oxidite-auth 2.3.0

Authentication and authorization for Oxidite (RBAC, JWT, OAuth2, 2FA, API keys)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

use crate::oauth2::client::OAuth2Config;

/// Preconfigured OAuth2 provider
#[derive(Debug, Clone)]
pub struct ProviderConfig {
    pub name: String,
    pub authorization_endpoint: String,
    pub token_endpoint: String,
    pub userinfo_endpoint: Option<String>,
    pub default_scopes: Vec<String>,
}

impl ProviderConfig {
    /// Google OAuth2 provider
    pub fn google() -> Self {
        Self {
            name: "Google".to_string(),
            authorization_endpoint: "https://accounts.google.com/o/oauth2/v2/auth".to_string(),
            token_endpoint: "https://oauth2.googleapis.com/token".to_string(),
            userinfo_endpoint: Some("https://www.googleapis.com/oauth2/v2/userinfo".to_string()),
            default_scopes: vec!["openid".to_string(), "email".to_string(), "profile".to_string()],
        }
    }

    /// GitHub OAuth2 provider
    pub fn github() -> Self {
        Self {
            name: "GitHub".to_string(),
            authorization_endpoint: "https://github.com/login/oauth/authorize".to_string(),
            token_endpoint: "https://github.com/login/oauth/access_token".to_string(),
            userinfo_endpoint: Some("https://api.github.com/user".to_string()),
            default_scopes: vec!["user:email".to_string()],
        }
    }

    /// Microsoft OAuth2 provider
    pub fn microsoft() -> Self {
        Self {
            name: "Microsoft".to_string(),
            authorization_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize".to_string(),
            token_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/token".to_string(),
            userinfo_endpoint: Some("https://graph.microsoft.com/v1.0/me".to_string()),
           default_scopes: vec!["openid".to_string(), "profile".to_string(), "email".to_string()],
        }
    }

    /// Convert to OAuth2Config
    pub fn to_config(&self, client_id: String, client_secret: String, redirect_uri: String) -> OAuth2Config {
        OAuth2Config {
            client_id,
            client_secret,
            redirect_uri,
            authorization_endpoint: self.authorization_endpoint.clone(),
            token_endpoint: self.token_endpoint.clone(),
            userinfo_endpoint: self.userinfo_endpoint.clone(),
            scopes: self.default_scopes.clone(),
        }
    }
}