Method HandleToken

pkg/web/oauthclient/token.go:58–96

HandleToken is a handler that returns a valid OAuth token. It reads the token from the authorization cookie and refreshes it if needed. If the authorization cookie is not there, it returns a 401 Unauthorized error.

(w http.ResponseWriter, r *http.Request)

// It reads the token from the authorization cookie and refreshes it if needed.
// If the authorization cookie is not there, it returns a 401 Unauthorized error.
func (oc *OAuthClient) HandleToken(w http.ResponseWriter, r *http.Request) {
	value, err := oc.getAuthCookie(w, r)
	if err != nil {
		webhandlers.Error(w, r, err)
		return
	}

	currentToken := &oauth2.Token{
		AccessToken:  value.AccessToken,
		RefreshToken: value.RefreshToken,
		Expiry:       time.Now(),
	}

	freshToken, err := oc.Token(r.Context(), currentToken)
	if err != nil {
		webhandlers.Error(w, r, err)
		return
	}

	if freshToken != currentToken {
		err = oc.setAuthCookie(w, r, authCookie{
			AccessToken:  freshToken.AccessToken,
			RefreshToken: freshToken.RefreshToken,
			Expiry:       freshToken.Expiry,
		})
		if err != nil {
			webhandlers.Error(w, r, err)
			return
		}
	}

	webhandlers.JSON(w, r, struct {
		AccessToken string    `json:"access_token"`
		Expiry      time.Time `json:"expiry"`
	}{
		AccessToken: freshToken.AccessToken,
		Expiry:      freshToken.Expiry,
	})
}