aboutsummaryrefslogtreecommitdiffstats
path: root/auth/oauth.go
blob: 1f2884b7695491e5546fdf81116de98fb1a73382 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
package auth

import (
    "fmt"
    "time"
    "net/http"
    "golang.org/x/oauth2"
)

type authCodeFn func(string) func() string

func NewFileSourceClient(clientId, clientSecret, tokenFile string, authFn authCodeFn) (*http.Client, error) {
    conf := getConfig(clientId, clientSecret)

    // Read cached token
    token, exists, err := ReadToken(tokenFile)
    if err != nil {
        return nil, fmt.Errorf("Failed to read token: %s", err)
    }

    // Require auth code if token file does not exist
    // or refresh token is missing
    if !exists || token.RefreshToken == "" {
        authUrl := conf.AuthCodeURL("state", oauth2.AccessTypeOffline)
        authCode := authFn(authUrl)()
        token, err = conf.Exchange(oauth2.NoContext, authCode)
        if err != nil {
            return nil, fmt.Errorf("Failed to exchange auth code for token: %s", err)
        }
    }

    return oauth2.NewClient(
        oauth2.NoContext,
        FileSource(tokenFile, token, conf),
    ), nil
}

func NewRefreshTokenClient(clientId, clientSecret, refreshToken string) *http.Client {
    conf := getConfig(clientId, clientSecret)

    token := &oauth2.Token{
        TokenType: "Bearer",
        RefreshToken: refreshToken,
        Expiry: time.Now(),
    }

    return oauth2.NewClient(
        oauth2.NoContext,
        conf.TokenSource(oauth2.NoContext, token),
    )
}

func getConfig(clientId, clientSecret string) *oauth2.Config {
    return &oauth2.Config{
        ClientID:     clientId,
        ClientSecret: clientSecret,
        Scopes:       []string{"https://www.googleapis.com/auth/drive"},
        RedirectURL:  "urn:ietf:wg:oauth:2.0:oob",
        Endpoint: oauth2.Endpoint{
            AuthURL:  "https://accounts.google.com/o/oauth2/auth",
            TokenURL: "https://accounts.google.com/o/oauth2/token",
        },
    }
}