66 lines
2.5 KiB
Clojure
66 lines
2.5 KiB
Clojure
(ns cat.routes.oauth
|
|
(:require [ring.util.http-response :refer [ok found]]
|
|
[compojure.core :refer [defroutes GET]]
|
|
[clojure.java.io :as io]
|
|
[cat.oauth :as oauth]
|
|
[clojure.tools.logging :as log]
|
|
[cat.moauth :as mo]))
|
|
|
|
(def admins #{117 ;flynn
|
|
})
|
|
|
|
(defn set-user! [user session redirect-url]
|
|
(let [new-session (-> session
|
|
(assoc :user user)
|
|
(cond-> (contains? admins (:id user))
|
|
(->
|
|
(assoc-in [:user :admin] {:enabled false})
|
|
(assoc :identity "foo"))))]
|
|
(-> (found redirect-url)
|
|
(assoc :session new-session))))
|
|
|
|
(defn remove-user! [session redirect-url]
|
|
(-> (found redirect-url)
|
|
(assoc :session (dissoc session :user))))
|
|
|
|
(defn clear-session! [redirect-url]
|
|
(-> (found redirect-url)
|
|
(assoc :session nil)))
|
|
|
|
(defn oauth-init
|
|
"Initiates the Twitter OAuth"
|
|
[request]
|
|
(-> (mo/authorize-api-uri)
|
|
found))
|
|
|
|
(defn oauth-callback
|
|
"Handles the callback from adams."
|
|
[req_token {:keys [params session]}]
|
|
; oauth request was denied by user
|
|
(if (:denied params)
|
|
(-> (found "/")
|
|
(assoc :flash {:denied true}))
|
|
; fetch the request token and do anything else you wanna do if not denied.
|
|
(let [{:keys [access_token refresh_token]} (mo/get-authentication-response nil req_token)]
|
|
(log/info "Successfully fetched access-id: " access_token)
|
|
(log/info "Fetching user info")
|
|
(let [user (mo/get-user-info access_token)]
|
|
(log/info "User info: " user)
|
|
(set-user! user session "/")))))
|
|
|
|
;(catch [:status 401] _
|
|
; (error-page {:status 401
|
|
; :title "Error authenticating"
|
|
; :message "Please contact your system administrator to fix this issue"}))
|
|
|
|
|
|
(defroutes oauth-routes
|
|
(GET "/oauth/oauth-init" req (oauth-init req))
|
|
(GET "/oauth/oauth-callback" [& req_token :as req] (oauth-callback req_token req))
|
|
(GET "/logout" req (clear-session! "/")))
|
|
|
|
(defroutes admin-routes
|
|
(GET "/admin/enable" req (-> (found "/")
|
|
(assoc :session (assoc-in (:session req) [:user :admin :enabled] true))))
|
|
(GET "/admin/disable" req (-> (found "/")
|
|
(assoc :session (assoc-in (:session req) [:user :admin :enabled] false))))) |