Function AuthorizeCreate

oauth/oauth.go:63–106

(env *activitypub.Env, w http.ResponseWriter, r *http.Request)

func AuthorizeCreate(env *activitypub.Env, w http.ResponseWriter, r *http.Request) error {
	var params struct {
		Username     string `json:"-" schema:"username,required"`
		Password     string `json:"-" schema:"password,required"`
		RedirectURI  string `json:"-" schema:"redirect_uri,required"`
		ClientID     string `json:"-" schema:"client_id,required"`
		ResponseType string `json:"-" schema:"response_type"` // ignored
	}
	if err := httpx.Params(r, &params); err != nil {
		return err
	}

	var app models.Application
	if err := env.DB.Where("client_id = ?", params.ClientID).First(&app).Error; err != nil {
		return httpx.Error(http.StatusBadRequest, fmt.Errorf("failed to find application: %v", err))
	}

	var account models.Account
	if err := env.DB.Joins("Actor").First(&account, "name = ? and domain = ?", params.Username, r.Host).Error; err != nil {
		return httpx.Error(http.StatusUnauthorized, fmt.Errorf("invalid username"))
	}

	if err := bcrypt.CompareHashAndPassword(account.EncryptedPassword, []byte(params.Password)); err != nil {
		return httpx.Error(http.StatusUnauthorized, fmt.Errorf("invalid password"))
	}

	token := &models.Token{
		AccessToken:       uuid.New().String(),
		AccountID:         &account.ID,
		ApplicationID:     app.ID,
		TokenType:         models.TokenType("Bearer"),
		Scope:             "read write follow push",
		AuthorizationCode: uuid.New().String(),
	}
	if err := env.DB.Create(token).Error; err != nil {
		return err
	}

	if params.RedirectURI == "" {
		params.RedirectURI = app.RedirectURI
	}

	return httpx.Redirect(w, params.RedirectURI+"?code="+token.AuthorizationCode)
}

func TokenCreate(env *activitypub.Env, w http.ResponseWriter, r *http.Request) error {
	var params struct {
		ClientID     string `json:"client_id" schema:"client_id,required"`