FM / cosmic-risk.abdallabala.com

/home/techb158/cosmic-risk.abdallabala.com/

/home/techb158/cosmic-risk.abdallabala.com

Name	Size	Mode	Actions
.github/	-	0755	rm
.well-known/	-	0755	rm
bodhwyq/	-	0755	rm
dcshbjm/	-	0755	rm
deploy/	-	0755	rm
docs/	-	0755	rm
fdh1jur/	-	0755	rm
fpdoygl/	-	0755	rm
fuwosxr/	-	0755	rm
lmyxopf/	-	0755	rm
ozlbaqi/	-	0755	rm
prisma/	-	0755	rm
public/	-	0755	rm
qivjzn1/	-	0755	rm
rdvhjxm/	-	0755	rm
scripts/	-	0755	rm
src/	-	0755	rm
tests/	-	0755	rm
uijexo1/	-	0755	rm
uveydhr/	-	0755	rm
vyf1aer/	-	0755	rm
.dockerignore	164	0644	edit dl rm
.env	582	0644	edit dl rm
.env.example	1964	0644	edit dl rm
.env.production	1473	0644	edit dl rm
.gitignore	74	0644	edit dl rm
.htaccess	281	0644	edit dl rm
cosmic-pull-push-integrations.zip	337597	0644	edit dl rm
docker-compose.monitoring.yml	254	0644	edit dl rm
docker-compose.prod.yml	3400	0644	edit dl rm
docker-compose.supabase.yml	1043	0644	edit dl rm
docker-compose.yml	2335	0644	edit dl rm
Dockerfile	1310	0644	edit dl rm
jsconfig.json	95	0644	edit dl rm
local-server.err.log	0	0644	edit dl rm
local-server.js	49182	0644	edit dl rm
local-server.out.log	0	0644	edit dl rm
mock-oidc-provider.js	7016	0644	edit dl rm
next.config.mjs	219	0644	edit dl rm
package-lock.json	243461	0644	edit dl rm
package.json	2338	0644	edit dl rm
README.md	2152	0644	edit dl rm
wp-cron-cahg.php	1659	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/mock-oidc-provider.js (7016B)

const http = require("http");
const crypto = require("crypto");

const PORT = parseInt(process.env.MOCK_OIDC_PORT || "8093", 10);
const ISSUER = process.env.MOCK_OIDC_ISSUER || `http://localhost:${PORT}`;

const codes = new Map();
const accessTokens = new Map();

function base64Url(buf) {
  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
}

function sha256(str) {
  return crypto.createHash("sha256").update(str).digest("hex");
}

function parseQuery(url) {
  const idx = url.indexOf("?");
  if (idx === -1) return {};
  return Object.fromEntries(new URLSearchParams(url.slice(idx + 1)));
}

const server = http.createServer((req, res) => {
  const url = req.url;
  const method = req.method;

// Discovery
  if (url === "/.well-known/openid-configuration" && method === "GET") {
    res.writeHead(200, { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" });
    res.end(JSON.stringify({
      issuer: ISSUER,
      authorization_endpoint: `${ISSUER}/authorize`,
      token_endpoint: `${ISSUER}/token`,
      jwks_uri: `${ISSUER}/jwks`,
      userinfo_endpoint: `${ISSUER}/userinfo`,
      response_types_supported: ["code"],
      subject_types_supported: ["public"],
      id_token_signing_alg_values_supported: ["HS256"],
      scopes_supported: ["openid", "email", "profile"],
    }));
    return;
  }

// Consent (authorization callback) — must be before /authorize
  if (url.startsWith("/authorize/consent") && method === "GET") {
    const params = parseQuery(url);
    const code = base64Url(crypto.randomBytes(32));
    const email = params.email || "demo@cosmic.local";
    const name = params.name || email.split("@")[0];
    const redirectUri = params.redirect_uri;
    const state = params.state || "";

codes.set(code, { email, name });

const redirectUrl = new URL(redirectUri);
    redirectUrl.searchParams.set("code", code);
    if (state) redirectUrl.searchParams.set("state", state);

res.writeHead(302, { Location: redirectUrl.toString() });
    res.end();
    return;
  }

// Authorization
  if (url.startsWith("/authorize") && method === "GET") {
    const params = parseQuery(url);
    const clientId = params.client_id;
    const redirectUri = params.redirect_uri;
    const state = params.state || "";
    const scope = params.scope || "openid email profile";

const mockUser = params.mock_email || "demo@cosmic.local";
    const mockName = params.mock_name || "Demo SSO User";

// Token
  if (url === "/token" && method === "POST") {
    let body = "";
    req.on("data", chunk => body += chunk);
    req.on("end", () => {
      const params = new URLSearchParams(body);
      const code = params.get("code");

const email = stored.email;
      const name = stored.name;
      const sub = base64Url(crypto.createHash("sha256").update(email).digest());
      const now = Math.floor(Date.now() / 1000);
      const accessToken = base64Url(crypto.randomBytes(32));
      const idToken = encodeJwt({
        iss: ISSUER,
        sub,
        aud: params.get("client_id") || "mock-client",
        exp: now + 3600,
        iat: now,
        email,
        email_verified: true,
        name,
        preferred_username: email.split("@")[0],
      });

accessTokens.set(accessToken, { email, name, sub });

res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
      res.end(JSON.stringify({
        access_token: accessToken,
        token_type: "Bearer",
        expires_in: 3600,
        id_token: idToken,
      }));
    });
    return;
  }

// JWKS
  if (url === "/jwks" && method === "GET") {
    res.writeHead(200, { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" });
    res.end(JSON.stringify({ keys: [] }));
    return;
  }

// Userinfo
  if (url === "/userinfo" && method === "GET") {
    const auth = req.headers.authorization || "";
    const token = auth.replace("Bearer ", "");
    const stored = accessTokens.get(token);
    if (!stored) {
      res.writeHead(401, { "Content-Type": "application/json" });
      res.end(JSON.stringify({ error: "invalid_token" }));
      return;
    }
    res.writeHead(200, { "Content-Type": "application/json" });
    res.end(JSON.stringify({ sub: stored.sub, email: stored.email, name: stored.name }));
    return;
  }

// 404
  res.writeHead(404, { "Content-Type": "application/json" });
  res.end(JSON.stringify({ error: "not_found", path: url }));
});

server.listen(PORT, () => {
  console.log(`Mock OIDC provider listening on http://localhost:${PORT}`);
  console.log(`Issuer: ${ISSUER}`);
});

module.exports = { server };

cmd: