-
Notifications
You must be signed in to change notification settings - Fork 940
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat(thirdparty): add linkedin to social providers
* adds linkedin to social providers via oidc Closes: #1452
- Loading branch information
Stefan Jacobi
committed
May 16, 2024
1 parent
4f2ae80
commit ec9bee8
Showing
6 changed files
with
170 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,106 @@ | ||
| package thirdparty | ||
|
|
||
| import ( | ||
| "context" | ||
| "errors" | ||
| "fmt" | ||
| "github.com/coreos/go-oidc/v3/oidc" | ||
| "github.com/teamhanko/hanko/backend/config" | ||
| "golang.org/x/oauth2" | ||
| ) | ||
|
|
||
| const ( | ||
| LinkedinIssuer = "https://www.linkedin.com/oauth" | ||
| ) | ||
|
|
||
| var DefaultLinkedinScopes = []string{ | ||
| "openid", | ||
| "profile", | ||
| "email", | ||
| } | ||
|
|
||
| type LinkedinUser struct { | ||
| ID string `json:"sub"` | ||
| Name string `json:"name"` | ||
| GivenName string `json:"given_name"` | ||
| FamilyName string `json:"family_name"` | ||
| Picture string `json:"picture"` | ||
| Locale struct { | ||
| Country string `json:"country"` | ||
| Language string `json:"language"` | ||
| } `json:"locale"` | ||
| Email string `json:"email"` | ||
| Verified bool `json:"email_verified"` | ||
| } | ||
|
|
||
| type linkedinProvider struct { | ||
| oidc *oidc.Provider | ||
| *oauth2.Config | ||
| } | ||
|
|
||
| // NewLinkedinProvider creates a LinkedIn third party provider. | ||
| func NewLinkedinProvider(config config.ThirdPartyProvider, redirectURL string) (OAuthProvider, error) { | ||
| if !config.Enabled { | ||
| return nil, errors.New("linkedIn provider is disabled") | ||
| } | ||
|
|
||
| oidcProvider, err := oidc.NewProvider(context.Background(), LinkedinIssuer) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| endpoint := oidcProvider.Endpoint() | ||
|
|
||
| return &linkedinProvider{ | ||
| oidc: oidcProvider, | ||
| Config: &oauth2.Config{ | ||
| ClientID: config.ClientID, | ||
| ClientSecret: config.Secret, | ||
| Endpoint: endpoint, | ||
| Scopes: DefaultLinkedinScopes, | ||
| RedirectURL: redirectURL, | ||
| }, | ||
| }, nil | ||
| } | ||
|
|
||
| func (g linkedinProvider) GetOAuthToken(code string) (*oauth2.Token, error) { | ||
| return g.Exchange(context.Background(), code) | ||
| } | ||
|
|
||
| func (g linkedinProvider) GetUserData(token *oauth2.Token) (*UserData, error) { | ||
| var user LinkedinUser | ||
| if err := makeRequest(token, g.Config, g.oidc.UserInfoEndpoint(), &user); err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| data := &UserData{} | ||
|
|
||
| if user.Email != "" { | ||
| data.Emails = append(data.Emails, Email{ | ||
| Email: user.Email, | ||
| Verified: user.Verified, | ||
| Primary: true, | ||
| }) | ||
| } | ||
|
|
||
| if len(data.Emails) <= 0 { | ||
| return nil, errors.New("unable to find email with LinkedIn provider") | ||
| } | ||
|
|
||
| data.Metadata = &Claims{ | ||
| Issuer: LinkedinIssuer, | ||
| Subject: user.ID, | ||
| Name: user.Name, | ||
| FamilyName: user.FamilyName, | ||
| GivenName: user.GivenName, | ||
| Picture: user.Picture, | ||
| Locale: fmt.Sprintf("%s-%s", user.Locale.Country, user.Locale.Language), | ||
| Email: user.Email, | ||
| EmailVerified: user.Verified, | ||
| } | ||
|
|
||
| return data, nil | ||
| } | ||
|
|
||
| func (g linkedinProvider) Name() string { | ||
| return "linkedin" | ||
| } |