Job-Info/components/auth

Auth Component

Microsoft OAuth authentication that returns user info and a PocketBase token.

Users must already exist in PocketBase - no user creation. Access denied if user not found.

What it does

1. Redirects user to Microsoft login
2. Exchanges auth code for access token
3. Gets user's email and display name from Microsoft Graph
4. Checks if user exists in PocketBase (denies access if not)
5. Returns PocketBase auth token

Environment Variables Used

These variables exist in /home/admin/secrets/.env:

MICROSOFT_CLIENT_ID
MICROSOFT_CLIENT_SECRET
MICROSOFT_TENANT_ID
MICROSOFT_REDIRECT_URI
MICROSOFT_SCOPES
PB_URL

Usage in Hono Backend

import { Hono } from 'hono';
import { getAuthUrl, handleCallback, getConfigFromEnv } from './components/auth';

const app = new Hono();
const config = getConfigFromEnv();

// Redirect to Microsoft login
app.get('/auth/login', (c) => {
  return c.redirect(getAuthUrl(config));
});

// Handle callback from Microsoft
app.get('/auth/callback', async (c) => {
  const code = c.req.query('code');
  
  if (!code) {
    return c.json({ error: 'No authorization code' }, 400);
  }

  try {
    const result = await handleCallback(code, config);
    
    // result contains:
    // - email: string
    // - displayName: string  
    // - pocketbaseToken: string
    
    return c.json(result);
  } catch (err) {
    // User doesn't exist or auth failed
    return c.json({ error: String(err) }, 403);
  }
});

Copying to a Mode

1. Copy the entire components/auth/ folder to your mode's backend/modules/auth/
2. Update imports in your server
3. Environment variables are loaded from secrets at runtime

Dependencies

None - uses native fetch API (Bun/Node 18+). No package.json needed - inherits from consuming project.

Returns

interface AuthResult {
  email: string;           // User's email from Microsoft
  displayName: string;     // User's display name from Microsoft
  pocketbaseToken: string; // Auth token for PocketBase API calls
}