1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
|
# Copyrights 2013-2019 by [Mark Overmeer <markov@cpan.org>].
# For other contributors see ChangeLog.
# See the manual pages for details on the licensing terms.
# Pod stripped from pm file by OODoc 2.02.
# This code is part of distribution Net-OAuth2. Meta-POD processed
# with OODoc into POD and HTML manual-pages. See README.md
# Copyright Mark Overmeer. Licensed under the same terms as Perl itself.
package Net::OAuth2::Profile::WebServer;
use vars '$VERSION';
$VERSION = '0.67';
use base 'Net::OAuth2::Profile';
use warnings;
use strict;
use Carp qw(croak);
use Net::OAuth2::AccessToken;
use Scalar::Util 'blessed';
use HTTP::Request ();
use HTTP::Response ();
use HTTP::Status qw(HTTP_TEMPORARY_REDIRECT);
sub init($)
{ my ($self, $args) = @_;
$args->{grant_type} ||= 'authorization_code';
$self->SUPER::init($args);
$self->{NOPW_redirect} = $args->{redirect_uri};
$self->{NOPW_referer} = $args->{referer};
$self->{NOPW_auto_save} = $args->{auto_save}
|| sub { my $token = shift; $token->changed(1) };
$self;
}
#-------------------
sub redirect_uri() {shift->{NOPW_redirect}}
sub referer(;$)
{ my $s = shift; @_ ? $s->{NOPW_referer} = shift : $s->{NOPW_referer} }
sub auto_save() {shift->{NOPW_auto_save}}
#--------------------
sub authorize(@)
{ my ($self, @req_params) = @_;
# temporary, for backward compatibility warning
my $uri_base = $self->SUPER::authorize_url;
# my $uri_base = $self->authorize_url;
my $uri = blessed $uri_base && $uri_base->isa('URI')
? $uri_base->clone : URI->new($uri_base);
my $params = $self->authorize_params(@req_params);
$uri->query_form($uri->query_form, %$params);
$uri;
}
# Net::OAuth2 returned the url+params here, but this should return the
# accessor to the parameter with this name. The internals of that code
# was so confused that it filled-in the params multiple times.
sub authorize_url()
{ require Carp;
Carp::confess("do not use authorize_url() but authorize()! (since v0.50)");
}
sub authorize_response(;$)
{ my ($self, $request) = @_;
my $resp = HTTP::Response->new
( HTTP_TEMPORARY_REDIRECT => 'Get authorization grant'
, [ Location => $self->authorize ]
);
$resp->request($request) if $request;
$resp;
}
sub get_access_token($@)
{ my ($self, $code, @req_params) = @_;
my $params = $self->access_token_params(code => $code, @req_params);
my $request = $self->build_request
( $self->access_token_method
, $self->access_token_url
, $params
);
my $response = $self->request($request);
Net::OAuth2::AccessToken->new
( profile => $self
, auto_refresh => !!$self->auto_save
, $self->params_from_response($response, 'access token')
);
}
sub update_access_token($@)
{ my ($self, $access, @req_params) = @_;
my $refresh = $access->refresh_token
or croak 'unable to refresh token without refresh_token';
my $req = $self->build_request
( $self->refresh_token_method
, $self->refresh_token_url
, $self->refresh_token_params(refresh_token => $refresh, @req_params)
);
my $resp = $self->request($req);
my %data = $self->params_from_response($resp, 'update token');
my $token = $data{access_token}
or croak "no access token found in refresh data";
my $type = $data{token_type};
my $exp = $data{expires_in}
or croak "no expires_in found in refresh data";
$access->update_token($token, $type, $exp+time(), $data{refresh_token});
}
sub authorize_params(%)
{ my $self = shift;
my $params = $self->SUPER::authorize_params(@_);
$params->{response_type} ||= 'code';
# should not be required: usually the related between client_id and
# redirect_uri is fixed to avoid security issues.
my $r = $self->redirect_uri;
$params->{redirect_uri} ||= $r if $r;
$params;
}
sub access_token_params(%)
{ my $self = shift;
my $params = $self->SUPER::access_token_params(@_);
$params->{redirect_uri} ||= $self->redirect_uri;
$params;
}
sub refresh_token_params(%)
{ my $self = shift;
my $params = $self->SUPER::refresh_token_params(@_);
$params->{grant_type} ||= 'refresh_token';
$params;
}
#--------------------
sub build_request($$$)
{ my $self = shift;
my $request = $self->SUPER::build_request(@_);
if(my $r = $self->referer)
{ $request->header(Referer => $r);
}
$request;
}
#--------------------
1;
|
