Add Auth Endpoints

// src/routes/auth-routes.ts

import express from 'express';
import { CallbackResultType } from '@wristband/express-auth';
import { requireWristbandAuth, wristbandAuth } from '../wristband';

const router = express.Router();

// Login Endpoint
router.get('/auth/login', async (req, res, next) => {
  // Call the Wristband login() method which will return a URL that should
  // be used to redirect to Wristband's hosted login page.
  const wristbandAuthorizeUrl = await wristbandAuth.login(req, res);
  res.redirect(wristbandAuthorizeUrl);
});

...

// src/routes/auth-routes.ts (continued)

...

// Callback Endpoint
router.get('/auth/callback', async (req, res, next) => {
  // Call the Wristband callback() method to check if the user
  // successfully authenticated.  If the user did authenticate successfully, 
  // the user's tokens and claims can be retrieved from the CallbackResult.
  const callbackResult = await wristbandAuth.callback(req, res);
  const { callbackData, redirectUrl, type } = callbackResult;
    
  // For some edge cases, such as if an invalid grant was passed to the token API,
  // the SDK will return a redirect URL. Your code should redirect to it in order to
  // restart the login flow.
  if (type === CallbackResultType.REDIRECT_REQUIRED) {
    return res.redirect(redirectUrl);
  }
    
  // Create a session for the authenticated user. If needed, custom fields can 
  // be stored in the session using the customFields parameter of the 
  // fromCallback() method.
  req.session.fromCallback(callbackData)
  await req.session.save();

  // Once the Callback Endpoint has completed,  we redirect to your app's
  // default return URL (typically your app's home page) or to an explicit
  // return URL, if one was specified in the original login request.
  return res.redirect(callbackData.returnUrl || '<replace_with_a_default_return_url>');
});

...

// src/routes/auth-routes.ts (continued)

...

// Logout endpoint
router.get('/auth/logout', async (req, res, next) => {
  // Get all the necessary session data needed to perform the logout operation.
  const { refreshToken, tenantCustomDomain, tenantName } = req.session;

  // Clear your application's local session.
  req.session.destroy()

  // Call the Wristband logout() function and use the returned URL to redirect
  // to Wristband's Logout Endpoint.  This will delete Wristband's session 
  // that is associated to the authenticated user.  When Wristband is done
  // logging out the user it will redirect back to your application's login 
  // URL or to the explicitly provided redirect URL.
  const wristbandLogoutUrl = await wristbandAuth.logout(req, res, {
    refreshToken,
    tenantCustomDomain,
    tenantName,
  });
  return res.redirect(wristbandLogoutUrl);
});

...

// src/routes/auth-routes.ts (continued)

...

// Session Endpoint
// The requireWristbandAuth middleware verifies that the request has a valid session.
router.get('/auth/session', requireWristbandAuth, (req, res, next) => {
  // Call the getSessionResponse() method to extract the user's 
  // session data and populate a SessionResponse. If needed, you can add 
  // additional data to the SessionResponse by using the metadata parameter 
  // of the getSessionResponse() method.
  res.header('Cache-Control', 'no-store');
  res.header('Pragma', 'no-cache');
  const sessionResponse = req.session.getSessionResponse();
  return res.status(200).json(sessionResponse);
});

export default router;

// src/app.ts

import express from 'express';
import { createWristbandSession } from '@wristband/express-auth/session';
import authRoutes from './routes/auth-routes';

const app = express();

app.use(
  createWristbandSession({
    secrets: '<your-generated-secret>'
  })
);

// Register your auth routes
app.use(authRoutes);

// Your other application setup...