@smbcloud / cli
Code Commits Issues Pulls Cloud Agent CI/CD
feature/smbcloud-deploy
claude/smbcloud-github-app-k9641p development feature/apps feature/build-release feature/ci-docs feature/ci-ruby-gems feature/cicd feature/completion feature/dist-nuget feature/fix-ci-sdk-pypi-rubygem feature/fix-clippy-on-stable-channel feature/fix-deployment-script feature/github-email feature/gresiq-v1 feature/project-new-structure feature/rsync-deploy feature/ruby-runner feature/sdk-npm feature/sdk-workflows feature/smbcloud-cli-release-npm feature/smbcloud-deploy feature/wasm main release/v0.7.4
rs 115 lines 3.59 KB
Raw
1 use {
2 crate::client_credentials::{ClientCredentials, base_url_builder as tenant_base_url_builder},
3 reqwest::Url,
4 serde::{Deserialize, Serialize},
5 smbcloud_model::error_codes::{ErrorCode, ErrorResponse},
6 smbcloud_network::environment::Environment,
7 uuid::Uuid,
8 };
9
10 const TENANT_APPLE_AUTHORIZE_PATH: &str = "v1/client/oauth/apple/authorize";
11
12 #[derive(Debug, Clone, Serialize, Deserialize)]
13 pub struct AppleAuthorizationRequest {
14 pub authorize_url: String,
15 pub redirect_uri: String,
16 pub state: String,
17 }
18
19 #[derive(Debug, Clone, Serialize, Deserialize)]
20 pub struct AppleAuthSession {
21 pub access_token: String,
22 pub refresh_token: Option<String>,
23 pub email: Option<String>,
24 pub name: Option<String>,
25 pub provider: String,
26 pub provider_account_id: String,
27 pub state: Option<String>,
28 }
29
30 pub fn build_authorization_request_with_client(
31 env: Environment,
32 client: ClientCredentials<'_>,
33 redirect_uri: String,
34 state: Option<String>,
35 ) -> Result<AppleAuthorizationRequest, ErrorResponse> {
36 let state = state.unwrap_or_else(|| Uuid::new_v4().to_string());
37 let mut url_builder = tenant_base_url_builder(env, client);
38
39 url_builder
40 .add_route(TENANT_APPLE_AUTHORIZE_PATH)
41 .add_param("redirect_uri", &redirect_uri)
42 .add_param("state", &state);
43
44 Ok(AppleAuthorizationRequest {
45 authorize_url: url_builder.build(),
46 redirect_uri,
47 state,
48 })
49 }
50
51 pub fn parse_callback_url(
52 callback_url: &str,
53 expected_state: Option<&str>,
54 ) -> Result<AppleAuthSession, ErrorResponse> {
55 let url = Url::parse(callback_url).map_err(|err| ErrorResponse::Error {
56 error_code: ErrorCode::ParseError,
57 message: err.to_string(),
58 })?;
59
60 let mut access_token = None;
61 let mut refresh_token = None;
62 let mut email = None;
63 let mut name = None;
64 let mut provider = None;
65 let mut provider_account_id = None;
66 let mut state = None;
67 let mut error = None;
68
69 for (key, value) in url.query_pairs() {
70 match key.as_ref() {
71 "access_token" => access_token = Some(value.into_owned()),
72 "refresh_token" => refresh_token = Some(value.into_owned()),
73 "email" => email = Some(value.into_owned()),
74 "name" => name = Some(value.into_owned()),
75 "provider" => provider = Some(value.into_owned()),
76 "provider_account_id" => provider_account_id = Some(value.into_owned()),
77 "state" => state = Some(value.into_owned()),
78 "error" => error = Some(value.into_owned()),
79 _ => {}
80 }
81 }
82
83 if let Some(error) = error {
84 return Err(ErrorResponse::Error {
85 error_code: ErrorCode::InvalidParams,
86 message: error,
87 });
88 }
89
90 if let Some(expected_state) = expected_state
91 && state.as_deref() != Some(expected_state)
92 {
93 return Err(ErrorResponse::Error {
94 error_code: ErrorCode::InvalidParams,
95 message: "Apple callback state mismatch.".to_string(),
96 });
97 }
98
99 Ok(AppleAuthSession {
100 access_token: required_param("access_token", access_token)?,
101 refresh_token,
102 email,
103 name,
104 provider: provider.unwrap_or_else(|| "apple".to_string()),
105 provider_account_id: required_param("provider_account_id", provider_account_id)?,
106 state,
107 })
108 }
109
110 fn required_param(name: &str, value: Option<String>) -> Result<String, ErrorResponse> {
111 value.ok_or_else(|| ErrorResponse::Error {
112 error_code: ErrorCode::InvalidParams,
113 message: format!("Missing `{name}` in Apple callback URL."),
114 })
115 }