feat: initial commit

internal/http/handler/webui/auth/provider.go

@@ -31,13 +31,25 @@ func (h *Handler) handleProviderCallback(w http.ResponseWriter, r *http.Request)
 	slog.DebugContext(ctx, "authenticated user", slog.Any("user", gothUser))
 
 	user := &User{
-		ID:          gothUser.UserID,
+		Email:       gothUser.Email,
 		Provider:    gothUser.Provider,
 		AccessToken: gothUser.AccessToken,
 		IDToken:     gothUser.IDToken,
 		Name:        gothUser.Name,
 	}
 
+	if user.Email == "" {
+		slog.ErrorContext(r.Context(), "could not authenticate user", slog.Any("error", errors.New("user email missing")))
+		http.Redirect(w, r, "/auth/logout", http.StatusTemporaryRedirect)
+		return
+	}
+
+	if user.Provider == "" {
+		slog.ErrorContext(r.Context(), "could not authenticate user", slog.Any("error", errors.New("user provider missing")))
+		http.Redirect(w, r, "/auth/logout", http.StatusTemporaryRedirect)
+		return
+	}
+
 	rawPreferredUsername, exists := gothUser.RawData["preferred_username"]
 	if exists {
 		if preferredUsername, ok := rawPreferredUsername.(string); ok {