99 lines
2.3 KiB
Go
99 lines
2.3 KiB
Go
package op
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
|
|
"github.com/gorilla/schema"
|
|
|
|
"github.com/caos/oidc/pkg/oidc"
|
|
"github.com/caos/oidc/pkg/utils"
|
|
)
|
|
|
|
const (
|
|
InvalidRequest errorType = "invalid_request"
|
|
ServerError errorType = "server_error"
|
|
)
|
|
|
|
var (
|
|
ErrInvalidRequest = func(description string) *OAuthError {
|
|
return &OAuthError{
|
|
ErrorType: InvalidRequest,
|
|
Description: description,
|
|
}
|
|
}
|
|
ErrInvalidRequestRedirectURI = func(description string) *OAuthError {
|
|
return &OAuthError{
|
|
ErrorType: InvalidRequest,
|
|
Description: description,
|
|
redirectDisabled: true,
|
|
}
|
|
}
|
|
ErrServerError = func(description string) *OAuthError {
|
|
return &OAuthError{
|
|
ErrorType: ServerError,
|
|
Description: description,
|
|
}
|
|
}
|
|
)
|
|
|
|
type errorType string
|
|
|
|
type ErrAuthRequest interface {
|
|
GetRedirectURI() string
|
|
GetResponseType() oidc.ResponseType
|
|
GetState() string
|
|
}
|
|
|
|
func AuthRequestError(w http.ResponseWriter, r *http.Request, authReq ErrAuthRequest, err error, encoder *schema.Encoder) {
|
|
if authReq == nil {
|
|
http.Error(w, err.Error(), http.StatusBadRequest)
|
|
return
|
|
}
|
|
e, ok := err.(*OAuthError)
|
|
if !ok {
|
|
e = new(OAuthError)
|
|
e.ErrorType = ServerError
|
|
e.Description = err.Error()
|
|
}
|
|
e.state = authReq.GetState()
|
|
if authReq.GetRedirectURI() == "" || e.redirectDisabled {
|
|
http.Error(w, e.Description, http.StatusBadRequest)
|
|
return
|
|
}
|
|
params, err := utils.URLEncodeResponse(e, encoder)
|
|
if err != nil {
|
|
http.Error(w, err.Error(), http.StatusBadRequest)
|
|
return
|
|
}
|
|
url := authReq.GetRedirectURI()
|
|
responseType := authReq.GetResponseType()
|
|
if responseType == "" || responseType == oidc.ResponseTypeCode {
|
|
url += "?" + params
|
|
} else {
|
|
url += "#" + params
|
|
}
|
|
http.Redirect(w, r, url, http.StatusFound)
|
|
}
|
|
|
|
func ExchangeRequestError(w http.ResponseWriter, r *http.Request, err error) {
|
|
e, ok := err.(*OAuthError)
|
|
if !ok {
|
|
e = new(OAuthError)
|
|
e.ErrorType = ServerError
|
|
e.Description = err.Error()
|
|
}
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
utils.MarshalJSON(w, e)
|
|
}
|
|
|
|
type OAuthError struct {
|
|
ErrorType errorType `json:"error" schema:"error"`
|
|
Description string `json:"description" schema:"description"`
|
|
state string `json:"state" schema:"state"`
|
|
redirectDisabled bool
|
|
}
|
|
|
|
func (e *OAuthError) Error() string {
|
|
return fmt.Sprintf("%s: %s", e.ErrorType, e.Description)
|
|
}
|