✨ Added GitHub and Google OAuth

classquiz/oauth/google.py

@@ -0,0 +1,100 @@
+from fastapi import APIRouter, Request, HTTPException, Response
+from classquiz.config import settings
+
+from authlib.integrations.starlette_client import OAuth
+from classquiz.db.models import User, UserAuthTypes
+from pydantic import BaseModel, ValidationError
+from classquiz.auth import check_token, credentials_exception
+from classquiz.oauth.authenticate_user import log_user_in, rememberme_check
+
+settings = settings()
+
+router = APIRouter()
+oauth = OAuth()
+oauth.register(
+    name="github",
+    server_metadata_url="https://accounts.google.com/.well-known/openid-configuration",
+    client_kwargs={"scope": "openid email profile"},
+    client_id=settings.google_client_id,
+    client_secret=settings.google_client_secret,
+)
+
+
+class Userinfo(BaseModel):
+    iss: str
+    azp: str
+    aud: str
+    sub: str
+    email: str
+    email_verified: bool
+    at_hash: str
+    nonce: str
+    name: str
+    picture: str
+    given_name: str
+    locale: str
+    iat: int
+    exp: int
+
+
+class OauthGoogleResponse(BaseModel):
+    access_token: str
+    expires_in: int
+    scope: str
+    token_type: str
+    id_token: str
+    expires_at: int
+    userinfo: Userinfo
+
+
+@router.get("/login")
+async def google_login(req: Request):
+    if settings.google_client_secret is None or settings.google_client_id is None:
+        raise HTTPException(status_code=501, detail="Google-Login isn't available on this server")
+    return await oauth.google.authorize_redirect(req, f"{settings.root_address}/api/v1/users/oauth/google/auth")
+
+
+@router.get("/auth")
+async def auth(request: Request, response: Response):
+    if settings.google_client_secret is None or settings.google_client_id is None:
+        raise HTTPException(status_code=501, detail="Google-Login isn't available on this server")
+    access_token = request.cookies.get("access_token")
+    rememberme_token = request.cookies.get("rememberme_token")
+    print(rememberme_token, access_token)
+    if access_token is not None:
+        try:
+            data = await check_token(access_token)
+            if data is not None:
+                return
+        except:
+            pass
+    if rememberme_token is not None:
+        return await rememberme_check(rememberme_token=rememberme_token, response=response)
+
+    try:
+        user_data = await oauth.google.authorize_access_token(request)
+    except:
+        raise HTTPException(status_code=401, detail="OAuth didn't work!")
+    try:
+        user_data = OauthGoogleResponse(**user_data).userinfo
+    except (TypeError, ValidationError):
+        raise HTTPException(status_code=401, detail="Something went wrong.")
+    user_in_db = await User.objects.get_or_none(email=user_data.email)
+    if user_in_db is None:
+        # REGISTER USER
+        create_user = User(
+            email=user_data.email,
+            username=user_data.name,
+            verified=user_data.email_verified,
+            auth_type=UserAuthTypes.GOOGLE,
+            google_uid=user_data.sub,
+        )
+        try:
+            await create_user.save()
+        except Exception as e:
+            raise HTTPException(status_code=500, detail=str(e))
+    user = await User.objects.get_or_none(
+        email=user_data.email, google_uid=user_data.sub, auth_type=UserAuthTypes.GOOGLE, verified=True
+    )
+
+    return await log_user_in(user=user, request=request, response=response)