headplane/app/utils/oidc-state.ts

import { createCookie } from 'react-router';
import type { HeadplaneConfig } from '~/server/config/config-schema';

export interface OidcStateCookie {
	nonce: string;
	state: string;
	verifier: string;
	redirect_uri: string;
}

export function createOidcStateCookie(config: HeadplaneConfig) {
	const cookie = createCookie('__oidc_state', {
		httpOnly: true,
		maxAge: 1800,
		secure: config.server.cookie_secure,
		domain: config.server.cookie_domain,
		path: `${__PREFIX__}/oidc/callback`,
	});

	return {
		...cookie,
		serialize: async (value: OidcStateCookie): Promise<string> => {
			return cookie.serialize(value);
		},

		parse: async (
			cookieHeader: string | null,
		): Promise<OidcStateCookie | null> => {
			const parsed = await cookie.parse(cookieHeader);
			if (
				parsed == null ||
				typeof parsed !== 'object' ||
				typeof parsed.nonce !== 'string' ||
				typeof parsed.state !== 'string' ||
				typeof parsed.verifier !== 'string' ||
				typeof parsed.redirect_uri !== 'string'
			) {
				return null;
			}

			return {
				nonce: parsed.nonce,
				state: parsed.state,
				verifier: parsed.verifier,
				redirect_uri: parsed.redirect_uri,
			};
		},
	};
}