rustfs-console/composables/useAuth.ts

import type { AwsCredentialIdentity, AwsCredentialIdentityProvider } from '@aws-sdk/types'
import { getStsToken } from '~/lib/sts'
import type { SiteConfig } from '~/types/config'
import { getLoginRoute } from '~/utils/routes'

interface Credentials {
  AccessKeyId?: string
  SecretAccessKey?: string
  SessionToken?: string
  Expiration?: string
}

export function useAuth() {
  const store = useLocalStorage('auth.credentials', {})
  const isAdminStore = useLocalStorage('auth.isAdmin', false)

  const setCredentials = (credentials: Credentials) => {
    store.value = credentials
  }

  const getCredentials = () => {
    if (!isValidCredentials(store.value)) {
      return
    }

    return store.value
  }

  const setIsAdmin = (value: boolean) => {
    isAdminStore.value = value
  }

  const getIsAdmin = () => {
    return isAdminStore.value
  }

  const isExpired = (expiration: string) => (expiration ? new Date(expiration) < new Date() : false)

  const isValidCredentials = (credentials: Credentials) => {
    return (
      !!credentials?.AccessKeyId &&
      !!credentials?.SecretAccessKey &&
      !!credentials?.SessionToken &&
      credentials?.Expiration &&
      !isExpired(credentials.Expiration)
    )
  }

  const login = async (
    credentials: AwsCredentialIdentity | AwsCredentialIdentityProvider,
    customConfig?: SiteConfig
  ) => {
    const credentialsResponse = await getStsToken(credentials, 'arn:aws:iam::*:role/Admin', customConfig)

    setCredentials({
      ...credentialsResponse,
      Expiration: credentialsResponse.Expiration?.toISOString(),
    })

    return credentialsResponse
  }

  const logout = () => {
    store.value = {}
    isAdminStore.value = false
  }

  const logoutAndRedirect = () => {
    logout()
    window.location.href = getLoginRoute()
  }

  return {
    login,
    logout,
    logoutAndRedirect,
    setIsAdmin,
    getIsAdmin,
    credentials: ref<Credentials | undefined>(getCredentials()),
    isAuthenticated: computed(() => isValidCredentials(store.value)),
    isAdmin: computed(() => isAdminStore.value),
  }
}