cmdbox 0.5.3.1__py3-none-any.whl → 0.6.0__py3-none-any.whl

cmdbox/app/auth/azure_signin.py

@@ -0,0 +1,38 @@
+from cmdbox.app.auth.signin import Signin
+from fastapi import Request, Response
+from typing import Any, Dict
+import requests
+import urllib
+
+
+class AzureSignin(Signin):
+    @classmethod
+    def get_email(cls, data:Any) -> str:
+        user_info_resp = requests.get(
+            url='https://graph.microsoft.com/v1.0/me',
+            #url='https://graph.microsoft.com/v1.0/me/transitiveMemberOf?$Top=999',
+            headers={'Authorization': f'Bearer {data}'}
+        )
+        user_info_resp.raise_for_status()
+        user_info_json = user_info_resp.json()
+        if isinstance(user_info_json, dict):
+            email = user_info_json.get('mail', 'notfound')
+            return email
+        return 'notfound'
+    
+    def request_access_token(self, conf:Dict, req:Request, res:Response) -> str:
+        headers = {'Content-Type': 'application/x-www-form-urlencoded',
+                    'Accept': 'application/json'}
+        data = {'tenant': conf['tenant_id'],
+                'code': req.query_params['code'],
+                'scope': " ".join(conf['scope']),
+                'client_id': conf['client_id'],
+                #'client_secret': conf['client_secret'],
+                'redirect_uri': conf['redirect_uri'],
+                'grant_type': 'authorization_code'}
+        query = '&'.join([f'{k}={urllib.parse.quote(v)}' for k, v in data.items()])
+        # アクセストークン取得
+        token_resp = requests.post(url=f'https://login.microsoftonline.com/{conf["tenant_id"]}/oauth2/v2.0/token', headers=headers, data=query)
+        token_resp.raise_for_status()
+        token_json = token_resp.json()
+        return token_json['access_token']

cmdbox/app/auth/azure_signin_saml.py

@@ -0,0 +1,12 @@
+from cmdbox.app.auth.signin_saml import SigninSAML
+from typing import Any
+
+
+class AzyreSigninSAML(SigninSAML):
+    @classmethod
+    def get_email(cls, data:Any) -> str:
+        user_info_json = data.get_attributes()
+        if isinstance(user_info_json, dict):
+            email = user_info_json.get('http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', ['notfound'])
+            return email[0] if len(email) > 0 else 'notfound'
+        return 'notfound'

cmdbox/app/auth/github_signin.py

@@ -0,0 +1,38 @@
+from cmdbox.app.auth.signin import Signin
+from fastapi import Request, Response
+from typing import Any, Dict
+import requests
+import urllib.parse
+
+
+class GithubSignin(Signin):
+    @classmethod
+    def get_email(cls, data:Any) -> str:
+        user_info_resp = requests.get(
+            url='https://api.github.com/user/emails',
+            headers={'Authorization': f'Bearer {data}'}
+        )
+        user_info_resp.raise_for_status()
+        user_info_json = user_info_resp.json()
+        if type(user_info_json) == list:
+            email = 'notfound'
+            for u in user_info_json:
+                if u['primary']:
+                    email = u['email']
+                    break
+            return email
+        return 'notfound'
+
+    def request_access_token(self, conf:Dict, req:Request, res:Response) -> str:
+        headers = {'Content-Type': 'application/x-www-form-urlencoded',
+                    'Accept': 'application/json'}
+        data = {'code': req.query_params['code'],
+                'client_id': conf['client_id'],
+                'client_secret': conf['client_secret'],
+                'redirect_uri': conf['redirect_uri']}
+        query = '&'.join([f'{k}={urllib.parse.quote(v)}' for k, v in data.items()])
+        # アクセストークン取得
+        token_resp = requests.post(url='https://github.com/login/oauth/access_token', headers=headers, data=query)
+        token_resp.raise_for_status()
+        token_json = token_resp.json()
+        return token_json['access_token']

cmdbox/app/auth/google_signin.py

@@ -0,0 +1,32 @@
+from cmdbox.app.auth.signin import Signin
+from fastapi import Request, Response
+from typing import Any, Dict
+import requests
+import urllib.parse
+
+
+class GoogleSignin(Signin):
+    @classmethod
+    def get_email(cls, data:Any) -> str:
+        user_info_resp = requests.get(
+            url='https://www.googleapis.com/oauth2/v1/userinfo',
+            headers={'Authorization': f'Bearer {data}'}
+        )
+        user_info_resp.raise_for_status()
+        user_info_json = user_info_resp.json()
+        return user_info_json['email'] if 'email' in user_info_json else 'notfound'
+
+    def request_access_token(self, conf:Dict, req:Request, res:Response) -> str:
+        headers = {'Content-Type': 'application/x-www-form-urlencoded'}
+        next = req.query_params['state']
+        data = {'code': req.query_params['code'],
+                'client_id': conf['client_id'],
+                'client_secret': conf['client_secret'],
+                'redirect_uri': conf['redirect_uri'],
+                'grant_type': 'authorization_code'}
+        query = '&'.join([f'{k}={urllib.parse.quote(v)}' for k, v in data.items()])
+        # アクセストークン取得
+        token_resp = requests.post(url='https://oauth2.googleapis.com/token', headers=headers, data=query)
+        token_resp.raise_for_status()
+        token_json = token_resp.json()
+        return token_json['access_token']