auth.config.mjs

import Slack from "@auth/core/providers/slack";
import { defineConfig } from "auth-astro";
import { db, like, and, User, Organization } from "astro:db";

import { LogSnag } from "logsnag";

const logsnag = new LogSnag({
	token: process.env.LOGSNAG_TOKEN || "",
	project: "magicsnap",
});

function generateRandomString() {
	const chars =
		"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
	let result = "";
	for (let i = 0; i < 16; i++) {
		const randomIndex = Math.floor(Math.random() * chars.length);
		result += chars.charAt(randomIndex);
	}
	return result;
}

export default defineConfig({
	providers: [
		Slack({
			clientId: import.meta.env.SLACK_CLIENT_ID,
			clientSecret: import.meta.env.SLACK_CLIENT_SECRET,
			checks: ["pkce", "nonce"],
			async profile(profile) {
				let newUser = false;
				profile["https://slack.com/team_id"] =
					"slack-" + profile["https://slack.com/team_id"];

				const role = await db
					.select()
					.from(User)
					.where(
						and(like(User.userId, profile["https://slack.com/user_id"])),
						like(User.team, profile["https://slack.com/team_id"])
					);

				if (role.length === 0) {
					const users = await db
						.select()
						.from(User)
						.where(like(User.team, profile["https://slack.com/team_id"]));

					const organizations = await db
						.select()
						.from(Organization)
						.where(
							like(Organization.team, profile["https://slack.com/team_id"])
						);

					// check if the user is part of an organization in the db by checking if the team id is the same
					if (
						organizations
							.map((org) => org.team)
							.includes(profile["https://slack.com/team_id"])
					) {
						if (users.length === 0) {
							await db.insert(User).values({
								userId: profile["https://slack.com/user_id"],
								hash: generateRandomString(),
								name: profile.name,
								email: profile.email,
								image: profile.picture,
								team: profile["https://slack.com/team_id"],
								role: "admin",
							});

							await logsnag.track({
								channel: "signups",
								event: "signup",
								user_id: profile["https://slack.com/user_id"],
								description: "User signed up as an admin",
								icon: "🚀",
								tags: {
									team: profile["https://slack.com/team_id"],
									role: "admin",
								},
							});

							await logsnag.track({
								channel: "actions",
								event: "joined_team",
								user_id: profile["https://slack.com/user_id"],
								description: "User joined a team",
								icon: "🤝",
								tags: {
									team: profile["https://slack.com/team_id"],
									role: "admin",
								},
							});

							await logsnag.identify({
								user_id: profile["https://slack.com/user_id"],
								properties: {
									email: profile.email,
									name: profile.name,
									image: profile.picture,
									team: profile["https://slack.com/team_id"],
									role: "admin",
								},
							});

							role[0] = { role: "admin" };
							newUser = true;
						} else {
							await db.insert(User).values({
								userId: profile["https://slack.com/user_id"],
								hash: generateRandomString(),
								name: profile.name,
								email: profile.email,
								image: profile.picture,
								team: profile["https://slack.com/team_id"],
								role: "user",
							});

							await logsnag.track({
								channel: "signups",
								event: "signup",
								user_id: profile["https://slack.com/user_id"],
								description: "User signed up as a user",
								icon: "🚀",
								tags: {
									team: profile["https://slack.com/team_id"],
									role: "user",
								},
							});

							await logsnag.track({
								channel: "actions",
								event: "joined_team",
								user_id: profile["https://slack.com/user_id"],
								description: "User joined a team",
								icon: "🤝",
								tags: {
									team: profile["https://slack.com/team_id"],
									role: "user",
								},
							});

							await logsnag.identify({
								user_id: profile["https://slack.com/user_id"],
								properties: {
									email: profile.email,
									name: profile.name,
									image: profile.picture,
									team: profile["https://slack.com/team_id"],
									role: "user",
								},
							});

							role[0] = { role: "user" };
							newUser = true;
						}
					} else {
						role[0] = { role: "guest" };

						await logsnag.track({
							channel: "signups",
							event: "signup",
							user_id: profile["https://slack.com/user_id"],
							description: "User signed up as a guest",
							icon: "🚀",
							tags: {
								team: profile["https://slack.com/team_id"],
								role: "guest",
							},
						});

						await logsnag.identify({
							user_id: profile["https://slack.com/user_id"],
							properties: {
								email: profile.email,
								name: profile.name,
								image: profile.picture,
								team: profile["https://slack.com/team_id"],
								role: "guest",
							},
						});
					}
				}

				return {
					id: profile["https://slack.com/user_id"],
					name: profile.name,
					email: profile.email,
					image: profile.picture,
					team: profile["https://slack.com/team_id"],
					teamName: profile["https://slack.com/team_name"],
					teamImage: profile["https://slack.com/team_image_230"],
					role: role[0].role || "guest",
					newUser: newUser,
				};
			},
		}),
	],
	callbacks: {
		jwt({ token, user }) {
			if (user) {
				// User is available during sign-in
				token.team = user.team;
				token.teamName = user.teamName;
				token.teamImage = user.teamImage;
				token.role = user.role;
				token.id = user.id;
				token.newUser = user.newUser;
			}
			return token;
		},
		session({ session, token }) {
			if (token) {
				// Token is available during sign-in
				session.team = token.team;
				session.teamName = token.teamName;
				session.teamImage = token.teamImage;
				session.user.role = token.role;
				session.user.id = token.id;
				session.newUser = token.newUser;
			}
			return session;
		},
	},
});