1 files changed, 46 insertions, 0 deletions
diff --git a/app/src/routes/sb1-authorize/+server.ts b/app/src/routes/sb1-authorize/+server.ts
new file mode 100644
index 0000000..e08db3e
--- /dev/null
+++ b/app/src/routes/sb1-authorize/+server.ts
@@ -0,0 +1,46 @@
+import { error, redirect } from '@sveltejs/kit';
+import type { RequestHandler } from './$types';
+import { db } from '$lib/server/db';
+import { syncSession } from '$lib/server/db/schema';
+import { eq } from 'drizzle-orm';
+import { SB1_ID, SB1_REDIRECT_URI, SB1_SECRET } from '$env/static/private';
+import { Temporal } from "temporal-polyfill"
+
+export const GET: RequestHandler = async ({ url }) => {
+    const code = url.searchParams.get('code')
+    const state = url.searchParams.get('state');
+
+    if (!code) error(400, "?code is missing")
+    if (!state) error(400, "?state is missing")
+
+    const session = await db.select().from(syncSession).where(eq(syncSession.authzState, state))
+    const { id } = session[0]
+
+    const fd = new URLSearchParams()
+    fd.set("client_id", SB1_ID)
+    fd.set("client_secret", SB1_SECRET)
+    fd.set("redirect_uri", SB1_REDIRECT_URI)
+    fd.set("code", code)
+    fd.set("state", state)
+    fd.set("grant_type", "authorization_code")
+    const response = await fetch("https://api.sparebank1.no/oauth/token", {
+        method: "post",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: fd
+    })
+
+    const text = await response.text()
+
+    if (response.ok) {
+        const epoch = Temporal.Now.instant().epochMilliseconds
+        await db.update(syncSession).set({ tokens: text, accessTokenCreated: epoch, refreshTokenCreated: epoch }).where(eq(syncSession.id, id))
+        redirect(302, "/")
+    } else {
+        console.error(text)
+        return new Response(text)
+    }
+
+    return new Response()
+}
+\ No newline at end of file