112 lines
4 KiB
Python
112 lines
4 KiB
Python
|
"""OAuth Clients"""
|
||
|
|
from typing import Dict, Optional
|
||
|
|
from urllib.parse import parse_qs
|
||
|
|
|
||
|
|
from django.http import HttpRequest
|
||
|
|
from django.utils.encoding import force_str
|
||
|
|
from requests.exceptions import RequestException
|
||
|
|
from requests_oauthlib import OAuth1
|
||
|
|
from structlog import get_logger
|
||
|
|
|
||
|
|
from passbook import __version__
|
||
|
|
from passbook.sources.oauth.clients.base import BaseOAuthClient
|
||
|
|
|
||
|
|
LOGGER = get_logger()
|
||
|
|
|
||
|
|
|
||
|
|
class OAuthClient(BaseOAuthClient):
|
||
|
|
"""OAuth1 Client"""
|
||
|
|
|
||
|
|
_default_headers = {
|
||
|
|
"Accept": "application/json",
|
||
|
|
}
|
||
|
|
|
||
|
|
def get_access_token(
|
||
|
|
self, request: HttpRequest, callback=None
|
||
|
|
) -> Optional[Dict[str, str]]:
|
||
|
|
"Fetch access token from callback request."
|
||
|
|
raw_token = request.session.get(self.session_key, None)
|
||
|
|
verifier = request.GET.get("oauth_verifier", None)
|
||
|
|
if raw_token is not None and verifier is not None:
|
||
|
|
data = {
|
||
|
|
"oauth_verifier": verifier,
|
||
|
|
"oauth_callback": callback,
|
||
|
|
"token": raw_token,
|
||
|
|
}
|
||
|
|
try:
|
||
|
|
response = self.session.request(
|
||
|
|
"post",
|
||
|
|
self.source.access_token_url,
|
||
|
|
data=data,
|
||
|
|
headers=self._default_headers,
|
||
|
|
)
|
||
|
|
response.raise_for_status()
|
||
|
|
except RequestException as exc:
|
||
|
|
LOGGER.warning("Unable to fetch access token", exc=exc)
|
||
|
|
return None
|
||
|
|
else:
|
||
|
|
return response.json()
|
||
|
|
return None
|
||
|
|
|
||
|
|
def get_request_token(self, request: HttpRequest, callback):
|
||
|
|
"Fetch the OAuth request token. Only required for OAuth 1.0."
|
||
|
|
callback = request.build_absolute_uri(callback)
|
||
|
|
try:
|
||
|
|
response = self.session.request(
|
||
|
|
"post",
|
||
|
|
self.source.request_token_url,
|
||
|
|
data={
|
||
|
|
"oauth_callback": callback,
|
||
|
|
"oauth_consumer_key": self.source.consumer_key,
|
||
|
|
},
|
||
|
|
headers=self._default_headers,
|
||
|
|
)
|
||
|
|
response.raise_for_status()
|
||
|
|
except RequestException as exc:
|
||
|
|
LOGGER.warning("Unable to fetch request token", exc=exc)
|
||
|
|
return None
|
||
|
|
else:
|
||
|
|
return response.text
|
||
|
|
|
||
|
|
def get_redirect_args(self, request: HttpRequest, callback):
|
||
|
|
"Get request parameters for redirect url."
|
||
|
|
callback = force_str(request.build_absolute_uri(callback))
|
||
|
|
raw_token = self.get_request_token(request, callback)
|
||
|
|
token, secret = self.parse_raw_token(raw_token)
|
||
|
|
if token is not None and secret is not None:
|
||
|
|
request.session[self.session_key] = raw_token
|
||
|
|
return {
|
||
|
|
"oauth_token": token,
|
||
|
|
"oauth_callback": callback,
|
||
|
|
}
|
||
|
|
|
||
|
|
def parse_raw_token(self, raw_token):
|
||
|
|
"Parse token and secret from raw token response."
|
||
|
|
if raw_token is None:
|
||
|
|
return (None, None)
|
||
|
|
query_string = parse_qs(raw_token)
|
||
|
|
token = query_string.get("oauth_token", [None])[0]
|
||
|
|
secret = query_string.get("oauth_token_secret", [None])[0]
|
||
|
|
return (token, secret)
|
||
|
|
|
||
|
|
def request(self, method, url, **kwargs):
|
||
|
|
"Build remote url request. Constructs necessary auth."
|
||
|
|
user_token = kwargs.pop("token", self.token)
|
||
|
|
token, secret = self.parse_raw_token(user_token)
|
||
|
|
callback = kwargs.pop("oauth_callback", None)
|
||
|
|
verifier = kwargs.get("data", {}).pop("oauth_verifier", None)
|
||
|
|
oauth = OAuth1(
|
||
|
|
resource_owner_key=token,
|
||
|
|
resource_owner_secret=secret,
|
||
|
|
client_key=self.source.consumer_key,
|
||
|
|
client_secret=self.source.consumer_secret,
|
||
|
|
verifier=verifier,
|
||
|
|
callback_uri=callback,
|
||
|
|
)
|
||
|
|
kwargs["auth"] = oauth
|
||
|
|
return super(OAuthClient, self).session.request(method, url, **kwargs)
|
||
|
|
|
||
|
|
@property
|
||
|
|
def session_key(self):
|
||
|
|
return "oauth-client-{0}-request-token".format(self.source.name)
|