authentik/passbook/sources/oauth/forms.py

"""passbook oauth_client forms"""

from django import forms

from passbook.admin.forms.source import SOURCE_FORM_FIELDS
from passbook.flows.models import Flow, FlowDesignation
from passbook.sources.oauth.models import OAuthSource
from passbook.sources.oauth.types.manager import MANAGER


class OAuthSourceForm(forms.ModelForm):
    """OAuthSource Form"""

    authentication_flow = forms.ModelChoiceField(
        queryset=Flow.objects.filter(designation=FlowDesignation.AUTHENTICATION)
    )
    enrollment_flow = forms.ModelChoiceField(
        queryset=Flow.objects.filter(designation=FlowDesignation.ENROLLMENT)
    )

    def __init__(self, *args, **kwargs):
        super().__init__(*args, **kwargs)
        if hasattr(self.Meta, "overrides"):
            for overide_field, overide_value in getattr(self.Meta, "overrides").items():
                self.fields[overide_field].initial = overide_value
                self.fields[overide_field].widget.attrs["readonly"] = "readonly"

    class Meta:

        model = OAuthSource
        fields = SOURCE_FORM_FIELDS + [
            "provider_type",
            "request_token_url",
            "authorization_url",
            "access_token_url",
            "profile_url",
            "consumer_key",
            "consumer_secret",
        ]
        widgets = {
            "name": forms.TextInput(),
            "consumer_key": forms.TextInput(),
            "consumer_secret": forms.TextInput(),
            "provider_type": forms.Select(choices=MANAGER.get_name_tuple()),
        }


class GitHubOAuthSourceForm(OAuthSourceForm):
    """OAuth Source form with pre-determined URL for GitHub"""

    class Meta(OAuthSourceForm.Meta):

        overrides = {
            "provider_type": "github",
            "request_token_url": "",
            "authorization_url": "https://github.com/login/oauth/authorize",
            "access_token_url": "https://github.com/login/oauth/access_token",
            "profile_url": "https://api.github.com/user",
        }


class TwitterOAuthSourceForm(OAuthSourceForm):
    """OAuth Source form with pre-determined URL for Twitter"""

    class Meta(OAuthSourceForm.Meta):

        overrides = {
            "provider_type": "twitter",
            "request_token_url": "https://api.twitter.com/oauth/request_token",
            "authorization_url": "https://api.twitter.com/oauth/authenticate",
            "access_token_url": "https://api.twitter.com/oauth/access_token",
            "profile_url": (
                "https://api.twitter.com/1.1/account/"
                "verify_credentials.json?include_email=true"
            ),
        }


class FacebookOAuthSourceForm(OAuthSourceForm):
    """OAuth Source form with pre-determined URL for Facebook"""

    class Meta(OAuthSourceForm.Meta):

        overrides = {
            "provider_type": "facebook",
            "request_token_url": "",
            "authorization_url": "https://www.facebook.com/v7.0/dialog/oauth",
            "access_token_url": "https://graph.facebook.com/v7.0/oauth/access_token",
            "profile_url": "https://graph.facebook.com/v7.0/me?fields=id,name,email",
        }


class DiscordOAuthSourceForm(OAuthSourceForm):
    """OAuth Source form with pre-determined URL for Discord"""

    class Meta(OAuthSourceForm.Meta):

        overrides = {
            "provider_type": "discord",
            "request_token_url": "",
            "authorization_url": "https://discord.com/api/oauth2/authorize",
            "access_token_url": "https://discord.com/api/oauth2/token",
            "profile_url": "https://discord.com/api/users/@me",
        }


class GoogleOAuthSourceForm(OAuthSourceForm):
    """OAuth Source form with pre-determined URL for Google"""

    class Meta(OAuthSourceForm.Meta):

        overrides = {
            "provider_type": "google",
            "request_token_url": "",
            "authorization_url": "https://accounts.google.com/o/oauth2/auth",
            "access_token_url": "https://accounts.google.com/o/oauth2/token",
            "profile_url": "https://www.googleapis.com/oauth2/v1/userinfo",
        }


class AzureADOAuthSourceForm(OAuthSourceForm):
    """OAuth Source form with pre-determined URL for AzureAD"""

    class Meta(OAuthSourceForm.Meta):

        overrides = {
            "provider_type": "azure-ad",
            "request_token_url": "",
            "authorization_url": "https://login.microsoftonline.com/common/oauth2/authorize",
            "access_token_url": "https://login.microsoftonline.com/common/oauth2/token",
            "profile_url": "https://graph.windows.net/myorganization/me?api-version=1.6",
        }