summaryrefslogtreecommitdiffstats
path: root/src/oauth/qoauthhttpserverreplyhandler.cpp
diff options
context:
space:
mode:
authorJesus Fernandez <jesus.fernandez@theqtcompany.com>2016-08-15 13:13:27 +0200
committerTimur Pocheptsov <timur.pocheptsov@theqtcompany.com>2016-08-19 17:48:39 +0000
commita6dc1c01da723a93e1c174a6950eb4bab8cab3fc (patch)
tree12052b48f5f073035869e7ccda42c8a71fd6eff9 /src/oauth/qoauthhttpserverreplyhandler.cpp
parent066622370b294f4914ad2e059c7f1acaa3820f19 (diff)
OAuth support
New library to support OAuth1 and OAuth2 standard in Qt. OAuth provides a method for clients to access server resources on behalf of a resource owner (such as a different client or an end-user). It also provides a process for end-users to authorize third-party access to their server resources without sharing their credentials (typically, a username and password pair), using user-agent redirections. [ChangeLog][OAuth] Added OAuth support Change-Id: I3971456f93bf6ddd7fd46f555202bab2eb777c15 Reviewed-by: Edward Welbourne <edward.welbourne@qt.io>
Diffstat (limited to 'src/oauth/qoauthhttpserverreplyhandler.cpp')
-rw-r--r--src/oauth/qoauthhttpserverreplyhandler.cpp329
1 files changed, 329 insertions, 0 deletions
diff --git a/src/oauth/qoauthhttpserverreplyhandler.cpp b/src/oauth/qoauthhttpserverreplyhandler.cpp
new file mode 100644
index 0000000..68fec3e
--- /dev/null
+++ b/src/oauth/qoauthhttpserverreplyhandler.cpp
@@ -0,0 +1,329 @@
+/****************************************************************************
+**
+** Copyright (C) 2016 The Qt Company Ltd.
+** Contact: https://www.qt.io/licensing/
+**
+** This file is part of the QtNetwork module of the Qt Toolkit.
+**
+** $QT_BEGIN_LICENSE:LGPL$
+** Commercial License Usage
+** Licensees holding valid commercial Qt licenses may use this file in
+** accordance with the commercial license agreement provided with the
+** Software or, alternatively, in accordance with the terms contained in
+** a written agreement between you and The Qt Company. For licensing terms
+** and conditions see https://www.qt.io/terms-conditions. For further
+** information use the contact form at https://www.qt.io/contact-us.
+**
+** GNU Lesser General Public License Usage
+** Alternatively, this file may be used under the terms of the GNU Lesser
+** General Public License version 3 as published by the Free Software
+** Foundation and appearing in the file LICENSE.LGPL3 included in the
+** packaging of this file. Please review the following information to
+** ensure the GNU Lesser General Public License version 3 requirements
+** will be met: https://www.gnu.org/licenses/lgpl-3.0.html.
+**
+** GNU General Public License Usage
+** Alternatively, this file may be used under the terms of the GNU
+** General Public License version 2.0 or (at your option) the GNU General
+** Public license version 3 or any later version approved by the KDE Free
+** Qt Foundation. The licenses are as published by the Free Software
+** Foundation and appearing in the file LICENSE.GPL2 and LICENSE.GPL3
+** included in the packaging of this file. Please review the following
+** information to ensure the GNU General Public License requirements will
+** be met: https://www.gnu.org/licenses/gpl-2.0.html and
+** https://www.gnu.org/licenses/gpl-3.0.html.
+**
+** $QT_END_LICENSE$
+**
+****************************************************************************/
+
+#ifndef QT_NO_HTTP
+
+#include <qabstractoauth.h>
+#include <qoauthhttpserverreplyhandler.h>
+
+#include <private/qoauthhttpserverreplyhandler_p.h>
+
+#include <QtCore/qurl.h>
+#include <QtCore/qurlquery.h>
+#include <QtCore/qcoreapplication.h>
+
+#include <QtNetwork/qtcpsocket.h>
+#include <QtNetwork/qnetworkreply.h>
+
+#include <cctype>
+#include <cstring>
+#include <functional>
+
+QT_BEGIN_NAMESPACE
+
+QOAuthHttpServerReplyHandlerPrivate::QOAuthHttpServerReplyHandlerPrivate(
+ QOAuthHttpServerReplyHandler *p) :
+ text(QObject::tr("Callback received. Feel free to close this page.")), q_ptr(p)
+{
+ QObject::connect(&httpServer, &QTcpServer::newConnection,
+ std::bind(&QOAuthHttpServerReplyHandlerPrivate::_q_clientConnected, this));
+}
+
+QOAuthHttpServerReplyHandlerPrivate::~QOAuthHttpServerReplyHandlerPrivate()
+{
+ if (httpServer.isListening())
+ httpServer.close();
+}
+
+void QOAuthHttpServerReplyHandlerPrivate::_q_clientConnected()
+{
+ QTcpSocket *socket = httpServer.nextPendingConnection();
+
+ QObject::connect(socket, &QTcpSocket::disconnected, socket, &QTcpSocket::deleteLater);
+ QObject::connect(socket, &QTcpSocket::readyRead,
+ std::bind(&QOAuthHttpServerReplyHandlerPrivate::_q_readData, this, socket));
+}
+
+void QOAuthHttpServerReplyHandlerPrivate::_q_readData(QTcpSocket *socket)
+{
+ if (!clients.contains(socket))
+ clients[socket].port = httpServer.serverPort();
+
+ QHttpRequest *request = &clients[socket];
+ bool error;
+
+ if (Q_LIKELY(request->state == QHttpRequest::State::ReadingMethod))
+ if (Q_UNLIKELY(error = !request->readMethod(socket)))
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::_q_readData: Invalid Method");
+
+ if (Q_LIKELY(!error && request->state == QHttpRequest::State::ReadingUrl))
+ if (Q_UNLIKELY(error = !request->readUrl(socket)))
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::_q_readData: Invalid URL");
+
+ if (Q_LIKELY(!error && request->state == QHttpRequest::State::ReadingStatus))
+ if (Q_UNLIKELY(error = !request->readStatus(socket)))
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::_q_readData: Invalid Status");
+
+ if (Q_LIKELY(!error && request->state == QHttpRequest::State::ReadingHeader))
+ if (Q_UNLIKELY(error = !request->readHeader(socket)))
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::_q_readData: Invalid Header");
+
+ if (error) {
+ socket->disconnectFromHost();
+ clients.remove(socket);
+ } else if (!request->url.isEmpty()) {
+ Q_ASSERT(request->state != QHttpRequest::State::ReadingUrl);
+ _q_answerClient(socket, request->url);
+ clients.remove(socket);
+ }
+}
+
+void QOAuthHttpServerReplyHandlerPrivate::_q_answerClient(QTcpSocket *socket, const QUrl &url)
+{
+ Q_Q(QOAuthHttpServerReplyHandler);
+ if (!url.path().startsWith(QStringLiteral("/cb"))) {
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::_q_answerClient: Invalid request: %s",
+ qPrintable(url.toString()));
+ } else {
+ QVariantMap receivedData;
+ const QUrlQuery query(url.query());
+ const auto items = query.queryItems();
+ for (auto it = items.begin(), end = items.end(); it != end; ++it)
+ receivedData.insert(it->first, it->second);
+ Q_EMIT q->callbackReceived(receivedData);
+
+ const QString html = QLatin1String("<html><head><title>") +
+ qApp->applicationName() +
+ QLatin1String("</title></head><body>") +
+ text +
+ QLatin1String("</body></html>");
+
+ const QByteArray htmlSize = QString::number(html.size()).toUtf8();
+ const QByteArray replyMessage = QByteArrayLiteral("HTTP/1.0 200 OK \r\n"
+ "Content-Type: text/html; "
+ "charset=\"utf-8\"\r\n"
+ "Content-Length: ") + htmlSize +
+ QByteArrayLiteral("\r\n\r\n") +
+ html.toUtf8();
+
+ socket->write(replyMessage);
+ }
+ socket->disconnectFromHost();
+}
+
+bool QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readMethod(QTcpSocket *socket)
+{
+ bool finished = false;
+ while (socket->bytesAvailable() && !finished) {
+ const auto c = socket->read(1).at(0);
+ if (std::isupper(c) && fragment.size() < 6)
+ fragment += c;
+ else
+ finished = true;
+ }
+ if (finished) {
+ if (fragment == "HEAD")
+ method = Method::Head;
+ else if (fragment == "GET")
+ method = Method::Get;
+ else if (fragment == "PUT")
+ method = Method::Put;
+ else if (fragment == "POST")
+ method = Method::Post;
+ else if (fragment == "DELETE")
+ method = Method::Delete;
+ else
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readMethod: Invalid "
+ "operation %s", fragment.data());
+
+ state = State::ReadingUrl;
+ fragment.clear();
+
+ return method != Method::Unknown;
+ }
+ return true;
+}
+
+bool QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readUrl(QTcpSocket *socket)
+{
+ bool finished = false;
+ while (socket->bytesAvailable() && !finished) {
+ const auto c = socket->read(1).at(0);
+ if (std::isspace(c))
+ finished = true;
+ else
+ fragment += c;
+ }
+ if (finished) {
+ if (!fragment.startsWith("/")) {
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readUrl: Invalid "
+ "URL path %s", fragment.constData());
+ return false;
+ }
+ url.setUrl(QStringLiteral("http://localhost:") + QString::number(port) +
+ QString::fromUtf8(fragment));
+ state = State::ReadingStatus;
+ if (!url.isValid()) {
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readUrl: Invalid "
+ "URL %s", fragment.constData());
+ return false;
+ }
+ fragment.clear();
+ return true;
+ }
+ return true;
+}
+
+bool QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readStatus(QTcpSocket *socket)
+{
+ bool finished = false;
+ while (socket->bytesAvailable() && !finished) {
+ fragment += socket->read(1);
+ if (fragment.endsWith("\r\n")) {
+ finished = true;
+ fragment.resize(fragment.size() - 2);
+ }
+ }
+ if (finished) {
+ if (!std::isdigit(fragment.at(fragment.size() - 3)) ||
+ !std::isdigit(fragment.at(fragment.size() - 1))) {
+ qWarning("QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readStatus: Invalid "
+ "version");
+ return false;
+ }
+ version = qMakePair(fragment.at(fragment.size() - 3) - '0',
+ fragment.at(fragment.size() - 1) - '0');
+ state = State::ReadingHeader;
+ fragment.clear();
+ }
+ return true;
+}
+
+bool QOAuthHttpServerReplyHandlerPrivate::QHttpRequest::readHeader(QTcpSocket *socket)
+{
+ while (socket->bytesAvailable()) {
+ fragment += socket->read(1);
+ if (fragment.endsWith("\r\n")) {
+ if (fragment == "\r\n") {
+ state = State::ReadingBody;
+ fragment.clear();
+ return true;
+ } else {
+ fragment.chop(2);
+ const int index = fragment.indexOf(':');
+ if (index == -1)
+ return false;
+
+ const QByteArray key = fragment.mid(0, index).trimmed();
+ const QByteArray value = fragment.mid(index + 1).trimmed();
+ headers.insert(key, value);
+ fragment.clear();
+ }
+ }
+ }
+ return false;
+}
+
+QOAuthHttpServerReplyHandler::QOAuthHttpServerReplyHandler(QObject *parent) :
+ QOAuthHttpServerReplyHandler(QHostAddress::Any, 0, parent)
+{}
+
+QOAuthHttpServerReplyHandler::QOAuthHttpServerReplyHandler(quint16 port, QObject *parent) :
+ QOAuthHttpServerReplyHandler(QHostAddress::Any, port, parent)
+{}
+
+QOAuthHttpServerReplyHandler::QOAuthHttpServerReplyHandler(const QHostAddress &address,
+ quint16 port, QObject *parent) :
+ QOAuthOobReplyHandler(parent),
+ d_ptr(new QOAuthHttpServerReplyHandlerPrivate(this))
+{
+ listen(address, port);
+}
+
+QOAuthHttpServerReplyHandler::~QOAuthHttpServerReplyHandler()
+{}
+
+QString QOAuthHttpServerReplyHandler::callback() const
+{
+ Q_D(const QOAuthHttpServerReplyHandler);
+
+ Q_ASSERT(d->httpServer.isListening());
+ const QUrl url(QString::fromLatin1("http://localhost:%1/cb").arg(d->httpServer.serverPort()));
+ return url.toString(QUrl::EncodeDelimiters);
+}
+
+QString QOAuthHttpServerReplyHandler::callbackText() const
+{
+ Q_D(const QOAuthHttpServerReplyHandler);
+ return d->text;
+}
+
+void QOAuthHttpServerReplyHandler::setCallbackText(const QString &text)
+{
+ Q_D(QOAuthHttpServerReplyHandler);
+ d->text = text;
+}
+
+quint16 QOAuthHttpServerReplyHandler::port() const
+{
+ Q_D(const QOAuthHttpServerReplyHandler);
+ return d->httpServer.serverPort();
+}
+
+bool QOAuthHttpServerReplyHandler::listen(const QHostAddress &address, quint16 port)
+{
+ Q_D(QOAuthHttpServerReplyHandler);
+ return d->httpServer.listen(address, port);
+}
+
+void QOAuthHttpServerReplyHandler::close()
+{
+ Q_D(QOAuthHttpServerReplyHandler);
+ return d->httpServer.close();
+}
+
+bool QOAuthHttpServerReplyHandler::isListening() const
+{
+ Q_D(const QOAuthHttpServerReplyHandler);
+ return d->httpServer.isListening();
+}
+
+QT_END_NAMESPACE
+
+#endif // QT_NO_HTTP
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-16 20:02:09 +0000