co.gaiwan.oak.apis.oauth — co.gaiwan/oak 0.5.227-rc

OAuth 2.1 authorization and token exchange

authorize-response clj

(authorize-response {:keys [db oauth-client identity-id auth-time params]
                     :as opts})

Happy path, store a code for later token exchange, and send the user back to the Relying Party

client-checks clj

(client-checks oauth-client {:keys [redirect_uri response_type scope state]})

We've looked up the client in the database, check it against the parameters

component clj

(component opts)

error-html-response clj

(error-html-response message)

error-redirect-response clj

(error-redirect-response redirect-uri kvs)

error-response clj

(error-response error error-description)

GET-authorization-server-metadata clj

(GET-authorization-server-metadata
  {:keys [request-method uri scheme headers authority] :as req})

GET-authorize clj

(GET-authorize {:keys [db parameters session] :as req})

handle-authorization-code-grant clj

(handle-authorization-code-grant req db params)

Token exchange: handle code grant type

handle-client-credentials-grant clj

(handle-client-credentials-grant req db params)

Token exchange: handle client_credentials grant type

handle-refresh-token-grant clj

(handle-refresh-token-grant db params)

Token exchange: handle refresh_token grant type

identity-checks clj

(identity-checks req session params)

Check if there's an authenticated user in the session, if not, redirect to the login page

permission-dialog-response clj

(permission-dialog-response oauth-client scope params req)

Ask the user permission for the requested scopes

POST-exchange-token clj

(POST-exchange-token {:keys [db parameters] :as req})

pre-client-checks clj

(pre-client-checks {:keys [redirect_uri client_id]})

Initial checks, before we have a client+redirect to send the user back to