Method internalExternalProviderCallback

internal/api/external.go:160–290

(w http.ResponseWriter, r *http.Request)

}

func (a *API) internalExternalProviderCallback(w http.ResponseWriter, r *http.Request) error {
	ctx := r.Context()
	db := a.db.WithContext(ctx)

	var grantParams models.GrantParams
	grantParams.FillGrantParams(r)

	providerType, emailOptional := getExternalProviderType(ctx)
	data, err := a.handleOAuthCallback(r)
	if err != nil {
		return err
	}

	userData := data.userData

	if len(userData.Emails) == 0 && !emailOptional {
		return apierrors.NewInternalServerError("Error getting user email from external provider")
	}

	userData.Metadata.EmailVerified = false
	for _, email := range userData.Emails {
		if email.Primary {
			userData.Metadata.Email = email.Email
			userData.Metadata.EmailVerified = email.Verified
			break
		} else {
			userData.Metadata.Email = email.Email
			userData.Metadata.EmailVerified = email.Verified
		}
	}
	providerAccessToken := data.token
	providerRefreshToken := data.refreshToken

	flowState := getFlowState(ctx)

	targetUser := getTargetUser(ctx)
	inviteToken := getInviteToken(ctx)
	if targetUser == nil && inviteToken == "" {
		if err := a.triggerBeforeUserCreatedExternal(
			r, db, userData, providerType); err != nil {
			return err
		}
	}

	var createdUser bool
	var user *models.User
	var token *AccessTokenResponse
	err = db.Transaction(func(tx *storage.Connection) error {
		var terr error
		if targetUser != nil {
			if user, terr = a.linkIdentityToUser(r, ctx, tx, userData, providerType); terr != nil {
				return terr
			}
		} else if inviteToken != "" {
			if user, terr = a.processInvite(r, tx, userData, inviteToken, providerType); terr != nil {
				return terr
			}
		} else {