mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2026-05-07 12:58:12 +00:00
Stavros
1382ab41e7
* wip * fix: fix util imports * fix: fix bootstrap import issues * fix: fix cli imports * fix: context controller * fix: use new context in user controller * fix: fix imports and context in proxy controller * fix: fix oauth and oidc controller imports and context * feat: finalize context functionality * refactor: simplify acls checking logic by passing the entire acl struct * chore: rename get basic auth to encode basic auth for clarity * fix: fix controller tests * tests: fix service tests * tests: fix utils tests * tests: move to testify for testing in utils * fix: fix config reference generator * tests: add tests for context parsing * tests: add tests for context middleware * tests: remove error wrapper from context tests * tests: fix log wrapper tests * fix: fix verion setting in cd and dockerfiles * fix: review comments batch 1 * fix: review comments batch 2 * fix: review comments batch 3 * fix: delete totp pending session cookie on totp success * tests: fix user controller tests * fix: don't audit login too early * fix: own comments
85 lines
2.2 KiB
Go
85 lines
2.2 KiB
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
"crypto/tls"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/tinyauthapp/tinyauth/internal/model"
|
|
"golang.org/x/oauth2"
|
|
)
|
|
|
|
type UserinfoExtractor func(client *http.Client, url string) (*model.Claims, error)
|
|
|
|
type OAuthService struct {
|
|
serviceCfg model.OAuthServiceConfig
|
|
config *oauth2.Config
|
|
ctx context.Context
|
|
userinfoExtractor UserinfoExtractor
|
|
id string
|
|
}
|
|
|
|
func NewOAuthService(config model.OAuthServiceConfig, id string) *OAuthService {
|
|
httpClient := &http.Client{
|
|
Timeout: 30 * time.Second,
|
|
Transport: &http.Transport{
|
|
TLSClientConfig: &tls.Config{
|
|
InsecureSkipVerify: config.Insecure,
|
|
},
|
|
},
|
|
}
|
|
ctx := context.Background()
|
|
ctx = context.WithValue(ctx, oauth2.HTTPClient, httpClient)
|
|
|
|
return &OAuthService{
|
|
serviceCfg: config,
|
|
config: &oauth2.Config{
|
|
ClientID: config.ClientID,
|
|
ClientSecret: config.ClientSecret,
|
|
RedirectURL: config.RedirectURL,
|
|
Scopes: config.Scopes,
|
|
Endpoint: oauth2.Endpoint{
|
|
AuthURL: config.AuthURL,
|
|
TokenURL: config.TokenURL,
|
|
},
|
|
},
|
|
ctx: ctx,
|
|
userinfoExtractor: defaultExtractor,
|
|
id: id,
|
|
}
|
|
}
|
|
|
|
func (s *OAuthService) WithUserinfoExtractor(extractor UserinfoExtractor) *OAuthService {
|
|
s.userinfoExtractor = extractor
|
|
return s
|
|
}
|
|
|
|
func (s *OAuthService) Name() string {
|
|
return s.serviceCfg.Name
|
|
}
|
|
|
|
func (s *OAuthService) ID() string {
|
|
return s.id
|
|
}
|
|
|
|
func (s *OAuthService) NewRandom() string {
|
|
// The generate verifier function just creates a random string,
|
|
// so we can use it to generate a random state as well
|
|
random := oauth2.GenerateVerifier()
|
|
return random
|
|
}
|
|
|
|
func (s *OAuthService) GetAuthURL(state string, verifier string) string {
|
|
return s.config.AuthCodeURL(state, oauth2.AccessTypeOnline, oauth2.S256ChallengeOption(verifier))
|
|
}
|
|
|
|
func (s *OAuthService) GetToken(code string, verifier string) (*oauth2.Token, error) {
|
|
return s.config.Exchange(s.ctx, code, oauth2.VerifierOption(verifier))
|
|
}
|
|
|
|
func (s *OAuthService) GetUserinfo(token *oauth2.Token) (*model.Claims, error) {
|
|
client := oauth2.NewClient(s.ctx, oauth2.StaticTokenSource(token))
|
|
return s.userinfoExtractor(client, s.serviceCfg.UserinfoURL)
|
|
}
|