Switch to OIDC auth

package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullsend",
-  "version": "1.7.3",
+  "version": "1.8.0",
   "description": "Fullsend allows allowed users to send bulk text messages to groups of recipients",
   "main": "server.js",
   "scripts": {
@@ -21,6 +21,9 @@
     "body-parser": "^1.20.0",
     "dotenv": "^16.0.1",
     "express": "^4.18.1",
+    "express-session": "^1.17.3",
+    "openid-client": "^5.2.0",
+    "jose": "^4.15.0",
     "mariadb": "^3.0.0",
     "nodemon": "^3.1.10",
     "path": "^0.12.7",

public/help.html

@@ -44,8 +44,8 @@
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>
                     <li class="nav-item">
-                        <a class="nav-link" href="login" id="login" style="display:none;">Log in</a>
-                        <a class="nav-link" href="" id="logout" onclick="logout()" style="display:none;">Log out</a>
+                        <a class="nav-link" href="/api/login" id="login" style="display:none;">Log in</a>
+                        <a class="nav-link" href="/api/logout" id="logout" onclick="logout()" style="display:none;">Log out</a>
                     </li>
                 </ul>
             </div>
@@ -63,6 +63,10 @@ <h1>Fullsend</h1>
         <div class="row mt-5">
             <div class="col">
                 <h2>Changelog</h2><br>
+                <h3>v1.8.0</h3>
+                <p>
+                    Adds (finally!) authentication via OpenID Connect (OIDC) and Keycloak. Users must have the <code>fullsend_access</code> role in Keycloak to use the application and <code>fullsend_admin</code> to administer it.
+                </p>
                 <h3>v1.7.3</h3>
                 <p>
                     Adds blocking and timeouts to discourage users from sending the same message multiple times before the server has completed ingesting the message/recipient pairs

public/index.html

@@ -44,7 +44,7 @@
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>
                     <li class="nav-item">
-                        <a class="nav-link" href="login" id="login">Log in</a>
+                        <a class="nav-link" href="/api/login" id="login">Log in</a>
                         <!-- <a class="nav-link" href="" id="logout" onclick="logout()">Log out</a> -->
                     </li>
                 </ul>