Method HandleLogin

cmd/cql-proxy/auth/admin.go:116–186

HandleLogin returns the tokens for github oauth authentication.

(ctx context.Context, state string, auth string)

// HandleLogin returns the tokens for github oauth authentication.
func (a *AdminAuth) HandleLogin(ctx context.Context, state string, auth string) (userInfo *AdminUserInfo, err error) {
	if a.OAuthEnabled() {
		var oauthCfg *oauth2.Config

		// get client id from state
		if idx := strings.IndexRune(state, ':'); idx != -1 {
			oauthCfg, _ = a.oauthCfg[state[idx+1:]]
		}

		if oauthCfg == nil {
			oauthCfg = a.oauthCfg["default"]
		}

		var token *oauth2.Token
		token, err = oauthCfg.Exchange(ctx, auth)
		if err != nil {
			err = errors.Wrapf(err, "oauth token exchange failed")
			return
		}

		h := oauthCfg.Client(ctx, token)
		var resp *http.Response

		if resp, err = h.Get(GithubGetUserURL); err != nil {
			err = errors.Wrapf(err, "request github developer user info failed")
			return
		}

		defer func() {
			if resp.Body != nil {
				_ = resp.Body.Close()
			}
		}()

		if resp.StatusCode < 200 || resp.StatusCode > 299 {
			err = ErrOAuthGetUserFailed
			return
		}

		var respBytes []byte
		respBytes, err = ioutil.ReadAll(io.LimitReader(resp.Body, MaxGithubResponseSize))
		if err != nil {
			err = errors.Wrapf(err, "read github response failed")
			return
		}

		// decode necessary fields to struct
		if err = json.Unmarshal(respBytes, &userInfo); err != nil || userInfo == nil {
			err = errors.Wrapf(err, "decode github user info failed")
			return
		}

		// decode all fields to extra
		if err = json.Unmarshal(respBytes, &userInfo.Extra); err != nil {
			err = errors.Wrapf(err, "decode extra user info failed")
			return
		}