node_modules ignore

server/node_modules/grant/lib/flow/oauth1.js

@@ -0,0 +1,145 @@
+
+var qs = require('qs')
+var request = require('../client')
+
+
+exports.request = ({request:client}) => async ({provider, input}) => {
+  var options = {
+    method: 'POST',
+    url: provider.request_url,
+    oauth: {
+      callback: provider.redirect_uri,
+      consumer_key: provider.key,
+      consumer_secret: provider.secret
+    }
+  }
+  if (provider.private_key) {
+    options.oauth.signature_method = 'RSA-SHA1'
+    options.oauth.private_key = provider.private_key
+    delete options.oauth.consumer_secret
+  }
+  if (provider.etsy || provider.linkedin) {
+    options.qs = {scope: provider.scope}
+  }
+  if (provider.getpocket) {
+    delete options.oauth
+    options.headers = {
+      'x-accept': 'application/x-www-form-urlencoded'
+    }
+    options.form = {
+      consumer_key: provider.key,
+      redirect_uri: provider.redirect_uri,
+      state: provider.state
+    }
+  }
+  if (provider.freshbooks) {
+    options.oauth.signature_method = 'PLAINTEXT'
+  }
+  if (provider.twitter) {
+    if (provider.scope) {
+      options.qs = {x_auth_access_type: [].concat(provider.scope).join()}
+    }
+    if (provider.custom_params) {
+      options.qs = {x_auth_access_type: provider.custom_params.x_auth_access_type}
+    }
+  }
+  if (provider.subdomain) {
+    options.url = options.url.replace('[subdomain]', provider.subdomain)
+  }
+  try {
+    var {body:output} = await request({...client, ...options})
+    if (provider.sellsy) {
+      output = qs.parse(output)
+    }
+  }
+  catch (err) {
+    var output = {error: err.body || err.message}
+  }
+  return {provider, input, output}
+}
+
+exports.authorize = async ({provider, input, output}) => {
+  if (!output.oauth_token && !output.code) {
+    output = Object.keys(output).length
+      ? output : {error: 'Grant: OAuth1 missing oauth_token parameter'}
+    return {provider, input, output}
+  }
+  var url = provider.authorize_url
+  var params = {
+    oauth_token: output.oauth_token
+  }
+  if (provider.custom_params) {
+    for (var key in provider.custom_params) {
+      params[key] = provider.custom_params[key]
+    }
+  }
+  if (provider.flickr && provider.scope) {
+    params.perms = provider.scope
+  }
+  if (provider.getpocket) {
+    params = {
+      request_token: output.code,
+      redirect_uri: provider.redirect_uri
+    }
+  }
+  if (provider.ravelry || provider.trello) {
+    params.scope = provider.scope
+  }
+  if (provider.tripit) {
+    params.oauth_callback = provider.redirect_uri
+  }
+  if (provider.subdomain) {
+    url = url.replace('[subdomain]', provider.subdomain)
+  }
+  return {provider, input, output: `${url}?${qs.stringify(params)}`}
+}
+
+exports.access = ({request:client}) => async ({provider, input, input:{session, query}}) => {
+  if (!query.oauth_token && !session.request.code) {
+    var output = Object.keys(query).length
+      ? query : {error: 'Grant: OAuth1 missing oauth_token parameter'}
+    return {provider, input, output}
+  }
+  var options = {
+    method: 'POST',
+    url: provider.access_url,
+    oauth: {
+      consumer_key: provider.key,
+      consumer_secret: provider.secret,
+      token: query.oauth_token,
+      token_secret: session.request.oauth_token_secret,
+      verifier: query.oauth_verifier
+    }
+  }
+  if (provider.private_key) {
+    options.oauth.signature_method = 'RSA-SHA1'
+    options.oauth.private_key = provider.private_key
+    delete options.oauth.consumer_secret
+  }
+  if (provider.freshbooks) {
+    options.oauth.signature_method = 'PLAINTEXT'
+  }
+  if (provider.getpocket) {
+    delete options.oauth
+    options.headers = {
+      'x-accept': 'application/x-www-form-urlencoded'
+    }
+    options.form = {
+      consumer_key: provider.key,
+      code: session.request.code
+    }
+  }
+  if (provider.goodreads || provider.tripit) {
+    delete options.oauth.verifier
+  }
+  if (provider.subdomain) {
+    options.url = options.url.replace('[subdomain]', provider.subdomain)
+  }
+  try {
+    var {body:output} = await request({...client, ...options})
+  }
+  catch (err) {
+    var output = {error: err.body || err.message}
+  }
+  return {provider, input, output}
+}

server/node_modules/grant/lib/flow/oauth2.js

@@ -0,0 +1,220 @@
+
+var crypto = require('crypto')
+var qs = require('qs')
+var request = require('../client')
+
+
+exports.authorize = async ({provider, input}) => {
+  var url = provider.authorize_url
+  var params = {
+    client_id: provider.key,
+    response_type: 'code',
+    redirect_uri: provider.redirect_uri,
+    scope: provider.scope,
+    state: provider.state,
+    nonce: provider.nonce
+  }
+  if (provider.pkce) {
+    params.code_challenge_method = 'S256'
+    params.code_challenge = provider.code_challenge
+  }
+  if (provider.custom_params) {
+    for (var key in provider.custom_params) {
+      params[key] = provider.custom_params[key]
+    }
+  }
+  if (provider.basecamp) {
+    params.type = 'web_server'
+  }
+  if (provider.freelancer && params.scope) {
+    params.advanced_scopes = params.scope
+    delete params.scope
+  }
+  if (provider.instagram && /^\d+$/.test(provider.key)) {
+    params.app_id = params.client_id
+    delete params.client_id
+    params.scope = (params.scope || '').replace(/ /g, ',') || undefined
+  }
+  if (provider.optimizely && params.scope) {
+    params.scopes = params.scope
+    delete params.scope
+  }
+  if (provider.tiktok) {
+    params.client_key = params.client_id
+    delete params.client_id
+  }
+  if (provider.visualstudio) {
+    params.response_type = 'Assertion'
+  }
+  if (provider.wechat) {
+    params.appid = params.client_id
+    delete params.client_id
+  }
+  if (provider.subdomain) {
+    url = url.replace('[subdomain]', provider.subdomain)
+  }
+  var querystring = qs.stringify(params)
+  if (provider.unsplash && params.scope) {
+    var scope = params.scope
+    delete params.scope
+    querystring = qs.stringify(params) + '&scope=' + scope
+  }
+  return {provider, input, output: `${url}?${querystring}`}
+}
+
+exports.access = ({request:client}) => async ({provider, input, input:{query, body, session}}) => {
+  query = Object.keys(query).length ? query : body
+  if (!query.code) {
+    var output = Object.keys(query).length
+      ? query : {error: 'Grant: OAuth2 missing code parameter'}
+    return {provider, input, output}
+  }
+  else if (session.state && (query.state !== session.state)) {
+    var output = {error: 'Grant: OAuth2 state mismatch'}
+    return {provider, input, output}
+  }
+  var options = {
+    method: 'POST',
+    url: provider.access_url,
+    form: {
+      grant_type: 'authorization_code',
+      code: query.code,
+      client_id: provider.key,
+      client_secret: provider.secret,
+      redirect_uri: provider.redirect_uri
+    }
+  }
+  if (provider.pkce) {
+    options.form.code_verifier = session.code_verifier
+  }
+  if (provider.basecamp) {
+    options.form.type = 'web_server'
+  }
+  if (provider.concur) {
+    delete options.form
+    options.qs = {
+      code: query.code,
+      client_id: provider.key,
+      client_secret: provider.secret
+    }
+  }
+  if (/autodesk|ebay|fitbit|homeaway|hootsuite|notion|reddit|trustpilot/.test(provider.name)
+    || provider.token_endpoint_auth_method === 'client_secret_basic'
+  ) {
+    delete options.form.client_id
+    delete options.form.client_secret
+    options.auth = {user: provider.key, pass: provider.secret}
+  }
+  if (/twitter/.test(provider.name)) {
+    options.form.client_id = provider.key
+    delete options.form.client_secret
+    options.auth = {user: provider.key, pass: provider.secret}
+  }
+  if (provider.token_endpoint_auth_method === 'private_key_jwt') {
+    var jwt = ({kid, x5t, secret}) => ({
+      header: {
+        typ: 'JWT',
+        alg: provider.token_endpoint_auth_signing_alg || 'RS256',
+        kid,
+        x5t
+      },
+      payload: {
+        iss: provider.key,
+        sub: provider.key,
+        aud: provider.access_url,
+        jti: crypto.randomBytes(20).toString('hex'),
+        exp: Math.round(Date.now() / 1000) + 300,
+        iat: Math.round(Date.now() / 1000) - 120,
+        nbf: Math.round(Date.now() / 1000) - 120
+      },
+      secret
+    })
+
+    var assertion = (() => {
+      var oidc = require('../oidc')
+      var {public_key, private_key} = provider
+      return oidc.sign(jwt({
+        kid: private_key.kty ? oidc.kid(private_key) : undefined,
+        x5t: public_key ? public_key.kty ? public_key.x5t : oidc.x5t(public_key) : undefined,
+        secret: private_key.kty ? oidc.pem(private_key) : private_key,
+      }))
+    })()
+
+    options.form.client_assertion_type = 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer'
+    options.form.client_assertion = assertion
+    delete options.form.client_id
+    delete options.form.client_secret
+  }
+  if (provider.instagram && /^\d+$/.test(provider.key)) {
+    options.form.app_id = options.form.client_id
+    delete options.form.client_id
+    options.form.app_secret = options.form.client_secret
+    delete options.form.client_secret
+  }
+  if (provider.notion) {
+    options.json = options.form
+    delete options.form
+  }
+  if (provider.tiktok) {
+    options.form.client_key = options.form.client_id
+    delete options.form.client_id
+  }
+  if (provider.qq) {
+    options.method = 'GET'
+    options.qs = options.form
+    delete options.form
+  }
+  if (provider.untappd) {
+    options.method = 'GET'
+    options.qs = options.form
+    delete options.qs.grant_type
+    options.qs.response_type = 'code'
+    delete options.form
+  }
+  if (provider.wechat) {
+    options.method = 'GET'
+    options.qs = options.form
+    delete options.form
+    options.qs.appid = options.qs.client_id
+    options.qs.secret = options.qs.client_secret
+    delete options.qs.client_id
+    delete options.qs.client_secret
+  }
+  if (provider.smartsheet) {
+    delete options.form.client_secret
+    var hash = crypto.createHash('sha256')
+    hash.update(provider.secret + '|' + query.code)
+    options.form.hash = hash.digest('hex')
+  }
+  if (provider.surveymonkey) {
+    options.qs = {api_key: provider.custom_params.api_key}
+  }
+  if (provider.visualstudio) {
+    options.form = {
+      client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
+      client_assertion: provider.secret,
+      grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+      assertion: query.code,
+      redirect_uri: provider.redirect_uri
+    }
+  }
+  if (provider.withings) {
+    options.form.action = 'requesttoken'
+  }
+  if (provider.subdomain) {
+    options.url = options.url.replace('[subdomain]', provider.subdomain)
+  }
+  try {
+    var {body:output} = await request({...client, ...options})
+    if (provider.intuit) {
+      output.realmId = query.realmId
+    }
+    if (provider.withings) {
+      output = output.body
+    }
+  }
+  catch (err) {
+    var output = {error: err.body || err.message}
+  }
+  return {provider, input, output}
+}