Fix: userinfo (#15)

* add idea to gitignore

* working userinfo

* cleanup

* tests

pkg/op/userinfo.go

@@ -1,21 +1,33 @@
 package op
 
 import (
+	"errors"
 	"net/http"
+	"strings"
 
+	"github.com/caos/oidc/pkg/oidc"
 	"github.com/caos/oidc/pkg/utils"
+	"github.com/gorilla/schema"
 )
 
 type UserinfoProvider interface {
+	Decoder() *schema.Decoder
+	Crypto() Crypto
 	Storage() Storage
 }
 
 func Userinfo(w http.ResponseWriter, r *http.Request, userinfoProvider UserinfoProvider) {
-	scopes, err := ScopesFromAccessToken(w, r)
+	accessToken, err := getAccessToken(r, userinfoProvider.Decoder())
 	if err != nil {
+		http.Error(w, "access token missing", http.StatusUnauthorized)
 		return
 	}
-	info, err := userinfoProvider.Storage().GetUserinfoFromScopes(r.Context(), scopes)
+	tokenID, err := userinfoProvider.Crypto().Decrypt(accessToken)
+	if err != nil {
+		http.Error(w, "access token missing", http.StatusUnauthorized)
+		return
+	}
+	info, err := userinfoProvider.Storage().GetUserinfoFromToken(r.Context(), tokenID)
 	if err != nil {
 		utils.MarshalJSON(w, err)
 		return
@@ -23,6 +35,23 @@ func Userinfo(w http.ResponseWriter, r *http.Request, userinfoProvider UserinfoP
 	utils.MarshalJSON(w, info)
 }
 
-func ScopesFromAccessToken(w http.ResponseWriter, r *http.Request) ([]string, error) {
-	return []string{}, nil
+func getAccessToken(r *http.Request, decoder *schema.Decoder) (string, error) {
+	authHeader := r.Header.Get("authorization")
+	if authHeader != "" {
+		parts := strings.Split(authHeader, "Bearer ")
+		if len(parts) != 2 {
+			return "", errors.New("invalid auth header")
+		}
+		return parts[1], nil
+	}
+	err := r.ParseForm()
+	if err != nil {
+		return "", errors.New("unable to parse request")
+	}
+	req := new(oidc.UserInfoRequest)
+	err = decoder.Decode(req, r.Form)
+	if err != nil {
+		return "", errors.New("unable to parse request")
+	}
+	return req.AccessToken, nil
 }