2015-05-21 05:23:48 +02:00
|
|
|
package providers
|
|
|
|
|
|
|
|
import (
|
|
|
|
"encoding/json"
|
2015-06-06 20:15:43 +02:00
|
|
|
"fmt"
|
2015-05-21 05:23:48 +02:00
|
|
|
"io/ioutil"
|
2015-06-23 13:23:39 +02:00
|
|
|
"log"
|
2015-05-21 05:23:48 +02:00
|
|
|
"net/http"
|
|
|
|
"net/url"
|
2016-06-20 14:12:07 +02:00
|
|
|
"path"
|
2017-07-04 23:36:21 +02:00
|
|
|
"strconv"
|
2016-06-20 13:17:39 +02:00
|
|
|
"strings"
|
2015-05-21 05:23:48 +02:00
|
|
|
)
|
|
|
|
|
|
|
|
type GitHubProvider struct {
|
|
|
|
*ProviderData
|
|
|
|
Org string
|
|
|
|
Team string
|
|
|
|
}
|
|
|
|
|
|
|
|
func NewGitHubProvider(p *ProviderData) *GitHubProvider {
|
|
|
|
p.ProviderName = "GitHub"
|
2015-11-09 01:47:44 +02:00
|
|
|
if p.LoginURL == nil || p.LoginURL.String() == "" {
|
|
|
|
p.LoginURL = &url.URL{
|
2015-05-21 05:23:48 +02:00
|
|
|
Scheme: "https",
|
|
|
|
Host: "github.com",
|
|
|
|
Path: "/login/oauth/authorize",
|
|
|
|
}
|
|
|
|
}
|
2015-11-09 01:47:44 +02:00
|
|
|
if p.RedeemURL == nil || p.RedeemURL.String() == "" {
|
|
|
|
p.RedeemURL = &url.URL{
|
2015-05-21 05:23:48 +02:00
|
|
|
Scheme: "https",
|
|
|
|
Host: "github.com",
|
|
|
|
Path: "/login/oauth/access_token",
|
|
|
|
}
|
|
|
|
}
|
2016-06-20 14:12:07 +02:00
|
|
|
// ValidationURL is the API Base URL
|
2015-11-09 01:47:44 +02:00
|
|
|
if p.ValidateURL == nil || p.ValidateURL.String() == "" {
|
|
|
|
p.ValidateURL = &url.URL{
|
2015-05-21 05:23:48 +02:00
|
|
|
Scheme: "https",
|
|
|
|
Host: "api.github.com",
|
2016-06-20 14:12:07 +02:00
|
|
|
Path: "/",
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
if p.Scope == "" {
|
|
|
|
p.Scope = "user:email"
|
|
|
|
}
|
|
|
|
return &GitHubProvider{ProviderData: p}
|
|
|
|
}
|
|
|
|
func (p *GitHubProvider) SetOrgTeam(org, team string) {
|
|
|
|
p.Org = org
|
|
|
|
p.Team = team
|
|
|
|
if org != "" || team != "" {
|
|
|
|
p.Scope += " read:org"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-06-06 20:03:59 +02:00
|
|
|
func (p *GitHubProvider) hasOrg(accessToken string) (bool, error) {
|
|
|
|
// https://developer.github.com/v3/orgs/#list-your-organizations
|
|
|
|
|
|
|
|
var orgs []struct {
|
|
|
|
Login string `json:"login"`
|
|
|
|
}
|
|
|
|
|
2017-07-04 23:36:21 +02:00
|
|
|
type orgsPage []struct {
|
|
|
|
Login string `json:"login"`
|
2015-06-06 20:03:59 +02:00
|
|
|
}
|
|
|
|
|
2017-07-04 23:36:21 +02:00
|
|
|
pn := 1
|
|
|
|
for {
|
|
|
|
params := url.Values{
|
|
|
|
"limit": {"200"},
|
|
|
|
"page": {strconv.Itoa(pn)},
|
|
|
|
}
|
2015-06-06 20:03:59 +02:00
|
|
|
|
2017-07-04 23:36:21 +02:00
|
|
|
endpoint := &url.URL{
|
|
|
|
Scheme: p.ValidateURL.Scheme,
|
|
|
|
Host: p.ValidateURL.Host,
|
|
|
|
Path: path.Join(p.ValidateURL.Path, "/user/orgs"),
|
|
|
|
RawQuery: params.Encode(),
|
|
|
|
}
|
|
|
|
req, _ := http.NewRequest("GET", endpoint.String(), nil)
|
|
|
|
req.Header.Set("Accept", "application/vnd.github.v3+json")
|
|
|
|
req.Header.Set("Authorization", fmt.Sprintf("token %s", accessToken))
|
|
|
|
resp, err := http.DefaultClient.Do(req)
|
|
|
|
if err != nil {
|
|
|
|
return false, err
|
|
|
|
}
|
2015-06-06 20:03:59 +02:00
|
|
|
|
2017-07-04 23:36:21 +02:00
|
|
|
body, err := ioutil.ReadAll(resp.Body)
|
|
|
|
resp.Body.Close()
|
|
|
|
if err != nil {
|
|
|
|
return false, err
|
|
|
|
}
|
|
|
|
if resp.StatusCode != 200 {
|
|
|
|
return false, fmt.Errorf(
|
|
|
|
"got %d from %q %s", resp.StatusCode, endpoint.String(), body)
|
|
|
|
}
|
|
|
|
|
|
|
|
var op orgsPage
|
|
|
|
if err := json.Unmarshal(body, &op); err != nil {
|
|
|
|
return false, err
|
|
|
|
}
|
|
|
|
if len(op) == 0 {
|
|
|
|
break
|
|
|
|
}
|
|
|
|
|
|
|
|
orgs = append(orgs, op...)
|
2018-11-29 16:26:41 +02:00
|
|
|
pn++
|
2015-06-06 20:03:59 +02:00
|
|
|
}
|
|
|
|
|
2015-07-24 22:10:10 +02:00
|
|
|
var presentOrgs []string
|
2015-06-06 20:03:59 +02:00
|
|
|
for _, org := range orgs {
|
|
|
|
if p.Org == org.Login {
|
2015-07-24 22:10:10 +02:00
|
|
|
log.Printf("Found Github Organization: %q", org.Login)
|
2015-06-06 20:03:59 +02:00
|
|
|
return true, nil
|
|
|
|
}
|
2015-07-24 22:10:10 +02:00
|
|
|
presentOrgs = append(presentOrgs, org.Login)
|
2015-06-06 20:03:59 +02:00
|
|
|
}
|
2015-07-24 22:10:10 +02:00
|
|
|
|
|
|
|
log.Printf("Missing Organization:%q in %v", p.Org, presentOrgs)
|
2015-06-06 20:03:59 +02:00
|
|
|
return false, nil
|
|
|
|
}
|
|
|
|
|
2015-05-21 05:23:48 +02:00
|
|
|
func (p *GitHubProvider) hasOrgAndTeam(accessToken string) (bool, error) {
|
2015-06-06 20:03:59 +02:00
|
|
|
// https://developer.github.com/v3/orgs/teams/#list-user-teams
|
2015-05-21 05:23:48 +02:00
|
|
|
|
|
|
|
var teams []struct {
|
|
|
|
Name string `json:"name"`
|
|
|
|
Slug string `json:"slug"`
|
|
|
|
Org struct {
|
|
|
|
Login string `json:"login"`
|
|
|
|
} `json:"organization"`
|
|
|
|
}
|
|
|
|
|
|
|
|
params := url.Values{
|
2017-07-04 23:36:21 +02:00
|
|
|
"limit": {"200"},
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
|
|
|
|
2016-06-20 14:12:07 +02:00
|
|
|
endpoint := &url.URL{
|
|
|
|
Scheme: p.ValidateURL.Scheme,
|
|
|
|
Host: p.ValidateURL.Host,
|
|
|
|
Path: path.Join(p.ValidateURL.Path, "/user/teams"),
|
|
|
|
RawQuery: params.Encode(),
|
|
|
|
}
|
|
|
|
req, _ := http.NewRequest("GET", endpoint.String(), nil)
|
2015-07-24 22:10:10 +02:00
|
|
|
req.Header.Set("Accept", "application/vnd.github.v3+json")
|
2017-05-18 05:45:34 +02:00
|
|
|
req.Header.Set("Authorization", fmt.Sprintf("token %s", accessToken))
|
2015-05-21 05:23:48 +02:00
|
|
|
resp, err := http.DefaultClient.Do(req)
|
|
|
|
if err != nil {
|
|
|
|
return false, err
|
|
|
|
}
|
|
|
|
|
|
|
|
body, err := ioutil.ReadAll(resp.Body)
|
|
|
|
resp.Body.Close()
|
|
|
|
if err != nil {
|
|
|
|
return false, err
|
|
|
|
}
|
2015-06-06 20:15:43 +02:00
|
|
|
if resp.StatusCode != 200 {
|
2016-08-03 04:27:50 +02:00
|
|
|
return false, fmt.Errorf(
|
2017-05-18 05:45:34 +02:00
|
|
|
"got %d from %q %s", resp.StatusCode, endpoint.String(), body)
|
2015-06-06 20:15:43 +02:00
|
|
|
}
|
2015-05-21 05:23:48 +02:00
|
|
|
|
|
|
|
if err := json.Unmarshal(body, &teams); err != nil {
|
2015-06-06 20:15:43 +02:00
|
|
|
return false, fmt.Errorf("%s unmarshaling %s", err, body)
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
|
|
|
|
2015-07-24 22:10:10 +02:00
|
|
|
var hasOrg bool
|
|
|
|
presentOrgs := make(map[string]bool)
|
|
|
|
var presentTeams []string
|
2015-05-21 05:23:48 +02:00
|
|
|
for _, team := range teams {
|
2015-07-24 22:10:10 +02:00
|
|
|
presentOrgs[team.Org.Login] = true
|
2015-05-21 05:23:48 +02:00
|
|
|
if p.Org == team.Org.Login {
|
2015-07-24 22:10:10 +02:00
|
|
|
hasOrg = true
|
2016-02-17 12:21:27 +02:00
|
|
|
ts := strings.Split(p.Team, ",")
|
|
|
|
for _, t := range ts {
|
|
|
|
if t == team.Slug {
|
|
|
|
log.Printf("Found Github Organization:%q Team:%q (Name:%q)", team.Org.Login, team.Slug, team.Name)
|
|
|
|
return true, nil
|
|
|
|
}
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
2015-07-24 22:10:10 +02:00
|
|
|
presentTeams = append(presentTeams, team.Slug)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if hasOrg {
|
|
|
|
log.Printf("Missing Team:%q from Org:%q in teams: %v", p.Team, p.Org, presentTeams)
|
|
|
|
} else {
|
|
|
|
var allOrgs []string
|
2018-11-29 16:26:41 +02:00
|
|
|
for org := range presentOrgs {
|
2015-07-24 22:10:10 +02:00
|
|
|
allOrgs = append(allOrgs, org)
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
2015-07-24 22:10:10 +02:00
|
|
|
log.Printf("Missing Organization:%q in %#v", p.Org, allOrgs)
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
|
|
|
return false, nil
|
|
|
|
}
|
|
|
|
|
2015-06-23 13:23:39 +02:00
|
|
|
func (p *GitHubProvider) GetEmailAddress(s *SessionState) (string, error) {
|
2015-05-21 05:23:48 +02:00
|
|
|
|
|
|
|
var emails []struct {
|
|
|
|
Email string `json:"email"`
|
|
|
|
Primary bool `json:"primary"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// if we require an Org or Team, check that first
|
2015-06-06 20:03:59 +02:00
|
|
|
if p.Org != "" {
|
|
|
|
if p.Team != "" {
|
2015-06-23 13:23:39 +02:00
|
|
|
if ok, err := p.hasOrgAndTeam(s.AccessToken); err != nil || !ok {
|
2015-06-06 20:03:59 +02:00
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
} else {
|
2015-06-23 13:23:39 +02:00
|
|
|
if ok, err := p.hasOrg(s.AccessToken); err != nil || !ok {
|
2015-06-06 20:03:59 +02:00
|
|
|
return "", err
|
|
|
|
}
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-06-20 14:12:07 +02:00
|
|
|
endpoint := &url.URL{
|
2017-05-18 05:45:34 +02:00
|
|
|
Scheme: p.ValidateURL.Scheme,
|
|
|
|
Host: p.ValidateURL.Host,
|
|
|
|
Path: path.Join(p.ValidateURL.Path, "/user/emails"),
|
2016-06-20 14:12:07 +02:00
|
|
|
}
|
2017-05-18 05:45:34 +02:00
|
|
|
req, _ := http.NewRequest("GET", endpoint.String(), nil)
|
|
|
|
req.Header.Set("Authorization", fmt.Sprintf("token %s", s.AccessToken))
|
|
|
|
resp, err := http.DefaultClient.Do(req)
|
2015-05-21 05:23:48 +02:00
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
2015-06-23 13:23:39 +02:00
|
|
|
body, err := ioutil.ReadAll(resp.Body)
|
2015-05-21 05:23:48 +02:00
|
|
|
resp.Body.Close()
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
2015-06-23 13:23:39 +02:00
|
|
|
|
2015-06-06 20:15:43 +02:00
|
|
|
if resp.StatusCode != 200 {
|
2016-08-03 04:27:50 +02:00
|
|
|
return "", fmt.Errorf("got %d from %q %s",
|
2017-05-18 05:45:34 +02:00
|
|
|
resp.StatusCode, endpoint.String(), body)
|
2015-06-06 20:15:43 +02:00
|
|
|
}
|
2015-05-21 05:23:48 +02:00
|
|
|
|
2017-09-26 23:31:27 +02:00
|
|
|
log.Printf("got %d from %q %s", resp.StatusCode, endpoint.String(), body)
|
|
|
|
|
2015-05-21 05:23:48 +02:00
|
|
|
if err := json.Unmarshal(body, &emails); err != nil {
|
2015-06-06 20:15:43 +02:00
|
|
|
return "", fmt.Errorf("%s unmarshaling %s", err, body)
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
for _, email := range emails {
|
|
|
|
if email.Primary {
|
|
|
|
return email.Email, nil
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-07-24 22:23:19 +02:00
|
|
|
return "", nil
|
2015-05-21 05:23:48 +02:00
|
|
|
}
|
2017-09-26 23:31:27 +02:00
|
|
|
|
|
|
|
func (p *GitHubProvider) GetUserName(s *SessionState) (string, error) {
|
|
|
|
var user struct {
|
|
|
|
Login string `json:"login"`
|
|
|
|
Email string `json:"email"`
|
|
|
|
}
|
|
|
|
|
|
|
|
endpoint := &url.URL{
|
|
|
|
Scheme: p.ValidateURL.Scheme,
|
|
|
|
Host: p.ValidateURL.Host,
|
|
|
|
Path: path.Join(p.ValidateURL.Path, "/user"),
|
|
|
|
}
|
|
|
|
|
|
|
|
req, err := http.NewRequest("GET", endpoint.String(), nil)
|
|
|
|
if err != nil {
|
|
|
|
return "", fmt.Errorf("could not create new GET request: %v", err)
|
|
|
|
}
|
|
|
|
|
|
|
|
req.Header.Set("Authorization", fmt.Sprintf("token %s", s.AccessToken))
|
|
|
|
resp, err := http.DefaultClient.Do(req)
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
|
|
|
|
body, err := ioutil.ReadAll(resp.Body)
|
|
|
|
defer resp.Body.Close()
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
|
|
|
|
if resp.StatusCode != 200 {
|
|
|
|
return "", fmt.Errorf("got %d from %q %s",
|
|
|
|
resp.StatusCode, endpoint.String(), body)
|
|
|
|
}
|
|
|
|
|
|
|
|
log.Printf("got %d from %q %s", resp.StatusCode, endpoint.String(), body)
|
|
|
|
|
|
|
|
if err := json.Unmarshal(body, &user); err != nil {
|
|
|
|
return "", fmt.Errorf("%s unmarshaling %s", err, body)
|
|
|
|
}
|
|
|
|
|
|
|
|
return user.Login, nil
|
|
|
|
}
|