add legacy token grant type

toobeeh/skribbltypo#449

Author: toobeeh

tirith-api/src/modules/auth/controller/oauth2.controller.ts

@@ -164,6 +164,25 @@ export class OAuth2Controller {
             };
         }
 
+        else if (exchange.grant_type === "typo-legacy-token") {
+
+            if(exchange.subject_token === undefined || exchange.client_id === undefined) {
+                throw new BadRequestException("Missing required parameters: subject_token and client_id are required for typo_legacy_token grant type.");
+            }
+
+            const member = await this.membersService.getByAccessToken(exchange.subject_token);
+            const client = await this.authService.getOauthClientById(exchange.client_id);
+            const newToken = await this.authService.createAccessToken(member.typoId, client.clientId, this.openidService.openIdConfig.issuer, client.audience);
+
+            return {
+                access_token: newToken,
+                token_type: "Bearer",
+                issued_token_type: "urn:ietf:params:oauth:token-type:jwt",
+                expires_in: client.tokenExpiry,
+                scope: client.scopes.join(" ")
+            };
+        }
+
         else {
             throw new BadRequestException(`Unsupported grant type: ${exchange.grant_type}`);
         }

tirith-api/src/modules/auth/dto/oauth2TokenExchangeDto.ts

@@ -2,16 +2,16 @@ import {XApiProperty} from "../../../decorators/apiProperty.decorator";
 
 export class OAuth2TokenExchangeDto {
 
-    @XApiProperty({ description: "The oauth2 grant type" })
+    @XApiProperty({ description: "The oauth2 grant type, supported: authorization_code, token-exchange, typo-legacy-token, " })
     grant_type: string; // naming acc to oauth spec
 
     @XApiProperty({ description: "An authorization code received from the OAuth2 client, required for grant_type=code", required: false })
     code?: string; // naming acc to oauth spec
 
-    @XApiProperty({ description: "The client ID of the OAuth2 client, required for grant_type=code", required: false })
+    @XApiProperty({ description: "The client ID of the OAuth2 client, required for grant_type=code or typo-legacy-token", required: false })
     client_id?: number; // naming acc to oauth spec
 
-    @XApiProperty({ description: "An access token to be exchanged, required for grant_type=token-exchange", required: false })
+    @XApiProperty({ description: "An access token to be exchanged, required for grant_type=token-exchange or typo-legacy-token", required: false })
     subject_token?: string; // naming acc to oauth spec
 
     @XApiProperty({ description: "The type of the subject token, required for grant_type=token-exchange", required: false })