Function login_handler

chirpstack/src/api/oidc.rs:53–89

()

}

pub async fn login_handler() -> Response {
    let client = match get_client().await {
        Ok(v) => v,
        Err(e) => {
            error!(error = %e.full(), "Get OIDC client error");
            return (StatusCode::INTERNAL_SERVER_ERROR, "Internal error").into_response();
        }
    };

    let (pkce_challenge, pkce_verifier) = PkceCodeChallenge::new_random_sha256();

    let conf = config::get();
    let mut request = client.authorize_url(
        AuthenticationFlow::<CoreResponseType>::AuthorizationCode,
        CsrfToken::new_random,
        Nonce::new_random,
    );
    for scope in &conf.user_authentication.openid_connect.scopes {
        request = request.add_scope(Scope::new(scope.to_string()))
    }

    request = request.set_pkce_challenge(pkce_challenge);

    let (auth_url, csrf_state, nonce) = request.url();

    if let Err(e) = store_nonce(&csrf_state, &nonce).await {
        error!(error = %e.full(), "Store nonce error");
        return (StatusCode::INTERNAL_SERVER_ERROR, "Internal error").into_response();
    }

    if let Err(e) = store_verifier(&csrf_state, &pkce_verifier).await {
        error!(error = %e.full(), "Store PKCE verifier error");
        return (StatusCode::INTERNAL_SERVER_ERROR, "Internal error").into_response();
    }

    Redirect::temporary(auth_url.as_str()).into_response()
}

pub async fn callback_handler(args: Query<CallbackArgs>) -> Response {
    let args: CallbackArgs = args.0;