mirror of
https://github.com/astuto/astuto.git
synced 2025-12-15 11:17:49 +01:00
4c73b398e8
- Added Site settings > Authentication section - Create/edit/delete your custom oauth2 configurations - Login or signup with oauth2
136 lines
3.4 KiB
Ruby
136 lines
3.4 KiB
Ruby
class OAuthsController < ApplicationController
|
|
include HTTParty
|
|
include OAuthsHelper
|
|
include ApplicationHelper
|
|
|
|
before_action :authenticate_admin, only: [:index, :create, :update, :destroy]
|
|
|
|
# [subdomain.]base_url/o_auths/:id/start?reason=user|test
|
|
# Generates authorize url with required parameters and redirects to provider
|
|
def start
|
|
@o_auth = OAuth.find(params[:id])
|
|
return if params[:reason] == 'user' and not @o_auth.is_enabled?
|
|
|
|
# Generate random state + other query params
|
|
token_state = "#{params[:reason]}|#{Devise.friendly_token(30)}"
|
|
session[:token_state] = token_state
|
|
@o_auth.state = token_state
|
|
|
|
redirect_to @o_auth.authorize_url_with_query_params
|
|
end
|
|
|
|
# [subdomain.]base_url/o_auths/:id/callback
|
|
# Exchange authorization code for access token, fetch user info and sign in/up
|
|
def callback
|
|
reason, token_state = params[:state].split('|')
|
|
|
|
return unless session[:token_state] == params[:state]
|
|
|
|
@o_auth = OAuth.find(params[:id])
|
|
|
|
user_profile = OAuthExchangeAuthCodeForProfile.new(
|
|
authorization_code: params[:code],
|
|
o_auth: @o_auth
|
|
).run
|
|
|
|
if reason == 'user'
|
|
user = OAuthSignInUser.new(
|
|
user_profile: user_profile,
|
|
o_auth: @o_auth
|
|
).run
|
|
|
|
if user
|
|
sign_in user
|
|
flash[:notice] = I18n.t('devise.sessions.signed_in')
|
|
redirect_to root_path
|
|
else
|
|
flash[:alert] = I18n.t('errors.o_auth_login_error', { name: @o_auth.name })
|
|
redirect_to new_user_session_path
|
|
end
|
|
elsif reason == 'test'
|
|
unless user_signed_in? and current_user.admin?
|
|
flash[:alert] = I18n.t('errors.unauthorized')
|
|
redirect_to root_url
|
|
return
|
|
end
|
|
|
|
@user_profile = user_profile
|
|
@user_email = query_path_from_hash(user_profile, @o_auth.json_user_email_path)
|
|
@email_valid = URI::MailTo::EMAIL_REGEXP.match?(@user_email)
|
|
@user_name = query_path_from_hash(user_profile, @o_auth.json_user_name_path)
|
|
@name_valid = !@user_name.nil?
|
|
|
|
render 'o_auths/test', layout: false
|
|
else
|
|
flash[:alert] = I18n.t('errors.unknown')
|
|
redirect_to root_url
|
|
end
|
|
end
|
|
|
|
### CRUD actions below ###
|
|
|
|
def index
|
|
authorize OAuth
|
|
|
|
@o_auths = OAuth.order(created_at: :asc)
|
|
|
|
render json: to_json_custom(@o_auths)
|
|
end
|
|
|
|
def create
|
|
@o_auth = OAuth.new
|
|
@o_auth.assign_attributes(o_auth_params)
|
|
authorize @o_auth
|
|
|
|
if @o_auth.save
|
|
render json: to_json_custom(@o_auth), status: :created
|
|
else
|
|
render json: {
|
|
error: @o_auth.errors.full_messages
|
|
}, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def update
|
|
@o_auth = OAuth.find(params[:id])
|
|
authorize @o_auth
|
|
|
|
if @o_auth.update(o_auth_params)
|
|
render json: to_json_custom(@o_auth)
|
|
else
|
|
render json: {
|
|
error: @o_auth.errors.full_messages
|
|
}, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def destroy
|
|
@o_auth = OAuth.find(params[:id])
|
|
authorize @o_auth
|
|
|
|
if @o_auth.destroy
|
|
render json: {
|
|
id: params[:id]
|
|
}, status: :accepted
|
|
else
|
|
render json: {
|
|
error: @o_auth.errors.full_messages
|
|
}, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def to_json_custom(o_auth)
|
|
o_auth.as_json(
|
|
methods: :callback_url,
|
|
except: [:client_secret]
|
|
)
|
|
end
|
|
|
|
def o_auth_params
|
|
params
|
|
.require(:o_auth)
|
|
.permit(policy(@o_auth).permitted_attributes)
|
|
end
|
|
end |