190 lines
4.7 KiB
Go
190 lines
4.7 KiB
Go
// Copyright (c) 2015 Mattermost, Inc. All Rights Reserved.
|
|
// See License.txt for license information.
|
|
|
|
package model
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"io"
|
|
"unicode/utf8"
|
|
)
|
|
|
|
const (
|
|
OAUTH_ACTION_SIGNUP = "signup"
|
|
OAUTH_ACTION_LOGIN = "login"
|
|
OAUTH_ACTION_EMAIL_TO_SSO = "email_to_sso"
|
|
OAUTH_ACTION_SSO_TO_EMAIL = "sso_to_email"
|
|
)
|
|
|
|
type OAuthApp struct {
|
|
Id string `json:"id"`
|
|
CreatorId string `json:"creator_id"`
|
|
CreateAt int64 `json:"create_at"`
|
|
UpdateAt int64 `json:"update_at"`
|
|
ClientSecret string `json:"client_secret"`
|
|
Name string `json:"name"`
|
|
Description string `json:"description"`
|
|
IconURL string `json:"icon_url"`
|
|
CallbackUrls StringArray `json:"callback_urls"`
|
|
Homepage string `json:"homepage"`
|
|
IsTrusted bool `json:"is_trusted"`
|
|
}
|
|
|
|
// IsValid validates the app and returns an error if it isn't configured
|
|
// correctly.
|
|
func (a *OAuthApp) IsValid() *AppError {
|
|
|
|
if len(a.Id) != 26 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.app_id.app_error", nil, "")
|
|
}
|
|
|
|
if a.CreateAt == 0 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.create_at.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
if a.UpdateAt == 0 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.update_at.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
if len(a.CreatorId) != 26 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.creator_id.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
if len(a.ClientSecret) == 0 || len(a.ClientSecret) > 128 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.client_secret.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
if len(a.Name) == 0 || len(a.Name) > 64 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.name.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
if len(a.CallbackUrls) == 0 || len(fmt.Sprintf("%s", a.CallbackUrls)) > 1024 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.callback.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
for _, callback := range a.CallbackUrls {
|
|
if !IsValidHttpUrl(callback) {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.callback.app_error", nil, "")
|
|
}
|
|
}
|
|
|
|
if len(a.Homepage) == 0 || len(a.Homepage) > 256 || !IsValidHttpUrl(a.Homepage) {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.homepage.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
if utf8.RuneCountInString(a.Description) > 512 {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.description.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
|
|
if len(a.IconURL) > 0 {
|
|
if len(a.IconURL) > 512 || !IsValidHttpUrl(a.IconURL) {
|
|
return NewLocAppError("OAuthApp.IsValid", "model.oauth.is_valid.icon_url.app_error", nil, "app_id="+a.Id)
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// PreSave will set the Id and ClientSecret if missing. It will also fill
|
|
// in the CreateAt, UpdateAt times. It should be run before saving the app to the db.
|
|
func (a *OAuthApp) PreSave() {
|
|
if a.Id == "" {
|
|
a.Id = NewId()
|
|
}
|
|
|
|
if a.ClientSecret == "" {
|
|
a.ClientSecret = NewId()
|
|
}
|
|
|
|
a.CreateAt = GetMillis()
|
|
a.UpdateAt = a.CreateAt
|
|
}
|
|
|
|
// PreUpdate should be run before updating the app in the db.
|
|
func (a *OAuthApp) PreUpdate() {
|
|
a.UpdateAt = GetMillis()
|
|
}
|
|
|
|
// ToJson convert a User to a json string
|
|
func (a *OAuthApp) ToJson() string {
|
|
b, err := json.Marshal(a)
|
|
if err != nil {
|
|
return ""
|
|
} else {
|
|
return string(b)
|
|
}
|
|
}
|
|
|
|
// Generate a valid strong etag so the browser can cache the results
|
|
func (a *OAuthApp) Etag() string {
|
|
return Etag(a.Id, a.UpdateAt)
|
|
}
|
|
|
|
// Remove any private data from the app object
|
|
func (a *OAuthApp) Sanitize() {
|
|
a.ClientSecret = ""
|
|
}
|
|
|
|
func (a *OAuthApp) IsValidRedirectURL(url string) bool {
|
|
for _, u := range a.CallbackUrls {
|
|
if u == url {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// OAuthAppFromJson will decode the input and return a User
|
|
func OAuthAppFromJson(data io.Reader) *OAuthApp {
|
|
decoder := json.NewDecoder(data)
|
|
var app OAuthApp
|
|
err := decoder.Decode(&app)
|
|
if err == nil {
|
|
return &app
|
|
} else {
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func OAuthAppMapToJson(a map[string]*OAuthApp) string {
|
|
b, err := json.Marshal(a)
|
|
if err != nil {
|
|
return ""
|
|
} else {
|
|
return string(b)
|
|
}
|
|
}
|
|
|
|
func OAuthAppMapFromJson(data io.Reader) map[string]*OAuthApp {
|
|
decoder := json.NewDecoder(data)
|
|
var apps map[string]*OAuthApp
|
|
err := decoder.Decode(&apps)
|
|
if err == nil {
|
|
return apps
|
|
} else {
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func OAuthAppListToJson(l []*OAuthApp) string {
|
|
b, err := json.Marshal(l)
|
|
if err != nil {
|
|
return ""
|
|
} else {
|
|
return string(b)
|
|
}
|
|
}
|
|
|
|
func OAuthAppListFromJson(data io.Reader) []*OAuthApp {
|
|
decoder := json.NewDecoder(data)
|
|
var o []*OAuthApp
|
|
err := decoder.Decode(&o)
|
|
if err == nil {
|
|
return o
|
|
} else {
|
|
return nil
|
|
}
|
|
}
|