root
efe8fe36d4
- Google, Apple, GitHub SSO login via popup OAuth flow - New /mobile/auth page with 3-click registration (Click provider → authorize → auto-logged in) - Email registration with name + email + password - /mobile/setup page with step-by-step OAuth setup guide - OAuth env vars in .env.example, docker-compose.yml - scripts/setup-sso.sh for one-command credential setup - Graceful 503 when OAuth not configured
100 lines
3.2 KiB
Bash
100 lines
3.2 KiB
Bash
#!/bin/bash
|
|
# ============================================================
|
|
# FalahOS SSO Credentials Setup Script
|
|
# ============================================================
|
|
# Run this on your Contabo VPS after getting OAuth credentials.
|
|
# It safely updates .env, rebuilds, and redeploys.
|
|
#
|
|
# Usage: bash /root/falah-mobile/scripts/setup-sso.sh
|
|
# ============================================================
|
|
|
|
set -e
|
|
|
|
SSO_DIR="$(cd "$(dirname "$0")/.." && pwd)"
|
|
ENV_FILE="$SSO_DIR/.env"
|
|
COMPOSE_FILE="$SSO_DIR/docker-compose.yml"
|
|
|
|
echo "╔═══════════════════════════════════════════════╗"
|
|
echo "║ FalahOS SSO Credentials Setup ║"
|
|
echo "╚═══════════════════════════════════════════════╝"
|
|
echo ""
|
|
|
|
# --- Prompt for GitHub ---
|
|
echo "── 🐙 GitHub OAuth App ──"
|
|
read -p " Client ID : " GITHUB_CLIENT_ID
|
|
read -sp " Client Secret: " GITHUB_CLIENT_SECRET
|
|
echo ""
|
|
echo ""
|
|
|
|
# --- Prompt for Google ---
|
|
echo "── 🔵 Google OAuth ──"
|
|
read -p " Client ID : " GOOGLE_CLIENT_ID
|
|
read -sp " Client Secret: " GOOGLE_CLIENT_SECRET
|
|
echo ""
|
|
echo ""
|
|
|
|
# --- Prompt for Apple ---
|
|
echo "── 🍎 Apple Sign In ──"
|
|
read -p " Service ID : " APPLE_CLIENT_ID
|
|
read -sp " Client Secret: " APPLE_CLIENT_SECRET
|
|
echo ""
|
|
echo ""
|
|
|
|
# --- Confirm ---
|
|
echo "═══════════════════════════════════════════════"
|
|
echo " Summary:"
|
|
echo " GitHub: ${GITHUB_CLIENT_ID:0:10}..."
|
|
echo " Google: ${GOOGLE_CLIENT_ID:0:10}..."
|
|
echo " Apple: $APPLE_CLIENT_ID"
|
|
echo "═══════════════════════════════════════════════"
|
|
read -p "Apply these credentials and redeploy? (y/N) " CONFIRM
|
|
|
|
if [ "$CONFIRM" != "y" ] && [ "$CONFIRM" != "Y" ]; then
|
|
echo "Aborted. No changes made."
|
|
exit 0
|
|
fi
|
|
|
|
# --- Backup current .env ---
|
|
cp "$ENV_FILE" "$ENV_FILE.backup"
|
|
echo "✓ Backed up .env → .env.backup"
|
|
|
|
# --- Remove old OAuth lines if they exist ---
|
|
sed -i '/^GOOGLE_CLIENT_ID=/d' "$ENV_FILE"
|
|
sed -i '/^GOOGLE_CLIENT_SECRET=/d' "$ENV_FILE"
|
|
sed -i '/^APPLE_CLIENT_ID=/d' "$ENV_FILE"
|
|
sed -i '/^APPLE_CLIENT_SECRET=/d' "$ENV_FILE"
|
|
sed -i '/^GITHUB_CLIENT_ID=/d' "$ENV_FILE"
|
|
sed -i '/^GITHUB_CLIENT_SECRET=/d' "$ENV_FILE"
|
|
|
|
# --- Append new credentials ---
|
|
cat >> "$ENV_FILE" << EOF
|
|
|
|
# --- OAuth / SSO ---
|
|
GOOGLE_CLIENT_ID="$GOOGLE_CLIENT_ID"
|
|
GOOGLE_CLIENT_SECRET="$GOOGLE_CLIENT_SECRET"
|
|
APPLE_CLIENT_ID="$APPLE_CLIENT_ID"
|
|
APPLE_CLIENT_SECRET="$APPLE_CLIENT_SECRET"
|
|
GITHUB_CLIENT_ID="$GITHUB_CLIENT_ID"
|
|
GITHUB_CLIENT_SECRET="$GITHUB_CLIENT_SECRET"
|
|
EOF
|
|
|
|
echo "✓ Credentials written to .env"
|
|
|
|
# --- Rebuild and deploy ---
|
|
echo ""
|
|
echo "═══ Building & Deploying ═══"
|
|
cd "$SSO_DIR"
|
|
npm run build
|
|
|
|
echo ""
|
|
echo "═══ Rebuilding Docker image ═══"
|
|
docker compose -f "$COMPOSE_FILE" build --pull
|
|
|
|
echo ""
|
|
echo "═══ Restarting container ═══"
|
|
docker compose -f "$COMPOSE_FILE" up -d --force-recreate
|
|
|
|
echo ""
|
|
echo "✓ SSO setup complete!"
|
|
echo " Test at: https://falahos.my/mobile/auth"
|