Web 服务

cmd/dashboard/controller/oauth2.go

@@ -0,0 +1,83 @@
+package controller
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+
+	"github.com/naiba/com"
+
+	"github.com/gin-gonic/gin"
+	GitHubAPI "github.com/google/go-github/v28/github"
+	"golang.org/x/oauth2"
+
+	"github.com/p14yground/nezha/model"
+	"github.com/p14yground/nezha/pkg/mygin"
+	"github.com/p14yground/nezha/service/dao"
+)
+
+type oauth2controller struct {
+	oauth2Config *oauth2.Config
+	r            gin.IRoutes
+}
+
+func (oa *oauth2controller) serve() {
+	oa.r.GET("/oauth2/login", oa.login)
+	oa.r.GET("/oauth2/callback", oa.callback)
+}
+
+func (oa *oauth2controller) login(c *gin.Context) {
+	state := com.RandomString(6)
+	dao.Cache.Set(fmt.Sprintf("%s%s", model.CtxKeyOauth2State, c.ClientIP()), state, 0)
+	url := oa.oauth2Config.AuthCodeURL(state, oauth2.AccessTypeOnline)
+	c.Redirect(http.StatusFound, url)
+}
+
+func (oa *oauth2controller) callback(c *gin.Context) {
+	// 验证登录跳转时的 State
+	state, ok := dao.Cache.Get(fmt.Sprintf("%s%s", model.CtxKeyOauth2State, c.ClientIP()))
+	if !ok || state.(string) != c.Query("state") {
+		mygin.ShowErrorPage(c, mygin.ErrInfo{
+			Code:  http.StatusBadRequest,
+			Title: "登录失败",
+			Msg:   fmt.Sprintf("错误信息：%s", "非法的登录方式"),
+		}, true)
+		return
+	}
+	// 拉取验证用户信息
+	ctx := context.Background()
+	otk, err := oa.oauth2Config.Exchange(ctx, c.Query("code"))
+	if err != nil {
+		mygin.ShowErrorPage(c, mygin.ErrInfo{
+			Code:  http.StatusBadRequest,
+			Title: "登录失败",
+			Msg:   fmt.Sprintf("错误信息：%s", err),
+		}, true)
+		return
+	}
+	oc := oa.oauth2Config.Client(ctx, otk)
+	client := GitHubAPI.NewClient(oc)
+	gu, _, err := client.Users.Get(ctx, "")
+	if err != nil {
+		mygin.ShowErrorPage(c, mygin.ErrInfo{
+			Code:  http.StatusBadRequest,
+			Title: "登录失败",
+			Msg:   fmt.Sprintf("错误信息：%s", err),
+		}, true)
+		return
+	}
+	if gu.GetLogin() != dao.Conf.GitHub.Admin {
+		mygin.ShowErrorPage(c, mygin.ErrInfo{
+			Code:  http.StatusBadRequest,
+			Title: "登录失败",
+			Msg:   fmt.Sprintf("错误信息：%s", "该用户不是本站点管理员，无法登录"),
+		}, true)
+		return
+	}
+	user := model.NewUserFromGitHub(gu)
+	dao.Admin = &user
+	dao.Admin.IssueNewToken()
+	c.SetCookie(dao.Conf.Site.CookieName, dao.Admin.Token, 60*60*24*14, "", "", false, false)
+	c.Status(http.StatusOK)
+	c.Writer.WriteString("<script>window.location.href='/'</script>")
+}