Implemented userinfo endpoint

daystram · Jan 8, 2021 · 67d9d15 · 67d9d15
1 parent 623f9a2
commit 67d9d15
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/ratify-be/controllers/oauth/token.go b/ratify-be/controllers/oauth/token.go
@@ -114,3 +114,26 @@ func POSTIntrospect(c *gin.Context) {
 	c.JSON(http.StatusOK, tokenInfo)
 	return
 }
+
+// @Summary Get user info from access_token
+// @Tags oauth
+// @Security BearerAuth
+// @Success 200 "OK"
+// @Router /oauth/userinfo [GET]
+func GETUserInfo(c *gin.Context) {
+	var err error
+	var user models.User
+	if user, err = handlers.Handler.RetrieveUserBySubject(c.GetString(constants.UserSubjectKey)); err != nil {
+		c.JSON(http.StatusNotFound, datatransfers.APIResponse{Error: "user not found"})
+		return
+	}
+	c.JSON(http.StatusOK, datatransfers.UserInfo{
+		FamilyName:    user.FamilyName,
+		GivenName:     user.GivenName,
+		Subject:       user.Subject,
+		Username:      user.Username,
+		Email:         user.Email,
+		EmailVerified: user.EmailVerified,
+	})
+	return
+}
diff --git a/ratify-be/router/router.go b/ratify-be/router/router.go
@@ -51,6 +51,7 @@ func InitializeRouter() (router *gin.Engine) {
 		oauthV1.POST("/authorize", oauth.POSTAuthorize)
 		oauthV1.POST("/token", oauth.POSTToken)
 		oauthV1.POST("/introspect", oauth.POSTIntrospect)
+		oauthV1.GET("/userinfo", middleware.AuthMiddleware, utils.AuthOnly, oauth.GETUserInfo)
 		oauthV1.POST("/logout", middleware.AuthMiddleware, utils.AuthOnly, oauth.POSTLogout)
 	}
 	return