feat: add OAuth2 authentication (Google/GitHub/Discord)

src/services/users/oauth2/[provider]/delete.ts

@@ -0,0 +1,75 @@
+import { Static, Type } from '@sinclair/typebox'
+import { FastifyPluginAsync, FastifySchema } from 'fastify'
+
+import prisma from '../../../../tools/database/prisma.js'
+import { fastifyErrors } from '../../../../models/utils.js'
+import authenticateUser from '../../../../tools/plugins/authenticateUser.js'
+import { oauthSchema } from '../../../../models/OAuth.js'
+
+const parametersSchema = Type.Object({
+  provider: oauthSchema.provider
+})
+
+type Parameters = Static<typeof parametersSchema>
+
+const deleteServiceSchema: FastifySchema = {
+  description: 'DELETE a provider to authenticate with for a user.',
+  tags: ['users'] as string[],
+  security: [
+    {
+      bearerAuth: []
+    }
+  ] as Array<{ [key: string]: [] }>,
+  params: parametersSchema,
+  response: {
+    200: Type.Object(oauthSchema),
+    400: fastifyErrors[400],
+    401: fastifyErrors[401],
+    403: fastifyErrors[403],
+    404: fastifyErrors[404],
+    500: fastifyErrors[500]
+  }
+} as const
+
+export const deleteProviderService: FastifyPluginAsync = async (fastify) => {
+  await fastify.register(authenticateUser)
+
+  fastify.route<{
+    Params: Parameters
+  }>({
+    method: 'DELETE',
+    url: '/users/oauth2/:provider',
+    schema: deleteServiceSchema,
+    handler: async (request, reply) => {
+      if (request.user == null) {
+        throw fastify.httpErrors.forbidden()
+      }
+      const { user } = request
+      const { provider } = request.params
+      const OAuths = await prisma.oAuth.findMany({
+        where: { userId: user.current.id }
+      })
+      const strategies = OAuths.map((oauth) => {
+        return oauth.provider
+      })
+      if (user.current.password != null) {
+        strategies.push('local')
+      }
+      const oauthProvider = OAuths.find((oauth) => oauth.provider === provider)
+      if (oauthProvider == null) {
+        throw fastify.httpErrors.notFound('You are not using this provider')
+      }
+      const hasOthersWayToAuthenticate = strategies.length >= 2
+      if (!hasOthersWayToAuthenticate) {
+        throw fastify.httpErrors.badRequest(
+          "You can't delete your only way to authenticate"
+        )
+      }
+      const oauthProviderDelete = await prisma.oAuth.delete({
+        where: { id: oauthProvider.id }
+      })
+      reply.statusCode = 200
+      return oauthProviderDelete
+    }
+  })
+}