Add check for provider key

pkg/modules/auth/openid/openid.go

@@ -21,6 +21,8 @@ import (
 	"code.vikunja.io/api/pkg/models"
 	"github.com/labstack/echo/v4"
 	"net/http"
+	"regexp"
+	"strings"
 )
 
 type Callback struct {
@@ -31,12 +33,17 @@ type Callback struct {
 
 type Provider struct {
 	Name     string `json:"name"`
+	Key      string `json:"key"`
 	AuthURL  string `json:"auth_url"`
 	ClientID string `json:"client_id"`
 }
 
-func GetAllProviders() (providers []*Provider) {
+func getKeyFromName(name string) string {
+	reg, _ := regexp.Compile("[^a-z0-9]+")
+	return reg.ReplaceAllString(strings.ToLower(name), "")
+}
 
+func GetAllProviders() (providers []*Provider) {
 	rawProvider := config.AuthOpenIDProviders.Get().([]interface{})
 
 	for _, p := range rawProvider {
@@ -44,6 +51,7 @@ func GetAllProviders() (providers []*Provider) {
 
 		providers = append(providers, &Provider{
 			Name:     pi["name"].(string),
+			Key:      getKeyFromName(pi["name"].(string)),
 			AuthURL:  pi["authurl"].(string),
 			ClientID: pi["clientid"].(string),
 		})
@@ -52,6 +60,26 @@ func GetAllProviders() (providers []*Provider) {
 	return
 }
 
+func GetProvider(key string) *Provider {
+	rawProvider := config.AuthOpenIDProviders.Get().([]interface{})
+
+	for _, p := range rawProvider {
+		pi := p.(map[interface{}]interface{})
+
+		k := getKeyFromName(pi["name"].(string))
+		if k == key {
+			return &Provider{
+				Name:     pi["name"].(string),
+				Key:      k,
+				AuthURL:  pi["authurl"].(string),
+				ClientID: pi["clientid"].(string),
+			}
+		}
+	}
+
+	return nil
+}
+
 func HandleCallback(c echo.Context) error {
 	cb := &Callback{}
 	if err := c.Bind(cb); err != nil {
@@ -59,7 +87,11 @@ func HandleCallback(c echo.Context) error {
 	}
 
 	// Check if the provider exists
-	//providerKey := c.Param("provider")
+	providerKey := c.Param("provider")
+	provider := GetProvider(providerKey)
+	if provider == nil {
+		return c.JSON(http.StatusBadRequest, models.Message{Message: "Provider does not exist"})
+	}
 
 	// Parse the access & ID token