From 0e8308e6c9af36ffe5541d7d3c13d78570bab02f Mon Sep 17 00:00:00 2001 From: "yadong.zhang" Date: Mon, 29 Mar 2021 10:42:57 +0800 Subject: [PATCH] =?UTF-8?q?:egg:=20=E9=9B=86=E6=88=90=20Line?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../zhyd/oauth/enums/scope/AuthLineScope.java | 28 +++++ .../zhyd/oauth/request/AuthLineRequest.java | 116 ++++++++++++++++++ 2 files changed, 144 insertions(+) create mode 100644 src/main/java/me/zhyd/oauth/enums/scope/AuthLineScope.java create mode 100644 src/main/java/me/zhyd/oauth/request/AuthLineRequest.java diff --git a/src/main/java/me/zhyd/oauth/enums/scope/AuthLineScope.java b/src/main/java/me/zhyd/oauth/enums/scope/AuthLineScope.java new file mode 100644 index 0000000..0e08754 --- /dev/null +++ b/src/main/java/me/zhyd/oauth/enums/scope/AuthLineScope.java @@ -0,0 +1,28 @@ +package me.zhyd.oauth.enums.scope; + +import lombok.AllArgsConstructor; +import lombok.Getter; + +/** + * Line 平台 OAuth 授权范围 + * + * @author yadong.zhang (yadong.zhang0415(a)gmail.com) + * @since 1.16.0 + */ +@Getter +@AllArgsConstructor +public enum AuthLineScope implements AuthScope { + + /** + * {@code scope} 含义，以{@code description} 为准 + */ + + PROFILE("profile", "Get profile details", true), + OPENID("openid", "Get id token", true), + EMAIL("email", "Get email (separate authorization required)", false); + + private final String scope; + private final String description; + private final boolean isDefault; + +} diff --git a/src/main/java/me/zhyd/oauth/request/AuthLineRequest.java b/src/main/java/me/zhyd/oauth/request/AuthLineRequest.java new file mode 100644 index 0000000..fe545b8 --- /dev/null +++ b/src/main/java/me/zhyd/oauth/request/AuthLineRequest.java @@ -0,0 +1,116 @@ +package me.zhyd.oauth.request; + +import com.alibaba.fastjson.JSONObject; +import com.xkcoding.http.support.HttpHeader; +import me.zhyd.oauth.cache.AuthStateCache; +import me.zhyd.oauth.config.AuthConfig; +import me.zhyd.oauth.config.AuthDefaultSource; +import me.zhyd.oauth.enums.AuthResponseStatus; +import me.zhyd.oauth.enums.AuthUserGender; +import me.zhyd.oauth.enums.scope.AuthLineScope; +import me.zhyd.oauth.model.AuthCallback; +import me.zhyd.oauth.model.AuthResponse; +import me.zhyd.oauth.model.AuthToken; +import me.zhyd.oauth.model.AuthUser; +import me.zhyd.oauth.utils.AuthScopeUtils; +import me.zhyd.oauth.utils.HttpUtils; +import me.zhyd.oauth.utils.UrlBuilder; + +import java.util.HashMap; +import java.util.Map; + +/** + * LINE 登录, line.biz + * + * @author yadong.zhang (yadong.zhang0415(a)gmail.com) + * @since 1.16.0 + */ +public class AuthLineRequest extends AuthDefaultRequest { + + public AuthLineRequest(AuthConfig config) { + super(config, AuthDefaultSource.LINE); + } + + public AuthLineRequest(AuthConfig config, AuthStateCache authStateCache) { + super(config, AuthDefaultSource.LINE, authStateCache); + } + + @Override + protected AuthToken getAccessToken(AuthCallback authCallback) { + return this.getToken(accessTokenUrl(authCallback.getCode())); + } + + @Override + protected AuthUser getUserInfo(AuthToken authToken) { + String userInfo = new HttpUtils(config.getHttpConfig()).get(source.userInfo(), null, new HttpHeader() + .add("Content-Type", "application/x-www-form-urlencoded") + .add("Authorization", "Bearer ".concat(authToken.getAccessToken())), false); + JSONObject object = JSONObject.parseObject(userInfo); + return AuthUser.builder() + .rawUserInfo(object) + .uuid(object.getString("userId")) + .username(object.getString("displayName")) + .nickname(object.getString("displayName")) + .avatar(object.getString("pictureUrl")) + .remark(object.getString("statusMessage")) + .gender(AuthUserGender.UNKNOWN) + .token(authToken) + .source(source.toString()) + .build(); + } + + @Override + public AuthResponse revoke(AuthToken authToken) { + Map params = new HashMap<>(5); + params.put("access_token", authToken.getAccessToken()); + params.put("client_id", config.getClientId()); + params.put("client_secret", config.getClientSecret()); + String userInfo = new HttpUtils(config.getHttpConfig()).post(source.revoke(), params, false); + JSONObject object = JSONObject.parseObject(userInfo); + // 返回1表示取消授权成功，否则失败 + AuthResponseStatus status = object.getBooleanValue("revoked") ? AuthResponseStatus.SUCCESS : AuthResponseStatus.FAILURE; + return AuthResponse.builder().code(status.getCode()).msg(status.getMsg()).build(); + } + + @Override + public AuthResponse refresh(AuthToken oldToken) { + return AuthResponse.builder() + .code(AuthResponseStatus.SUCCESS.getCode()) + .data(this.getToken(refreshTokenUrl(oldToken.getRefreshToken()))) + .build(); + } + + /** + * 获取token，适用于获取access_token和刷新token + * + * @param accessTokenUrl 实际请求token的地址 + * @return token对象 + */ + private AuthToken getToken(String accessTokenUrl) { + String response = new HttpUtils(config.getHttpConfig()).post(accessTokenUrl); + JSONObject accessTokenObject = JSONObject.parseObject(response); + return AuthToken.builder() + .accessToken(accessTokenObject.getString("access_token")) + .refreshToken(accessTokenObject.getString("refresh_token")) + .expireIn(accessTokenObject.getIntValue("expires_in")) + .idToken(accessTokenObject.getString("id_token")) + .scope(accessTokenObject.getString("scope")) + .tokenType(accessTokenObject.getString("token_type")) + .build(); + } + + @Override + public String userInfoUrl(AuthToken authToken) { + return UrlBuilder.fromBaseUrl(source.userInfo()) + .queryParam("user", authToken.getUid()) + .build(); + } + + @Override + public String authorize(String state) { + return UrlBuilder.fromBaseUrl(super.authorize(state)) + .queryParam("nonce", state) + .queryParam("scope", this.getScopes(" ", true, AuthScopeUtils.getDefaultScopes(AuthLineScope.values()))) + .build(); + } +} -- GitLab