Allow users to authenticate with Google OAuth

[WangGithub0]

Add google login according to OAuth 2.0 for server-side Web Applications

Step 1: Redirect to Google's OAuth 2.0 server
Step 2: Google prompts user for consent
Step 3: Handle the OAuth 2.0 server response - get code
Step 4: Calling Google APIs - get user info using access_token

I provide my google client_id, which can be used in testing on http://localhost:5173/ :
add these in .dev.vars
GOOGLE_CLIENT_ID=70478082635-iaa28pt6bg1h06ooeic3vo8fgtu90trh.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=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
GOOGLE_REDIRECT_URI=http://localhost:9339/api/login/
GOOGLE_RESPONSE_TYPE=code
GOOGLE_SCOPE=profile email

if need test handleGoogleProdLogin in local, please directly return handleGoogleProdLogin function for onRequestGet: PagesFunction in file login.ts

resolve #330

[cloudflare-pages]

Deploying with    Cloudflare Pages

Latest commit:	5a825df
Status:	✅  Deploy successful!
Preview URL:	https://617f8299.console-overthinker-dev.pages.dev
Branch Preview URL:	https://issue-330.console-overthinker-dev.pages.dev

View logs

[humphd]

We should probably set a time to meet and go over this approach. Doing this in CloudFlare will require some alternate approaches.

I also notice that other people have solved this, for example: https://github.com/Schachte/cloudflare-google-auth and the blog post at https://ryan-schachte.com/blog/oauth_cloudflare_workers/

[humphd]

This is an amazing piece of work, well done @WangGithub0! I'm really excited to see this land for 1.3.

I've left some feedback. You can fix this now, or in follow-ups, but if you do it in follow-ups, please file issues.

[humphd]

@WangGithub0 please click "Resolve" for each of the review comments above that you've fixed, to indicate that they are no longer an issue we need to track/discuss.

[Amnish04]

I tried logging in with google on Cloudfare deployed url and was a success, but I guess it was a dev login.

I've also gone through the code, and even though I don't fully understand each and everything, I've gained a basic understanding of the flow and how we're managing different auth providers.

As @humphd said, this is a great piece of work! I can understand the pain of implementing Auth since I recently had to do it for the capstone project.

I can't suggest any big changes at this point as lots of improvements have already been made going through the conversations, but I've suggested some minor changes and commented some questions for my clarity.

[Amnish04]

Its nice that you are also adding tests as this won't be changing much in the future, and we'll always know if it breaks at any point!

[Amnish04]

Should we have an enum for supported auth providers somewhere in functions/lib?

[WangGithub0]

I tried logging in with google on Cloudfare deployed url and was a success, but I guess it was a dev login.

I've also gone through the code, and even though I don't fully understand each and everything, I've gained a basic understanding of the flow and how we're managing different auth providers.

As @humphd said, this is a great piece of work! I can understand the pain of implementing Auth since I recently had to do it for the capstone project.

I can't suggest any big changes at this point as lots of improvements have already been made going through the conversations, but I've suggested some minor changes and commented some questions for my clarity.

Yes, it's dev. You can set isDev:false at line58 in login.ts to test product environment
if (provider === "google") {
return handleGoogleLogin({
isDev: true,

[humphd]

@WangGithub0 can you "Squash and merge" this when you have a minute? I'd love to see this land in 1.3! Such a cool new feature.

[WangGithub0]

@WangGithub0 can you "Squash and merge" this when you have a minute? I'd love to see this land in 1.3! Such a cool new feature.

Do we have a .dev.vars for product environment? could you add ChatCraft GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET in it?

[humphd]

@WangGithub0 can you "Squash and merge" this when you have a minute? I'd love to see this land in 1.3! Such a cool new feature.

Do we have a .dev.vars for product environment? could you add ChatCraft GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET in it?

I've updated the CloudFlare environment variables for production.