } catch (e: any) {
            console.error(e);
            ctx.status = 401;
            ctx.body = e.response.data;
        }
    });
}