86 lines
2.2 KiB
Go
86 lines
2.2 KiB
Go
// SPDX-FileCopyrightText: Copyright The Miniflux Authors. All rights reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package oauth2 // import "miniflux.app/v2/internal/oauth2"
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
|
|
"miniflux.app/v2/internal/model"
|
|
|
|
"golang.org/x/oauth2"
|
|
)
|
|
|
|
type googleProfile struct {
|
|
Sub string `json:"sub"`
|
|
Email string `json:"email"`
|
|
}
|
|
|
|
type googleProvider struct {
|
|
clientID string
|
|
clientSecret string
|
|
redirectURL string
|
|
}
|
|
|
|
func (g *googleProvider) GetUserExtraKey() string {
|
|
return "google_id"
|
|
}
|
|
|
|
func (g *googleProvider) GetRedirectURL(state string) string {
|
|
return g.config().AuthCodeURL(state)
|
|
}
|
|
|
|
func (g *googleProvider) GetProfile(ctx context.Context, code string) (*Profile, error) {
|
|
conf := g.config()
|
|
token, err := conf.Exchange(ctx, code)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
client := conf.Client(ctx, token)
|
|
resp, err := client.Get("https://www.googleapis.com/oauth2/v3/userinfo")
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer resp.Body.Close()
|
|
|
|
var user googleProfile
|
|
decoder := json.NewDecoder(resp.Body)
|
|
if err := decoder.Decode(&user); err != nil {
|
|
return nil, fmt.Errorf("oauth2: unable to unserialize google profile: %v", err)
|
|
}
|
|
|
|
profile := &Profile{Key: g.GetUserExtraKey(), ID: user.Sub, Username: user.Email}
|
|
return profile, nil
|
|
}
|
|
|
|
func (g *googleProvider) PopulateUserCreationWithProfileID(user *model.UserCreationRequest, profile *Profile) {
|
|
user.GoogleID = profile.ID
|
|
}
|
|
|
|
func (g *googleProvider) PopulateUserWithProfileID(user *model.User, profile *Profile) {
|
|
user.GoogleID = profile.ID
|
|
}
|
|
|
|
func (g *googleProvider) UnsetUserProfileID(user *model.User) {
|
|
user.GoogleID = ""
|
|
}
|
|
|
|
func (g *googleProvider) config() *oauth2.Config {
|
|
return &oauth2.Config{
|
|
RedirectURL: g.redirectURL,
|
|
ClientID: g.clientID,
|
|
ClientSecret: g.clientSecret,
|
|
Scopes: []string{"email"},
|
|
Endpoint: oauth2.Endpoint{
|
|
AuthURL: "https://accounts.google.com/o/oauth2/auth",
|
|
TokenURL: "https://accounts.google.com/o/oauth2/token",
|
|
},
|
|
}
|
|
}
|
|
|
|
func newGoogleProvider(clientID, clientSecret, redirectURL string) *googleProvider {
|
|
return &googleProvider{clientID: clientID, clientSecret: clientSecret, redirectURL: redirectURL}
|
|
}
|