oauthExample/oauth.py at master · ab5y/oauthExample · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
from rauth import OAuth1Service, OAuth2Service
from flask import current_app, url_for, request, redirect, session
import json
import urllib2

class OAuthSignIn(object):
	providers = None

	def __init__(self, provider_name):
		self.provider_name = provider_name
		credentials = current_app.config['OAUTH_CREDENTIALS'][provider_name]
		self.consumer_id = credentials['id']
		self.consumer_secret = credentials['secret']

	def authorize(self):
		pass

	def callback(self):
		pass

	def get_callback_url(self):
		return url_for('oauth_callback', provider=self.provider_name, _external=True)

	@classmethod
	def get_provider(self, provider_name):
		if self.providers is None:
			self.providers = {}
			for provider_class in self.__subclasses__():
				provider = provider_class()
				self.providers[provider.provider_name] = provider
		return self.providers[provider_name]


class FacebookSignIn(OAuthSignIn):
	def __init__(self):
		super(FacebookSignIn, self).__init__('facebook')
		self.service = OAuth2Service(
			name='facebook',
			client_id=self.consumer_id,
			client_secret=self.consumer_secret,
			authorize_url='https://www.facebook.com/dialog/oauth',
			access_token_url='https://graph.facebook.com/v2.5/oauth/access_token',
			base_url='https://graph.facebook.com/'
		)

	def authorize(self):
		return redirect(
			self.service.get_authorize_url(
				scope='email',
				response_type='code',
				redirect_uri=self.get_callback_url()
			)
		)

	def callback(self):
		if 'code' not in request.args:
			return None, None, None
		oauth_session = self.service.get_auth_session(
			data={
				'code': request.args['code'],
				'grant_type': 'authorization_code',
				'redirect_uri': self.get_callback_url()
			},
			decoder=json.loads
		)
		me = oauth_session.get('me?fields=id,email').json()
		return (
			'facebook$' + me['id'],
			# Facebook does not provide
			# username, so the email's user
			# is used instead
			me.get('email').split('@')[0],
			me.get('email')
		)


class TwitterSignIn(OAuthSignIn):
	def __init__(self):
		super(TwitterSignIn, self).__init__('twitter')
		self.service = OAuth1Service(
			name='twitter',
			consumer_key=self.consumer_id,
			consumer_secret=self.consumer_secret,
			request_token_url='https://api.twitter.com/oauth/request_token',
			authorize_url='https://api.twitter.com/oauth/authorize',
			access_token_url='https://api.twitter.com/oauth/access_token',
			base_url='https://api.twitter.com/1.1/'
		)

	def authorize(self):
		request_token = self.service.get_request_token(
			params={'oauth_callback': self.get_callback_url()}
		)
		session['request_token'] = request_token
		return redirect(self.service.get_authorize_url(request_token[0]))

	def callback(self):
		request_token = session.pop('request_token')
		if 'oauth_verifier' not in request.args:
			return None, None, None
		oauth_session = self.service.get_auth_session(
			request_token[0],
			request_token[1],
			data={'oauth_verifier': request.args['oauth_verifier']}
		)
		me = oauth_session.get('account/verify_credentials.json').json()
		social_id = 'twitter$' + str(me.get('id'))
		username = me.get('screen_name')
		return social_id, username, None # Twitter does not provide email


class GoogleSignIn(OAuthSignIn):
	def __init__(self):
		super(GoogleSignIn, self).__init__('google')
		googleinfo = urllib2.urlopen('https://accounts.google.com/.well-known/openid-configuration')
		google_params = json.load(googleinfo)
		self.service = OAuth2Service(
			name='google',
			client_id=self.consumer_id,
			client_secret=self.consumer_secret,
			authorize_url=google_params.get('authorization_endpoint'),
			base_url=google_params.get('userinfo_endpoint'),
			access_token_url=google_params.get('token_endpoint')
		)
		# self.service = OAuth2Service(
		# 	name='google',
		# 	client_id=self.consumer_id,
		# 	client_secret=self.consumer_secret,
		# 	authorize_url='https://accounts.google.com/o/oauth2/auth',
		# 	access_token_url='https://accounts.google.com/o/oauth2/token',
		# 	base_url='https://www.googleapis.com/oauth2/v2/'
		# )

	def authorize(self):
		return redirect(
			self.service.get_authorize_url(
				scope='email',
				response_type='code',
				redirect_uri=self.get_callback_url()
			)
		)

	def callback(self):
		dump = json.dumps(request.args['code'])
		data = json.loads(dump)
		if 'code' not in request.args:
			return None, None, None
		oauth_session = self.service.get_auth_session(
			data={
				'code': request.args['code'],
				'grant_type': 'authorization_code',
				'redirect_uri': self.get_callback_url()
			},
			decoder=json.loads
		)
		me = oauth_session.get('').json()
		return (
			'google$' + me['email'],
			me['name'],
			me['email']
		)