71849f028f
* refactor openpitrix API Signed-off-by: hongming <talonwan@yunify.com> * add openpitrix mock client Signed-off-by: hongming <talonwan@yunify.com> * refactor tenant API Signed-off-by: hongming <talonwan@yunify.com> * refactor IAM API Signed-off-by: hongming <talonwan@yunify.com> * refactor IAM API Signed-off-by: hongming <talonwan@yunify.com>
70 lines
2.0 KiB
Go
70 lines
2.0 KiB
Go
/*
|
|
|
|
Copyright 2019 The KubeSphere Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
|
|
*/
|
|
package iam
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/emicklei/go-restful"
|
|
iamv1alpha2 "kubesphere.io/kubesphere/pkg/api/iam/v1alpha2"
|
|
"kubesphere.io/kubesphere/pkg/models"
|
|
"kubesphere.io/kubesphere/pkg/models/iam"
|
|
"kubesphere.io/kubesphere/pkg/server/errors"
|
|
"kubesphere.io/kubesphere/pkg/utils/iputil"
|
|
"net/http"
|
|
)
|
|
|
|
type OAuthRequest struct {
|
|
GrantType string `json:"grant_type"`
|
|
Username string `json:"username,omitempty" description:"username"`
|
|
Password string `json:"password,omitempty" description:"password"`
|
|
RefreshToken string `json:"refresh_token,omitempty"`
|
|
}
|
|
|
|
func OAuth(req *restful.Request, resp *restful.Response) {
|
|
|
|
authRequest := &OAuthRequest{}
|
|
|
|
err := req.ReadEntity(authRequest)
|
|
|
|
if err != nil {
|
|
resp.WriteHeaderAndEntity(http.StatusBadRequest, errors.Wrap(err))
|
|
return
|
|
}
|
|
var result *models.AuthGrantResponse
|
|
switch authRequest.GrantType {
|
|
case "refresh_token":
|
|
result, err = iam.RefreshToken(authRequest.RefreshToken)
|
|
case "password":
|
|
ip := iputil.RemoteIp(req.Request)
|
|
result, err = iam.PasswordCredentialGrant(authRequest.Username, authRequest.Password, ip)
|
|
default:
|
|
resp.Header().Set("WWW-Authenticate", "grant_type is not supported")
|
|
resp.WriteHeaderAndEntity(http.StatusUnauthorized, errors.Wrap(fmt.Errorf("grant_type is not supported")))
|
|
return
|
|
}
|
|
|
|
if err != nil {
|
|
resp.Header().Set("WWW-Authenticate", err.Error())
|
|
resp.WriteHeaderAndEntity(http.StatusUnauthorized, errors.Wrap(err))
|
|
return
|
|
}
|
|
|
|
resp.WriteEntity(result)
|
|
|
|
}
|