Function createHttpApp

oauth-proxy/src/worker-entrypoint.ts:250–324

(worker: OAuthClientManager)

// ─── Hono HTTP Layer ─────────────────────────────────────────

function createHttpApp(worker: OAuthClientManager): Hono {
	const app = new Hono();

	app.get("/health", (c) => c.json({ status: "ok" }));

	app.get("/applications", (c) => {
		return c.json(worker.listAvailableApplications());
	});

	app.post("/users/:userId/auth/start", async (c) => {
		const userId = c.req.param("userId");
		const body = await c.req.json();
		const result = await worker.startAuth(userId, body);
		if (!result.ok) {
			const status = result.error.tag === "Validation" ? 400 : 404;
			return c.json(result.error, status);
		}
		return c.json(result.data);
	});

	app.post("/users/:userId/auth/complete", async (c) => {
		const userId = c.req.param("userId");
		const body = await c.req.json();
		const result = await worker.completeAuth(userId, body);
		if (!result.ok) {
			if (result.error.tag === "Validation" || result.error.tag === "InvalidState")
				return c.json(result.error, 400);
			if (result.error.tag === "UnknownApp") return c.json(result.error, 404);
			if (result.error.tag === "AuthFailed") return c.json(result.error, 502);
			return c.json(result.error, 500);
		}
		return c.json(result.data, 201);
	});

	app.get("/users/:userId/applications", async (c) => {
		const userId = c.req.param("userId");
		const result = await worker.listApplications(userId);
		if (!result.ok) return c.json(result.error, 500);
		return c.json(result.data);
	});

	app.delete("/users/:userId/applications/:appId", async (c) => {
		const userId = c.req.param("userId");
		const appId = c.req.param("appId");
		const result = await worker.deleteApplication(userId, appId);
		if (!result.ok) {
			const status = result.error.tag === "NotFound" ? 404 : 500;
			return c.json(result.error, status);
		}
		return c.body(null, 204);
	});

	app.delete("/users/:userId", async (c) => {
		const userId = c.req.param("userId");
		const result = await worker.deleteUser(userId);
		if (!result.ok) return c.json(result.error, 500);
		return c.json(result.data);
	});