mirror of
https://github.com/fastapi-practices/fastapi-best-architecture.git
synced 2026-09-21 13:12:24 +00:00
Wu Clan
425bc202c2
* Add user social binding and unbinding * Add oauth2 state to binding * Update oauth2 state * Fix imports * Update some interface definitions * Update the authorization type security
74 lines
2.5 KiB
Python
74 lines
2.5 KiB
Python
import json
|
|
import uuid
|
|
|
|
from typing import Annotated
|
|
|
|
from fastapi import APIRouter, BackgroundTasks, Depends, Response
|
|
from fastapi_limiter.depends import RateLimiter
|
|
from fastapi_oauth20 import FastAPIOAuth20, LinuxDoOAuth20
|
|
from starlette.responses import RedirectResponse
|
|
|
|
from backend.common.response.response_schema import ResponseSchemaModel, response_base
|
|
from backend.core.conf import settings
|
|
from backend.database.db import CurrentSessionTransaction
|
|
from backend.database.redis import redis_client
|
|
from backend.plugin.oauth2.enums import UserSocialAuthType, UserSocialType
|
|
from backend.plugin.oauth2.service.oauth2_service import oauth2_service
|
|
|
|
router = APIRouter()
|
|
|
|
linux_do_client = LinuxDoOAuth20(settings.OAUTH2_LINUX_DO_CLIENT_ID, settings.OAUTH2_LINUX_DO_CLIENT_SECRET)
|
|
|
|
|
|
@router.get('', summary='获取 LinuxDo 授权链接')
|
|
async def get_linux_do_oauth2_url() -> ResponseSchemaModel[str]:
|
|
state = str(uuid.uuid4())
|
|
|
|
await redis_client.setex(
|
|
f'{settings.OAUTH2_STATE_REDIS_PREFIX}:{state}',
|
|
settings.OAUTH2_STATE_EXPIRE_SECONDS,
|
|
json.dumps({'type': UserSocialAuthType.login.value}),
|
|
)
|
|
|
|
auth_url = await linux_do_client.get_authorization_url(
|
|
redirect_uri=settings.OAUTH2_LINUX_DO_REDIRECT_URI, state=state
|
|
)
|
|
return response_base.success(data=auth_url)
|
|
|
|
|
|
@router.get(
|
|
'/callback',
|
|
summary='LinuxDo 授权自动重定向',
|
|
description='LinuxDo 授权后，自动重定向到当前地址并获取用户信息，通过用户信息自动创建系统用户',
|
|
dependencies=[Depends(RateLimiter(times=5, minutes=1))],
|
|
)
|
|
async def linux_do_oauth2_callback( # noqa: ANN201
|
|
db: CurrentSessionTransaction,
|
|
response: Response,
|
|
background_tasks: BackgroundTasks,
|
|
oauth2: Annotated[
|
|
FastAPIOAuth20,
|
|
Depends(FastAPIOAuth20(linux_do_client, redirect_uri=settings.OAUTH2_LINUX_DO_REDIRECT_URI)),
|
|
],
|
|
):
|
|
token_data, state = oauth2
|
|
access_token = token_data['access_token']
|
|
user = await linux_do_client.get_userinfo(access_token)
|
|
data = await oauth2_service.login_or_binding(
|
|
db=db,
|
|
response=response,
|
|
background_tasks=background_tasks,
|
|
user=user,
|
|
social=UserSocialType.linux_do,
|
|
state=state,
|
|
)
|
|
|
|
# 绑定流程
|
|
if data is None:
|
|
return RedirectResponse(url=settings.OAUTH2_FRONTEND_BINDING_REDIRECT_URI)
|
|
|
|
# 登录流程
|
|
return RedirectResponse(
|
|
url=f'{settings.OAUTH2_FRONTEND_LOGIN_REDIRECT_URI}?access_token={data.access_token}&session_uuid={data.session_uuid}',
|
|
)
|