initial commit

example/client/app/app.go

@@ -0,0 +1,96 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"os"
+
+	"github.com/sirupsen/logrus"
+
+	"github.com/google/uuid"
+
+	"github.com/caos/oidc/pkg/oidc"
+	"github.com/caos/oidc/pkg/rp"
+	"github.com/caos/oidc/pkg/utils"
+)
+
+var (
+	callbackPath string = "/auth/callback"
+	key          []byte = []byte("test1234test1234")
+)
+
+func main() {
+	clientID := os.Getenv("CLIENT_ID")
+	clientSecret := os.Getenv("CLIENT_SECRET")
+	issuer := os.Getenv("ISSUER")
+	port := os.Getenv("PORT")
+
+	ctx := context.Background()
+
+	rpConfig := &rp.Config{
+		ClientID:     clientID,
+		ClientSecret: clientSecret,
+		Issuer:       issuer,
+		CallbackURL:  fmt.Sprintf("http://localhost:%v%v", port, callbackPath),
+		Scopes:       []string{"openid", "profile", "email"},
+	}
+	cookieHandler := utils.NewCookieHandler(key, key, utils.WithUnsecure())
+	provider, err := rp.NewDefaultRP(rpConfig, rp.WithCookieHandler(cookieHandler)) //rp.WithPKCE(cookieHandler)) //,
+	if err != nil {
+		logrus.Fatalf("error creating provider %s", err.Error())
+	}
+
+	// state := "foobar"
+	state := uuid.New().String()
+
+	http.Handle("/login", provider.AuthURLHandler(state))
+	// http.HandleFunc("/login", func(w http.ResponseWriter, r *http.Request) {
+	// 	http.Redirect(w, r, provider.AuthURL(state), http.StatusFound)
+	// })
+
+	// http.HandleFunc(callbackPath, func(w http.ResponseWriter, r *http.Request) {
+	// 	tokens, err := provider.CodeExchange(ctx, r.URL.Query().Get("code"))
+	// 	if err != nil {
+	// 		http.Error(w, "failed to exchange token: "+err.Error(), http.StatusUnauthorized)
+	// 		return
+	// 	}
+	// 	data, err := json.Marshal(tokens)
+	// 	if err != nil {
+	// 		http.Error(w, err.Error(), http.StatusInternalServerError)
+	// 		return
+	// 	}
+	// 	w.Write(data)
+	// })
+
+	marshal := func(w http.ResponseWriter, r *http.Request, tokens *oidc.Tokens, state string) {
+		_ = state
+		data, err := json.Marshal(tokens)
+		if err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+			return
+		}
+		w.Write(data)
+	}
+
+	http.Handle(callbackPath, provider.CodeExchangeHandler(marshal))
+
+	http.HandleFunc("/test", func(w http.ResponseWriter, r *http.Request) {
+		tokens, err := provider.ClientCredentials(ctx, "scope")
+		if err != nil {
+			http.Error(w, "failed to exchange token: "+err.Error(), http.StatusUnauthorized)
+			return
+		}
+
+		data, err := json.Marshal(tokens)
+		if err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+			return
+		}
+		w.Write(data)
+	})
+	lis := fmt.Sprintf("127.0.0.1:%s", port)
+	logrus.Infof("listening on http://%s/", lis)
+	logrus.Fatal(http.ListenAndServe("127.0.0.1:5556", nil))
+}