oxide-auth 0.4.5

A OAuth2 server library, for actix, rocket, iron or other libraries, featuring a set of configurable and pluggable backends.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94

extern crate reqwest;
extern crate gotham;
extern crate mime;
extern crate serde_urlencoded;
extern crate serde;
extern crate serde_json;
extern crate hyper;

use self::reqwest::header;
use self::hyper::{StatusCode, Response};
use self::gotham::state::{FromState, State};
use self::gotham::http::response::create_response;

use std::collections::HashMap;
use std::io::Read;

use main::OauthResultQueryExtractor;


pub fn dummy_client(mut state: State) -> (State, Response) {
    let query_params = OauthResultQueryExtractor::take_from(&mut state);
    if let Some(cause) = query_params.error {
        let res = create_response(
            &state,
            StatusCode::Ok,
            Some((format!("Error during owner authorization: {:?}", cause).into_bytes(), mime::TEXT_PLAIN)),
        );
        return (state, res);
    }

    let code = match query_params.code {
        None => {
            let res = create_response(
                &state,
                StatusCode::BadRequest,
                Some((String::from("Missing code").into_bytes(), mime::TEXT_PLAIN)),
            );
            return (state, res)
        },
        Some(code) => code,
    };

    // Construct a request against http://localhost:8020/token, the access token endpoint
    let client = reqwest::Client::new();
    let mut params = HashMap::new();
    params.insert("grant_type", "authorization_code");
    params.insert("client_id", "LocalClient");
    params.insert("code", &code);
    params.insert("redirect_uri", "http://localhost:8021/endpoint");
    let access_token_request = client
        .post("http://localhost:8020/token")
        .form(&params).build().unwrap();
    let mut token_response = client.execute(access_token_request).unwrap();
    let mut token = String::new();
    token_response.read_to_string(&mut token).unwrap();
    let token_map: HashMap<String, String> = serde_json::from_str(&token).unwrap();

    if token_map.get("error").is_some() || !token_map.get("access_token").is_some() {
        let res = create_response(&state, StatusCode::BadRequest, Some((token.into_bytes(), mime::TEXT_PLAIN)));
        return (state, res);
    }

    // Request the page with the oauth token
    let page_request = client
        .get("http://localhost:8020/")
        .header(header::AUTHORIZATION, "Bearer ".to_string() + token_map.get("access_token").unwrap())
        .build().unwrap();
    let mut page_response = client.execute(page_request).unwrap();
    let mut protected_page = String::new();
    page_response.read_to_string(&mut protected_page).unwrap();

    let token = serde_json::to_string_pretty(&token_map).unwrap();
    let token = token.replace(",", ",</br>");
    let display_page = format!(
        "<html><style>
            aside{{overflow: auto; word-break: keep-all; white-space: nowrap}}
            main{{text-align: center}}
            main>aside,main>article{{margin: auto; text-align: left; border: 1px solid black; width: 50%}}
        </style>
        <main>
        Used token <aside style>{}</aside> to access
        <a href=\"http://localhost:8020/\">http://localhost:8020/</a>.
        Its contents are:
        <article>{}</article>
        </main></html>", token, protected_page);

    let res = create_response(
        &state,
        StatusCode::Ok,
        Some((display_page.into_bytes(), mime::TEXT_HTML)),
    );

    (state, res)
}