summaryrefslogtreecommitdiff
path: root/qvisqve/auth_router.py
blob: d4f3ca6eafe1d3793beff0d22d6e1a30d210b3b9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# Copyright (C) 2018  Ivan Dolgov
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.


import urllib.parse


import qvisqve


class AuthRouter(qvisqve.Router):

    def __init__(self, callback_url):
        super().__init__()
        self._callback_url = callback_url

    def get_routes(self):
        return [
            {
                'method': 'POST',
                'path': '/auth',
                'callback': self._auth,
                'needs-authorization': False,
            },
        ]

    def _auth(self, content_type, body, *args, **kwargs):
        if content_type != 'application/x-www-form-urlencoded':
            return qvisqve.bad_request_response('Wrong content type')

        # TODO:
        # - perform actual auth
        # - create and store auth code
        # - use callback url provided in request

        params = urllib.parse.urlencode({'code': 123})
        url = '{}?{}'.format(self._callback_url, params)

        return qvisqve.found_response('Redirect to callback url', url)