Albirew/nyaa-pantsu
Archivé
1
0
Bifurcation 0
Ce dépôt a été archivé le 2022-05-07. Vous pouvez voir ses fichiers ou le cloner, mais pas ouvrir de ticket ou de demandes d'ajout, ni soumettre de changements.
nyaa-pantsu/controllers/oauth/auth.go
akuma06 03ea72595d OAuth API [done] (#1275)
* Initial Commit for OAuth API

This builds and run and return the right error.
Need to test it and then adding all users as possible client

* Added mising dependency

* just compile already...

* Fixing template test

* Imrpovements

Moved db stuff in models
Added some tests
Added form in modpanel to add/update a client
Added controllers for add/update of client

* Added Forms + speed improvements

Controller oauth client listing + html
Controller oauth client delete + messages
Messages on comment delete
New ES config that disable ES if set to false. Improve load speed on local development
Fix a load config bug
Fix index admin & translation string sign_out broken by @ewhal

* Sanitize empty strig in form array + css

Multiple empty array of strings are sanitized for the oauth client create form
Added some css for the form display

* Upload and Create form works

* Fix splitting response types

* Removing required on secret when updating

* fix travis error

* Fix travis template test

* Update dependency

* Moved to jinzhu instead of azhao

* randomizen secret on creation

* Final touch on oath api

improved display name
fix grant form csrf
fix login csrf on oauth

* Fix gorm test

* fix template test

* Fixing deleted dependency issue

* Make travis faster

* Fix typo

* Fix csrf for api calls

* This shouldn't be exempt

* Removing hard coded hash

@ewhal Don't forget to replace the hash in tokens.go with another one

* Added an example on how to use OAuth middleware

* Renamed fosite utils to oauth2 utils
2017-07-28 13:46:40 +10:00

85 lignes
2,6 Kio
Go

package oauth
import (
"net/http"
"github.com/NyaaPantsu/nyaa/controllers/router"
"github.com/NyaaPantsu/nyaa/templates"
"github.com/NyaaPantsu/nyaa/utils/cookies"
"github.com/NyaaPantsu/nyaa/utils/log"
msg "github.com/NyaaPantsu/nyaa/utils/messages"
"github.com/NyaaPantsu/nyaa/utils/oauth2"
"github.com/NyaaPantsu/nyaa/utils/validator"
"github.com/NyaaPantsu/nyaa/utils/validator/user"
"github.com/gin-gonic/gin"
"github.com/ory/fosite"
)
func authEndpoint(c *gin.Context) {
// This context will be passed to all methods.
ctx := fosite.NewContext()
// Let's create an AuthorizeRequest object!
// It will analyze the request and extract important information like scopes, response type and others.
ar, err := oauth2.Oauth2.NewAuthorizeRequest(ctx, c.Request)
if err != nil {
log.Errorf("Error occurred in NewAuthorizeRequest: %s", err)
oauth2.Oauth2.WriteAuthorizeError(c.Writer, ar, err)
return
}
// We add needed template variables
templateVariables := templates.Commonvariables(c)
templateVariables.Set("Scopes", ar.GetRequestedScopes())
templateVariables.Set("Client", ar.GetClient())
// Get the current user
user := router.GetUser(c)
// If not already logged in
if user.ID == 0 {
// We display the login form and log him in
b := userValidator.LoginForm{}
messages := msg.GetMessages(c)
c.Bind(&b)
validator.ValidateForm(&b, messages)
if messages.HasErrors() {
templates.Render(c, "site/api/login.jet.html", templateVariables)
return
}
_, _, errorUser := cookies.CreateUserAuthentication(c, &b)
if errorUser != nil {
templates.Render(c, "site/api/login.jet.html", templateVariables)
return
}
}
// if logged in but grant form wasn't sent, we show grant form and stop the request
if c.PostForm("grant") == "" {
templates.Render(c, "site/api/grant.jet.html", templateVariables)
return
}
// if logged in and grant form sent
// let's see what scopes the user gave consent to
for _, scope := range c.PostFormArray("scopes") {
ar.GrantScope(scope)
}
client, err := oauth2.Store.GetConcreteClient(ar.GetClient().GetID())
if err != nil {
c.AbortWithError(http.StatusBadRequest, err)
return
}
mySessionData := oauth2.NewSession(user.Username, client.ClientURI)
response, err := oauth2.Oauth2.NewAuthorizeResponse(ctx, ar, mySessionData)
// Catch any errors, e.g.:
// * unknown client
// * invalid redirect
// * ...
if err != nil {
log.Errorf("Error occurred in NewAuthorizeResponse: %s\n", err)
oauth2.Oauth2.WriteAuthorizeError(c.Writer, ar, err)
return
}
// Last but not least, send the response!
oauth2.Oauth2.WriteAuthorizeResponse(c.Writer, ar, response)
}