1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
// Copyright (c) Microsoft Corporation.
// Licensed under the MIT license.
package main
// TODO(msal expert): This should be refactored into an example maybe?
// a "main" with a bunch of private functions that can't run isn't a good code sample.
/*
func getToken(w http.ResponseWriter, r *http.Request) {
// Getting the authorization code from the URL's query
states, ok := r.URL.Query()["state"]
if !ok || len(states[0]) < 1 {
log.Fatal(errors.New("State parameter missing, can't verify authorization code"))
}
codes, ok := r.URL.Query()["code"]
if !ok || len(codes[0]) < 1 {
log.Fatal(errors.New("Authorization code missing"))
}
if states[0] != config.State {
log.Fatal(errors.New("State parameter is incorrect"))
}
code := codes[0]
// Getting the access token using the authorization code
result, err := publicClientApp.AcquireTokenByAuthCode(context.Background(), config.Scopes, &msal.AcquireTokenByAuthCodeOptions{
Code: code,
CodeChallenge: config.CodeChallenge,
})
if err != nil {
log.Fatal(err)
}
// Prints the access token on the webpage
fmt.Fprintf(w, "Access token is "+result.GetAccessToken())
}
func acquireByAuthorizationCodePublic() {
options := msal.DefaultPublicClientApplicationOptions()
options.Authority = config.Authority
publicClientApp, err := msal.NewPublicClientApplication(config.ClientID, &options)
if err != nil {
panic(err)
}
http.HandleFunc("/", redirectToURL)
// The redirect uri set in our app's registration is http://localhost:port/redirect
http.HandleFunc("/redirect", getToken)
log.Fatal(http.ListenAndServe(":"+port, nil))
}
func redirectToURL(w http.ResponseWriter, r *http.Request) {
// Getting the URL to redirect to acquire the authorization code
authCodeURLParams := msal.CreateAuthorizationCodeURLParameters(config.ClientID, config.RedirectURI, config.Scopes)
authCodeURLParams.CodeChallenge = config.CodeChallenge
authCodeURLParams.State = config.State
authURL, err := publicClientApp.AuthCodeURL(context.Background(), authCodeURLParams)
if err != nil {
log.Fatal(err)
}
// Redirecting to the URL we have received
log.Info(authURL)
http.Redirect(w, r, authURL, http.StatusSeeOther)
}
*/
|
