mirror of
https://github.com/kennethreitz-archive/www.gittip.com.git
synced 2026-06-20 15:20:56 +00:00
Chad Whitacre
123 lines
3.9 KiB
Python
123 lines
3.9 KiB
Python
import gittip
|
|
import logging
|
|
import requests
|
|
import os
|
|
from aspen import json, log, Response
|
|
from aspen.website import Website
|
|
from aspen.utils import typecheck
|
|
from gittip.elsewhere import ACTIONS, AccountElsewhere, _resolve
|
|
|
|
|
|
class GitHubAccount(AccountElsewhere):
|
|
platform = u'github'
|
|
|
|
def get_url(self):
|
|
return self.user_info['html_url']
|
|
|
|
|
|
def resolve(login):
|
|
return _resolve(u'github', u'login', login)
|
|
|
|
|
|
def oauth_url(website, action, then=u""):
|
|
"""Given a website object and a string, return a URL string.
|
|
|
|
`action' is one of 'opt-in', 'lock' and 'unlock'
|
|
|
|
`then' is either a github username or an URL starting with '/'. It's
|
|
where we'll send the user after we get the redirect back from
|
|
GitHub.
|
|
|
|
"""
|
|
typecheck(website, Website, action, unicode, then, unicode)
|
|
assert action in ACTIONS
|
|
url = u"https://github.com/login/oauth/authorize?client_id=%s&redirect_uri=%s"
|
|
url %= (website.github_client_id, website.github_callback)
|
|
|
|
# Pack action,then into data and base64-encode. Querystring isn't
|
|
# available because it's consumed by the initial GitHub request.
|
|
|
|
data = u'%s,%s' % (action, then)
|
|
data = data.encode('UTF-8').encode('base64').decode('US-ASCII')
|
|
url += u'?data=%s' % data
|
|
return url
|
|
|
|
|
|
def oauth_dance(website, qs):
|
|
"""Given a querystring, return a dict of user_info.
|
|
|
|
The querystring should be the querystring that we get from GitHub when
|
|
we send the user to the return value of oauth_url above.
|
|
|
|
See also:
|
|
|
|
http://developer.github.com/v3/oauth/
|
|
|
|
"""
|
|
|
|
log("Doing an OAuth dance with Github.")
|
|
|
|
if 'error' in qs:
|
|
raise Response(500, str(qs['error']))
|
|
|
|
data = { 'code': qs['code'].encode('US-ASCII')
|
|
, 'client_id': website.github_client_id
|
|
, 'client_secret': website.github_client_secret
|
|
}
|
|
r = requests.post("https://github.com/login/oauth/access_token", data=data)
|
|
assert r.status_code == 200, (r.status_code, r.text)
|
|
|
|
back = dict([pair.split('=') for pair in r.text.split('&')]) # XXX
|
|
if 'error' in back:
|
|
raise Response(400, back['error'].encode('utf-8'))
|
|
assert back.get('token_type', '') == 'bearer', back
|
|
access_token = back['access_token']
|
|
|
|
r = requests.get( "https://api.github.com/user"
|
|
, headers={'Authorization': 'token %s' % access_token}
|
|
)
|
|
assert r.status_code == 200, (r.status_code, r.text)
|
|
user_info = json.loads(r.text)
|
|
log("Done with OAuth dance with Github for %s (%s)."
|
|
% (user_info['login'], user_info['id']))
|
|
|
|
return user_info
|
|
|
|
|
|
def get_user_info(login):
|
|
"""Get the given user's information from the DB or failing that, github.
|
|
|
|
:param login:
|
|
A unicode string representing a username in github.
|
|
|
|
:returns:
|
|
A dictionary containing github specific information for the user.
|
|
"""
|
|
typecheck(login, unicode)
|
|
rec = gittip.db.fetchone( "SELECT user_info FROM elsewhere "
|
|
"WHERE platform='github' "
|
|
"AND user_info->'login' = %s"
|
|
, (login,)
|
|
)
|
|
if rec is not None:
|
|
user_info = rec['user_info']
|
|
else:
|
|
url = "https://api.github.com/users/%s"
|
|
user_info = requests.get(url % login, params={
|
|
'client_id': os.environ.get('GITHUB_CLIENT_ID'),
|
|
'client_secret': os.environ.get('GITHUB_CLIENT_SECRET')
|
|
})
|
|
status = user_info.status_code
|
|
content = user_info.text
|
|
if status == 200:
|
|
user_info = json.loads(content)
|
|
elif status == 404:
|
|
raise Response(404,
|
|
"GitHub identity '{0}' not found.".format(login))
|
|
else:
|
|
log("Github api responded with {0}: {1}".format(status, content),
|
|
level=logging.WARNING)
|
|
raise Response(502, "GitHub lookup failed with %d." % status)
|
|
|
|
return user_info
|