simple-oauth 0.1.0-beta

Simple OAuth2 login and authorization
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

use crate::{
    SimpleOAuthError, SimpleOAuthProvider,
    types::{OidcDiscovery, OidcUserInfo, UserInfo},
};

#[derive(Debug, Clone)]
pub struct Oidc {
    auth_endpoint: String,
    token_endpoint: String,
    userinfo_endpoint: String,
}

impl Oidc {
    pub fn from_config(config: OidcDiscovery) -> Self {
        Self {
            auth_endpoint: config.authorization_endpoint,
            token_endpoint: config.token_endpoint,
            userinfo_endpoint: config.userinfo_endpoint,
        }
    }

    /// Discover the OIDC config from the given URL. This will fail
    /// if the discovery document is missing a token or userinfo endpoint.
    pub async fn discover(
        http_client: &reqwest::Client,
        discovery_url: &str,
    ) -> Result<Self, SimpleOAuthError> {
        let discovery = http_client
            .get(discovery_url)
            .send()
            .await?
            .error_for_status()?
            .json::<OidcDiscovery>()
            .await?;

        Ok(Self {
            auth_endpoint: discovery.authorization_endpoint,
            token_endpoint: discovery.token_endpoint,
            userinfo_endpoint: discovery.userinfo_endpoint,
        })
    }
}

impl SimpleOAuthProvider for Oidc {
    fn authorize_url(&self) -> &str {
        &self.auth_endpoint
    }

    fn token_url(&self) -> &str {
        &self.token_endpoint
    }

    fn user_info_url(&self) -> &str {
        &self.userinfo_endpoint
    }

    fn default_scopes(&self) -> &'static [&'static str] {
        &["openid", "profile"]
    }

    fn extract_user_info(&self, val: serde_json::Value) -> Result<UserInfo, serde_json::Error> {
        let user_info: OidcUserInfo = serde_json::from_value(val)?;

        Ok(UserInfo {
            id: user_info.sub,
            name: user_info.name,
            username: user_info.preferred_username,
            email: user_info.email,
            email_verified: user_info.email_verified,
            avatar_url: user_info.picture,
            groups: user_info.groups,
        })
    }
}