mirror of
https://github.com/yusing/godoxy.git
synced 2025-05-20 12:42:34 +02:00
117 lines
3.4 KiB
Go
117 lines
3.4 KiB
Go
package middleware
|
|
|
|
// import (
|
|
// "encoding/json"
|
|
// "fmt"
|
|
// "net/http"
|
|
// "net/url"
|
|
|
|
// E "github.com/yusing/go-proxy/internal/error"
|
|
// )
|
|
|
|
// type oAuth2 struct {
|
|
// oAuth2Opts
|
|
// m *Middleware
|
|
// }
|
|
|
|
// type oAuth2Opts struct {
|
|
// ClientID string `validate:"required"`
|
|
// ClientSecret string `validate:"required"`
|
|
// AuthURL string `validate:"required"` // Authorization Endpoint
|
|
// TokenURL string `validate:"required"` // Token Endpoint
|
|
// }
|
|
|
|
// var OAuth2 = &oAuth2{
|
|
// m: &Middleware{withOptions: NewAuthentikOAuth2},
|
|
// }
|
|
|
|
// func NewAuthentikOAuth2(opts OptionsRaw) (*Middleware, E.Error) {
|
|
// oauth := new(oAuth2)
|
|
// oauth.m = &Middleware{
|
|
// impl: oauth,
|
|
// before: oauth.handleOAuth2,
|
|
// }
|
|
// err := Deserialize(opts, &oauth.oAuth2Opts)
|
|
// if err != nil {
|
|
// return nil, err
|
|
// }
|
|
// return oauth.m, nil
|
|
// }
|
|
|
|
// func (oauth *oAuth2) handleOAuth2(next http.HandlerFunc, rw ResponseWriter, r *Request) {
|
|
// // Check if the user is authenticated (you may use session, cookie, etc.)
|
|
// if !userIsAuthenticated(r) {
|
|
// // TODO: Redirect to OAuth2 auth URL
|
|
// http.Redirect(rw, r, fmt.Sprintf("%s?client_id=%s&redirect_uri=%s&response_type=code",
|
|
// oauth.oAuth2Opts.AuthURL, oauth.oAuth2Opts.ClientID, ""), http.StatusFound)
|
|
// return
|
|
// }
|
|
|
|
// // If you have a token in the query string, process it
|
|
// if code := r.URL.Query().Get("code"); code != "" {
|
|
// // Exchange the authorization code for a token here
|
|
// // Use the TokenURL and authenticate the user
|
|
// token, err := exchangeCodeForToken(code, &oauth.oAuth2Opts, r.RequestURI)
|
|
// if err != nil {
|
|
// // handle error
|
|
// http.Error(rw, "failed to get token", http.StatusUnauthorized)
|
|
// return
|
|
// }
|
|
|
|
// // Save token and user info based on your requirements
|
|
// saveToken(rw, token)
|
|
|
|
// // Redirect to the originally requested URL
|
|
// http.Redirect(rw, r, "/", http.StatusFound)
|
|
// return
|
|
// }
|
|
|
|
// // If user is authenticated, go to the next handler
|
|
// next(rw, r)
|
|
// }
|
|
|
|
// func userIsAuthenticated(r *http.Request) bool {
|
|
// // Example: Check for a session or cookie
|
|
// session, err := r.Cookie("session_token")
|
|
// if err != nil || session.Value == "" {
|
|
// return false
|
|
// }
|
|
// // Validate the session_token if necessary
|
|
// return true
|
|
// }
|
|
|
|
// func exchangeCodeForToken(code string, opts *oAuth2Opts, requestURI string) (string, error) {
|
|
// // Prepare the request body
|
|
// data := url.Values{
|
|
// "client_id": {opts.ClientID},
|
|
// "client_secret": {opts.ClientSecret},
|
|
// "code": {code},
|
|
// "grant_type": {"authorization_code"},
|
|
// "redirect_uri": {requestURI},
|
|
// }
|
|
// resp, err := http.PostForm(opts.TokenURL, data)
|
|
// if err != nil {
|
|
// return "", fmt.Errorf("failed to request token: %w", err)
|
|
// }
|
|
// defer resp.Body.Close()
|
|
// if resp.StatusCode != http.StatusOK {
|
|
// return "", fmt.Errorf("received non-ok status from token endpoint: %s", resp.Status)
|
|
// }
|
|
// // Decode the response
|
|
// var tokenResp struct {
|
|
// AccessToken string `json:"access_token"`
|
|
// }
|
|
// if err := json.NewDecoder(resp.Body).Decode(&tokenResp); err != nil {
|
|
// return "", fmt.Errorf("failed to decode token response: %w", err)
|
|
// }
|
|
// return tokenResp.AccessToken, nil
|
|
// }
|
|
|
|
// func saveToken(rw ResponseWriter, token string) {
|
|
// // Example: Save token in cookie
|
|
// http.SetCookie(rw, &http.Cookie{
|
|
// Name: "auth_token",
|
|
// Value: token,
|
|
// // set other properties as necessary, such as Secure and HttpOnly
|
|
// })
|
|
// }
|