83 lines
2.6 KiB
Python
83 lines
2.6 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
import json
|
|
import requests
|
|
from collections import OrderedDict
|
|
|
|
from django.utils.http import urlencode
|
|
|
|
from allauth.socialaccount.providers.oauth2.client import (
|
|
OAuth2Client,
|
|
OAuth2Error,
|
|
)
|
|
|
|
|
|
class FeishuOAuth2Client(OAuth2Client):
|
|
app_access_token_url = (
|
|
"https://open.feishu.cn/open-apis/auth/v3/app_access_token/internal/"
|
|
)
|
|
|
|
def get_redirect_url(self, authorization_url, extra_params):
|
|
params = {
|
|
"app_id": self.consumer_key,
|
|
"redirect_uri": self.callback_url,
|
|
"scope": self.scope,
|
|
"response_type": "code",
|
|
}
|
|
if self.state:
|
|
params["state"] = self.state
|
|
params.update(extra_params)
|
|
sorted_params = OrderedDict()
|
|
for param in sorted(params):
|
|
sorted_params[param] = params[param]
|
|
return "%s?%s" % (authorization_url, urlencode(sorted_params))
|
|
|
|
def app_access_token(self):
|
|
data = {
|
|
"app_id": self.consumer_key,
|
|
"app_secret": self.consumer_secret,
|
|
}
|
|
|
|
self._strip_empty_keys(data)
|
|
url = self.app_access_token_url
|
|
|
|
# TODO: Proper exception handling
|
|
resp = requests.request("POST", url, data=data)
|
|
resp.raise_for_status()
|
|
access_token = resp.json()
|
|
if not access_token or "app_access_token" not in access_token:
|
|
raise OAuth2Error("Error retrieving app access token: %s" % resp.content)
|
|
return access_token["app_access_token"]
|
|
|
|
def get_access_token(self, code, pkce_code_verifier=None):
|
|
data = {
|
|
"grant_type": "authorization_code",
|
|
"code": code,
|
|
"app_access_token": self.app_access_token(),
|
|
}
|
|
params = None
|
|
self._strip_empty_keys(data)
|
|
url = self.access_token_url
|
|
if self.access_token_method == "GET":
|
|
params = data
|
|
data = None
|
|
if data and pkce_code_verifier:
|
|
data["code_verifier"] = pkce_code_verifier
|
|
# TODO: Proper exception handling
|
|
resp = requests.request(
|
|
self.access_token_method,
|
|
url,
|
|
params=params,
|
|
data=json.dumps(data),
|
|
headers={"Content-Type": "application/json"},
|
|
)
|
|
resp.raise_for_status()
|
|
access_token = resp.json()
|
|
if (
|
|
not access_token
|
|
or "data" not in access_token
|
|
or "access_token" not in access_token["data"]
|
|
):
|
|
raise OAuth2Error("Error retrieving access token: %s" % resp.content)
|
|
return access_token["data"]
|