oauth2.js

/*
*
* Copyright (C) 2011, The Locker Project
* All rights reserved.
*
* Please see the LICENSE file for more information.
*
*/

var request = require('request'),
    lfs = require('lfs'),
    fs = require('fs'),
    util = require('util'),
    querystring = require('querystring'),
    options = {provider :            'Some oauth2 consumer',
               endPoint :            'http://consumer.com/oauth/',
               linkToCreate :        'http://change.me/',
               appIDName :           'App ID',
               authEndpoint :        'authorize',
               appSecretName :       'App Secret',
               promptForUsername :   false,
               accessTokenResponse : 'text',
               grantType :           '',
               extraParams :         '',
               width :               980,
               height :              750};

var completedCallback, externalUrl;

exports.auth = {};
exports.options = {};

exports.authAndRun = function(app, externalUrl, onCompletedCallback) {
    options.redirectURI = externalUrl;
    for (var i in exports.options) options[i] = exports.options[i];

    if (exports.isAuthed()) return onCompletedCallback();

    completedCallback = onCompletedCallback;
    app.get('/go', go);
    app.get('/auth', handleAuth);
    app.post('/saveAuth', saveAuth);
};

exports.isAuthed = function() {
    try {
        if (!exports.auth) exports.auth = {};

        if (exports.auth.hasOwnProperty("accessToken")) return true;

        var authData = JSON.parse(fs.readFileSync('auth.json', 'utf8'));
        exports.auth = authData;

        if (authData.hasOwnProperty("accessToken")) return true;
    } catch (E) {

    }
    return false;
};

function go(req, res) {
    if(!(exports.auth.appKey && exports.auth.appSecret)) {
        var prompt;
        if (options.promptForUsername) {
            prompt = "Username: <input name='username'><br>";
        } else {
            prompt = "";
        }
        res.writeHead(200, { 'Content-Type': 'text/html' });
        var error = "";
        if (req.param('error')) {
            error = '<h1>Got an error while attempting to authenticate : ' + error + "</h1><p>Please reenter your credentials below.</p>";
        }
        res.end("<html>" + error + "Enter your personal " + options.provider + " app info that will be used to sync your data" +
                " (create a new one <a href='" + options.linkToCreate + "' target='_blank'>here</a>" +
                " using a callback url of " + options.redirectURI + "auth/) " +
                "<form method='post' action='saveAuth'>" +
                    prompt +
                    options.appIDName + ": <input name='appKey'><br>" +
                    options.appSecretName + ": <input name='appSecret'><br>" +
                    "<input type='submit' value='Save'>" +
                "</form></html>");
    } else if (exports.isAuthed()) {
        res.redirect(options.redirectURI);
    } else {
        var newUrl = options.endPoint + "/" + options.authEndpoint + '?client_id=' + exports.auth.appKey +
                        '&response_type=code&redirect_uri=' + options.redirectURI + 'auth/';
        util.debug('redirecting to ' + newUrl);

        if (options.extraParams) newUrl += "&" + options.extraParams;

        var resp = "<script type='text/javascript'>var left= (screen.width / 2) - (" + options.width + " / 2); var top = (screen.height / 2) - (" + options.height + " / 2); window.open('" + newUrl + "', 'auth', 'menubar=no,toolbar=no,status=no,width=" + options.width + ",height=" + options.height + ",toolbar=no,left=' + left + 'top=' + top);</script>";
        res.end(resp + '<a target=_new href=\'' + newUrl + '\'>Authenticate</a>');
    }
}

function handleAuth(req, res) {
    if (req.param('code')) {
        var newUrl = options.endPoint + '/access_token' +
                        '?client_id=' + exports.auth.appKey +
                        '&client_secret=' + exports.auth.appSecret +
                        '&grant_type=' + options.grantType +
                        '&redirect_uri=' + options.redirectURI + 'auth/' +
                        '&code=' + req.param('code');
        request.get({url:newUrl}, function(err, resp, body) {
            if (options.accessTokenResponse == 'json') {
                exports.auth.accessToken = JSON.parse(body).access_token;
            } else {
                exports.auth.accessToken = querystring.parse(body).access_token;
            }
            fs.writeFile('auth.json', JSON.stringify(exports.auth), 'utf8', function() {
                completedCallback(exports.auth);
                res.end("<script type='text/javascript'>if (window.opener) { window.opener.location.reload(true); } window.close(); </script>");
            });
        });
    } else {
        exports.auth = {};
        go(req, res);
    }
}


function saveAuth(req, res) {

    if (!req.body.appKey || !req.body.appSecret) return res.end("missing field(s)?");

    exports.auth.username = req.param('username') || '';
    exports.auth.appKey = req.param('appKey');
    exports.auth.appSecret = req.param('appSecret');
    res.redirect(options.redirectURI + 'go');
}