port-nimara-client-portal/composables/useUnifiedAuth.ts

85 lines
2.4 KiB
TypeScript

export interface UnifiedUser {
id: string;
email: string;
name: string;
tier?: string;
authSource: 'keycloak' | 'directus';
raw: any;
}
export const useUnifiedAuth = () => {
// Get both auth systems
const directusAuth = useDirectusAuth();
const directusUser = useDirectusUser();
const customAuth = useCustomAuth();
// Create unified user object
const user = computed<UnifiedUser | null>(() => {
// Check custom Keycloak auth first
if (customAuth.authenticated?.value && customAuth.user?.value) {
const keycloakUser = customAuth.user.value as any; // Type cast for flexibility
// Construct name from available fields
let name = keycloakUser.name || keycloakUser.username || keycloakUser.email || 'User';
return {
id: keycloakUser.id || 'unknown',
email: keycloakUser.email || '',
name: name,
tier: 'basic', // Could be enhanced with Keycloak attributes
authSource: 'keycloak',
raw: keycloakUser
};
}
// Fall back to Directus user
if (directusUser.value && directusUser.value.email) {
return {
id: directusUser.value.id,
email: directusUser.value.email,
name: `${directusUser.value.first_name || ''} ${directusUser.value.last_name || ''}`.trim() || directusUser.value.email,
tier: directusUser.value.tier || 'basic',
authSource: 'directus',
raw: directusUser.value
};
}
return null;
});
// Unified logout function
const logout = async () => {
if (user.value?.authSource === 'keycloak') {
// Custom Keycloak logout
await customAuth.logout();
} else if (user.value?.authSource === 'directus') {
// Directus logout
await directusAuth.logout();
await navigateTo('/login');
}
};
// Check if user is authenticated
const isAuthenticated = computed(() => !!user.value);
// Get auth source
const authSource = computed(() => user.value?.authSource);
// Check if user has specific tier
const hasTier = (tier: string) => {
return user.value?.tier === tier;
};
// Check if user is admin
const isAdmin = computed(() => hasTier('admin'));
return {
user: readonly(user),
logout,
isAuthenticated: readonly(isAuthenticated),
authSource: readonly(authSource),
hasTier,
isAdmin: readonly(isAdmin),
};
};