mirror of
https://github.com/superseriousbusiness/gotosocial.git
synced 2025-10-31 05:32:25 -05:00
1b37944f8b* [feature] Refactor tokens, allow multiple app redirect_uris * move + tweak handlers a bit * return error for unset oauth2.ClientStore funcs * wrap UpdateToken with cache * panic handling * cheeky little time optimization * unlock on error
92 lines
3 KiB
Go
92 lines
3 KiB
Go
// GoToSocial
|
|
// Copyright (C) GoToSocial Authors admin@gotosocial.org
|
|
// SPDX-License-Identifier: AGPL-3.0-or-later
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package processing
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/url"
|
|
"strings"
|
|
|
|
"github.com/google/uuid"
|
|
apimodel "github.com/superseriousbusiness/gotosocial/internal/api/model"
|
|
apiutil "github.com/superseriousbusiness/gotosocial/internal/api/util"
|
|
"github.com/superseriousbusiness/gotosocial/internal/gtserror"
|
|
"github.com/superseriousbusiness/gotosocial/internal/gtsmodel"
|
|
"github.com/superseriousbusiness/gotosocial/internal/id"
|
|
"github.com/superseriousbusiness/gotosocial/internal/oauth"
|
|
)
|
|
|
|
func (p *Processor) AppCreate(ctx context.Context, authed *apiutil.Auth, form *apimodel.ApplicationCreateRequest) (*apimodel.Application, gtserror.WithCode) {
|
|
// Set default 'read' for
|
|
// scopes if it's not set.
|
|
var scopes string
|
|
if form.Scopes == "" {
|
|
scopes = "read"
|
|
} else {
|
|
scopes = form.Scopes
|
|
}
|
|
|
|
// Normalize + parse requested redirect URIs.
|
|
form.RedirectURIs = strings.TrimSpace(form.RedirectURIs)
|
|
var redirectURIs []string
|
|
if form.RedirectURIs != "" {
|
|
// Redirect URIs can be just one value, or can be passed
|
|
// as a newline-separated list of strings. Ensure each URI
|
|
// is parseable + normalize it by reconstructing from *url.URL.
|
|
for _, redirectStr := range strings.Split(form.RedirectURIs, "\n") {
|
|
redirectURI, err := url.Parse(redirectStr)
|
|
if err != nil {
|
|
errText := fmt.Sprintf("error parsing redirect URI: %v", err)
|
|
return nil, gtserror.NewErrorBadRequest(err, errText)
|
|
}
|
|
redirectURIs = append(redirectURIs, redirectURI.String())
|
|
}
|
|
} else {
|
|
// No redirect URI(s) provided, just set default oob.
|
|
redirectURIs = append(redirectURIs, oauth.OOBURI)
|
|
}
|
|
|
|
// Generate random client ID.
|
|
clientID, err := id.NewRandomULID()
|
|
if err != nil {
|
|
return nil, gtserror.NewErrorInternalError(err)
|
|
}
|
|
|
|
// Generate + store app
|
|
// to put in the database.
|
|
app := >smodel.Application{
|
|
ID: id.NewULID(),
|
|
Name: form.ClientName,
|
|
Website: form.Website,
|
|
RedirectURIs: redirectURIs,
|
|
ClientID: clientID,
|
|
ClientSecret: uuid.NewString(),
|
|
Scopes: scopes,
|
|
}
|
|
if err := p.state.DB.PutApplication(ctx, app); err != nil {
|
|
return nil, gtserror.NewErrorInternalError(err)
|
|
}
|
|
|
|
apiApp, err := p.converter.AppToAPIAppSensitive(ctx, app)
|
|
if err != nil {
|
|
return nil, gtserror.NewErrorInternalError(err)
|
|
}
|
|
|
|
return apiApp, nil
|
|
}
|