ea539cd1d4
Backend
- @adonisjs/ally installé + provider Google configuré (config/ally.ts)
scopes: userinfo.email + userinfo.profile (non-sensibles, validation
auto par Google)
- Migration : ajoute google_id (nullable unique) sur users + rend password
nullable (un user créé via Google n'a pas de mdp en base, il pourra
l'activer plus tard via "mot de passe oublié")
- AuthGoogleController.redirect : entrée OAuth (le bouton SPA pointe ici)
- AuthGoogleController.callback : matche par google_id puis email,
crée org+plans+user si nouveau, pose le refresh cookie httpOnly,
redirige le browser vers le SPA /auth/google/complete?next=...
(next = / pour user complet, /onboarding/entreprise pour nouveau)
- Routes : GET /api/v1/auth/google/{redirect,callback}
- Env : GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_CALLBACK_URL
Frontend
- Composant GoogleButton réutilisable (full-page redirect, pas fetch —
OAuth nécessite navigation pour les cookies cross-origin Google)
- AuthDivider "ou" entre SSO et formulaire email/password
- Boutons ajoutés sur /login et /signup
- Route /auth/google/complete : appelle POST /api/v1/auth/refresh (le
cookie posé par la callback est auto-envoyé), stocke access token +
user dans authStore, navigue vers `next`. Échec → /login + toast.
- Toast d'erreur sur /login si on revient avec ?google=denied|error|...
K3s
- ConfigMap rubis-api-config : ajout GOOGLE_CALLBACK_URL prod
- Secret rubis-app-secrets : ajout GOOGLE_CLIENT_ID + GOOGLE_CLIENT_SECRET
(posés via kubectl, pas dans le manifest)
Doc
- .claude/deploy-memory.md mis à jour avec la procédure Google Cloud
Console (créer OAuth client, redirect URIs, écran de consentement)
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
130 lines
3.8 KiB
TypeScript
130 lines
3.8 KiB
TypeScript
import { indexEntities } from '@adonisjs/core'
|
|
import { defineConfig } from '@adonisjs/core/app'
|
|
import { generateRegistry } from '@tuyau/core/hooks'
|
|
import { indexPolicies } from '@adonisjs/bouncer'
|
|
|
|
export default defineConfig({
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Experimental flags
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The following features will be enabled by default in the next major release
|
|
| of AdonisJS. You can opt into them today to avoid any breaking changes
|
|
| during upgrade.
|
|
|
|
|
*/
|
|
experimental: {},
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Commands
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| List of ace commands to register from packages. The application commands
|
|
| will be scanned automatically from the "./commands" directory.
|
|
|
|
|
*/
|
|
commands: [
|
|
() => import('@adonisjs/core/commands'),
|
|
() => import('@adonisjs/lucid/commands'),
|
|
() => import('@adonisjs/session/commands'),
|
|
() => import('@adonisjs/bouncer/commands')
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Service providers
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| List of service providers to import and register when booting the
|
|
| application
|
|
|
|
|
*/
|
|
providers: [
|
|
() => import('@adonisjs/core/providers/app_provider'),
|
|
() => import('@adonisjs/core/providers/hash_provider'),
|
|
{
|
|
file: () => import('@adonisjs/core/providers/repl_provider'),
|
|
environment: ['repl', 'test'],
|
|
},
|
|
() => import('@adonisjs/core/providers/vinejs_provider'),
|
|
() => import('@adonisjs/session/session_provider'),
|
|
() => import('@adonisjs/shield/shield_provider'),
|
|
() => import('@adonisjs/lucid/database_provider'),
|
|
() => import('@adonisjs/cors/cors_provider'),
|
|
() => import('@adonisjs/auth/auth_provider'),
|
|
() => import('#providers/api_provider'),
|
|
() => import('@adonisjs/bouncer/bouncer_provider'),
|
|
() => import('@adonisjs/limiter/limiter_provider'),
|
|
() => import('@adonisjs/mail/mail_provider'),
|
|
() => import('@adonisjs/drive/drive_provider'),
|
|
() => import('@adonisjs/static/static_provider'),
|
|
() => import('@adonisjs/ally/ally_provider'),
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Preloads
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| List of modules to import before starting the application.
|
|
|
|
|
*/
|
|
preloads: [
|
|
() => import('#start/routes'),
|
|
() => import('#start/kernel'),
|
|
() => import('#start/validator'),
|
|
() => import('#start/queue'),
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Tests
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| List of test suites to organize tests by their type. Feel free to remove
|
|
| and add additional suites.
|
|
|
|
|
*/
|
|
tests: {
|
|
suites: [
|
|
{
|
|
files: ['tests/unit/**/*.spec.{ts,js}'],
|
|
name: 'unit',
|
|
timeout: 2000,
|
|
},
|
|
{
|
|
files: ['tests/functional/**/*.spec.{ts,js}'],
|
|
name: 'functional',
|
|
timeout: 30000,
|
|
},
|
|
],
|
|
forceExit: false,
|
|
},
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Metafiles
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| A collection of files you want to copy to the build folder when creating
|
|
| the production build.
|
|
|
|
|
*/
|
|
metaFiles: [{
|
|
pattern: 'public/**',
|
|
reloadServer: false,
|
|
}],
|
|
|
|
hooks: {
|
|
init: [
|
|
indexEntities({
|
|
transformers: { enabled: true },
|
|
}),
|
|
generateRegistry(),
|
|
indexPolicies()
|
|
],
|
|
},
|
|
})
|