heartles/egirlskey
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

upd: add oauth decision endpoint

Browse source
This commit is contained in:
Mar0xy 2023-11-08 21:11:54 +01:00
parent 82f8d79c92
commit 88da6f16a9
No known key found for this signature in database
GPG key ID: 56569BBE47D2C828
1 changed files with 10 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
packages/backend/src/server/oauth/OAuth2ProviderService.ts
View file

@ -3,9 +3,9 @@
* SPDX-License-Identifier: AGPL-3.0-only * SPDX-License-Identifier: AGPL-3.0-only
*/ */
import querystring from 'querystring';
import { Inject, Injectable } from '@nestjs/common'; import { Inject, Injectable } from '@nestjs/common';
import megalodon, { MegalodonInterface } from 'megalodon'; import megalodon, { MegalodonInterface } from 'megalodon';
import querystring from 'querystring';
import { v4 as uuid } from 'uuid'; import { v4 as uuid } from 'uuid';
/* import { kinds } from '@/misc/api-permissions.js'; /* import { kinds } from '@/misc/api-permissions.js';
import type { Config } from '@/config.js'; import type { Config } from '@/config.js';
@ -74,10 +74,18 @@ export class OAuth2ProviderService {
if (query.redirect_uri) param += `&redirect_uri=${query.redirect_uri}`; if (query.redirect_uri) param += `&redirect_uri=${query.redirect_uri}`;
const client = query.client_id ? query.client_id : ""; const client = query.client_id ? query.client_id : "";
reply.redirect( reply.redirect(
`${atob(client)}?${param}`, `${Buffer.from(client.toString(), 'base64').toString()}?${param}`,
); );
}); });
fastify.post('/oauth/decision', async (request, reply) => {
const body: any = request.body;
if (body.cancel) {
reply.send({ user: body.login_token, allow: false });
}
reply.send({ user: body.login_token, allow: true });
});
fastify.post('/oauth/token', async (request, reply) => { fastify.post('/oauth/token', async (request, reply) => {
const body: any = request.body || request.query; const body: any = request.body || request.query;
if (body.grant_type === "client_credentials") { if (body.grant_type === "client_credentials") {