--- /dev/null
+defmodule Pleroma.Web.Auth.DatabaseAuthenticator do
+ alias Pleroma.User
+
+ @implementation Pleroma.Config.get(
+ Pleroma.Web.Auth.DatabaseAuthenticator,
+ Pleroma.Web.Auth.PleromaDatabaseAuthenticator
+ )
+
+ @callback get_user(Plug.Conn.t()) :: {:ok, User.t()} | {:error, any()}
+ defdelegate get_user(plug), to: @implementation
+
+ @callback handle_error(Plug.Conn.t(), any()) :: any()
+ defdelegate handle_error(plug, error), to: @implementation
+end
-defmodule Pleroma.Web.Authenticator do
+defmodule Pleroma.Web.Auth.PleromaDatabaseAuthenticator do
alias Pleroma.User
alias Comeonin.Pbkdf2
- @behaviour Pleroma.Web.AuthenticatorAdapter
+ @behaviour Pleroma.Web.Auth.DatabaseAuthenticator
def get_user(%Plug.Conn{} = conn) do
%{"authorization" => %{"name" => name, "password" => password}} = conn.params
# SPDX-License-Identifier: AGPL-3.0-only
defmodule Pleroma.Web.OAuth do
- @authenticator Application.get_env(
- :pleroma,
- Pleroma.Web.AuthenticatorAdapter,
- Pleroma.Web.Authenticator
- )
-
- def authenticator, do: @authenticator
-
def parse_scopes(scopes, _default) when is_list(scopes) do
Enum.filter(scopes, &(&1 not in [nil, ""]))
end
+++ /dev/null
-defmodule Pleroma.Web.AuthenticatorAdapter do
- alias Pleroma.User
-
- @callback get_user(Plug.Conn.t()) :: {:ok, User.t()} | {:error, any()}
-
- @callback handle_error(Plug.Conn.t(), any()) :: any()
-end
defmodule Pleroma.Web.OAuth.OAuthController do
use Pleroma.Web, :controller
- alias Pleroma.Web.OAuth
+ alias Pleroma.Web.Auth.DatabaseAuthenticator
alias Pleroma.Web.OAuth.Authorization
alias Pleroma.Web.OAuth.Token
alias Pleroma.Web.OAuth.App
"redirect_uri" => redirect_uri
} = auth_params
}) do
- with {_, {:ok, %User{} = user}} <- {:get_user, OAuth.authenticator().get_user(conn)},
+ with {_, {:ok, %User{} = user}} <- {:get_user, DatabaseAuthenticator.get_user(conn)},
%App{} = app <- Repo.get_by(App, client_id: client_id),
true <- redirect_uri in String.split(app.redirect_uris),
scopes <- oauth_scopes(auth_params, []),
|> authorize(auth_params)
error ->
- OAuth.authenticator().handle_error(conn, error)
+ DatabaseAuthenticator.handle_error(conn, error)
end
end