bruno
5a124d1328
- OAuth2 Gitea (login/callback/logout) with fallback admin mode
- Session management with signed cookies (itsdangerous, 7 days)
- CSRF protection middleware on all POST/PUT/PATCH/DELETE
- Rate limiting in-memory (60 req/min per IP)
- Issue creation from FlowDeck (POST /api/issues/{owner}/{repo})
- Inline issue editing (PATCH /api/issues/{owner}/{repo}/{issue_id})
- Card detail modal (double-click): description, labels, comments
- Checklists with toggleable items (CRUD endpoints + UI)
- Priority + due date editable on cards
- Webhook receiver (POST /api/webhook) with HMAC-SHA256
- Auto-register/status webhooks for repos
- GiteaClient: create_issue, update_issue, get_comments, webhooks, collaborators
- New DB tables: users, user_tokens, checklists, checklist_items
- CSS: modal, forms, checklists, comments, PR section
78 lines
2.5 KiB
Python
78 lines
2.5 KiB
Python
"""FlowDeck — Gitea OAuth2 client."""
|
|
from __future__ import annotations
|
|
|
|
import logging
|
|
from urllib.parse import urlencode
|
|
|
|
import httpx
|
|
|
|
from app.config import settings
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class GiteaOAuth:
|
|
"""Gitea OAuth2 client for user authentication."""
|
|
|
|
AUTHORIZE_URL = f"{settings.gitea_url}/login/oauth/authorize"
|
|
TOKEN_URL = f"{settings.gitea_url}/login/oauth/access_token"
|
|
USER_URL = f"{settings.gitea_url}/api/v1/user"
|
|
|
|
def __init__(self):
|
|
self.client_id = settings.gitea_oauth_client_id
|
|
self.client_secret = settings.gitea_oauth_client_secret
|
|
self.redirect_uri = settings.oauth_redirect_uri
|
|
|
|
@property
|
|
def enabled(self) -> bool:
|
|
return bool(self.client_id and self.client_secret)
|
|
|
|
def get_authorize_url(self, state: str) -> str:
|
|
params = {
|
|
"client_id": self.client_id,
|
|
"redirect_uri": self.redirect_uri,
|
|
"response_type": "code",
|
|
"state": state,
|
|
}
|
|
return f"{self.AUTHORIZE_URL}?{urlencode(params)}"
|
|
|
|
async def exchange_code(self, code: str) -> dict | None:
|
|
"""Exchange authorization code for access token."""
|
|
try:
|
|
async with httpx.AsyncClient(timeout=15) as client:
|
|
resp = await client.post(
|
|
self.TOKEN_URL,
|
|
data={
|
|
"client_id": self.client_id,
|
|
"client_secret": self.client_secret,
|
|
"code": code,
|
|
"grant_type": "authorization_code",
|
|
"redirect_uri": self.redirect_uri,
|
|
},
|
|
headers={"Accept": "application/json"},
|
|
)
|
|
resp.raise_for_status()
|
|
data = resp.json()
|
|
return data
|
|
except Exception as e:
|
|
logger.error("OAuth token exchange failed: %s", e)
|
|
return None
|
|
|
|
async def get_user(self, access_token: str) -> dict | None:
|
|
"""Get user info from Gitea API."""
|
|
try:
|
|
async with httpx.AsyncClient(timeout=10) as client:
|
|
resp = await client.get(
|
|
self.USER_URL,
|
|
headers={"Authorization": f"token {access_token}"},
|
|
)
|
|
resp.raise_for_status()
|
|
return resp.json()
|
|
except Exception as e:
|
|
logger.error("OAuth user fetch failed: %s", e)
|
|
return None
|
|
|
|
|
|
# Singleton
|
|
gitea_oauth = GiteaOAuth()
|