auth: refactor common oauth provider logic, add options to disable providers and require invites

src/routes/auth/[provider]/+server.ts

@@ -3,24 +3,24 @@ import { oauthProviders } from '$lib/server/oauth';
 import { is } from 'typia';
 import { type AuthProvider, enabledAuthProviders } from '$lib/auth';
 
-export async function GET(event) {
+export async function GET({ params: { provider }, url, cookies }) {
-	const { provider } = event.params;
 	if (!is<AuthProvider>(provider) || !enabledAuthProviders[provider]) {
 		return new Response(null, { status: 404 });
 	}
 	const oauthProvider = oauthProviders[provider];
 
+	const inviteToken = url.searchParams.get('invite') ?? '';
 	const state = generateState();
 	const codeVerifier = generateCodeVerifier();
-	const url = oauthProvider.createAuthorizationURL(state, codeVerifier);
+	const authUrl = oauthProvider.createAuthorizationURL(state + inviteToken, codeVerifier);
 
-	event.cookies.set(`${provider}_oauth_state`, state, {
+	cookies.set(`${provider}_oauth_state`, state, {
 		path: '/',
 		httpOnly: true,
 		maxAge: 60 * 10, // 10 minutes
 		sameSite: 'lax',
 	});
-	event.cookies.set(`${provider}_code_verifier`, codeVerifier, {
+	cookies.set(`${provider}_code_verifier`, codeVerifier, {
 		path: '/',
 		httpOnly: true,
 		maxAge: 60 * 10, // 10 minutes
@@ -30,7 +30,7 @@ export async function GET(event) {
 	return new Response(null, {
 		status: 302,
 		headers: {
-			Location: url.toString(),
+			Location: authUrl.toString(),
 		},
 	});
 }