aboutsummaryrefslogtreecommitdiffstats
path: root/auth/oauth.go
blob: a9ab10efecc0e8a5a0fba0f3f388816df5a0c2e1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
package auth

import (
    "fmt"
    "net/http"
    "golang.org/x/oauth2"
)

type authCodeFn func(string) func() string

func NewOauthClient(clientId, clientSecret, tokenFile string, authFn authCodeFn) (*http.Client, error) {
    conf := &oauth2.Config{
        ClientID:     clientId,
        ClientSecret: clientSecret,
        Scopes:       []string{"https://www.googleapis.com/auth/drive"},
        RedirectURL:  "urn:ietf:wg:oauth:2.0:oob",
        Endpoint: oauth2.Endpoint{
            AuthURL:  "https://accounts.google.com/o/oauth2/auth",
            TokenURL: "https://accounts.google.com/o/oauth2/token",
        },
    }

    // Read cached token
    token, exists, err := ReadToken(tokenFile)
    if err != nil {
        return nil, fmt.Errorf("Failed to read token: %s", err)
    }

    // Require auth code if token file does not exist
    // or refresh token is missing
    if !exists || token.RefreshToken == "" {
        authUrl := conf.AuthCodeURL("state", oauth2.AccessTypeOffline)
        authCode := authFn(authUrl)()
        token, err = conf.Exchange(oauth2.NoContext, authCode)
        if err != nil {
            return nil, fmt.Errorf("Failed to exchange auth code for token: %s", err)
        }
    }

    return oauth2.NewClient(
        oauth2.NoContext,
        FileSource(tokenFile, token, conf),
    ), nil
}