metabase-nodejs-modular-embedding-sample/server.js at main · metabase/metabase-nodejs-modular-embedding-sample · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
import express from "express";
import cors from "cors";
import jwt from "jsonwebtoken";

const app = express();
const port = process.env.PORT;

app.use(cors({ credentials: true, origin: true }));

const MB_JWT_SHARED_SECRET = process.env.MB_JWT_SHARED_SECRET;
const MB_EMBEDDING_SECRET_KEY = process.env.MB_EMBEDDING_SECRET_KEY;

const MB_SITE_URL = process.env.MB_INSTANCE_URL;
const MB_DASHBOARD_ID_TO_EMBED = process.env.MB_DASHBOARD_ID_TO_EMBED
  ? parseInt(process.env.MB_DASHBOARD_ID_TO_EMBED)
  : 1;

const MB_ADMIN_EMAIL = process.env.MB_ADMIN_EMAIL || "rene@example.com";
const MB_ADMIN_FIRST_NAME = process.env.MB_ADMIN_FIRST_NAME || "Rene";
const MB_ADMIN_LAST_NAME = process.env.MB_ADMIN_LAST_NAME || "Descartes";

const JWT_PROVIDER_URI = `http://localhost:${port}/auth/sso`;

const getPageLayout = (config, component, currentPath) => {
  const navLink = (href, label) =>
    `<a href="${href}"${href === currentPath ? ' class="active"' : ""}>${label}</a>`;

  return `
    <!DOCTYPE html>
    <html>
      <head>
        <title>Embed.js Demo</title>
        <style>
          html, body { height: 100%; margin: 0; overflow: hidden; }
          body { display: flex; flex-direction: column; }
          nav { padding: 1rem; background: #f0f0f0; }
          nav a { margin-right: 1rem; text-decoration: none; color: #555; padding: 0.25rem 0.5rem; border-radius: 4px; }
          nav a:hover { background: #e0e0e0; }
          nav a.active { font-weight: bold; background: #509EE3; color: white; }
          main { flex: 1; }
          metabase-dashboard { width: 100%; height: 100%; }
        </style>
      </head>
      <body>
        <script>
          window.defineMetabaseConfig = function(config) {
            window.metabaseConfig = config;
          };
          defineMetabaseConfig(${JSON.stringify(config)});
        </script>
        <script defer src="${MB_SITE_URL}/app/embed.js"></script>
        <nav>
          ${navLink("/", "Guest Embed")}
          ${navLink("/sso-embed", "SSO Embed")}
        </nav>
        <main>
          ${component}
        </main>
      </body>
    </html>
  `;
};

// SSO endpoint that returns JWT for authenticated users
app.get("/auth/sso", (req, res) => {
  // Usually, you would grab the user from the current session
  // Here it is hardcoded for demonstration purposes
  // Example:
  // const { user } = req.session;
  const user = {
    email: MB_ADMIN_EMAIL,
    firstName: MB_ADMIN_FIRST_NAME,
    lastName: MB_ADMIN_LAST_NAME,
    group: "Customer",
  };

  if (!user) {
    return res.status(401).json({
      status: "error",
      message: "Not authenticated",
    });
  }

  const ssoPayload = {
    email: user.email,
    first_name: user.firstName,
    last_name: user.lastName,
    groups: [user.group],
    exp: Math.round(Date.now() / 1000) + 10 * 60, // 10 minutes
  };

  const ssoToken = jwt.sign(ssoPayload, MB_JWT_SHARED_SECRET);

  res.json({ jwt: ssoToken });
});

// Guest Embed - uses signed JWT tokens for anonymous access
app.get(["/", "/guest-embed"], (req, res) => {
  const payload = {
    resource: { dashboard: MB_DASHBOARD_ID_TO_EMBED },
    params: {},
    exp: Math.round(Date.now() / 1000) + 10 * 60, // 10 minutes
  };
  const token = jwt.sign(payload, MB_EMBEDDING_SECRET_KEY);

  res.send(
    getPageLayout(
      { isGuest: true, instanceUrl: MB_SITE_URL },
      `<metabase-dashboard token="${token}" with-title="true"></metabase-dashboard>`,
      "/",
    ),
  );
});

// SSO Embed - uses JWT SSO for authenticated user sessions
app.get("/sso-embed", (req, res) => {
  res.send(
    getPageLayout(
      {
        instanceUrl: MB_SITE_URL,
        jwtProviderUri: JWT_PROVIDER_URI,
        enableInternalNavigation: true,
      },
      `<metabase-dashboard dashboard-id="${MB_DASHBOARD_ID_TO_EMBED}" with-title="true" with-downloads="false"></metabase-dashboard>`,
      "/sso-embed",
    ),
  );
});

app.listen(port, () => {
  console.log(`App is live at http://localhost:${port}`);
});