From e5d69d9645edf1ab9274cb665171fdda92bcc767 Mon Sep 17 00:00:00 2001
From: alma <alma@governance-labs.org>
Date: Wed, 16 Apr 2025 22:35:44 +0200
Subject: [PATCH] Neah version calendar fix 3 debuger ???? ???

---
 .DS_Store                             | Bin 6148 -> 6148 bytes
 app/.DS_Store                         | Bin 0 -> 6148 bytes
 app/api/.DS_Store                     | Bin 0 -> 6148 bytes
 app/api/auth/.DS_Store                | Bin 0 -> 6148 bytes
 app/api/auth/[...nextauth]/route 2.ts | 144 ++++++++++++++++++++++++++
 app/api/auth/[...nextauth]/route.ts   | 116 ++++++++++++++++++++-
 app/api/calendars/route.ts            |   2 +-
 app/api/leantime/tasks/route.ts       |   2 +-
 app/api/rocket-chat/messages/route.ts |   2 +-
 app/layout.tsx                        |   2 +-
 10 files changed, 262 insertions(+), 6 deletions(-)
 create mode 100644 app/.DS_Store
 create mode 100644 app/api/.DS_Store
 create mode 100644 app/api/auth/.DS_Store
 create mode 100644 app/api/auth/[...nextauth]/route 2.ts

diff --git a/.DS_Store b/.DS_Store
index 6ddb0d00c50628eea18f929a7d2f5e723b67f796..6934b8f40f4df978ccee310c65643390b78babcd 100644
GIT binary patch
delta 88
zcmZoMXfc=|&e%S&P;8=}q6jks0|O%ig8)NvPEvk;4v@*fJn^6gSe%(5k)eR0Af*^8
jx3MRKeKR|U00(3H#)IFPC-aNwGBRv-6gkX1v4I5uqiq(T

delta 75
zcmZoMXfc=|&e%4wP;8=}q6iZM0|O%ig8)NvPEvk;4v@#dHu0jyWCIbFjf+y*Cq59~
e%+4Xe!PvI(;&<lB{35!nK-CNfHrt9EW(EM?O%yKx

diff --git a/app/.DS_Store b/app/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..f9538889e8f39881ab88794e1723a5de06f13390
GIT binary patch
literal 6148
zcmeH~JqiLr422WdLa^D=avBfd4F=H@cme+!K~NC;Il3=DjjOdR@&d^>$!yr&SL|#=
zMAy&rN~9N&8QdsK3j<T+ogCyYm-FLvJ>G6tE4fXQR)F_1*w1Z(3Qz$mKn17(6&R5M
zd63WMBYGx23KgIN<50l94+U<l$rkia2ZE0P;1p#ytbLXMixt3{Y(Z3D8m(Zos*fR7
z_ja)4bv4<7(Jq?9hvuEtrWlw;yJ$fI)9PTL0#sn2Ko@y$=l>S|ZT=s$Fr@-i;LjA$
z>1MZC<E8R!{dhgA@3U&_1_%9egtwmnBz6=p;BMG2wg79g1yO<VN5ExZpaMTt;00lI
B5oZ7Z

literal 0
HcmV?d00001

diff --git a/app/api/.DS_Store b/app/api/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..37ec5364a91e7c0cd612e30bef3ae883acf43ea6
GIT binary patch
literal 6148
zcmeH~J&wXa427SU6iC~oq@0EW><vZ;PQV5DE4DzQ*rlJN@3Y4ZVQUnjXUYD?o>)m<
zk%<A==6?ACMgU8?6Kf9>Gv))1xZ@Y!m!I?Xbh}->Nc-r3r}Pn%{oEF$fE17dQa}nw
zff*@~$N2JdM$e>2kpfa+9t!yPq0pT***fFX!4M+=Ij|hYb<7fE@d8<st&<g+<@8|L
zYB7d*J=)2V*VSa}?Cr1|J}mESKE=?ix5Ek(n$>`U6p#WF1r|LY{run2|C|3OElQ<;
z6nHZQY}oF%8@^PYtxvD#^+Q&D-RNXo&hYRPz{HQ@6+Mjm#TR5vwoX=P`Vj~j6r{jQ
G75D>qz!J9r

literal 0
HcmV?d00001

diff --git a/app/api/auth/.DS_Store b/app/api/auth/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..6839642fdc42509d9ba22eb259e7cd77527a4241
GIT binary patch
literal 6148
zcmeHK%Sr=55Ukc50wUz-alSzC4~7uGz@rF0B6tYqU;;VrDc_Y(v-)u`tlr`!R4+X>
z)7v$})M0xYfX%ndJ75N2N_WKGhq3v4_mN#x#E5k6@rifru)zzqqwL=U&b`JXZsYmM
z-{1pJ%dfZ9>w3NNG?^5T0#ZN<NC7Eu0tKq5POna|m$r}sQsBH4@b5#TJNCjMF+Lp}
zq6HvM7!Kn+dI@6l0I?SiiHy)Jsl=pOwHTIk##`m}!XYu~uxdW6PPXb$EKcYCEz)5<
zQKJ-)0>=tm=5prs|DOIw|9?!<N(xAUvr@n&i-*OWSE|}Nx}4YAMt`Pz&Vla6c~Ce+
lIVMIq=EBSIO(bPr^Eu!5!XYu}j0c^lp8?lJCI$Xmfp5c!7B&C?

literal 0
HcmV?d00001

diff --git a/app/api/auth/[...nextauth]/route 2.ts b/app/api/auth/[...nextauth]/route 2.ts
new file mode 100644
index 0000000..c7850b3
--- /dev/null
+++ b/app/api/auth/[...nextauth]/route 2.ts	
@@ -0,0 +1,144 @@
+import NextAuth, { NextAuthOptions } from "next-auth";
+import KeycloakProvider from "next-auth/providers/keycloak";
+
+declare module "next-auth" {
+  interface Session {
+    user: {
+      id: string;
+      name?: string | null;
+      email?: string | null;
+      image?: string | null;
+      username: string;
+      first_name: string;
+      last_name: string;
+      role: string[];
+    };
+    accessToken: string;
+  }
+
+  interface JWT {
+    accessToken: string;
+    refreshToken: string;
+    accessTokenExpires: number;
+    role: string[];
+    username: string;
+    first_name: string;
+    last_name: string;
+  }
+}
+
+function getRequiredEnvVar(name: string): string {
+  const value = process.env[name];
+  if (!value) {
+    throw new Error(`Missing required environment variable: ${name}`);
+  }
+  return value;
+}
+
+export const authOptions: NextAuthOptions = {
+  providers: [
+    KeycloakProvider({
+      clientId: getRequiredEnvVar("KEYCLOAK_CLIENT_ID"),
+      clientSecret: getRequiredEnvVar("KEYCLOAK_CLIENT_SECRET"),
+      issuer: getRequiredEnvVar("KEYCLOAK_ISSUER"),
+      profile(profile) {
+        return {
+          id: profile.sub,
+          name: profile.name ?? profile.preferred_username,
+          email: profile.email,
+          first_name: profile.given_name ?? '',
+          last_name: profile.family_name ?? '',
+          username: profile.preferred_username ?? profile.email?.split('@')[0] ?? '',
+          role: profile.groups ?? [],
+        }
+      },
+    }),
+  ],
+  session: {
+    strategy: "jwt",
+    maxAge: 30 * 24 * 60 * 60, // 30 days
+  },
+  callbacks: {
+    async jwt({ token, account, profile }) {
+      if (account && profile) {
+        token.accessToken = account.access_token;
+        token.refreshToken = account.refresh_token;
+        token.accessTokenExpires = account.expires_at! * 1000;
+        token.role = (profile as any).groups ?? [];
+        token.username = (profile as any).preferred_username ?? profile.email?.split('@')[0] ?? '';
+        token.first_name = (profile as any).given_name ?? '';
+        token.last_name = (profile as any).family_name ?? '';
+      }
+
+      // Return previous token if not expired
+      if (Date.now() < (token.accessTokenExpires as number)) {
+        return token;
+      }
+
+      try {
+        const clientId = getRequiredEnvVar("KEYCLOAK_CLIENT_ID");
+        const clientSecret = getRequiredEnvVar("KEYCLOAK_CLIENT_SECRET");
+
+        const response = await fetch(
+          `${process.env.KEYCLOAK_BASE_URL}/realms/${process.env.KEYCLOAK_REALM}/protocol/openid-connect/token`,
+          {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: new URLSearchParams({
+              grant_type: "refresh_token",
+              client_id: clientId,
+              client_secret: clientSecret,
+              refresh_token: token.refreshToken as string,
+            }),
+          }
+        );
+
+        const tokens = await response.json();
+
+        if (!response.ok) {
+          throw new Error("RefreshAccessTokenError");
+        }
+
+        return {
+          ...token,
+          accessToken: tokens.access_token,
+          refreshToken: tokens.refresh_token ?? token.refreshToken,
+          accessTokenExpires: Date.now() + tokens.expires_in * 1000,
+        };
+      } catch (error) {
+        return {
+          ...token,
+          error: "RefreshAccessTokenError",
+        };
+      }
+    },
+    async session({ session, token }) {
+      if (token.error) {
+        throw new Error("RefreshAccessTokenError");
+      }
+
+      session.accessToken = token.accessToken;
+      session.user = {
+        ...session.user,
+        id: token.sub as string,
+        first_name: token.first_name ?? '',
+        last_name: token.last_name ?? '',
+        username: token.username ?? '',
+        role: token.role ?? [],
+      };
+
+      return session;
+    }
+  },
+  pages: {
+    signIn: '/signin',
+    error: '/signin',
+  },
+  debug: process.env.NODE_ENV === 'development',
+};
+
+const handler = NextAuth(authOptions);
+export { handler as GET, handler as POST };
+
diff --git a/app/api/auth/[...nextauth]/route.ts b/app/api/auth/[...nextauth]/route.ts
index d48bd2e..c7850b3 100644
--- a/app/api/auth/[...nextauth]/route.ts
+++ b/app/api/auth/[...nextauth]/route.ts
@@ -1,5 +1,5 @@
-import NextAuth from "next-auth";
-import { authOptions } from '@/lib/auth';
+import NextAuth, { NextAuthOptions } from "next-auth";
+import KeycloakProvider from "next-auth/providers/keycloak";
 
 declare module "next-auth" {
   interface Session {
@@ -27,6 +27,118 @@ declare module "next-auth" {
   }
 }
 
+function getRequiredEnvVar(name: string): string {
+  const value = process.env[name];
+  if (!value) {
+    throw new Error(`Missing required environment variable: ${name}`);
+  }
+  return value;
+}
+
+export const authOptions: NextAuthOptions = {
+  providers: [
+    KeycloakProvider({
+      clientId: getRequiredEnvVar("KEYCLOAK_CLIENT_ID"),
+      clientSecret: getRequiredEnvVar("KEYCLOAK_CLIENT_SECRET"),
+      issuer: getRequiredEnvVar("KEYCLOAK_ISSUER"),
+      profile(profile) {
+        return {
+          id: profile.sub,
+          name: profile.name ?? profile.preferred_username,
+          email: profile.email,
+          first_name: profile.given_name ?? '',
+          last_name: profile.family_name ?? '',
+          username: profile.preferred_username ?? profile.email?.split('@')[0] ?? '',
+          role: profile.groups ?? [],
+        }
+      },
+    }),
+  ],
+  session: {
+    strategy: "jwt",
+    maxAge: 30 * 24 * 60 * 60, // 30 days
+  },
+  callbacks: {
+    async jwt({ token, account, profile }) {
+      if (account && profile) {
+        token.accessToken = account.access_token;
+        token.refreshToken = account.refresh_token;
+        token.accessTokenExpires = account.expires_at! * 1000;
+        token.role = (profile as any).groups ?? [];
+        token.username = (profile as any).preferred_username ?? profile.email?.split('@')[0] ?? '';
+        token.first_name = (profile as any).given_name ?? '';
+        token.last_name = (profile as any).family_name ?? '';
+      }
+
+      // Return previous token if not expired
+      if (Date.now() < (token.accessTokenExpires as number)) {
+        return token;
+      }
+
+      try {
+        const clientId = getRequiredEnvVar("KEYCLOAK_CLIENT_ID");
+        const clientSecret = getRequiredEnvVar("KEYCLOAK_CLIENT_SECRET");
+
+        const response = await fetch(
+          `${process.env.KEYCLOAK_BASE_URL}/realms/${process.env.KEYCLOAK_REALM}/protocol/openid-connect/token`,
+          {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: new URLSearchParams({
+              grant_type: "refresh_token",
+              client_id: clientId,
+              client_secret: clientSecret,
+              refresh_token: token.refreshToken as string,
+            }),
+          }
+        );
+
+        const tokens = await response.json();
+
+        if (!response.ok) {
+          throw new Error("RefreshAccessTokenError");
+        }
+
+        return {
+          ...token,
+          accessToken: tokens.access_token,
+          refreshToken: tokens.refresh_token ?? token.refreshToken,
+          accessTokenExpires: Date.now() + tokens.expires_in * 1000,
+        };
+      } catch (error) {
+        return {
+          ...token,
+          error: "RefreshAccessTokenError",
+        };
+      }
+    },
+    async session({ session, token }) {
+      if (token.error) {
+        throw new Error("RefreshAccessTokenError");
+      }
+
+      session.accessToken = token.accessToken;
+      session.user = {
+        ...session.user,
+        id: token.sub as string,
+        first_name: token.first_name ?? '',
+        last_name: token.last_name ?? '',
+        username: token.username ?? '',
+        role: token.role ?? [],
+      };
+
+      return session;
+    }
+  },
+  pages: {
+    signIn: '/signin',
+    error: '/signin',
+  },
+  debug: process.env.NODE_ENV === 'development',
+};
+
 const handler = NextAuth(authOptions);
 export { handler as GET, handler as POST };
 
diff --git a/app/api/calendars/route.ts b/app/api/calendars/route.ts
index 39b55c8..e0fd46d 100644
--- a/app/api/calendars/route.ts
+++ b/app/api/calendars/route.ts
@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { getServerSession } from "next-auth/next";
-import { authOptions } from "@/app/api/auth/[...nextauth]/route";
+import { authOptions } from "@/lib/auth";
 import { prisma } from "@/lib/prisma";
 
 /**
diff --git a/app/api/leantime/tasks/route.ts b/app/api/leantime/tasks/route.ts
index a99c051..fea2b82 100644
--- a/app/api/leantime/tasks/route.ts
+++ b/app/api/leantime/tasks/route.ts
@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { getServerSession } from "next-auth/next";
-import { authOptions } from "@/app/api/auth/[...nextauth]/route";
+import { authOptions } from "@/lib/auth";
 
 interface Task {
   id: string;
diff --git a/app/api/rocket-chat/messages/route.ts b/app/api/rocket-chat/messages/route.ts
index e11b27a..329466a 100644
--- a/app/api/rocket-chat/messages/route.ts
+++ b/app/api/rocket-chat/messages/route.ts
@@ -1,5 +1,5 @@
 import { getServerSession } from "next-auth";
-import { authOptions } from "@/app/api/auth/[...nextauth]/route";
+import { authOptions } from "@/lib/auth";
 import { NextResponse } from "next/server";
 
 // Helper function to get user token using admin credentials
diff --git a/app/layout.tsx b/app/layout.tsx
index cbf2d06..d0f16cf 100644
--- a/app/layout.tsx
+++ b/app/layout.tsx
@@ -3,7 +3,7 @@ import { Inter } from "next/font/google";
 import "./globals.css";
 import { headers } from "next/headers";
 import { getServerSession } from "next-auth/next";
-import { authOptions } from "@/app/api/auth/[...nextauth]/route";
+import { authOptions } from "@/lib/auth";
 import { Providers } from "@/components/providers";
 import { LayoutWrapper } from "@/components/layout/layout-wrapper";