mirror of
https://github.com/grafana/grafana.git
synced 2025-02-04 12:41:12 -06:00
113 lines
2.6 KiB
Go
113 lines
2.6 KiB
Go
package api
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
|
|
log "github.com/alecthomas/log4go"
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/golang/oauth2"
|
|
"github.com/torkelo/grafana-pro/pkg/models"
|
|
"github.com/torkelo/grafana-pro/pkg/stores"
|
|
)
|
|
|
|
var (
|
|
githubOAuthConfig *oauth2.Config
|
|
githubRedirectUrl string = "http://localhost:3000/oauth2/github/callback"
|
|
githubAuthUrl string = "https://github.com/login/oauth/authorize"
|
|
githubTokenUrl string = "https://github.com/login/oauth/access_token"
|
|
)
|
|
|
|
func init() {
|
|
addRoutes(func(self *HttpServer) {
|
|
if !self.cfg.Http.GithubOAuth.Enabled {
|
|
return
|
|
}
|
|
|
|
self.router.GET("/oauth2/github", self.oauthGithub)
|
|
self.router.GET("/oauth2/github/callback", self.oauthGithubCallback)
|
|
|
|
options := &oauth2.Options{
|
|
ClientID: self.cfg.Http.GithubOAuth.ClientId,
|
|
ClientSecret: self.cfg.Http.GithubOAuth.ClientSecret,
|
|
RedirectURL: githubRedirectUrl,
|
|
Scopes: []string{"user:email"},
|
|
}
|
|
|
|
cfg, err := oauth2.NewConfig(options, githubAuthUrl, githubTokenUrl)
|
|
|
|
if err != nil {
|
|
log.Error("Failed to init github auth %v", err)
|
|
}
|
|
|
|
githubOAuthConfig = cfg
|
|
})
|
|
}
|
|
|
|
func (self *HttpServer) oauthGithub(c *gin.Context) {
|
|
url := githubOAuthConfig.AuthCodeURL("", "online", "auto")
|
|
c.Redirect(302, url)
|
|
}
|
|
|
|
type githubUserInfoDto struct {
|
|
Login string `json:"login"`
|
|
Name string `json:"name"`
|
|
Email string `json:"email"`
|
|
Company string `json:"company"`
|
|
}
|
|
|
|
func (self *HttpServer) oauthGithubCallback(c *gin.Context) {
|
|
code := c.Request.URL.Query()["code"][0]
|
|
log.Info("OAuth code: %v", code)
|
|
|
|
transport, err := githubOAuthConfig.NewTransportWithCode(code)
|
|
if err != nil {
|
|
c.String(500, "Failed to exchange oauth token: "+err.Error())
|
|
return
|
|
}
|
|
|
|
client := http.Client{Transport: transport}
|
|
resp, err := client.Get("https://api.github.com/user")
|
|
if err != nil {
|
|
c.String(500, err.Error())
|
|
return
|
|
}
|
|
|
|
var userInfo githubUserInfoDto
|
|
decoder := json.NewDecoder(resp.Body)
|
|
err = decoder.Decode(&userInfo)
|
|
if err != nil {
|
|
c.String(500, err.Error())
|
|
return
|
|
}
|
|
|
|
if len(userInfo.Email) < 5 {
|
|
c.String(500, "Invalid email")
|
|
return
|
|
}
|
|
|
|
// try find existing account
|
|
account, err := self.store.GetAccountByLogin(userInfo.Email)
|
|
|
|
// create account if missing
|
|
if err == stores.ErrAccountNotFound {
|
|
account = &models.Account{
|
|
Login: userInfo.Login,
|
|
Email: userInfo.Email,
|
|
Name: userInfo.Name,
|
|
Company: userInfo.Company,
|
|
}
|
|
|
|
if err = self.store.CreateAccount(account); err != nil {
|
|
log.Error("Failed to create account %v", err)
|
|
c.String(500, "Failed to create account")
|
|
return
|
|
}
|
|
}
|
|
|
|
// login
|
|
loginUserWithAccount(account, c)
|
|
|
|
c.Redirect(302, "/")
|
|
}
|