feat: migrate auth from supabase to better auth (#596)

* feat: add README for @cio/db package and remove existingAccounts.json * load session, load profile and organization, add create profile hook * chore: cache session request The trick was passing all the cookies to the backend. Previously I was only passing the better-auth.session_token and not better-auth.session_data. Read about the difference here https://www.better-auth.com/docs/concepts/cookies#custom-cookies * feat: login, logout, onboarding, verify email, reset password. * feat: complete change email and email verification * feat: standardise how we make rpc calls and create org endpoints * fix ui errors * fix: handle potential undefined customerId and standardize avatar URL property * refactor: standardize custom domain handling and update telegram chat ID references * chore: add tailwind prefix to @cio/ui this fixed the media query issues because @cio/ui classes were overriding this dashboard tailwind build * chore: clean up org sidebar * chore: persist mode state * feat: implement order breadcrumbs * chore: upgrade to better auth 1.4 * chore: address common auth flow bugs and setup app for others to setup locally.
2025-11-24 01:00:50 +01:00
parent 24741644d6
commit a3924100dd
567 changed files with 22364 additions and 13437 deletions
@@ -0,0 +1,120 @@
+import type { Cookies } from '@sveltejs/kit';
+import type { CurrentOrg } from '$lib/utils/types/org';
+import { PUBLIC_IS_SELFHOSTED } from '$env/static/public';
+import { blockedSubdomain } from '$lib/utils/constants/app';
+import { env } from '$env/dynamic/private';
+import { getCurrentOrg } from '$lib/utils/services/org';
+
+export interface OrgSiteInfo {
+  isOrgSite: boolean;
+  org: CurrentOrg | null;
+  subdomain: string;
+  orgSiteName: string;
+}
+
+export async function getOrgSiteInfo(url: URL, cookies: Cookies): Promise<OrgSiteInfo> {
+  const response: OrgSiteInfo = {
+    orgSiteName: '',
+    subdomain: '',
+    isOrgSite: false,
+    org: null
+  };
+
+  // Selfhosted usecase
+  if (PUBLIC_IS_SELFHOSTED === 'true') {
+    const subdomain = getSubdomain(url);
+
+    // Student dashboard
+    if (subdomain) {
+      const org = (await getCurrentOrg(subdomain, true)) || null;
+
+      // Organization by subdomain not found
+      if (!org) {
+        return response;
+      }
+
+      response.org = org;
+      response.isOrgSite = true;
+      response.orgSiteName = subdomain;
+      response.subdomain = subdomain;
+    }
+
+    // Never go beyond this for selfhosted instances
+    return response;
+  }
+
+  const isLocalHost = url.host.includes('localhost');
+  const tempSiteName = url.searchParams.get('org');
+
+  if (isLocalHost && tempSiteName) {
+    cookies.set('_orgSiteName', tempSiteName, {
+      path: '/'
+    });
+  }
+
+  const _orgSiteName = cookies.get('_orgSiteName');
+  const debugMode = _orgSiteName && _orgSiteName !== 'false';
+
+  const subdomain = getSubdomain(url) || '';
+
+  // Custom domain
+  if (isURLCustomDomain(url)) {
+    response.org = (await getCurrentOrg(url.host, true, true)) || null;
+
+    if (!response.org) {
+      return response;
+    }
+
+    response.isOrgSite = true;
+    response.orgSiteName = response.org?.siteName || '';
+    response.subdomain = subdomain;
+
+    return response;
+  }
+
+  // Subdomain except blocked ones.
+  if (!blockedSubdomain.includes(subdomain)) {
+    const APP_SUBDOMAINS = env.PRIVATE_APP_SUBDOMAINS?.split(',') || [];
+
+    if (APP_SUBDOMAINS.includes(subdomain)) {
+      return response;
+    }
+
+    response.isOrgSite = debugMode || !!subdomain;
+    response.orgSiteName = debugMode ? _orgSiteName : subdomain;
+    response.org = (await getCurrentOrg(response.orgSiteName, true)) || null;
+
+    const shouldDeleteCookie = !response.org && _orgSiteName;
+    if (shouldDeleteCookie) {
+      cookies.delete('_orgSiteName', { path: '/' });
+    }
+  }
+
+  return response;
+}
+
+function isURLCustomDomain(url: URL) {
+  if (url.host.includes('localhost')) {
+    return false;
+  }
+
+  const notCustomDomainHosts = [env.PRIVATE_APP_HOST || '', 'classroomio.com', 'vercel.app'].filter(Boolean);
+
+  return !notCustomDomainHosts.some((host) => url.host.endsWith(host));
+}
+
+export function getSubdomain(url: URL) {
+  const host = url.hostname.replace('www.', '');
+  const parts = host.split('.');
+  const appHost = env.PRIVATE_APP_HOST;
+
+  const appHostParts = appHost.split('.');
+  const isAppHost = parts.slice(-appHostParts.length).join('.') === appHost;
+
+  if (isAppHost) {
+    // Subdomain exists only if extra part(s) before main domain
+    return parts.length > appHostParts.length ? parts[0] : null;
+  }
+
+  return null;
+}