forked from supabase/auth
-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Initial LinkedIn OAuth Implementation
Takes code from supabase#238 and finished implementation, still needs improvements in provider impl file
- Loading branch information
Showing
9 changed files
with
225 additions
and
2 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| package api | ||
|
|
||
| import ( | ||
| "net/http" | ||
| "net/http/httptest" | ||
| "net/url" | ||
|
|
||
| jwt "github.com/golang-jwt/jwt" | ||
| ) | ||
|
|
||
| func (ts *ExternalTestSuite) TestSignupExternalLinkedIn() { | ||
| req := httptest.NewRequest(http.MethodGet, "http://localhost/authorize?provider=linkedin", nil) | ||
| w := httptest.NewRecorder() | ||
| ts.API.handler.ServeHTTP(w, req) | ||
| ts.Require().Equal(http.StatusFound, w.Code) | ||
| u, err := url.Parse(w.Header().Get("Location")) | ||
| ts.Require().NoError(err, "redirect url parse failed") | ||
| q := u.Query() | ||
| ts.Equal(ts.Config.External.Apple.RedirectURI, q.Get("redirect_uri")) | ||
| ts.Equal(ts.Config.External.Apple.ClientID, q.Get("client_id")) | ||
| ts.Equal("code", q.Get("response_type")) | ||
| ts.Equal("r_emailaddress r_liteprofile", q.Get("scope")) | ||
|
|
||
| claims := ExternalProviderClaims{} | ||
| p := jwt.Parser{ValidMethods: []string{jwt.SigningMethodHS256.Name}} | ||
| _, err = p.ParseWithClaims(q.Get("state"), &claims, func(token *jwt.Token) (interface{}, error) { | ||
| return []byte(ts.Config.JWT.Secret), nil | ||
| }) | ||
| ts.Require().NoError(err) | ||
|
|
||
| ts.Equal("linkedin", claims.Provider) | ||
| ts.Equal(ts.Config.SiteURL, claims.SiteURL) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,176 @@ | ||
| package provider | ||
|
|
||
| import ( | ||
| "context" | ||
| "errors" | ||
| "strings" | ||
|
|
||
| "github.com/netlify/gotrue/conf" | ||
| "golang.org/x/oauth2" | ||
| ) | ||
|
|
||
| const ( | ||
| defaultLinkedinAPIBase = "api.linkedin.com" | ||
| endpointLinkedinProfile = "/v2/me?projection=(id,firstName,lastName,profilePicture(displayImage~:playableStreams))" | ||
| endpointLinkedinEmail = "/v2/emailAddress?q=members&projection=(elements*(handle~))" | ||
| ) | ||
|
|
||
| type linkedinProvider struct { | ||
| *oauth2.Config | ||
| APIPath string | ||
| UserInfoURL string | ||
| UserEmailUrl string | ||
| } | ||
|
|
||
| // This is the json returned by api for profile | ||
| // { | ||
| // "firstName":{ | ||
| // "localized":{ | ||
| // "en_US":"Tina" | ||
| // }, | ||
| // "preferredLocale":{ | ||
| // "country":"US", | ||
| // "language":"en" | ||
| // } | ||
| // }, | ||
| // "lastName":{ | ||
| // "localized":{ | ||
| // "en_US":"Belcher" | ||
| // }, | ||
| // "preferredLocale":{ | ||
| // "country":"US", | ||
| // "language":"en" | ||
| // } | ||
| // }, | ||
| // } | ||
|
|
||
| // return format for avatarUrl | ||
| // {"displayImage~" : { elements: [{identifiers: [ {identifier: "URL"}]}]}} | ||
|
|
||
| // https://docs.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/sign-in-with-linkedin?context=linkedin/consumer/context | ||
| type linkedinLocale struct { | ||
| Country string `json:"country"` | ||
| Language string `json:"language"` | ||
| } | ||
|
|
||
| type linkedinName struct { | ||
| Localized interface{} `json:"localized"` // try to catch all possible value | ||
| PreferredLocale linkedinLocale `json:"preferredLocale"` | ||
| } | ||
|
|
||
| type linkedinUser struct { | ||
| ID string `json:"id"` | ||
| FirstName linkedinName `json:"firstName"` // i tried to parse data but not sure | ||
| LastName linkedinName `json:"lastName"` // i tried to parse data but not sure | ||
| AvatarURL struct { // I don't know if we can do better than that | ||
| DisplayImage struct { | ||
| Elements []struct { | ||
| Identifiers []struct { | ||
| Identifier string `json:"identifier"` | ||
| } `json:"identifiers"` | ||
| } `json:"elements"` | ||
| } `json:"displayImage~"` | ||
| } `json:"profilePicture"` | ||
| } | ||
|
|
||
| // This is the json returned by api for email | ||
| // { | ||
| // "handle": "urn:li:emailAddress:3775708763", | ||
| // "handle~": { | ||
| // "emailAddress": "hsimpson@linkedin.com" | ||
| // } | ||
| // } | ||
|
|
||
| type linkedinEmail struct { | ||
| EmailAddress string `json:"emailAddress"` | ||
| } | ||
|
|
||
| type linkedinUserEmail struct { | ||
| Handle string `json:"handle"` | ||
| Handle_email linkedinEmail `json:"handle~"` | ||
| } | ||
|
|
||
| // NewLinkedinProvider creates a Linkedin account provider. | ||
| func NewLinkedInProvider(ext conf.OAuthProviderConfiguration, scopes string) (OAuthProvider, error) { | ||
| if err := ext.Validate(); err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| // authHost := chooseHost(ext.URL, defaultLinkedinAuthBase) | ||
| apiPath := chooseHost(ext.URL, defaultLinkedinAPIBase) | ||
|
|
||
| oauthScopes := []string{ | ||
| "r_emailaddress", | ||
| "r_liteprofile", | ||
| } | ||
|
|
||
| if scopes != "" { | ||
| oauthScopes = append(oauthScopes, strings.Split(scopes, ",")...) | ||
| } | ||
|
|
||
| return &linkedinProvider{ | ||
| Config: &oauth2.Config{ | ||
| ClientID: ext.ClientID, | ||
| ClientSecret: ext.Secret, | ||
| Endpoint: oauth2.Endpoint{ | ||
| AuthURL: defaultLinkedinAPIBase + "/oauth/v2/authorization", | ||
| TokenURL: defaultLinkedinAPIBase + "/oauth/v2/accessToken", | ||
| }, | ||
| Scopes: oauthScopes, | ||
| RedirectURL: ext.RedirectURI, | ||
| }, | ||
| APIPath: apiPath, | ||
| }, nil | ||
| } | ||
|
|
||
| func (g linkedinProvider) GetOAuthToken(code string) (*oauth2.Token, error) { | ||
| return g.Exchange(oauth2.NoContext, code) | ||
| } | ||
|
|
||
| func GetName(name linkedinName) string { | ||
| key := name.PreferredLocale.Language + "_" + name.PreferredLocale.Country | ||
| myMap := name.Localized.(map[string]interface{}) // not sure about the cast | ||
| return myMap[key].(string) | ||
| } | ||
|
|
||
| func (g linkedinProvider) GetUserData(ctx context.Context, tok *oauth2.Token) (*UserProvidedData, error) { | ||
| var u linkedinUser | ||
| if err := makeRequest(ctx, tok, g.Config, defaultLinkedinAPIBase+endpointLinkedinProfile, &u); err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| data := &UserProvidedData{} | ||
|
|
||
| var email linkedinUserEmail | ||
| if err := makeRequest(ctx, tok, g.Config, defaultLinkedinAPIBase+endpointLinkedinEmail, &email); err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| if email.Handle_email.EmailAddress != "" { | ||
| data.Emails = append(data.Emails, Email{ | ||
| Email: email.Handle_email.EmailAddress, | ||
| Verified: true, | ||
| Primary: true, | ||
| }) | ||
| } | ||
|
|
||
| if len(data.Emails) <= 0 { | ||
| return nil, errors.New("Unable to find email with Linkedin provider") | ||
| } | ||
|
|
||
| data.Metadata = &Claims{ | ||
| Issuer: g.APIPath, | ||
| Subject: u.ID, | ||
| Name: strings.TrimSpace(GetName(u.FirstName) + " " + GetName(u.FirstName)), | ||
| Picture: u.AvatarURL.DisplayImage.Elements[0].Identifiers[0].Identifier, | ||
| Email: email.Handle_email.EmailAddress, | ||
| EmailVerified: true, | ||
|
|
||
| // To be deprecated | ||
| AvatarURL: u.AvatarURL.DisplayImage.Elements[0].Identifiers[0].Identifier, | ||
| FullName: strings.TrimSpace(GetName(u.FirstName) + " " + GetName(u.FirstName)), | ||
| ProviderId: u.ID, | ||
| } | ||
|
|
||
| return data, nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters