zerobyte/app/server/lib/auth/middlewares/trust-sso-provider-for-linking.ts
2026-02-26 19:58:49 +01:00

37 lines
983 B
TypeScript

import type { GenericEndpointContext } from "@better-auth/core";
import { db } from "~/server/db/db";
import { extractProviderIdFromContext } from "../utils/sso-context";
export function isSsoCallbackPath(path?: string): boolean {
if (!path) {
return false;
}
return path.startsWith("/sso/callback/");
}
export async function trustSsoProviderForLinking(ctx: GenericEndpointContext): Promise<void> {
const providerId = extractProviderIdFromContext(ctx);
if (!providerId) {
return;
}
const accountLinking = ctx.context.options.account?.accountLinking;
if (!accountLinking || accountLinking.enabled === false) {
return;
}
const provider = await db.query.ssoProvider.findFirst({ where: { providerId, autoLinkMatchingEmails: true } });
if (!provider) {
return;
}
const trustedProviders = accountLinking.trustedProviders ?? [];
if (trustedProviders.includes(providerId)) {
return;
}
accountLinking.trustedProviders = [...trustedProviders, providerId];
}