✨ Custom OAuth works
This commit is contained in:
+1
-1
@@ -14,7 +14,7 @@ from classquiz.storage import Storage
|
|||||||
|
|
||||||
|
|
||||||
class CustomOpenIDProvider(BaseModel):
|
class CustomOpenIDProvider(BaseModel):
|
||||||
scopes: str = "openid email"
|
scopes: str = "openid email profile"
|
||||||
server_metadata_url: str
|
server_metadata_url: str
|
||||||
client_id: str
|
client_id: str
|
||||||
client_secret: str
|
client_secret: str
|
||||||
|
|||||||
@@ -28,6 +28,8 @@ class Userinfo(BaseModel):
|
|||||||
nonce: str
|
nonce: str
|
||||||
email: str
|
email: str
|
||||||
email_verified: bool
|
email_verified: bool
|
||||||
|
preferred_username: str
|
||||||
|
name: str
|
||||||
|
|
||||||
|
|
||||||
class OpenIDResponse(BaseModel):
|
class OpenIDResponse(BaseModel):
|
||||||
@@ -43,7 +45,7 @@ class OpenIDResponse(BaseModel):
|
|||||||
|
|
||||||
@router.get("/login")
|
@router.get("/login")
|
||||||
async def openid_login(req: Request):
|
async def openid_login(req: Request):
|
||||||
if settings.google_client_secret is None or settings.google_client_id is None:
|
if settings.custom_openid_provider.client_id is None or settings.custom_openid_provider.client_secret is None:
|
||||||
raise HTTPException(status_code=501, detail="Custom-OAuth-Login isn't available on this server")
|
raise HTTPException(status_code=501, detail="Custom-OAuth-Login isn't available on this server")
|
||||||
oauth = init_oauth()
|
oauth = init_oauth()
|
||||||
|
|
||||||
@@ -53,7 +55,7 @@ async def openid_login(req: Request):
|
|||||||
@router.get("/auth")
|
@router.get("/auth")
|
||||||
async def auth(request: Request, response: Response):
|
async def auth(request: Request, response: Response):
|
||||||
if settings.custom_openid_provider.client_id is None or settings.custom_openid_provider.client_secret is None:
|
if settings.custom_openid_provider.client_id is None or settings.custom_openid_provider.client_secret is None:
|
||||||
raise HTTPException(status_code=501, detail="Google-Login isn't available on this server")
|
raise HTTPException(status_code=501, detail="Custom-OAuth-Login isn't available on this server")
|
||||||
access_token = request.cookies.get("access_token")
|
access_token = request.cookies.get("access_token")
|
||||||
rememberme_token = request.cookies.get("rememberme_token")
|
rememberme_token = request.cookies.get("rememberme_token")
|
||||||
if access_token is not None:
|
if access_token is not None:
|
||||||
@@ -72,7 +74,7 @@ async def auth(request: Request, response: Response):
|
|||||||
user_data = OpenIDResponse(**user_data).userinfo
|
user_data = OpenIDResponse(**user_data).userinfo
|
||||||
except (TypeError, ValidationError):
|
except (TypeError, ValidationError):
|
||||||
raise HTTPException(status_code=401, detail="Something went wrong.")
|
raise HTTPException(status_code=401, detail="Something went wrong.")
|
||||||
print(user_data)
|
|
||||||
user_in_db = await User.objects.get_or_none(email=user_data.email)
|
user_in_db = await User.objects.get_or_none(email=user_data.email)
|
||||||
if user_in_db is None:
|
if user_in_db is None:
|
||||||
# REGISTER USER
|
# REGISTER USER
|
||||||
@@ -80,10 +82,10 @@ async def auth(request: Request, response: Response):
|
|||||||
await User.objects.create(
|
await User.objects.create(
|
||||||
id=uuid.uuid4(),
|
id=uuid.uuid4(),
|
||||||
email=user_data.email,
|
email=user_data.email,
|
||||||
username=user_data.name,
|
username=user_data.preferred_username,
|
||||||
verified=user_data.email_verified,
|
verified=user_data.email_verified,
|
||||||
auth_type=UserAuthTypes.CUSTOM,
|
auth_type=UserAuthTypes.CUSTOM,
|
||||||
google_uid=user_data.sub,
|
google_uid=user_data.sub.hex,
|
||||||
avatar=gzipped_user_avatar(),
|
avatar=gzipped_user_avatar(),
|
||||||
)
|
)
|
||||||
except Exception as e:
|
except Exception as e:
|
||||||
@@ -95,10 +97,10 @@ async def auth(request: Request, response: Response):
|
|||||||
await User.objects.create(
|
await User.objects.create(
|
||||||
id=uuid.uuid4(),
|
id=uuid.uuid4(),
|
||||||
email=user_data.email,
|
email=user_data.email,
|
||||||
username=f"{user_data.name}{counter}",
|
username=f"{user_data.preferred_username}{counter}",
|
||||||
verified=user_data.email_verified,
|
verified=user_data.email_verified,
|
||||||
auth_type=UserAuthTypes.GOOGLE,
|
auth_type=UserAuthTypes.CUSTOM,
|
||||||
google_uid=user_data.sub,
|
google_uid=user_data.sub.hex,
|
||||||
avatar=gzipped_user_avatar(),
|
avatar=gzipped_user_avatar(),
|
||||||
)
|
)
|
||||||
error = False
|
error = False
|
||||||
@@ -108,8 +110,9 @@ async def auth(request: Request, response: Response):
|
|||||||
else:
|
else:
|
||||||
raise HTTPException(status_code=500, detail=str(e))
|
raise HTTPException(status_code=500, detail=str(e))
|
||||||
user = await User.objects.get_or_none(
|
user = await User.objects.get_or_none(
|
||||||
email=user_data.email, google_uid=user_data.sub, auth_type=UserAuthTypes.GOOGLE, verified=True
|
email=user_data.email, google_uid=user_data.sub.hex, auth_type=UserAuthTypes.CUSTOM, verified=True
|
||||||
)
|
)
|
||||||
|
print(user_data)
|
||||||
|
|
||||||
await log_user_in(user=user, request=request, response=response)
|
await log_user_in(user=user, request=request, response=response)
|
||||||
response.headers.append("Location", "/account/login")
|
response.headers.append("Location", "/account/login")
|
||||||
|
|||||||
Reference in New Issue
Block a user