wip introduce add-in endpoints and views

[lebaudantoine]

How it works?

sequenceDiagram
    actor Client
    participant Addon as meet.com/addons
    participant TES as Token Exchange Service
    participant Cache
    participant OIDC as OIDC Provider

    Client->>Addon: POST /addons/sessions
    Addon->>TES: Generate session ID
    TES->>Cache: Init cache[session_id] = null
    TES-->>Addon: session_id
    Addon-->>Client: { session_id }
    Client->>Client: Store session_id

    loop Long Polling
        Client->>Addon: GET /addons/sessions/:session_id
        Addon->>Cache: Read cache[session_id]
        Cache-->>Addon: null (not ready)
        Addon-->>Client: 202 Pending
    end

    Client->>Client: Open dialog → meet.com/addons/transit/?session_id=xx

    Client->>Addon: GET /addons/transit/?session_id=xx
    Addon->>Addon: Store session_id in session/state
    Addon-->>Client: Redirect to OIDC /authorize?redirect_uri=/addons/redirect

   Client->>OIDC: Authenticate
    OIDC-->>Client: Redirect to meet.com/callback?code=xx

    Client->>Addon: GET /callback?code=xx
    Addon->>OIDC: Exchange code for tokens
    OIDC-->>Addon: id_token, access_token
    Addon-->>Client: Redirect to /addons/redirect

    Client->>Addon: GET /addons/redirect
    Addon->>Addon: Forge JWT (access_token)
    Addon->>Cache: Set cache[session_id] = access_token
    Addon-->>Client: Redirect to success page

    Note over Client,Cache: Cache now populated — long poll resolves

    Client->>Addon: GET /addons/sessions/:session_id
    Addon->>Cache: Read cache[session_id]
    Cache-->>Addon: access_token
    Addon-->>Client: 200 { access_token }
    Client->>Client: Store access_token

    Client->>Addon: API Request (Authorization: Bearer access_token)
    Addon-->>Client: Protected resource response

Loading

[lebaudantoine]

wip to be added conditionally

[sonarqubecloud]

Quality Gate failed

Failed conditions
2 Security Hotspots
C Reliability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE