mirror of
https://github.com/coder/coder.git
synced 2025-07-06 15:41:45 +00:00
* feat: add github device flow for authentication This will allow us to add a GitHub OAuth provider out-of-the-box to reduce setup requirements. * Improve askpass view * Add routes to improve clarity of git auth * Redesign the git auth page * Refactor to add a page view * Fix sideways layout * Remove legacy notify * Fix git auth redirects * Add E2E tests * Fix route documentation * Fix imports * Remove unused imports * Fix E2E web test * Fix friendly message appearance * Fix layout shifting for full-screen sign-in * Fix height going to 100% * Fix comments
91 lines
2.8 KiB
Go
91 lines
2.8 KiB
Go
package codersdk
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
)
|
|
|
|
type GitAuth struct {
|
|
Authenticated bool `json:"authenticated"`
|
|
Device bool `json:"device"`
|
|
Type string `json:"type"`
|
|
|
|
// User is the user that authenticated with the provider.
|
|
User *GitAuthUser `json:"user"`
|
|
// AppInstallable is true if the request for app installs was successful.
|
|
AppInstallable bool `json:"app_installable"`
|
|
// AppInstallations are the installations that the user has access to.
|
|
AppInstallations []GitAuthAppInstallation `json:"installations"`
|
|
// AppInstallURL is the URL to install the app.
|
|
AppInstallURL string `json:"app_install_url"`
|
|
}
|
|
|
|
type GitAuthAppInstallation struct {
|
|
ID int `json:"id"`
|
|
Account GitAuthUser `json:"account"`
|
|
ConfigureURL string `json:"configure_url"`
|
|
}
|
|
|
|
type GitAuthUser struct {
|
|
Login string `json:"login"`
|
|
AvatarURL string `json:"avatar_url"`
|
|
ProfileURL string `json:"profile_url"`
|
|
Name string `json:"name"`
|
|
}
|
|
|
|
// GitAuthDevice is the response from the device authorization endpoint.
|
|
// See: https://tools.ietf.org/html/rfc8628#section-3.2
|
|
type GitAuthDevice struct {
|
|
DeviceCode string `json:"device_code"`
|
|
UserCode string `json:"user_code"`
|
|
VerificationURI string `json:"verification_uri"`
|
|
ExpiresIn int `json:"expires_in"`
|
|
Interval int `json:"interval"`
|
|
}
|
|
|
|
type GitAuthDeviceExchange struct {
|
|
DeviceCode string `json:"device_code"`
|
|
}
|
|
|
|
func (c *Client) GitAuthDeviceByID(ctx context.Context, provider string) (GitAuthDevice, error) {
|
|
res, err := c.Request(ctx, http.MethodGet, fmt.Sprintf("/api/v2/gitauth/%s/device", provider), nil)
|
|
if err != nil {
|
|
return GitAuthDevice{}, err
|
|
}
|
|
defer res.Body.Close()
|
|
if res.StatusCode != http.StatusOK {
|
|
return GitAuthDevice{}, ReadBodyAsError(res)
|
|
}
|
|
var gitauth GitAuthDevice
|
|
return gitauth, json.NewDecoder(res.Body).Decode(&gitauth)
|
|
}
|
|
|
|
// ExchangeGitAuth exchanges a device code for a git auth token.
|
|
func (c *Client) GitAuthDeviceExchange(ctx context.Context, provider string, req GitAuthDeviceExchange) error {
|
|
res, err := c.Request(ctx, http.MethodPost, fmt.Sprintf("/api/v2/gitauth/%s/device", provider), req)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer res.Body.Close()
|
|
if res.StatusCode != http.StatusNoContent {
|
|
return ReadBodyAsError(res)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// GitAuthByID returns the git auth for the given provider by ID.
|
|
func (c *Client) GitAuthByID(ctx context.Context, provider string) (GitAuth, error) {
|
|
res, err := c.Request(ctx, http.MethodGet, fmt.Sprintf("/api/v2/gitauth/%s", provider), nil)
|
|
if err != nil {
|
|
return GitAuth{}, err
|
|
}
|
|
defer res.Body.Close()
|
|
if res.StatusCode != http.StatusOK {
|
|
return GitAuth{}, ReadBodyAsError(res)
|
|
}
|
|
var gitauth GitAuth
|
|
return gitauth, json.NewDecoder(res.Body).Decode(&gitauth)
|
|
}
|