Meaglith Ma
11 years ago
commit
2e8d5c2eb3
@ -0,0 +1,18 @@ |
||||
package models |
||||
|
||||
import "time" |
||||
|
||||
// OT: Oauth2 Type
|
||||
const ( |
||||
OT_GITHUB = iota + 1 |
||||
OT_GOOGLE |
||||
OT_TWITTER |
||||
) |
||||
|
||||
type Oauth2 struct { |
||||
Uid int64 `xorm:"pk"` // userId
|
||||
Type int `xorm:"pk unique(oauth)"` // twitter,github,google...
|
||||
Identity string `xorm:"pk unique(oauth)"` // id..
|
||||
Token string `xorm:"VARCHAR(200) not null"` |
||||
RefreshTime time.Time `xorm:"created"` |
||||
} |
||||
@ -0,0 +1,233 @@ |
||||
// Copyright 2014 Google Inc. All Rights Reserved.
|
||||
//
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
|
||||
// Package oauth2 contains Martini handlers to provide
|
||||
// user login via an OAuth 2.0 backend.
|
||||
package oauth2 |
||||
|
||||
import ( |
||||
"encoding/json" |
||||
"fmt" |
||||
"net/http" |
||||
"net/url" |
||||
"strings" |
||||
"time" |
||||
|
||||
"code.google.com/p/goauth2/oauth" |
||||
"github.com/go-martini/martini" |
||||
"github.com/martini-contrib/sessions" |
||||
) |
||||
|
||||
const ( |
||||
codeRedirect = 302 |
||||
keyToken = "oauth2_token" |
||||
keyNextPage = "next" |
||||
) |
||||
|
||||
var ( |
||||
// Path to handle OAuth 2.0 logins.
|
||||
PathLogin = "/login" |
||||
// Path to handle OAuth 2.0 logouts.
|
||||
PathLogout = "/logout" |
||||
// Path to handle callback from OAuth 2.0 backend
|
||||
// to exchange credentials.
|
||||
PathCallback = "/oauth2callback" |
||||
// Path to handle error cases.
|
||||
PathError = "/oauth2error" |
||||
) |
||||
|
||||
// Represents OAuth2 backend options.
|
||||
type Options struct { |
||||
ClientId string |
||||
ClientSecret string |
||||
RedirectURL string |
||||
Scopes []string |
||||
|
||||
AuthUrl string |
||||
TokenUrl string |
||||
} |
||||
|
||||
// Represents a container that contains
|
||||
// user's OAuth 2.0 access and refresh tokens.
|
||||
type Tokens interface { |
||||
Access() string |
||||
Refresh() string |
||||
IsExpired() bool |
||||
ExpiryTime() time.Time |
||||
ExtraData() map[string]string |
||||
} |
||||
|
||||
type token struct { |
||||
oauth.Token |
||||
} |
||||
|
||||
func (t *token) ExtraData() map[string]string { |
||||
return t.Extra |
||||
} |
||||
|
||||
// Returns the access token.
|
||||
func (t *token) Access() string { |
||||
return t.AccessToken |
||||
} |
||||
|
||||
// Returns the refresh token.
|
||||
func (t *token) Refresh() string { |
||||
return t.RefreshToken |
||||
} |
||||
|
||||
// Returns whether the access token is
|
||||
// expired or not.
|
||||
func (t *token) IsExpired() bool { |
||||
if t == nil { |
||||
return true |
||||
} |
||||
return t.Expired() |
||||
} |
||||
|
||||
// Returns the expiry time of the user's
|
||||
// access token.
|
||||
func (t *token) ExpiryTime() time.Time { |
||||
return t.Expiry |
||||
} |
||||
|
||||
// Formats tokens into string.
|
||||
func (t *token) String() string { |
||||
return fmt.Sprintf("tokens: %v", t) |
||||
} |
||||
|
||||
// Returns a new Google OAuth 2.0 backend endpoint.
|
||||
func Google(opts *Options) martini.Handler { |
||||
opts.AuthUrl = "https://accounts.google.com/o/oauth2/auth" |
||||
opts.TokenUrl = "https://accounts.google.com/o/oauth2/token" |
||||
return NewOAuth2Provider(opts) |
||||
} |
||||
|
||||
// Returns a new Github OAuth 2.0 backend endpoint.
|
||||
func Github(opts *Options) martini.Handler { |
||||
opts.AuthUrl = "https://github.com/login/oauth/authorize" |
||||
opts.TokenUrl = "https://github.com/login/oauth/access_token" |
||||
return NewOAuth2Provider(opts) |
||||
} |
||||
|
||||
func Facebook(opts *Options) martini.Handler { |
||||
opts.AuthUrl = "https://www.facebook.com/dialog/oauth" |
||||
opts.TokenUrl = "https://graph.facebook.com/oauth/access_token" |
||||
return NewOAuth2Provider(opts) |
||||
} |
||||
|
||||
// Returns a generic OAuth 2.0 backend endpoint.
|
||||
func NewOAuth2Provider(opts *Options) martini.Handler { |
||||
config := &oauth.Config{ |
||||
ClientId: opts.ClientId, |
||||
ClientSecret: opts.ClientSecret, |
||||
RedirectURL: opts.RedirectURL, |
||||
Scope: strings.Join(opts.Scopes, " "), |
||||
AuthURL: opts.AuthUrl, |
||||
TokenURL: opts.TokenUrl, |
||||
} |
||||
|
||||
transport := &oauth.Transport{ |
||||
Config: config, |
||||
Transport: http.DefaultTransport, |
||||
} |
||||
|
||||
return func(s sessions.Session, c martini.Context, w http.ResponseWriter, r *http.Request) { |
||||
if r.Method == "GET" { |
||||
switch r.URL.Path { |
||||
case PathLogin: |
||||
login(transport, s, w, r) |
||||
case PathLogout: |
||||
logout(transport, s, w, r) |
||||
case PathCallback: |
||||
handleOAuth2Callback(transport, s, w, r) |
||||
} |
||||
} |
||||
|
||||
tk := unmarshallToken(s) |
||||
if tk != nil { |
||||
// check if the access token is expired
|
||||
if tk.IsExpired() && tk.Refresh() == "" { |
||||
s.Delete(keyToken) |
||||
tk = nil |
||||
} |
||||
} |
||||
// Inject tokens.
|
||||
c.MapTo(tk, (*Tokens)(nil)) |
||||
} |
||||
} |
||||
|
||||
// Handler that redirects user to the login page
|
||||
// if user is not logged in.
|
||||
// Sample usage:
|
||||
// m.Get("/login-required", oauth2.LoginRequired, func() ... {})
|
||||
var LoginRequired martini.Handler = func() martini.Handler { |
||||
return func(s sessions.Session, c martini.Context, w http.ResponseWriter, r *http.Request) { |
||||
token := unmarshallToken(s) |
||||
if token == nil || token.IsExpired() { |
||||
next := url.QueryEscape(r.URL.RequestURI()) |
||||
http.Redirect(w, r, PathLogin+"?next="+next, codeRedirect) |
||||
} |
||||
} |
||||
}() |
||||
|
||||
func login(t *oauth.Transport, s sessions.Session, w http.ResponseWriter, r *http.Request) { |
||||
next := extractPath(r.URL.Query().Get(keyNextPage)) |
||||
if s.Get(keyToken) == nil { |
||||
// User is not logged in.
|
||||
http.Redirect(w, r, t.Config.AuthCodeURL(next), codeRedirect) |
||||
return |
||||
} |
||||
// No need to login, redirect to the next page.
|
||||
http.Redirect(w, r, next, codeRedirect) |
||||
} |
||||
|
||||
func logout(t *oauth.Transport, s sessions.Session, w http.ResponseWriter, r *http.Request) { |
||||
next := extractPath(r.URL.Query().Get(keyNextPage)) |
||||
s.Delete(keyToken) |
||||
http.Redirect(w, r, next, codeRedirect) |
||||
} |
||||
|
||||
func handleOAuth2Callback(t *oauth.Transport, s sessions.Session, w http.ResponseWriter, r *http.Request) { |
||||
next := extractPath(r.URL.Query().Get("state")) |
||||
code := r.URL.Query().Get("code") |
||||
tk, err := t.Exchange(code) |
||||
if err != nil { |
||||
// Pass the error message, or allow dev to provide its own
|
||||
// error handler.
|
||||
http.Redirect(w, r, PathError, codeRedirect) |
||||
return |
||||
} |
||||
// Store the credentials in the session.
|
||||
val, _ := json.Marshal(tk) |
||||
s.Set(keyToken, val) |
||||
http.Redirect(w, r, next, codeRedirect) |
||||
} |
||||
|
||||
func unmarshallToken(s sessions.Session) (t *token) { |
||||
if s.Get(keyToken) == nil { |
||||
return |
||||
} |
||||
data := s.Get(keyToken).([]byte) |
||||
var tk oauth.Token |
||||
json.Unmarshal(data, &tk) |
||||
return &token{tk} |
||||
} |
||||
|
||||
func extractPath(next string) string { |
||||
n, err := url.Parse(next) |
||||
if err != nil { |
||||
return "/" |
||||
} |
||||
return n.Path |
||||
} |
||||
@ -0,0 +1,162 @@ |
||||
// Copyright 2014 Google Inc. All Rights Reserved.
|
||||
//
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
|
||||
package oauth2 |
||||
|
||||
import ( |
||||
"net/http" |
||||
"net/http/httptest" |
||||
"testing" |
||||
|
||||
"github.com/go-martini/martini" |
||||
"github.com/martini-contrib/sessions" |
||||
) |
||||
|
||||
func Test_LoginRedirect(t *testing.T) { |
||||
recorder := httptest.NewRecorder() |
||||
m := martini.New() |
||||
m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) |
||||
m.Use(Google(&Options{ |
||||
ClientId: "client_id", |
||||
ClientSecret: "client_secret", |
||||
RedirectURL: "refresh_url", |
||||
Scopes: []string{"x", "y"}, |
||||
})) |
||||
|
||||
r, _ := http.NewRequest("GET", "/login", nil) |
||||
m.ServeHTTP(recorder, r) |
||||
|
||||
location := recorder.HeaderMap["Location"][0] |
||||
if recorder.Code != 302 { |
||||
t.Errorf("Not being redirected to the auth page.") |
||||
} |
||||
if location != "https://accounts.google.com/o/oauth2/auth?access_type=&approval_prompt=&client_id=client_id&redirect_uri=refresh_url&response_type=code&scope=x+y&state=" { |
||||
t.Errorf("Not being redirected to the right page, %v found", location) |
||||
} |
||||
} |
||||
|
||||
func Test_LoginRedirectAfterLoginRequired(t *testing.T) { |
||||
recorder := httptest.NewRecorder() |
||||
m := martini.Classic() |
||||
m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) |
||||
m.Use(Google(&Options{ |
||||
ClientId: "client_id", |
||||
ClientSecret: "client_secret", |
||||
RedirectURL: "refresh_url", |
||||
Scopes: []string{"x", "y"}, |
||||
})) |
||||
|
||||
m.Get("/login-required", LoginRequired, func(tokens Tokens) (int, string) { |
||||
return 200, tokens.Access() |
||||
}) |
||||
|
||||
r, _ := http.NewRequest("GET", "/login-required?key=value", nil) |
||||
m.ServeHTTP(recorder, r) |
||||
|
||||
location := recorder.HeaderMap["Location"][0] |
||||
if recorder.Code != 302 { |
||||
t.Errorf("Not being redirected to the auth page.") |
||||
} |
||||
if location != "/login?next=%2Flogin-required%3Fkey%3Dvalue" { |
||||
t.Errorf("Not being redirected to the right page, %v found", location) |
||||
} |
||||
} |
||||
|
||||
func Test_Logout(t *testing.T) { |
||||
recorder := httptest.NewRecorder() |
||||
s := sessions.NewCookieStore([]byte("secret123")) |
||||
|
||||
m := martini.Classic() |
||||
m.Use(sessions.Sessions("my_session", s)) |
||||
m.Use(Google(&Options{ |
||||
// no need to configure
|
||||
})) |
||||
|
||||
m.Get("/", func(s sessions.Session) { |
||||
s.Set(keyToken, "dummy token") |
||||
}) |
||||
|
||||
m.Get("/get", func(s sessions.Session) { |
||||
if s.Get(keyToken) != nil { |
||||
t.Errorf("User credentials are still kept in the session.") |
||||
} |
||||
}) |
||||
|
||||
logout, _ := http.NewRequest("GET", "/logout", nil) |
||||
index, _ := http.NewRequest("GET", "/", nil) |
||||
|
||||
m.ServeHTTP(httptest.NewRecorder(), index) |
||||
m.ServeHTTP(recorder, logout) |
||||
|
||||
if recorder.Code != 302 { |
||||
t.Errorf("Not being redirected to the next page.") |
||||
} |
||||
} |
||||
|
||||
func Test_LogoutOnAccessTokenExpiration(t *testing.T) { |
||||
recorder := httptest.NewRecorder() |
||||
s := sessions.NewCookieStore([]byte("secret123")) |
||||
|
||||
m := martini.Classic() |
||||
m.Use(sessions.Sessions("my_session", s)) |
||||
m.Use(Google(&Options{ |
||||
// no need to configure
|
||||
})) |
||||
|
||||
m.Get("/addtoken", func(s sessions.Session) { |
||||
s.Set(keyToken, "dummy token") |
||||
}) |
||||
|
||||
m.Get("/", func(s sessions.Session) { |
||||
if s.Get(keyToken) != nil { |
||||
t.Errorf("User not logged out although access token is expired.") |
||||
} |
||||
}) |
||||
|
||||
addtoken, _ := http.NewRequest("GET", "/addtoken", nil) |
||||
index, _ := http.NewRequest("GET", "/", nil) |
||||
m.ServeHTTP(recorder, addtoken) |
||||
m.ServeHTTP(recorder, index) |
||||
} |
||||
|
||||
func Test_InjectedTokens(t *testing.T) { |
||||
recorder := httptest.NewRecorder() |
||||
m := martini.Classic() |
||||
m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) |
||||
m.Use(Google(&Options{ |
||||
// no need to configure
|
||||
})) |
||||
m.Get("/", func(tokens Tokens) string { |
||||
return "Hello world!" |
||||
}) |
||||
r, _ := http.NewRequest("GET", "/", nil) |
||||
m.ServeHTTP(recorder, r) |
||||
} |
||||
|
||||
func Test_LoginRequired(t *testing.T) { |
||||
recorder := httptest.NewRecorder() |
||||
m := martini.Classic() |
||||
m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) |
||||
m.Use(Google(&Options{ |
||||
// no need to configure
|
||||
})) |
||||
m.Get("/", LoginRequired, func(tokens Tokens) string { |
||||
return "Hello world!" |
||||
}) |
||||
r, _ := http.NewRequest("GET", "/", nil) |
||||
m.ServeHTTP(recorder, r) |
||||
if recorder.Code != 302 { |
||||
t.Errorf("Not being redirected to the auth page although user is not logged in.") |
||||
} |
||||
} |
||||
Binary file not shown.
File diff suppressed because one or more lines are too long
@ -0,0 +1,22 @@ |
||||
// Copyright 2014 The Gogs Authors. All rights reserved.
|
||||
// Use of this source code is governed by a MIT-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
package repo |
||||
|
||||
import ( |
||||
"github.com/gogits/gogs/models" |
||||
"github.com/gogits/gogs/modules/middleware" |
||||
) |
||||
|
||||
func Releases(ctx *middleware.Context) { |
||||
ctx.Data["Title"] = "Releases" |
||||
ctx.Data["IsRepoToolbarReleases"] = true |
||||
tags, err := models.GetTags(ctx.Repo.Owner.Name, ctx.Repo.Repository.Name) |
||||
if err != nil { |
||||
ctx.Handle(404, "repo.Releases(GetTags)", err) |
||||
return |
||||
} |
||||
ctx.Data["Releases"] = tags |
||||
ctx.HTML(200, "release/list") |
||||
} |
||||
@ -0,0 +1,49 @@ |
||||
// Copyright 2014 The Gogs Authors. All rights reserved.
|
||||
// Use of this source code is governed by a MIT-style
|
||||
// license that can be found in the LICENSE file.
|
||||
package user |
||||
|
||||
import ( |
||||
"encoding/json" |
||||
|
||||
"code.google.com/p/goauth2/oauth" |
||||
"github.com/gogits/gogs/modules/log" |
||||
"github.com/gogits/gogs/modules/oauth2" |
||||
) |
||||
|
||||
// github && google && ...
|
||||
func SocialSignIn(tokens oauth2.Tokens) { |
||||
transport := &oauth.Transport{} |
||||
transport.Token = &oauth.Token{ |
||||
AccessToken: tokens.Access(), |
||||
RefreshToken: tokens.Refresh(), |
||||
Expiry: tokens.ExpiryTime(), |
||||
Extra: tokens.ExtraData(), |
||||
} |
||||
|
||||
// Github API refer: https://developer.github.com/v3/users/
|
||||
// FIXME: need to judge url
|
||||
type GithubUser struct { |
||||
Id int `json:"id"` |
||||
Name string `json:"login"` |
||||
Email string `json:"email"` |
||||
} |
||||
|
||||
// Make the request.
|
||||
scope := "https://api.github.com/user" |
||||
r, err := transport.Client().Get(scope) |
||||
if err != nil { |
||||
log.Error("connect with github error: %s", err) |
||||
// FIXME: handle error page
|
||||
return |
||||
} |
||||
defer r.Body.Close() |
||||
|
||||
user := &GithubUser{} |
||||
err = json.NewDecoder(r.Body).Decode(user) |
||||
if err != nil { |
||||
log.Error("Get: %s", err) |
||||
} |
||||
log.Info("login: %s", user.Name) |
||||
// FIXME: login here, user email to check auth, if not registe, then generate a uniq username
|
||||
} |
||||
@ -0,0 +1,86 @@ |
||||
{{template "base/head" .}} |
||||
{{template "base/navbar" .}} |
||||
{{template "repo/nav" .}} |
||||
{{template "repo/toolbar" .}} |
||||
<div id="body" class="container"> |
||||
<div id="release"> |
||||
<h4 id="release-head"> |
||||
<span class="release"><strong>Release</strong></span> / |
||||
<a class="tag" href="/{tag_link}">Tags</a> |
||||
<!-- comment : if in tag page, show a.release and span.tag please --> |
||||
</h4> |
||||
<ul id="release-list" class="list-unstyled"> |
||||
<li class="release-item release-tag clearfix" id="release-tag-{release_tag_id}"> |
||||
<div class="col-md-2 text-right"> |
||||
<a class="commit" href="{commit_link}"><i class="fa fa-code"></i>commit-sha</a> |
||||
</div> |
||||
<div class="col-md-10"> |
||||
<h5 class="title"><a href="{release_single_link}">Release Tag</a><i class="fa fa-tag"></i></h5> |
||||
<p class="info"> |
||||
<span class="author"><img class="avatar" src="http://1.gravatar.com/avatar/f72f7454ce9d710baa506394f68f4132" alt="" width="20"> |
||||
<a href="/user/fuxiaohei">fuxiaohei</a></span> |
||||
<span class="time">1 week ago</span> |
||||
<span class="ahead"><strong>0</strong> commits since this tag</span> |
||||
</p> |
||||
<p class="download"> |
||||
<a class="download-link" href="{release_download_link}"><i class="fa fa-download"></i>zip</a> |
||||
<a class="download-link" href="{release_download_link}"><i class="fa fa-download"></i>tar.gz</a> |
||||
</p> |
||||
<span class="dot"> </span> |
||||
</div> |
||||
</li> |
||||
<li class="release-item clearfix" id="release-{release_id}"> |
||||
<div class="col-md-2 text-right"> |
||||
<span class="btn btn-success status stable">Stable</span> |
||||
<a class="tag" href="{commit_link}"><i class="fa fa-tag"></i>release tag</a> |
||||
<a class="commit" href="{commit_link}"><i class="fa fa-code"></i>commit-sha</a> |
||||
</div> |
||||
<div class="col-md-10"> |
||||
<h4 class="title"><a href="{release_single_link}">Release Title</a></h4> |
||||
<p class="info"> |
||||
<span class="author"><img class="avatar" src="http://1.gravatar.com/avatar/f72f7454ce9d710baa506394f68f4132" alt="" width="20"> |
||||
<a href="/user/fuxiaohei">fuxiaohei</a></span> |
||||
<span class="time">1 week ago</span> |
||||
<span class="ahead"><strong>0</strong> commits since this tag</span> |
||||
</p> |
||||
<div class="markdown desc"> |
||||
release descriptions, support markdown content |
||||
</div> |
||||
<p class="download"> |
||||
<a class="btn btn-default" href="{release_download_link}"><i class="fa fa-download"></i>Source Code (ZIP)</a> |
||||
<a class="btn btn-default" href="{release_download_link}"><i class="fa fa-download"></i>Source Code (TAR.GZ)</a> |
||||
</p> |
||||
<span class="dot"> </span> |
||||
</div> |
||||
</li> |
||||
<li class="release-item clearfix" id="release-{release_id}"> |
||||
<div class="col-md-2 text-right"> |
||||
<span class="btn btn-warning status pre-release">Pre-Release</span> |
||||
<a class="tag" href="{commit_link}"><i class="fa fa-tag"></i>release tag</a> |
||||
<a class="commit" href="{commit_link}"><i class="fa fa-code"></i>commit-sha</a> |
||||
</div> |
||||
<div class="col-md-10"> |
||||
<h4 class="title"><a href="{release_single_link}">Release Title</a></h4> |
||||
<p class="info"> |
||||
<span class="author"><img class="avatar" src="http://1.gravatar.com/avatar/f72f7454ce9d710baa506394f68f4132" alt="" width="20"> |
||||
<a href="/user/fuxiaohei">fuxiaohei</a></span> |
||||
<span class="time">1 week ago</span> |
||||
<span class="ahead"><strong>0</strong> commits since this tag</span> |
||||
</p> |
||||
<div class="markdown desc"> |
||||
release descriptions, support markdown content |
||||
</div> |
||||
<p class="download"> |
||||
<a class="btn btn-default" href="{release_download_link}"><i class="fa fa-download"></i>Source Code (ZIP)</a> |
||||
<a class="btn btn-default" href="{release_download_link}"><i class="fa fa-download"></i>Source Code (TAR.GZ)</a> |
||||
</p> |
||||
<span class="dot"> </span> |
||||
</div> |
||||
</li> |
||||
</ul> |
||||
</div> |
||||
{{range .Releases}} |
||||
{{.}} |
||||
{{end}} |
||||
</div> |
||||
{{template "base/footer" .}} |
||||
Loading…
Reference in new issue