feat(workos): add index redirect and authorization URL redirect

examples/axum/README.md

@@ -0,0 +1,9 @@
+# Shield Axum Example
+
+1. Start the server:
+
+```shell
+cargo run
+```
+
+2. Go to http://localhost:8080.

examples/axum/src/main.rs

@@ -23,7 +23,7 @@ async fn main() {
         .init();
 
     // Configuration
-    let addr = SocketAddr::new(IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1)), 3000);
+    let addr = SocketAddr::new(IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1)), 8080);
 
     // Initialize sessions
     let session_store = MemoryStore::default();

examples/dioxus-axum/Cargo.toml

@@ -18,7 +18,6 @@ server = [
     "dep:shield-dioxus-axum",
     "dep:shield-memory",
     "dep:shield-oidc",
-    "dep:shield-workos",
     "dep:tokio",
     "dep:tower-sessions",
     "dioxus/server",
@@ -36,7 +35,6 @@ shield-dioxus.workspace = true
 shield-dioxus-axum = { workspace = true, optional = true }
 shield-memory = { workspace = true, optional = true }
 shield-oidc = { workspace = true, features = ["native-tls"], optional = true }
-shield-workos = { workspace = true, optional = true }
 tokio = { workspace = true, features = ["rt-multi-thread"], optional = true }
 tower-sessions = { workspace = true, optional = true }
 tracing.workspace = true

examples/dioxus-axum/README.md

@@ -0,0 +1,15 @@
+# Shield Dioxus Axum Example
+
+1. Install binaries:
+
+```shell
+cargo install --locked dioxus-cli
+```
+
+2. Start the development server:
+
+```shell
+dx serve --platform web
+```
+
+3. Go to http://localhost:8080.

examples/dioxus-axum/src/main.rs

@@ -27,7 +27,6 @@ async fn main() {
     use shield_dioxus_axum::{AxumDioxusIntegration, ShieldLayer};
     use shield_memory::{MemoryStorage, User};
     use shield_oidc::{Keycloak, OidcMethod};
-    use shield_workos::{WorkosMethod, WorkosOauthProvider, WorkosOptions};
     use tokio::net::TcpListener;
     use tower_sessions::{Expiry, MemoryStore, SessionManagerLayer, cookie::time::Duration};
     use tracing::{Level, info};
@@ -46,39 +45,21 @@ async fn main() {
     let storage = MemoryStorage::new();
     let shield = Shield::new(
         storage.clone(),
-        [
-            Some(Arc::new(
-                OidcMethod::new(storage).with_providers([Keycloak::builder(
-                    "keycloak",
-                    "http://localhost:18080/realms/Shield",
-                    "client1",
-                )
-                .client_secret("xcpQsaGbRILTljPtX4npjmYMBjKrariJ")
-                .redirect_url(format!(
-                    "http://localhost:{}/api/auth/oidc/sign-in-callback/keycloak",
-                    dioxus::cli_config::devserver_raw_addr()
-                        .map(|addr| addr.port())
-                        .unwrap_or_else(|| addr.port())
-                ))
-                .build()]),
-            ) as Arc<dyn ErasedMethod>),
-            env::var("WORKOS_API_KEY").ok().map(|api_key| {
-                Arc::new(
-                    WorkosMethod::from_api_key(&api_key).with_options(
-                        WorkosOptions::builder()
-                            .oauth_providers(vec![
-                                WorkosOauthProvider::AppleOAuth,
-                                WorkosOauthProvider::GoogleOAuth,
-                                WorkosOauthProvider::MicrosoftOAuth,
-                            ])
-                            .build(),
-                    ),
-                ) as Arc<dyn ErasedMethod>
-            }),
-        ]
-        .into_iter()
-        .flatten()
-        .collect(),
+        vec![
+            OidcMethod::new(storage).with_providers([Keycloak::builder(
+                "keycloak",
+                "http://localhost:18080/realms/Shield",
+                "client1",
+            )
+            .client_secret("xcpQsaGbRILTljPtX4npjmYMBjKrariJ")
+            .redirect_url(format!(
+                "http://localhost:{}/api/auth/oidc/sign-in-callback/keycloak",
+                dioxus::cli_config::devserver_raw_addr()
+                    .map(|addr| addr.port())
+                    .unwrap_or_else(|| addr.port())
+            ))
+            .build()]),
+        ],
         ShieldOptions::default(),
     );
     let shield_layer = ShieldLayer::new(shield.clone());

examples/leptos-actix/README.md

@@ -0,0 +1,15 @@
+# Shield Leptos Actix Example
+
+1. Install binaries:
+
+```shell
+cargo install --locked cargo-leptos
+```
+
+2. Start the development server:
+
+```shell
+cargo letpos watch
+```
+
+3. Go to http://localhost:8080.

examples/leptos-axum/README.md

@@ -0,0 +1,15 @@
+# Shield Leptos Axum Example
+
+1. Install binaries:
+
+```shell
+cargo install --locked cargo-leptos
+```
+
+2. Start the development server:
+
+```shell
+cargo letpos watch
+```
+
+3. Go to http://localhost:8080.

examples/workos/.env.example

@@ -0,0 +1,2 @@
+WORKOS_API_KEY = change
+WORKOS_CLIENT_ID = change

examples/workos/Cargo.toml

@@ -0,0 +1,39 @@
+[package]
+name = "shield-examples-workos"
+description = "Example with WorkOS."
+publish = false
+
+authors.workspace = true
+edition.workspace = true
+license.workspace = true
+repository.workspace = true
+version.workspace = true
+
+[features]
+# TODO: Enabling these triggers multiple RustSec advisories.
+# desktop = ["dioxus/desktop"]
+# mobile = ["dioxus/mobile"]
+server = [
+    "dep:axum",
+    "dep:shield-dioxus-axum",
+    "dep:shield-memory",
+    "dep:shield-workos",
+    "dep:tokio",
+    "dep:tower-sessions",
+    "dioxus/server",
+    "shield-dioxus/server",
+]
+web = ["dioxus/web"]
+
+[dependencies]
+axum = { workspace = true, optional = true }
+dioxus = { workspace = true, features = ["fullstack", "router"] }
+shield.workspace = true
+shield-bootstrap = { workspace = true, features = ["dioxus"] }
+shield-dioxus.workspace = true
+shield-dioxus-axum = { workspace = true, optional = true }
+shield-memory = { workspace = true, optional = true }
+shield-workos = { workspace = true, optional = true }
+tokio = { workspace = true, features = ["rt-multi-thread"], optional = true }
+tower-sessions = { workspace = true, optional = true }
+tracing.workspace = true

examples/workos/Dioxus.toml

@@ -0,0 +1,11 @@
+[application]
+
+[web.app]
+title = "Shield WorkOS Example"
+
+[web.resource]
+style = []
+script = []
+
+[web.resource.dev]
+script = []

examples/workos/README.md

@@ -0,0 +1,24 @@
+# Shield WorkOS Example
+
+1. Install binaries:
+
+```shell
+cargo install --locked dioxus-cli
+cargo install --locked dotenvy
+```
+
+2. Copy the default environment variables:
+
+```shell
+cp .env.example .env
+```
+
+3. Configure the environment variables in `.env`.
+
+4. Start the development server:
+
+```shell
+dotenvy dx serve --platform web
+```
+
+5. Go to http://localhost:8080.

examples/workos/src/app.rs

@@ -0,0 +1,30 @@
+use dioxus::{document::Stylesheet, prelude::*};
+use shield_dioxus::ShieldRouter;
+
+use crate::home::Home;
+
+#[derive(Clone, Debug, PartialEq, Routable)]
+#[rustfmt::skip]
+enum Route {
+    #[route("/")]
+    Home {},
+    #[child("/auth")]
+    Auth {
+        child: ShieldRouter
+    },
+}
+
+#[component]
+pub fn App() -> Element {
+    rsx! {
+        Stylesheet {
+            href: "https://cdn.jsdelivr.net/npm/bootstrap@5.3.7/dist/css/bootstrap.min.css",
+            integrity: "sha384-LN+7fdVzj6u52u30Kp6M/trliBMCMKTyK833zpbD+pXdCLuTusPj697FH4R/5mcr",
+            crossorigin: "anonymous"
+        }
+
+        main {
+            Router::<Route> {}
+        }
+    }
+}

examples/workos/src/home.rs

@@ -0,0 +1,8 @@
+use dioxus::prelude::*;
+
+#[component]
+pub fn Home() -> Element {
+    rsx! {
+        h1 { "Shield WorkOS Example" }
+    }
+}

examples/workos/src/main.rs

@@ -0,0 +1,86 @@
+mod app;
+mod home;
+
+use crate::app::App;
+
+#[cfg(not(feature = "server"))]
+fn main() {
+    use shield_bootstrap::BootstrapDioxusStyle;
+
+    dioxus::LaunchBuilder::new()
+        .with_context(BootstrapDioxusStyle::default().context())
+        .launch(App)
+}
+
+#[cfg(feature = "server")]
+#[tokio::main]
+async fn main() {
+    use std::{env, sync::Arc};
+
+    use axum::Router;
+    use dioxus::{
+        cli_config::fullstack_address_or_localhost,
+        prelude::{DioxusRouterExt, *},
+    };
+    use shield::{ErasedMethod, Method, Shield, ShieldOptions};
+    use shield_bootstrap::BootstrapDioxusStyle;
+    use shield_dioxus_axum::{AxumDioxusIntegration, ShieldLayer};
+    use shield_memory::{MemoryStorage, User};
+    use shield_workos::{WorkosMethod, WorkosOauthProvider, WorkosOptions};
+    use tokio::net::TcpListener;
+    use tower_sessions::{Expiry, MemoryStore, SessionManagerLayer, cookie::time::Duration};
+    use tracing::{Level, info};
+
+    // Initialize Dioxus
+    dioxus::logger::init(Level::DEBUG).unwrap();
+    let addr = fullstack_address_or_localhost();
+
+    // Initialize sessions
+    let session_store = MemoryStore::default();
+    let session_layer = SessionManagerLayer::new(session_store)
+        .with_secure(false)
+        .with_expiry(Expiry::OnInactivity(Duration::minutes(10)));
+
+    // Initialize Shield
+    let storage = MemoryStorage::new();
+    let shield = Shield::new(
+        storage.clone(),
+        vec![Arc::new(WorkosMethod::from_api_key(
+            &env::var("WORKOS_API_KEY").expect("Missing `WORKOS_API_KEY`."),
+            &env::var("WORKOS_CLIENT_ID").expect("Missing `WORKOS_CLIENT_ID`."),
+            WorkosOptions::builder()
+                .oauth_providers(vec![
+                    WorkosOauthProvider::AppleOAuth,
+                    WorkosOauthProvider::GoogleOAuth,
+                    WorkosOauthProvider::MicrosoftOAuth,
+                ])
+                .redirect_url(format!(
+                    "http://localhost:{}/api/auth/workos/sign-in-callback",
+                    addr.port()
+                ))
+                .build(),
+        ))],
+        ShieldOptions::default(),
+    );
+    let shield_layer = ShieldLayer::new(shield.clone());
+
+    // Initialize router
+    let router = Router::new()
+        .serve_dioxus_application(
+            ServeConfig::builder()
+                .context(AxumDioxusIntegration::<User>::default().context())
+                .context(BootstrapDioxusStyle::default().context())
+                .build()
+                .unwrap(),
+            App,
+        )
+        .layer(shield_layer)
+        .layer(session_layer);
+
+    // Start app
+    info!("listening on http://{}", &addr);
+    let listener = TcpListener::bind(&addr).await.unwrap();
+    axum::serve(listener, router.into_make_service())
+        .await
+        .unwrap();
+}