updates

src/pages/api/sso/providers.ts

@@ -17,7 +17,7 @@ export async function GET(context: APIContext) {
     const formattedProviders = providers.map(provider => ({
       ...provider,
       oidcConfig: provider.oidcConfig ? JSON.parse(provider.oidcConfig) : undefined,
-      samlConfig: provider.samlConfig ? JSON.parse(provider.samlConfig) : undefined,
+      samlConfig: (provider as any).samlConfig ? JSON.parse((provider as any).samlConfig) : undefined,
     }));
 
     return new Response(JSON.stringify(formattedProviders), {
@@ -48,6 +48,7 @@ export async function POST(context: APIContext) {
       mapping,
       providerId,
       organizationId,
+      scopes,
     } = body;
 
     // Validate required fields
@@ -86,6 +87,7 @@ export async function POST(context: APIContext) {
       tokenEndpoint,
       jwksEndpoint,
       userInfoEndpoint,
+      scopes: scopes || ["openid", "email", "profile"],
       mapping: mapping || {
         id: "sub",
         email: "email",
@@ -113,7 +115,7 @@ export async function POST(context: APIContext) {
     const formattedProvider = {
       ...newProvider,
       oidcConfig: newProvider.oidcConfig ? JSON.parse(newProvider.oidcConfig) : undefined,
-      samlConfig: newProvider.samlConfig ? JSON.parse(newProvider.samlConfig) : undefined,
+      samlConfig: (newProvider as any).samlConfig ? JSON.parse((newProvider as any).samlConfig) : undefined,
     };
 
     return new Response(JSON.stringify(formattedProvider), {
@@ -125,6 +127,100 @@ export async function POST(context: APIContext) {
   }
 }
 
+// PUT /api/sso/providers - Update an existing SSO provider
+export async function PUT(context: APIContext) {
+  try {
+    const { user, response } = await requireAuth(context);
+    if (response) return response;
+
+    const url = new URL(context.request.url);
+    const providerId = url.searchParams.get("id");
+
+    if (!providerId) {
+      return new Response(
+        JSON.stringify({ error: "Provider ID is required" }),
+        {
+          status: 400,
+          headers: { "Content-Type": "application/json" },
+        }
+      );
+    }
+
+    const body = await context.request.json();
+    const {
+      issuer,
+      domain,
+      clientId,
+      clientSecret,
+      authorizationEndpoint,
+      tokenEndpoint,
+      jwksEndpoint,
+      userInfoEndpoint,
+      scopes,
+      organizationId,
+    } = body;
+
+    // Get existing provider
+    const [existingProvider] = await db
+      .select()
+      .from(ssoProviders)
+      .where(eq(ssoProviders.id, providerId))
+      .limit(1);
+
+    if (!existingProvider) {
+      return new Response(
+        JSON.stringify({ error: "Provider not found" }),
+        {
+          status: 404,
+          headers: { "Content-Type": "application/json" },
+        }
+      );
+    }
+
+    // Parse existing config
+    const existingConfig = JSON.parse(existingProvider.oidcConfig);
+
+    // Create updated OIDC config
+    const updatedOidcConfig = {
+      ...existingConfig,
+      clientId: clientId || existingConfig.clientId,
+      clientSecret: clientSecret || existingConfig.clientSecret,
+      authorizationEndpoint: authorizationEndpoint || existingConfig.authorizationEndpoint,
+      tokenEndpoint: tokenEndpoint || existingConfig.tokenEndpoint,
+      jwksEndpoint: jwksEndpoint || existingConfig.jwksEndpoint,
+      userInfoEndpoint: userInfoEndpoint || existingConfig.userInfoEndpoint,
+      scopes: scopes || existingConfig.scopes || ["openid", "email", "profile"],
+    };
+
+    // Update provider
+    const [updatedProvider] = await db
+      .update(ssoProviders)
+      .set({
+        issuer: issuer || existingProvider.issuer,
+        domain: domain || existingProvider.domain,
+        oidcConfig: JSON.stringify(updatedOidcConfig),
+        organizationId: organizationId !== undefined ? organizationId : existingProvider.organizationId,
+        updatedAt: new Date(),
+      })
+      .where(eq(ssoProviders.id, providerId))
+      .returning();
+
+    // Parse JSON fields before sending
+    const formattedProvider = {
+      ...updatedProvider,
+      oidcConfig: JSON.parse(updatedProvider.oidcConfig),
+      samlConfig: (updatedProvider as any).samlConfig ? JSON.parse((updatedProvider as any).samlConfig) : undefined,
+    };
+
+    return new Response(JSON.stringify(formattedProvider), {
+      status: 200,
+      headers: { "Content-Type": "application/json" },
+    });
+  } catch (error) {
+    return createSecureErrorResponse(error, "SSO providers API");
+  }
+}
+
 // DELETE /api/sso/providers - Delete a provider by ID
 export async function DELETE(context: APIContext) {
   try {