lib/google_api/auth.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

# frozen_string_literal: true

module GoogleApi
  class Auth
    attr_reader :access_token, :redirect_uri, :state

    ConfigMissingError = Class.new(StandardError)

    def initialize(access_token, redirect_uri, state: nil)
      @access_token = access_token
      @redirect_uri = redirect_uri
      @state = state
    end

    def authorize_url
      client.auth_code.authorize_url(
        redirect_uri: redirect_uri,
        scope: scope,
        state: state # This is used for arbitrary redirection
      )
    end

    def get_token(code)
      ret = client.auth_code.get_token(code, redirect_uri: redirect_uri)
      return ret.token, ret.expires_at
    end

    protected

    def scope
      raise NotImplementedError
    end

    private

    def config
      Gitlab::Auth::OAuth::Provider.config_for('google_oauth2')
    end

    def client
      return @client if defined?(@client)

      unless config
        raise ConfigMissingError
      end

      @client = ::OAuth2::Client.new(
        config.app_id,
        config.app_secret,
        site: 'https://accounts.google.com',
        token_url: '/o/oauth2/token',
        authorize_url: '/o/oauth2/auth'
      )
    end
  end
end