initial revision; support basic micropub auth
This commit is contained in:
Kyle Mahan
parent
4764df9460
commit
b958da9bd1
|
|
@ -0,0 +1,48 @@
|
||||||
|
|
||||||
|
from flask import Flask, request, url_for
|
||||||
|
from flask.ext.micropub import Micropub
|
||||||
|
|
||||||
|
|
||||||
|
app = Flask(__name__)
|
||||||
|
micropub = Micropub(app)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route('/micropub-callback')
|
||||||
|
@micropub.authorized_handler
|
||||||
|
def micropub_callback(me, token, next_url, error):
|
||||||
|
return """
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html>
|
||||||
|
<body>
|
||||||
|
<ul>
|
||||||
|
<li>me: {}</li>
|
||||||
|
<li>token: {}</li>
|
||||||
|
<li>next: {}</li>
|
||||||
|
<li>error: {}</li>
|
||||||
|
</ul>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
""".format(me, token, next_url, error)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route('/')
|
||||||
|
def index():
|
||||||
|
me = request.args.get('me')
|
||||||
|
if me:
|
||||||
|
return micropub.authorize(
|
||||||
|
me, url_for('micropub_callback', _external=True))
|
||||||
|
return """
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html>
|
||||||
|
<body>
|
||||||
|
<form action="" method="GET">
|
||||||
|
<input type="text" name="me" placeholder="your domain.com"/>
|
||||||
|
<button type="submit">Authorize</button>
|
||||||
|
</form>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
"""
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == '__main__':
|
||||||
|
app.run(debug=True)
|
||||||
|
|
@ -0,0 +1,126 @@
|
||||||
|
"""This extension adds the ability to login to a Flask-based website
|
||||||
|
using [IndieAuth](https://indiewebcamp.com/IndieAuth), and to request
|
||||||
|
an [Micropub](https://indiewebcamp.com/Micropub) access token.
|
||||||
|
"""
|
||||||
|
|
||||||
|
import requests
|
||||||
|
import bs4
|
||||||
|
import flask
|
||||||
|
import functools
|
||||||
|
|
||||||
|
import sys
|
||||||
|
if sys.version > '3':
|
||||||
|
from urllib.parse import urlencode, parse_qs
|
||||||
|
else:
|
||||||
|
from urlparse import parse_qs
|
||||||
|
from urllib import urlencode
|
||||||
|
|
||||||
|
|
||||||
|
class Micropub:
|
||||||
|
def __init__(self, app):
|
||||||
|
self.app = app
|
||||||
|
if app is not None:
|
||||||
|
self.init_app(app)
|
||||||
|
|
||||||
|
def init_app(self, app):
|
||||||
|
self.client_id = app.name
|
||||||
|
|
||||||
|
def authorize(self, me, redirect_uri, next=None, scope='read'):
|
||||||
|
if not me.startswith('http://') and not me.startswith('https://'):
|
||||||
|
me = 'http://' + me
|
||||||
|
auth_url, token_url, micropub_url = self._discover_endpoints(me)
|
||||||
|
if not auth_url:
|
||||||
|
auth_url = 'https://indieauth.com/auth'
|
||||||
|
|
||||||
|
auth_params = {
|
||||||
|
'me': me,
|
||||||
|
'client_id': self.client_id,
|
||||||
|
'redirect_uri': redirect_uri,
|
||||||
|
'scope': scope,
|
||||||
|
}
|
||||||
|
|
||||||
|
if next:
|
||||||
|
auth_params['state'] = next
|
||||||
|
|
||||||
|
return flask.redirect(
|
||||||
|
auth_url + '?' + urlencode(auth_params))
|
||||||
|
|
||||||
|
def authorized_handler(self, f):
|
||||||
|
@functools.wraps(f)
|
||||||
|
def decorated(*args, **kwargs):
|
||||||
|
data = self._handle_response()
|
||||||
|
return f(*(data + args), **kwargs)
|
||||||
|
return decorated
|
||||||
|
|
||||||
|
def _handle_response(self):
|
||||||
|
redirect_uri = flask.url_for(flask.request.endpoint, _external=True)
|
||||||
|
confirmed_me = None
|
||||||
|
access_token = None
|
||||||
|
state = flask.request.args.get('state')
|
||||||
|
next_url = state
|
||||||
|
auth_url, token_url, micropub_url = self._discover_endpoints(
|
||||||
|
flask.request.args.get('me'))
|
||||||
|
|
||||||
|
if not auth_url:
|
||||||
|
return (confirmed_me, access_token, next_url,
|
||||||
|
'no authorization endpoint')
|
||||||
|
|
||||||
|
code = flask.request.args.get('code')
|
||||||
|
client_id = ''
|
||||||
|
|
||||||
|
# validate the authorization code
|
||||||
|
response = requests.post(auth_url, data={
|
||||||
|
'code': code,
|
||||||
|
'client_id': client_id,
|
||||||
|
'redirect_uri': redirect_uri,
|
||||||
|
'state': state,
|
||||||
|
})
|
||||||
|
|
||||||
|
rdata = parse_qs(response.text)
|
||||||
|
if response.status_code != 200:
|
||||||
|
return (confirmed_me, access_token, next_url,
|
||||||
|
'authorization failed. {}: {}'.format(
|
||||||
|
rdata.get('error'), rdata.get('error_description')))
|
||||||
|
|
||||||
|
if 'me' not in rdata:
|
||||||
|
return (confirmed_me, access_token, next_url,
|
||||||
|
'missing "me" in response')
|
||||||
|
|
||||||
|
confirmed_me = rdata.get('me')[0]
|
||||||
|
|
||||||
|
# request an access token
|
||||||
|
token_response = requests.post(token_url, data={
|
||||||
|
'code': code,
|
||||||
|
'me': confirmed_me,
|
||||||
|
'redirect_uri': redirect_uri,
|
||||||
|
'client_id': client_id,
|
||||||
|
'state': state,
|
||||||
|
})
|
||||||
|
|
||||||
|
if token_response.status_code != 200:
|
||||||
|
return (confirmed_me, access_token, next_url,
|
||||||
|
'bad response from token endpoint: {}'
|
||||||
|
.format(token_response))
|
||||||
|
|
||||||
|
tdata = parse_qs(token_response.text)
|
||||||
|
if 'access_token' not in tdata:
|
||||||
|
return (confirmed_me, access_token, next_url,
|
||||||
|
'response from token endpoint missing access_token: {}'
|
||||||
|
.format(tdata))
|
||||||
|
|
||||||
|
access_token = tdata.get('access_token')[0]
|
||||||
|
return confirmed_me, access_token, next_url, None
|
||||||
|
|
||||||
|
def _discover_endpoints(self, me):
|
||||||
|
me_response = requests.get(me)
|
||||||
|
if me_response.status_code != 200:
|
||||||
|
return None, None, None
|
||||||
|
|
||||||
|
soup = bs4.BeautifulSoup(me_response.text)
|
||||||
|
auth_endpoint = soup.find('link', {'rel': 'authorization_endpoint'})
|
||||||
|
token_endpoint = soup.find('link', {'rel': 'token_endpoint'})
|
||||||
|
micropub_endpoint = soup.find('link', {'rel': 'micropub'})
|
||||||
|
|
||||||
|
return (auth_endpoint and auth_endpoint['href'],
|
||||||
|
token_endpoint and token_endpoint['href'],
|
||||||
|
micropub_endpoint and micropub_endpoint['href'])
|
||||||
|
|
@ -0,0 +1,40 @@
|
||||||
|
"""
|
||||||
|
Flask-Micropub
|
||||||
|
--------------
|
||||||
|
|
||||||
|
This extension adds the ability to login to a Flask-based website
|
||||||
|
using [IndieAuth](https://indiewebcamp.com/IndieAuth), and to request
|
||||||
|
an [Micropub](https://indiewebcamp.com/Micropub) access token.
|
||||||
|
"""
|
||||||
|
from setuptools import setup
|
||||||
|
|
||||||
|
|
||||||
|
setup(
|
||||||
|
name='Flask-Micropub',
|
||||||
|
version='0.1',
|
||||||
|
url='https://indiewebcamp.com/Flask-Micropub/',
|
||||||
|
license='BSD',
|
||||||
|
author='Kyle Mahan',
|
||||||
|
author_email='kyle@kylewm.com',
|
||||||
|
description='Adds support for Micropub clients.',
|
||||||
|
long_description=__doc__,
|
||||||
|
py_modules=['flask_micropub'],
|
||||||
|
zip_safe=False,
|
||||||
|
include_package_data=True,
|
||||||
|
platforms='any',
|
||||||
|
install_requires=[
|
||||||
|
'Flask',
|
||||||
|
'requests',
|
||||||
|
'BeautifulSoup4',
|
||||||
|
],
|
||||||
|
classifiers=[
|
||||||
|
'Environment :: Web Environment',
|
||||||
|
'Intended Audience :: Developers',
|
||||||
|
'License :: OSI Approved :: BSD License',
|
||||||
|
'Operating System :: OS Independent',
|
||||||
|
'Programming Language :: Python',
|
||||||
|
'Programming Language :: Python :: 3',
|
||||||
|
'Topic :: Internet :: WWW/HTTP :: Dynamic Content',
|
||||||
|
'Topic :: Software Development :: Libraries :: Python Modules',
|
||||||
|
]
|
||||||
|
)
|
||||||
Loading…
Reference in New Issue