Mail

venv/lib/python3.12/site-packages/allauth/socialaccount/providers/oauth2/client.py

@@ -0,0 +1,102 @@
+import requests
+from urllib.parse import parse_qsl
+
+from django.utils.http import urlencode
+
+
+class OAuth2Error(Exception):
+    pass
+
+
+class OAuth2Client(object):
+    def __init__(
+        self,
+        request,
+        consumer_key,
+        consumer_secret,
+        access_token_method,
+        access_token_url,
+        callback_url,
+        scope,
+        scope_delimiter=" ",
+        headers=None,
+        basic_auth=False,
+    ):
+        self.request = request
+        self.access_token_method = access_token_method
+        self.access_token_url = access_token_url
+        self.callback_url = callback_url
+        self.consumer_key = consumer_key
+        self.consumer_secret = consumer_secret
+        self.scope = scope_delimiter.join(set(scope))
+        self.state = None
+        self.headers = headers
+        self.basic_auth = basic_auth
+
+    def get_redirect_url(self, authorization_url, extra_params):
+        params = {
+            "client_id": self.consumer_key,
+            "redirect_uri": self.callback_url,
+            "scope": self.scope,
+            "response_type": "code",
+        }
+        if self.state:
+            params["state"] = self.state
+        params.update(extra_params)
+        return "%s?%s" % (authorization_url, urlencode(params))
+
+    def get_access_token(self, code, pkce_code_verifier=None):
+        data = {
+            "redirect_uri": self.callback_url,
+            "grant_type": "authorization_code",
+            "code": code,
+        }
+        if self.basic_auth:
+            auth = requests.auth.HTTPBasicAuth(self.consumer_key, self.consumer_secret)
+        else:
+            auth = None
+            data.update(
+                {
+                    "client_id": self.consumer_key,
+                    "client_secret": self.consumer_secret,
+                }
+            )
+        params = None
+        self._strip_empty_keys(data)
+        url = self.access_token_url
+        if self.access_token_method == "GET":
+            params = data
+            data = None
+        if data and pkce_code_verifier:
+            data["code_verifier"] = pkce_code_verifier
+        # TODO: Proper exception handling
+        resp = requests.request(
+            self.access_token_method,
+            url,
+            params=params,
+            data=data,
+            headers=self.headers,
+            auth=auth,
+        )
+
+        access_token = None
+        if resp.status_code in [200, 201]:
+            # Weibo sends json via 'text/plain;charset=UTF-8'
+            if (
+                resp.headers["content-type"].split(";")[0] == "application/json"
+                or resp.text[:2] == '{"'
+            ):
+                access_token = resp.json()
+            else:
+                access_token = dict(parse_qsl(resp.text))
+        if not access_token or "access_token" not in access_token:
+            raise OAuth2Error("Error retrieving access token: %s" % resp.content)
+        return access_token
+
+    def _strip_empty_keys(self, params):
+        """Added because the Dropbox OAuth2 flow doesn't
+        work when scope is passed in, which is empty.
+        """
+        keys = [k for k, v in params.items() if v == ""]
+        for key in keys:
+            del params[key]