iceshrimp/packages/client/src/pages/oauth.vue
Laura Hausmann 58137c9482
[mastodon-client] Preserve state parameter during OAuth
This fixes login with clients that require the state parameter to be preserved during /oauth/authorize.
2023-11-27 23:31:07 +01:00

253 lines
5.6 KiB
Vue

<template>
<MkSpacer :content-max="800">
<div v-if="$i">
<div v-if="state == 'waiting'" class="waiting _section" :class="[$style.section]">
<div class="_content">
<MkLoading />
</div>
</div>
<div v-if="state == 'denied'" class="denied _section" :class="[$style.section]">
<div class="_content">
<p>{{ i18n.ts._auth.denied }}</p>
</div>
</div>
<div v-else-if="state == 'error'" class="error _section" :class="[$style.section]">
<div class="_content">
<p>{{ message }}</p>
</div>
</div>
<div v-else-if="state == 'accepted-oob'" class="accepted-oob _section" :class="[$style.section]">
<div class="_content">
<p>{{ i18n.ts._auth.copyAsk }}</p>
<pre>{{ code }}</pre>
</div>
</div>
<div v-else-if="state == 'accepted'" class="accepted _section" :class="[$style.section]">
<div class="_content">
<p>
{{ i18n.ts._auth.callback }}<MkEllipsis />
</p>
</div>
</div>
<div v-else class="_section" :class="[$style.section]">
<div :class="[$style.container]">
<button
v-click-anime
class="item _button"
:class="[$style.account]"
@click="openAccountMenu"
>
<MkAvatar
:user="$i"
:class="[$style.icon]"
disableLink
/><!-- <MkAcct class="text" :user="$i"/> -->
</button>
<div :class="[$style.left]">
<div>{{ i18n.ts._auth.signedInAs }}:</div>
<div>@{{ $i.username }}<span :class="[$style.fade]">@{{ config.host }}</span></div>
</div>
</div>
<hr/>
<h2>{{i18n.ts._auth.authRequired}}</h2>
<div v-if="name" class="_title">
{{ i18n.t("_auth.shareAccess", { name: name }) }}
</div>
<div v-else class="_title">
{{ i18n.ts._auth.shareAccessAsk }}
</div>
<div class="_content">
<p>{{ i18n.ts._auth.permissionAsk }}</p>
<div :class="[$style.permissions]">
<div
v-for="p in _scopes"
:key="p"
:class="[$style.permission]"
>
<i
:class="[`ph-${getIcon(p)}`]"
class="ph-bold ph-xl"
style="margin-right: 0.5rem"
></i>
<span class="monospace">{{ p }}</span>
</div>
</div>
</div>
<div class="_footer">
<MkButton inline @click="deny">{{
i18n.ts.cancel
}}</MkButton>
<MkButton inline primary @click="accept">{{
i18n.ts.accept
}}</MkButton>
</div>
</div>
</div>
<div v-else class="signin">
<MkSignin @login="onLogin" />
</div>
</MkSpacer>
</template>
<script lang="ts" setup>
import MkSignin from "@/components/MkSignin.vue";
import MkButton from "@/components/MkButton.vue";
import * as os from "@/os";
import { $i, login, openAccountMenu as openAccountMenu_ } from "@/account";
import { appendQuery, query } from "@/scripts/url";
import { i18n } from "@/i18n";
import * as config from "@/config.js";
const props = defineProps<{
response_type: string;
client_id: string;
redirect_uri: string;
scope?: string;
force_login?: boolean;
lang?: string;
state?: string;
}>();
const _scopes = props.scope?.split(" ")?.filter(p => p.length > 0) ?? ['read'];
let state = $ref<string | null>(null);
let code = $ref<string | null>(null);
let name = $ref<string | null>(null);
let message = $ref<string>('Unknown error occurred');
if ($i) {
await os.apiJson("v1/iceshrimp/apps/info", {
client_id: props.client_id,
}).then(res => {
name = res.name;
}).catch(reason => {
message = reason;
state = 'error';
});
}
const getUrlParams = () =>
window.location.search
.substring(1)
.split("&")
.reduce((result, query) => {
const [k, v] = query.split("=");
result[k] = decodeURIComponent(v);
return result;
}, {});
const redirectUri = getUrlParams()['redirect_uri'];
if (redirectUri !== props.redirect_uri)
console.warn(`Mismatching redirect_uris between props (${props.redirect_uri}) and getUrlParams (${redirectUri})`);
function getIcon(p: string) {
if (p.startsWith("write")) return "pencil-simple";
else if(p.startsWith("read")) return "eye";
else if (p.startsWith("push")) return "bell-ringing";
else if(p.startsWith("follow")) return "users";
else return "check-fat";
}
async function accept(): Promise<void> {
state = "waiting";
const res = await os.apiJson("v1/iceshrimp/auth/code", {
client_id: props.client_id,
redirect_uri: redirectUri,
scopes: _scopes,
}).catch(r => {
message = r;
state = 'error';
throw r;
});
if (props.redirect_uri !== 'urn:ietf:wg:oauth:2.0:oob') {
state = "accepted";
location.href = appendQuery(
redirectUri,
query({
code: res.code,
state: props.state,
}),
);
}
else {
code = res.code;
state = "accepted-oob";
}
}
function deny(): void {
state = "denied";
}
async function onLogin(res): Promise<void> {
await login(res.i);
}
function openAccountMenu(ev: MouseEvent) {
openAccountMenu_(
{
includeCurrentAccount: true,
withExtraOperation: true,
withoutProfileLink: true
},
ev,
);
}
</script>
<style lang="scss" module>
.monospace {
font-family: monospace;
}
.permissions {
justify-content: center;
padding-top: var(--margin);
display: flex;
flex-wrap: wrap;
gap: 1rem;
margin-bottom: 2rem;
}
.permission {
display: inline-flex;
padding: 0.5rem 1rem;
border-radius: var(--radius);
background-color: var(--buttonBg);
color: var(--fg);
}
.container {
display: flex;
align-items: center;
justify-content: center;
}
.account {
margin-right: 20px;
}
.icon {
display: inline-block;
width: 55px;
aspect-ratio: 1;
}
.section {
background: var(--panel);
padding: 20px 32px;
border-radius: var(--radius);
font-size: 1.05em;
text-align: center;
}
.fade {
opacity: .5;
}
.left {
text-align: left;
}
</style>