feat: support google cloud login in client (#1822)

Co-authored-by: Himself65 <himself65@outlook.com>
Co-authored-by: Peng Xiao <pengxiao@outlook.com>

apps/electron/layers/main/src/app-state/google-auth.ts

@@ -0,0 +1,32 @@
+import type { RequestInit } from 'undici';
+import { fetch, ProxyAgent } from 'undici';
+
+const redirectUri = 'https://affine.pro/client/auth-callback';
+
+export const oauthEndpoint = `https://accounts.google.com/o/oauth2/v2/auth?client_id=${process.env.AFFINE_GOOGLE_CLIENT_ID}&redirect_uri=${redirectUri}&response_type=code&scope=openid https://www.googleapis.com/auth/userinfo.email profile&access_type=offline`;
+
+const tokenEndpoint = 'https://oauth2.googleapis.com/token';
+
+export const exchangeToken = async (code: string) => {
+  const httpProxy = process.env.HTTP_PROXY || process.env.http_proxy;
+  const proxyAgent = httpProxy ? new ProxyAgent(httpProxy) : undefined;
+
+  const postData = {
+    code,
+    client_id: process.env.AFFINE_GOOGLE_CLIENT_ID || '',
+    client_secret: process.env.AFFINE_GOOGLE_CLIENT_SECRET || '',
+    redirect_uri: redirectUri,
+    grant_type: 'authorization_code',
+  };
+  const requestOptions: RequestInit = {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/x-www-form-urlencoded',
+    },
+    body: new URLSearchParams(postData).toString(),
+    dispatcher: proxyAgent,
+  };
+  return fetch(tokenEndpoint, requestOptions).then(response => {
+    return response.json();
+  });
+};

apps/electron/layers/main/src/app-state/index.ts

@@ -2,13 +2,19 @@ import * as os from 'node:os';
 import path from 'node:path';
 
 import { Storage } from '@affine/octobase-node';
+import { app, shell } from 'electron';
 import { BrowserWindow, ipcMain, nativeTheme } from 'electron';
 import fs from 'fs-extra';
+import { parse } from 'url';
+
+import { exchangeToken, oauthEndpoint } from './google-auth';
 
 const AFFINE_ROOT = path.join(os.homedir(), '.affine');
 
 fs.ensureDirSync(AFFINE_ROOT);
 
+const logger = console;
+
 // todo: rethink this
 export const appState = {
   storage: new Storage(path.join(AFFINE_ROOT, 'test.db')),
@@ -21,6 +27,7 @@ export const registerHandlers = () => {
 
   ipcMain.handle('ui:theme-change', async (_, theme) => {
     nativeTheme.themeSource = theme;
+    logger.info('theme change', theme);
   });
 
   ipcMain.handle('ui:sidebar-visibility-change', async (_, visible) => {
@@ -30,5 +37,38 @@ export const registerHandlers = () => {
       // hide window buttons when sidebar is not visible
       w.setWindowButtonVisibility(visible);
     });
+    logger.info('sidebar visibility change', visible);
+  });
+
+  ipcMain.handle('ui:google-sign-in', async () => {
+    logger.info('starting google sign in ...');
+    shell.openExternal(oauthEndpoint);
+
+    return new Promise<string>((resolve, reject) => {
+      const handleOpenUrl = async (_: any, url: string) => {
+        const mainWindow = BrowserWindow.getAllWindows().find(
+          w => !w.isDestroyed()
+        );
+        const urlObj = parse(url.replace('??', '?'), true);
+        if (!mainWindow || !url.startsWith('affine://')) return;
+        const token = (await exchangeToken(urlObj.query['code'] as string)) as {
+          id_token: string;
+        };
+        app.removeListener('open-url', handleOpenUrl);
+        resolve(token.id_token);
+        logger.info('google sign in', token);
+      };
+
+      app.on('open-url', handleOpenUrl);
+
+      setTimeout(() => {
+        reject(new Error('Timed out'));
+        app.removeListener('open-url', handleOpenUrl);
+      }, 60000);
+    });
+  });
+
+  ipcMain.handle('main:env-update', async (_, env, value) => {
+    process.env[env] = value;
   });
 };