65 lines
2.1 KiB
Ruby
65 lines
2.1 KiB
Ruby
class OpenidConnect::AuthorizationsController < ApplicationController
|
|
rescue_from Rack::OAuth2::Server::Authorize::BadRequest do |e|
|
|
logger.info e.backtrace[0,10].join("\n")
|
|
render json: { error: e.message || :error, status: e.status }
|
|
end
|
|
|
|
before_action :authenticate_user!
|
|
|
|
def new
|
|
request_authorization_consent_form
|
|
end
|
|
|
|
def create
|
|
process_authorization_consent(params[:approve])
|
|
end
|
|
|
|
private
|
|
|
|
def request_authorization_consent_form
|
|
endpoint = OpenidConnect::Endpoints::EndpointStartPoint.new(current_user)
|
|
handle_startpoint_response(endpoint)
|
|
end
|
|
|
|
def handle_startpoint_response(endpoint)
|
|
_status, header, response = *endpoint.call(request.env)
|
|
if response.redirect?
|
|
redirect_to header["Location"]
|
|
else
|
|
@client, @response_type, @redirect_uri, @scopes, @request_object = *[
|
|
endpoint.client, endpoint.response_type, endpoint.redirect_uri, endpoint.scopes, endpoint.request_object
|
|
]
|
|
save_request_parameters
|
|
render :new
|
|
end
|
|
end
|
|
|
|
def process_authorization_consent(approvedString)
|
|
endpoint = OpenidConnect::Endpoints::EndpointConfirmationPoint.new(current_user, to_boolean(approvedString))
|
|
restore_request_parameters(endpoint)
|
|
handle_confirmation_endpoint_response(endpoint)
|
|
end
|
|
|
|
def handle_confirmation_endpoint_response(endpoint)
|
|
_status, header, _response = *endpoint.call(request.env)
|
|
redirect_to header["Location"]
|
|
end
|
|
|
|
def save_request_parameters
|
|
session[:client_id], session[:response_type], session[:redirect_uri], session[:scopes], session[:request_object] =
|
|
@client.client_id, @response_type, @redirect_uri, @scopes.map(&:name), @request_object
|
|
end
|
|
|
|
def restore_request_parameters(endpoint)
|
|
req = Rack::Request.new(request.env)
|
|
req.update_param("client_id", session[:client_id])
|
|
req.update_param("redirect_uri", session[:redirect_uri])
|
|
req.update_param("response_type", session[:response_type])
|
|
endpoint.scopes, endpoint.request_object =
|
|
session[:scopes].map {|scope| OpenidConnect::Scope.find_by_name(scope) }, session[:request_object]
|
|
end
|
|
|
|
def to_boolean(str)
|
|
str.downcase == "true"
|
|
end
|
|
end
|