You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					
					
						
							71 lines
						
					
					
						
							2.3 KiB
						
					
					
				
			
		
		
	
	
							71 lines
						
					
					
						
							2.3 KiB
						
					
					
				| #!/usr/bin/env python3
 | |
| import sys
 | |
| import webbrowser
 | |
| from http.server import HTTPServer, BaseHTTPRequestHandler
 | |
| from urllib.parse import urlencode, parse_qs
 | |
| from tools.lib.api import CommaApi, APIError
 | |
| from tools.lib.auth_config import set_token
 | |
| from typing import Dict, Any
 | |
| 
 | |
| class ClientRedirectServer(HTTPServer):
 | |
|   query_params: Dict[str, Any] = {}
 | |
| 
 | |
| class ClientRedirectHandler(BaseHTTPRequestHandler):
 | |
|   def do_GET(self):
 | |
|     if not self.path.startswith('/auth_redirect'):
 | |
|       self.send_response(204)
 | |
|       return
 | |
| 
 | |
|     query = self.path.split('?', 1)[-1]
 | |
|     query = parse_qs(query, keep_blank_values=True)
 | |
|     self.server.query_params = query
 | |
| 
 | |
|     self.send_response(200)
 | |
|     self.send_header('Content-type', 'text/plain')
 | |
|     self.end_headers()
 | |
|     self.wfile.write(b'Return to the CLI to continue')
 | |
| 
 | |
|   def log_message(self, format, *args):  # pylint: disable=redefined-builtin
 | |
|     pass  # this prevent http server from dumping messages to stdout
 | |
| 
 | |
| def auth_redirect_link(port):
 | |
|   redirect_uri = f'http://localhost:{port}/auth_redirect'
 | |
|   params = {
 | |
|     'type': 'web_server',
 | |
|     'client_id': '45471411055-ornt4svd2miog6dnopve7qtmh5mnu6id.apps.googleusercontent.com',
 | |
|     'redirect_uri': redirect_uri,
 | |
|     'response_type': 'code',
 | |
|     'scope': 'https://www.googleapis.com/auth/userinfo.email',
 | |
|     'prompt': 'select_account',
 | |
|   }
 | |
| 
 | |
|   return (redirect_uri, 'https://accounts.google.com/o/oauth2/auth?' + urlencode(params))
 | |
| 
 | |
| def login():
 | |
|   port = 9090
 | |
|   redirect_uri, oauth_uri = auth_redirect_link(port)
 | |
| 
 | |
|   web_server = ClientRedirectServer(('localhost', port), ClientRedirectHandler)
 | |
|   print(f'To sign in, use your browser and navigate to {oauth_uri}')
 | |
|   webbrowser.open(oauth_uri, new=2)
 | |
| 
 | |
|   while True:
 | |
|     web_server.handle_request()
 | |
|     if 'code' in web_server.query_params:
 | |
|       code = web_server.query_params['code']
 | |
|       break
 | |
|     elif 'error' in web_server.query_params:
 | |
|       print('Authentication Error: "%s". Description: "%s" ' % (
 | |
|         web_server.query_params['error'],
 | |
|         web_server.query_params.get('error_description')), file=sys.stderr)
 | |
|       break
 | |
| 
 | |
|   try:
 | |
|     auth_resp = CommaApi().post('v2/auth/', data={'code': code, 'redirect_uri': redirect_uri})
 | |
|     set_token(auth_resp['access_token'])
 | |
|     print('Authenticated')
 | |
|   except APIError as e:
 | |
|     print(f'Authentication Error: {e}', file=sys.stderr)
 | |
| 
 | |
| if __name__ == '__main__':
 | |
|   login()
 | |
| 
 |