2021-10-21 02:17:31 +08:00
|
|
|
package auth
|
|
|
|
|
|
|
|
import (
|
2021-10-22 03:28:58 +08:00
|
|
|
"encoding/json"
|
2021-10-21 02:17:31 +08:00
|
|
|
"fmt"
|
|
|
|
"io/ioutil"
|
|
|
|
"net/http"
|
|
|
|
|
2021-10-22 03:28:58 +08:00
|
|
|
"github.com/gravitl/netmaker/logic"
|
|
|
|
"github.com/gravitl/netmaker/servercfg"
|
2021-10-21 02:17:31 +08:00
|
|
|
"golang.org/x/oauth2"
|
|
|
|
"golang.org/x/oauth2/google"
|
|
|
|
)
|
|
|
|
|
|
|
|
var google_functions = map[string]interface{}{
|
|
|
|
init_provider: initGoogle,
|
|
|
|
get_user_info: getUserInfo,
|
|
|
|
handle_callback: handleGoogleCallback,
|
|
|
|
handle_login: handleGoogleLogin,
|
2021-10-22 03:28:58 +08:00
|
|
|
verify_user: verifyGoogleUser,
|
2021-10-21 02:17:31 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
// == handle google authentication here ==
|
|
|
|
|
|
|
|
func initGoogle(redirectURL string, clientID string, clientSecret string) {
|
|
|
|
auth_provider = &oauth2.Config{
|
|
|
|
RedirectURL: redirectURL,
|
|
|
|
ClientID: clientID,
|
|
|
|
ClientSecret: clientSecret,
|
|
|
|
Scopes: []string{"https://www.googleapis.com/auth/userinfo.email"},
|
|
|
|
Endpoint: google.Endpoint,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func handleGoogleLogin(w http.ResponseWriter, r *http.Request) {
|
2021-10-22 03:28:58 +08:00
|
|
|
oauth_state_string = logic.RandomString(16)
|
2021-10-21 02:17:31 +08:00
|
|
|
url := auth_provider.AuthCodeURL(oauth_state_string)
|
|
|
|
http.Redirect(w, r, url, http.StatusTemporaryRedirect)
|
|
|
|
}
|
|
|
|
|
|
|
|
func handleGoogleCallback(w http.ResponseWriter, r *http.Request) {
|
|
|
|
|
|
|
|
var content, err = getUserInfo(r.FormValue("state"), r.FormValue("code"))
|
|
|
|
if err != nil {
|
|
|
|
fmt.Println(err.Error())
|
2021-10-22 03:28:58 +08:00
|
|
|
http.Redirect(w, r, servercfg.GetFrontendURL()+"?oauth=callback-error", http.StatusTemporaryRedirect)
|
2021-10-21 02:17:31 +08:00
|
|
|
return
|
|
|
|
}
|
2021-10-22 03:28:58 +08:00
|
|
|
logic.Log("completed google oauth sigin in for "+content.Email, 0)
|
|
|
|
http.Redirect(w, r, servercfg.GetFrontendURL()+"?oauth="+content.AccessToken+"&email="+content.Email, http.StatusPermanentRedirect)
|
2021-10-21 02:17:31 +08:00
|
|
|
}
|
|
|
|
|
2021-10-22 03:28:58 +08:00
|
|
|
func getUserInfo(state string, code string) (*OauthUser, error) {
|
2021-10-21 02:17:31 +08:00
|
|
|
if state != oauth_state_string {
|
|
|
|
return nil, fmt.Errorf("invalid oauth state")
|
|
|
|
}
|
2021-10-22 03:28:58 +08:00
|
|
|
var token, err = auth_provider.Exchange(oauth2.NoContext, code)
|
2021-10-21 02:17:31 +08:00
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("code exchange failed: %s", err.Error())
|
|
|
|
}
|
2021-10-22 03:28:58 +08:00
|
|
|
var data []byte
|
|
|
|
data, err = json.Marshal(token)
|
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("failed to convert token to json: %s", err.Error())
|
|
|
|
}
|
2021-10-21 02:17:31 +08:00
|
|
|
response, err := http.Get("https://www.googleapis.com/oauth2/v2/userinfo?access_token=" + token.AccessToken)
|
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("failed getting user info: %s", err.Error())
|
|
|
|
}
|
|
|
|
defer response.Body.Close()
|
|
|
|
contents, err := ioutil.ReadAll(response.Body)
|
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("failed reading response body: %s", err.Error())
|
|
|
|
}
|
2021-10-22 03:28:58 +08:00
|
|
|
var userInfo = &OauthUser{}
|
|
|
|
if err = json.Unmarshal(contents, userInfo); err != nil {
|
|
|
|
return nil, fmt.Errorf("failed parsing email from response data: %s", err.Error())
|
|
|
|
}
|
|
|
|
userInfo.AccessToken = string(data)
|
|
|
|
return userInfo, nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func verifyGoogleUser(token *oauth2.Token) bool {
|
|
|
|
if token.Valid() {
|
|
|
|
var err error
|
|
|
|
_, err = http.Get("https://www.googleapis.com/oauth2/v2/userinfo?access_token=" + token.AccessToken)
|
|
|
|
return err == nil
|
|
|
|
}
|
|
|
|
return false
|
2021-10-21 02:17:31 +08:00
|
|
|
}
|