notfire/Iceshrimp.NET
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[backend/masto-client] Support client_credentials grant type (ISH-416)

Browse source
This commit is contained in:
Laura Hausmann 2024-07-12 18:13:40 +02:00
parent 9c8debb5ed
commit b504bf2548
No known key found for this signature in database
GPG key ID: D044E84C5BE01605
2 changed files with 33 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
Iceshrimp.Backend/Controllers/Mastodon/AuthController.cs
View file

@ -87,9 +87,34 @@ public class AuthController(DatabaseContext db, MetaService meta) : ControllerBa
[ProducesErrors(HttpStatusCode.BadRequest)]
public async Task<OauthTokenResponse> GetOauthToken([FromHybrid] OauthTokenRequest request)
{
//TODO: app-level access (grant_type = "client_credentials")
if (request.GrantType == "client_credentials")
{
// @formatter:off
var app = await db.OauthApps.FirstOrDefaultAsync(p => p.ClientId == request.ClientId &&
p.ClientSecret == request.ClientSecret) ??
throw GracefulException.Unauthorized("Client authentication failed due to unknown client, no client authentication included, or unsupported authentication method.");
// @formatter:on
var invalidAppScope = MastodonOauthHelpers.ExpandScopes(request.Scopes ?? [])
.Except(MastodonOauthHelpers.ExpandScopes(app.Scopes))
.Any();
if (invalidAppScope)
throw GracefulException.BadRequest("The requested scope is invalid, unknown, or malformed.");
app.Token ??= CryptographyHelpers.GenerateRandomString(32);
await db.SaveChangesAsync();
return new OauthTokenResponse
{
CreatedAt = app.CreatedAt,
Scopes = request.Scopes ?? app.Scopes,
AccessToken = app.Token
};
}
if (request.GrantType != "authorization_code")
throw GracefulException.BadRequest($"Invalid grant_type, only authorization_code is supported.");
throw GracefulException.BadRequest("Invalid grant_type");
var token = await db.OauthTokens.FirstOrDefaultAsync(p => p.Code == request.Code &&
p.App.ClientId == request.ClientId &&
p.App.ClientSecret == request.ClientSecret);

6
Iceshrimp.Backend/Core/Database/Tables/OauthApp.cs
View file

@ -61,4 +61,10 @@ public class OauthApp
[InverseProperty(nameof(OauthToken.App))]
public virtual ICollection<OauthToken> OauthTokens { get; set; } = new List<OauthToken>();
/// <summary>
/// The app token, returned by /oauth/token when grant_type client_credentials is requested
/// </summary>
[Column("appToken")] [StringLength(64)]
public string? Token;
}