add new functionality and improve backend server structure

- Enhance server functionality and optimize backend code - Add multi-database support (PostgreSQL, MySQL, SQLite)
2026-03-09 17:36:42 +07:00
parent 4b27b85038
commit f5a985ff1e
526 changed files with 173928 additions and 0 deletions
@@ -0,0 +1,87 @@
+package auth
+
+import (
+	"context"
+	"encoding/json"
+
+	"github.com/pocketbase/pocketbase/tools/types"
+	"golang.org/x/oauth2"
+	"golang.org/x/oauth2/spotify"
+)
+
+func init() {
+	Providers[NameSpotify] = wrapFactory(NewSpotifyProvider)
+}
+
+var _ Provider = (*Spotify)(nil)
+
+// NameSpotify is the unique name of the Spotify provider.
+const NameSpotify string = "spotify"
+
+// Spotify allows authentication via Spotify OAuth2.
+type Spotify struct {
+	BaseProvider
+}
+
+// NewSpotifyProvider creates a new Spotify provider instance with some defaults.
+func NewSpotifyProvider() *Spotify {
+	return &Spotify{BaseProvider{
+		ctx:         context.Background(),
+		displayName: "Spotify",
+		pkce:        true,
+		scopes: []string{
+			"user-read-private",
+			// currently Spotify doesn't return information whether the email is verified or not
+			// "user-read-email",
+		},
+		authURL:     spotify.Endpoint.AuthURL,
+		tokenURL:    spotify.Endpoint.TokenURL,
+		userInfoURL: "https://api.spotify.com/v1/me",
+	}}
+}
+
+// FetchAuthUser returns an AuthUser instance based on the Spotify's user api.
+//
+// API reference: https://developer.spotify.com/documentation/web-api/reference/#/operations/get-current-users-profile
+func (p *Spotify) FetchAuthUser(token *oauth2.Token) (*AuthUser, error) {
+	data, err := p.FetchRawUserInfo(token)
+	if err != nil {
+		return nil, err
+	}
+
+	rawUser := map[string]any{}
+	if err := json.Unmarshal(data, &rawUser); err != nil {
+		return nil, err
+	}
+
+	extracted := struct {
+		Id     string `json:"id"`
+		Name   string `json:"display_name"`
+		Images []struct {
+			URL string `json:"url"`
+		} `json:"images"`
+		// don't map the email because per the official docs
+		// the email field is "unverified" and there is no proof
+		// that it actually belongs to the user
+		// Email  string `json:"email"`
+	}{}
+	if err := json.Unmarshal(data, &extracted); err != nil {
+		return nil, err
+	}
+
+	user := &AuthUser{
+		Id:           extracted.Id,
+		Name:         extracted.Name,
+		RawUser:      rawUser,
+		AccessToken:  token.AccessToken,
+		RefreshToken: token.RefreshToken,
+	}
+
+	user.Expiry, _ = types.ParseDateTime(token.Expiry)
+
+	if len(extracted.Images) > 0 {
+		user.AvatarURL = extracted.Images[0].URL
+	}
+
+	return user, nil
+}