auth

Paddy 2015-01-18 Parent:565a9335e035 Child:0a1e16b9c141

121:823517aad893 Go to Latest

auth/client.go

Implement client_credentials grant. Implement granting an access token (ProfileID set to nil) for a client based on client credentials.

Download raw file
View source Diff to previous Annotate
History 
     1.1 --- a/client.go	Sun Jan 18 02:14:08 2015 -0500
     1.2 +++ b/client.go	Sun Jan 18 02:14:41 2015 -0500
     1.3 @@ -17,6 +17,15 @@
     1.4  	"code.secondbit.org/uuid.hg"
     1.5  )
     1.6  
     1.7 +func init() {
     1.8 +	RegisterGrantType("client_credentials", GrantType{
     1.9 +		Validate:      clientCredentialsValidate,
    1.10 +		Invalidate:    nil,
    1.11 +		IssuesRefresh: true,
    1.12 +		ReturnToken:   RenderJSONToken,
    1.13 +	})
    1.14 +}
    1.15 +
    1.16  var (
    1.17  	// ErrNoClientStore is returned when a Context tries to act on a clientStore without setting one first.
    1.18  	ErrNoClientStore = errors.New("no clientStore was specified for the Context")
    1.19 @@ -452,3 +461,13 @@
    1.20  	}
    1.21  	encode(w, r, http.StatusCreated, resp)
    1.22  }
    1.23 +
    1.24 +func clientCredentialsValidate(w http.ResponseWriter, r *http.Request, context Context) (scope string, profileID uuid.ID, valid bool) {
    1.25 +	scope = r.PostFormValue("scope")
    1.26 +	_, success := verifyClient(w, r, true, context)
    1.27 +	if !success {
    1.28 +		return
    1.29 +	}
    1.30 +	valid = true
    1.31 +	return
    1.32 +}