mirror of
https://github.com/davidallendj/opaal.git
synced 2025-12-20 11:37:01 -07:00
83 lines
2.6 KiB
Go
83 lines
2.6 KiB
Go
package cmd
|
|
|
|
import (
|
|
"davidallendj/oidc-auth/internal/api"
|
|
"davidallendj/oidc-auth/internal/oidc"
|
|
"davidallendj/oidc-auth/internal/util"
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"net/http"
|
|
"os"
|
|
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
var (
|
|
identitiesUrl = ""
|
|
)
|
|
|
|
var loginCmd = &cobra.Command{
|
|
Use: "login",
|
|
Short: "Start the login flow",
|
|
Run: func(cmd *cobra.Command, args []string) {
|
|
if configPath != "" {
|
|
config = LoadConfig(configPath)
|
|
} else {
|
|
config = NewConfig()
|
|
}
|
|
oidcProvider := oidc.NewOIDCProvider()
|
|
oidcProvider.Host = config.OIDCHost
|
|
oidcProvider.Port = config.OIDCPort
|
|
var authorizationUrl = util.BuildAuthorizationUrl(
|
|
oidcProvider.GetAuthorizeUrl(),
|
|
config.ClientId,
|
|
config.RedirectUri,
|
|
config.State,
|
|
config.ResponseType,
|
|
config.Scope,
|
|
)
|
|
|
|
// print the authorization URL for the user to log in
|
|
fmt.Printf("Login with identity provider: %s\n", authorizationUrl)
|
|
|
|
// authorize oauth client and listen for callback from provider
|
|
fmt.Printf("Waiting for response from OIDC provider...\n")
|
|
code, err := api.WaitForAuthorizationCode(config.Host, config.Port)
|
|
if errors.Is(err, http.ErrServerClosed) {
|
|
fmt.Printf("server closed\n")
|
|
} else if err != nil {
|
|
fmt.Printf("error starting server: %s\n", err)
|
|
os.Exit(1)
|
|
}
|
|
|
|
// use code from response and exchange for bearer token
|
|
tokenString, err := api.FetchToken(code, oidcProvider.GetTokenUrl(), config.ClientId, config.ClientSecret, config.State, config.RedirectUri)
|
|
if err != nil {
|
|
fmt.Printf("%v\n", err)
|
|
return
|
|
}
|
|
|
|
var data map[string]any
|
|
json.Unmarshal([]byte(tokenString), &data)
|
|
idToken := data["id_token"].(string)
|
|
|
|
// create a new identity with Ory Kratos if identitiesUrl is provided
|
|
if config.IdentitiesUrl != "" {
|
|
api.CreateIdentity(config.IdentitiesUrl, idToken)
|
|
api.FetchIdentities(config.IdentitiesUrl)
|
|
}
|
|
// use ID token/user info to get access token from Ory Hydra
|
|
},
|
|
}
|
|
|
|
func init() {
|
|
loginCmd.Flags().StringVar(&config.ClientId, "client.id", config.ClientId, "set the client ID")
|
|
loginCmd.Flags().StringSliceVar(&config.RedirectUri, "redirect-uri", config.RedirectUri, "set the redirect URI")
|
|
loginCmd.Flags().StringVar(&config.ResponseType, "response-type", config.ResponseType, "set the response-type")
|
|
loginCmd.Flags().StringSliceVar(&config.Scope, "scope", config.Scope, "set the scopes")
|
|
loginCmd.Flags().StringVar(&config.State, "state", config.State, "set the state")
|
|
loginCmd.Flags().StringVar(&config.Host, "host", config.Host, "set the listening host")
|
|
loginCmd.Flags().IntVar(&config.Port, "port", config.Port, "set the listening port")
|
|
rootCmd.AddCommand(loginCmd)
|
|
}
|