e006f335b2
Add an InitiateOptions struct to the Connector interface so each caller can declare the scopes it needs instead of having them baked into the connector at registration. The HTTP handler reads repeated ?scope= query parameters from /connectors/initiate and forwards them. Also restore GOOGLE_WORKSPACE and LINEAR provider definitions which were silently dropped from the bootstrap config refactor. Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
85 lines
2.6 KiB
Go
85 lines
2.6 KiB
Go
// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
package connector
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
|
|
"go.probo.inc/probo/pkg/gid"
|
|
)
|
|
|
|
type (
|
|
ProtocolType string
|
|
|
|
// InitiateOptions holds per-call options passed by the caller initiating
|
|
// a connector flow. Different callers may need different configurations
|
|
// for the same provider — for OAuth2, the most common case is requesting
|
|
// a different set of scopes (e.g. SCIM bridge vs access review).
|
|
InitiateOptions struct {
|
|
Scopes []string
|
|
}
|
|
|
|
Connector interface {
|
|
Initiate(ctx context.Context, provider string, organizationID gid.GID, opts InitiateOptions, r *http.Request) (string, error)
|
|
Complete(ctx context.Context, r *http.Request) (Connection, *gid.GID, string, error) // returns: connection, organizationID, continueURL, error
|
|
}
|
|
|
|
Connection interface {
|
|
Type() ProtocolType
|
|
Client(ctx context.Context) (*http.Client, error)
|
|
|
|
json.Unmarshaler
|
|
json.Marshaler
|
|
}
|
|
)
|
|
|
|
const (
|
|
ProtocolOAuth2 ProtocolType = "OAUTH2"
|
|
ProtocolAPIKey ProtocolType = "API_KEY"
|
|
)
|
|
|
|
func UnmarshalConnection(protocol string, provider string, data []byte) (Connection, error) {
|
|
switch protocol {
|
|
case string(ProtocolOAuth2):
|
|
switch provider {
|
|
case SlackProvider:
|
|
var slackConn SlackConnection
|
|
if err := json.Unmarshal(data, &slackConn); err != nil {
|
|
return nil, fmt.Errorf("cannot unmarshal slack connection: %w", err)
|
|
}
|
|
return &slackConn, nil
|
|
|
|
default:
|
|
var conn OAuth2Connection
|
|
if err := json.Unmarshal(data, &conn); err != nil {
|
|
return nil, fmt.Errorf("cannot unmarshal oauth2 connection: %w", err)
|
|
}
|
|
return &conn, nil
|
|
}
|
|
|
|
case string(ProtocolAPIKey):
|
|
var conn APIKeyConnection
|
|
if err := json.Unmarshal(data, &conn); err != nil {
|
|
return nil, fmt.Errorf("cannot unmarshal api key connection: %w", err)
|
|
}
|
|
return &conn, nil
|
|
}
|
|
|
|
return nil, fmt.Errorf("unknown connection protocol: %s", protocol)
|
|
}
|