homeio

1import "server-only";
2
3import { eq, sql } from "drizzle-orm";
4import { db } from "@/lib/server/db/drizzle";
5import { settings } from "@/lib/server/db/schema";
6import { encryptSecret, decryptSecret } from "@/lib/server/modules/files/secrets";
7
8export type GoogleOAuthConfig = {
9  clientId: string;
10  clientSecret: string;
11  redirectUri: string;
12};
13
14export type GoogleOAuthConfigPublic = {
15  clientId: string;
16  redirectUri: string;
17  hasSecret: boolean;
18};
19
20async function ensureSettingsRow() {
21  await db.execute(sql`
22    INSERT INTO settings (id, appearance_json, updated_at)
23    VALUES ('singleton', '{}', NOW())
24    ON CONFLICT (id) DO NOTHING
25  `);
26}
27
28export async function getGoogleOAuthConfig(): Promise<GoogleOAuthConfig | null> {
29  await ensureSettingsRow();
30
31  const rows = await db
32    .select({
33      googleClientId: settings.googleClientId,
34      googleClientSecretCiphertext: settings.googleClientSecretCiphertext,
35      googleClientSecretIv: settings.googleClientSecretIv,
36      googleClientSecretTag: settings.googleClientSecretTag,
37      googleRedirectUri: settings.googleRedirectUri,
38    })
39    .from(settings)
40    .where(eq(settings.id, "singleton"))
41    .limit(1);
42
43  const row = rows[0];
44  if (!row?.googleClientId || !row.googleClientSecretCiphertext || !row.googleClientSecretIv || !row.googleClientSecretTag) {
45    return null;
46  }
47
48  const clientSecret = decryptSecret({
49    ciphertext: row.googleClientSecretCiphertext,
50    iv: row.googleClientSecretIv,
51    tag: row.googleClientSecretTag,
52  });
53
54  return {
55    clientId: row.googleClientId,
56    clientSecret,
57    redirectUri: row.googleRedirectUri ?? "http://localhost:3000/api/v1/files/google-drive/callback",
58  };
59}
60
61export async function getGoogleOAuthConfigPublic(): Promise<GoogleOAuthConfigPublic> {
62  await ensureSettingsRow();
63
64  const rows = await db
65    .select({
66      googleClientId: settings.googleClientId,
67      googleClientSecretCiphertext: settings.googleClientSecretCiphertext,
68      googleRedirectUri: settings.googleRedirectUri,
69    })
70    .from(settings)
71    .where(eq(settings.id, "singleton"))
72    .limit(1);
73
74  const row = rows[0];
75  return {
76    clientId: row?.googleClientId ?? "",
77    redirectUri: row?.googleRedirectUri ?? "http://localhost:3000/api/v1/files/google-drive/callback",
78    hasSecret: Boolean(row?.googleClientSecretCiphertext),
79  };
80}
81
82export async function saveGoogleOAuthConfig(config: GoogleOAuthConfig): Promise<void> {
83  await ensureSettingsRow();
84
85  const encSecret = encryptSecret(config.clientSecret);
86
87  await db
88    .update(settings)
89    .set({
90      googleClientId: config.clientId,
91      googleClientSecretCiphertext: encSecret.ciphertext,
92      googleClientSecretIv: encSecret.iv,
93      googleClientSecretTag: encSecret.tag,
94      googleRedirectUri: config.redirectUri,
95      updatedAt: new Date(),
96    })
97    .where(eq(settings.id, "singleton"));
98}
99
100export async function clearGoogleOAuthConfig(): Promise<void> {
101  await ensureSettingsRow();
102
103  await db
104    .update(settings)
105    .set({
106      googleClientId: null,
107      googleClientSecretCiphertext: null,
108      googleClientSecretIv: null,
109      googleClientSecretTag: null,
110      googleRedirectUri: null,
111      updatedAt: new Date(),
112    })
113    .where(eq(settings.id, "singleton"));
114}
115