Packages
boruta
3.0.0-beta.1
3.0.0-beta.4
3.0.0-beta.3
3.0.0-beta.2
3.0.0-beta.1
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.2.0
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.1
2.0.0
2.0.0-rc.1
2.0.0-rc.0
1.2.1
1.2.0
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
1.0.0-rc.3
1.0.0-rc.2
1.0.0-rc.1
1.0.0-rc.0
0.2.1
0.2.0
0.1.1
0.1.0
0.1.0-rc.5
0.1.0-rc.4
0.1.0-rc.3
0.1.0-rc.2
0.1.0-rc.1
Core of an OAuth/OpenID Connect provider enabling authorization in your applications.
Current section
Files
Jump to
Current section
Files
lib/boruta/oauth/request/authorize.ex
defmodule Boruta.Oauth.Request.Authorize do
@moduledoc false
import Boruta.Oauth.Request.Base
alias Boruta.Oauth.CodeRequest
alias Boruta.Oauth.Error
alias Boruta.Oauth.HybridRequest
alias Boruta.Oauth.TokenRequest
alias Boruta.Oauth.Validator
@spec request(conn :: map(), resource_owner :: struct()) ::
{:error,
%Boruta.Oauth.Error{
:error => :invalid_request,
:error_description => String.t(),
:format => nil,
:redirect_uri => nil,
:status => :bad_request
}}
| {:ok,
oauth_request ::
CodeRequest.t()
| TokenRequest.t()
| HybridRequest.t()}
def request(%{query_params: query_params} = request, resource_owner) do
with {:ok, unsigned_params} <- fetch_unsigned_request(request),
{:ok, params} <-
Validator.validate(
:authorize,
query_params
|> Enum.into(unsigned_params)
) do
build_request(Enum.into(params, %{"resource_owner" => resource_owner}))
else
{:error, error_description} ->
{:error,
%Error{
status: :bad_request,
error: :invalid_request,
error_description: error_description
}}
end
end
def pushed_request(%{body_params: body_params} = request) do
with {:ok, unsigned_params} <- fetch_unsigned_request(request),
{:ok, params} <-
Validator.validate(
:authorize,
body_params
|> Enum.into(unsigned_params)
) do
build_request(Enum.into(params, %{"method" => "POST"}))
else
{:error, error_description} ->
{:error,
%Error{
status: :bad_request,
error: :invalid_request,
error_description: error_description
}}
end
end
end