103 lines
3.1 KiB
Python
103 lines
3.1 KiB
Python
import requests
|
|
from urllib.parse import parse_qsl
|
|
|
|
from django.utils.http import urlencode
|
|
|
|
|
|
class OAuth2Error(Exception):
|
|
pass
|
|
|
|
|
|
class OAuth2Client(object):
|
|
def __init__(
|
|
self,
|
|
request,
|
|
consumer_key,
|
|
consumer_secret,
|
|
access_token_method,
|
|
access_token_url,
|
|
callback_url,
|
|
scope,
|
|
scope_delimiter=" ",
|
|
headers=None,
|
|
basic_auth=False,
|
|
):
|
|
self.request = request
|
|
self.access_token_method = access_token_method
|
|
self.access_token_url = access_token_url
|
|
self.callback_url = callback_url
|
|
self.consumer_key = consumer_key
|
|
self.consumer_secret = consumer_secret
|
|
self.scope = scope_delimiter.join(set(scope))
|
|
self.state = None
|
|
self.headers = headers
|
|
self.basic_auth = basic_auth
|
|
|
|
def get_redirect_url(self, authorization_url, extra_params):
|
|
params = {
|
|
"client_id": self.consumer_key,
|
|
"redirect_uri": self.callback_url,
|
|
"scope": self.scope,
|
|
"response_type": "code",
|
|
}
|
|
if self.state:
|
|
params["state"] = self.state
|
|
params.update(extra_params)
|
|
return "%s?%s" % (authorization_url, urlencode(params))
|
|
|
|
def get_access_token(self, code, pkce_code_verifier=None):
|
|
data = {
|
|
"redirect_uri": self.callback_url,
|
|
"grant_type": "authorization_code",
|
|
"code": code,
|
|
}
|
|
if self.basic_auth:
|
|
auth = requests.auth.HTTPBasicAuth(self.consumer_key, self.consumer_secret)
|
|
else:
|
|
auth = None
|
|
data.update(
|
|
{
|
|
"client_id": self.consumer_key,
|
|
"client_secret": self.consumer_secret,
|
|
}
|
|
)
|
|
params = None
|
|
self._strip_empty_keys(data)
|
|
url = self.access_token_url
|
|
if self.access_token_method == "GET":
|
|
params = data
|
|
data = None
|
|
if data and pkce_code_verifier:
|
|
data["code_verifier"] = pkce_code_verifier
|
|
# TODO: Proper exception handling
|
|
resp = requests.request(
|
|
self.access_token_method,
|
|
url,
|
|
params=params,
|
|
data=data,
|
|
headers=self.headers,
|
|
auth=auth,
|
|
)
|
|
|
|
access_token = None
|
|
if resp.status_code in [200, 201]:
|
|
# Weibo sends json via 'text/plain;charset=UTF-8'
|
|
if (
|
|
resp.headers["content-type"].split(";")[0] == "application/json"
|
|
or resp.text[:2] == '{"'
|
|
):
|
|
access_token = resp.json()
|
|
else:
|
|
access_token = dict(parse_qsl(resp.text))
|
|
if not access_token or "access_token" not in access_token:
|
|
raise OAuth2Error("Error retrieving access token: %s" % resp.content)
|
|
return access_token
|
|
|
|
def _strip_empty_keys(self, params):
|
|
"""Added because the Dropbox OAuth2 flow doesn't
|
|
work when scope is passed in, which is empty.
|
|
"""
|
|
keys = [k for k, v in params.items() if v == ""]
|
|
for key in keys:
|
|
del params[key]
|