aboutsummaryrefslogtreecommitdiffstats
path: root/vendor/_nuts/github.com/fabioberger/coinbase-go/oauth.go
blob: 92bda031d750f74faeb8e19763d69c694a8159f6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
package coinbase

import (
	"net/http"
	"net/url"
	"strings"
	"time"
)

// OAuth handles all service oauth related functionality (i.e GetTokens(), RefreshTokens()
type OAuth struct {
	ClientId     string
	ClientSecret string
	RedirectUri  string
	Rpc          rpc
}

// OAuthService Instantiates OAuth Struct in order to send service related OAuth requests
func OAuthService(clientId string, clientSecret string, redirectUri string) (*OAuth, error) {
	certFilePath := basePath + "/ca-coinbase.crt"
	serviceAuth, err := serviceOAuth(certFilePath)
	if err != nil {
		return nil, err
	}
	o := OAuth{
		ClientId:     clientId,
		ClientSecret: clientSecret,
		RedirectUri:  redirectUri,
		Rpc: rpc{
			auth: serviceAuth,
			mock: false,
		},
	}
	return &o, nil
}

// CreateAuthorizeUrl create the Authorize Url used to redirect users for
// coinbase app authorization. The scope parameter includes the specific
// permissions one wants to ask from the user
func (o OAuth) CreateAuthorizeUrl(scope []string) string {
	Url, _ := url.Parse("https://coinbase.com")
	Url.Path += "/oauth/authorize"

	parameters := url.Values{}
	parameters.Add("response_type", "code")
	parameters.Add("client_id", o.ClientId)
	parameters.Add("redirect_uri", o.RedirectUri)
	parameters.Add("scope", strings.Join(scope, " "))
	Url.RawQuery = parameters.Encode()

	return Url.String()
}

// RefreshTokens refreshes a users existing OAuth tokens
func (o OAuth) RefreshTokens(oldTokens map[string]interface{}) (*oauthTokens, error) {
	refresh_token := oldTokens["refresh_token"].(string)
	return o.GetTokens(refresh_token, "refresh_token")
}

// NewTokens generates new tokens for an OAuth user
func (o OAuth) NewTokens(code string) (*oauthTokens, error) {
	return o.GetTokens(code, "authorization_code")
}

// NewTokensRequest generates new tokens for OAuth user given an http request
// containing the query parameter 'code'
func (o OAuth) NewTokensFromRequest(req *http.Request) (*oauthTokens, error) {
	query := req.URL.Query()
	code := query.Get("code")
	return o.GetTokens(code, "authorization_code")
}

// GetTokens gets tokens for an OAuth user specifying a grantType (i.e authorization_code)
func (o OAuth) GetTokens(code string, grantType string) (*oauthTokens, error) {

	postVars := map[string]string{
		"grant_type":    grantType,
		"redirect_uri":  o.RedirectUri,
		"client_id":     o.ClientId,
		"client_secret": o.ClientSecret,
	}

	if grantType == "refresh_token" {
		postVars["refresh_token"] = code
	} else {
		postVars["code"] = code
	}
	holder := tokensHolder{}
	err := o.Rpc.Request("POST", "oauth/token", postVars, &holder)
	if err != nil {
		return nil, err
	}

	tokens := oauthTokens{
		AccessToken:  holder.AccessToken,
		RefreshToken: holder.RefreshToken,
		ExpireTime:   time.Now().UTC().Unix() + holder.ExpiresIn,
	}

	return &tokens, nil
}