Method Token

pkg/oauth/oauth.go:230–301

(w http.ResponseWriter, r *http.Request)

var errParse = errors.DefineAborted("parse", "request body parsing")

func (s *server) Token(w http.ResponseWriter, r *http.Request) {
	// Convert request through tokenRequest so that we can accept both forms and JSON.
	var tokenRequest tokenRequest
	switch r.Header.Get("Content-Type") {
	case "application/json":
		if err := json.NewDecoder(r.Body).Decode(&tokenRequest); err != nil {
			webhandlers.Error(w, r, errParse.WithCause(err))
			return
		}
	default:
		if err := r.ParseForm(); err != nil {
			webhandlers.Error(w, r, errParse.WithCause(err))
			return
		}
		if err := s.schemaDecoder.Decode(&tokenRequest, r.Form); err != nil {
			webhandlers.Error(w, r, errParse.WithCause(err))
			return
		}
	}
	if username, password, ok := r.BasicAuth(); ok {
		tokenRequest.ClientID, tokenRequest.ClientSecret = username, password
	}
	if err := tokenRequest.ValidateContext(r.Context()); err != nil {
		webhandlers.Error(w, r, err)
		return
	}

	r = r.WithContext(
		log.NewContextWithField(r.Context(), "oauth_client_id", tokenRequest.ClientID),
	)

	values := make(url.Values)
	if err := schema.NewEncoder().Encode(tokenRequest, values); err != nil {
		webhandlers.Error(w, r, err)
		return
	}
	r.Form = values
	r.PostForm = values

	oauth2 := s.oauth2(r.Context())
	resp := oauth2.NewResponse()
	defer resp.Close()
	ar := oauth2.HandleAccessRequest(resp, r)
	if ar == nil {
		s.output(w, r, resp)
		return
	}

	client := ar.Client.(osinClient).Client
	userIDs := ar.UserData.(userData).UserSessionIdentifiers.GetUserIds()
	ar.GenerateRefresh = clientHasGrant(client, ttnpb.GrantType_GRANT_REFRESH_TOKEN)
	switch ar.Type {
	case osin.AUTHORIZATION_CODE:
		ar.Authorized = clientHasGrant(client, ttnpb.GrantType_GRANT_AUTHORIZATION_CODE)
	case osin.REFRESH_TOKEN:
		ar.Authorized = clientHasGrant(client, ttnpb.GrantType_GRANT_REFRESH_TOKEN)
	case osin.PASSWORD:
		if clientHasGrant(client, ttnpb.GrantType_GRANT_PASSWORD) {