bcgov/PIMS

import { SSOOptions, SSOUser } from '@bcgov/citz-imb-sso-express';
import logger from '@/utilities/winstonLogger';
import KeycloakService from '@/services/keycloak/keycloakService';
import { AppDataSource } from '@/appDataSource';
import { User } from '@/typeorm/Entities/User';

const users = AppDataSource.getRepository(User);

/**
 * Defined by SSO package. See package GitHub repo for options.
 */
export const SSO_OPTIONS: SSOOptions = {
  afterUserLogin: async (user: SSOUser) => {
    if (user) {
      logger.info(`${user.display_name} has logged in.`);
      // Update last login date
      if (await users.exists({ where: { Username: user.preferred_username } })) {
        await users.update({ Username: user.preferred_username }, { LastLogin: new Date() });
      }
      // Try to sync the user's roles from Keycloak
      try {
        await KeycloakService.syncKeycloakUser(user.preferred_username);
      } catch (e) {
        logger.warn(
          `Could not sync roles for user ${user.preferred_username}. Error: ${(e as Error).message}`,
        );
      }
    }
  },
  afterUserLogout: (user: SSOUser) => {
    if (user) {
      logger.info(`${user.display_name} has logged out.`);
    }
  },
};