X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=client%2Fsrc%2Fapp%2Fcore%2Fauth%2Fauth.service.ts;h=0aa276c693b4d866baecd6818f54741487d51991;hb=1e1265b36c09df1465aa2b4866815c957b6a532e;hp=fcc6b9bb6430016812fb1cefa8e750582625238b;hpb=154898b0b7bc1af41fc5a94974e338a3590c90f3;p=github%2FChocobozzz%2FPeerTube.git diff --git a/client/src/app/core/auth/auth.service.ts b/client/src/app/core/auth/auth.service.ts index fcc6b9bb6..0aa276c69 100644 --- a/client/src/app/core/auth/auth.service.ts +++ b/client/src/app/core/auth/auth.service.ts @@ -1,8 +1,10 @@ import { Injectable } from '@angular/core' -import { Headers, Http, Response, URLSearchParams } from '@angular/http' import { Router } from '@angular/router' import { Observable } from 'rxjs/Observable' import { Subject } from 'rxjs/Subject' +import { HttpClient, HttpHeaders, HttpParams } from '@angular/common/http' +import { ReplaySubject } from 'rxjs/ReplaySubject' +import 'rxjs/add/operator/do' import 'rxjs/add/operator/map' import 'rxjs/add/operator/mergeMap' import 'rxjs/add/observable/throw' @@ -11,17 +13,50 @@ import { NotificationsService } from 'angular2-notifications' import { AuthStatus } from './auth-status.model' import { AuthUser } from './auth-user.model' -import { ClientLocal } from '../../../../../shared' +import { + OAuthClientLocal, + UserRole, + UserRefreshToken, + VideoChannel, + User as UserServerModel +} from '../../../../../shared' // Do not use the barrel (dependency loop) import { RestExtractor } from '../../shared/rest' +import { UserLogin } from '../../../../../shared/models/users/user-login.model' +import { UserConstructorHash } from '../../shared/users/user.model' + +interface UserLoginWithUsername extends UserLogin { + access_token: string + refresh_token: string + token_type: string + username: string +} + +interface UserLoginWithUserInformation extends UserLogin { + access_token: string + refresh_token: string + token_type: string + username: string + id: number + role: UserRole + displayNSFW: boolean + email: string + videoQuota: number + account: { + id: number + uuid: string + } + videoChannels: VideoChannel[] +} @Injectable() export class AuthService { - private static BASE_CLIENT_URL = API_URL + '/api/v1/clients/local' + private static BASE_CLIENT_URL = API_URL + '/api/v1/oauth-clients/local' private static BASE_TOKEN_URL = API_URL + '/api/v1/users/token' - private static BASE_USER_INFORMATIONS_URL = API_URL + '/api/v1/users/me' + private static BASE_USER_INFORMATION_URL = API_URL + '/api/v1/users/me' loginChangedSource: Observable + userInformationLoaded = new ReplaySubject(1) private clientId: string private clientSecret: string @@ -29,7 +64,7 @@ export class AuthService { private user: AuthUser = null constructor ( - private http: Http, + private http: HttpClient, private notificationsService: NotificationsService, private restExtractor: RestExtractor, private router: Router @@ -37,32 +72,33 @@ export class AuthService { this.loginChanged = new Subject() this.loginChangedSource = this.loginChanged.asObservable() - // Fetch the client_id/client_secret - // FIXME: save in local storage? - this.http.get(AuthService.BASE_CLIENT_URL) - .map(this.restExtractor.extractDataGet) - .catch(res => this.restExtractor.handleError(res)) - .subscribe( - (result: ClientLocal) => { - this.clientId = result.client_id - this.clientSecret = result.client_secret - console.log('Client credentials loaded.') - }, - - error => { - let errorMessage = `Cannot retrieve OAuth Client credentials: ${error.text}. \n` - errorMessage += 'Ensure you have correctly configured PeerTube (config/ directory), in particular the "webserver" section.' - - // We put a bigger timeout - // This is an important message - this.notificationsService.error('Error', errorMessage, { timeOut: 7000 }) - } - ) - // Return null if there is nothing to load this.user = AuthUser.load() } + loadClientCredentials () { + // Fetch the client_id/client_secret + // FIXME: save in local storage? + this.http.get(AuthService.BASE_CLIENT_URL) + .catch(res => this.restExtractor.handleError(res)) + .subscribe( + res => { + this.clientId = res.client_id + this.clientSecret = res.client_secret + console.log('Client credentials loaded.') + }, + + error => { + let errorMessage = `Cannot retrieve OAuth Client credentials: ${error.text}. \n` + errorMessage += 'Ensure you have correctly configured PeerTube (config/ directory), in particular the "webserver" section.' + + // We put a bigger timeout + // This is an important message + this.notificationsService.error('Error', errorMessage, { timeOut: 7000 }) + } + ) + } + getRefreshToken () { if (this.user === null) return null @@ -70,7 +106,11 @@ export class AuthService { } getRequestHeaderValue () { - return `${this.getTokenType()} ${this.getAccessToken()}` + const accessToken = this.getAccessToken() + + if (accessToken === null) return null + + return `${this.getTokenType()} ${accessToken}` } getAccessToken () { @@ -89,46 +129,27 @@ export class AuthService { return this.user } - isAdmin () { - if (this.user === null) return false - - return this.user.isAdmin() - } - isLoggedIn () { - if (this.getAccessToken()) { - return true - } else { - return false - } + return !!this.getAccessToken() } login (username: string, password: string) { - let body = new URLSearchParams() - body.set('client_id', this.clientId) - body.set('client_secret', this.clientSecret) - body.set('response_type', 'code') - body.set('grant_type', 'password') - body.set('scope', 'upload') - body.set('username', username) - body.set('password', password) - - let headers = new Headers() - headers.append('Content-Type', 'application/x-www-form-urlencoded') - - let options = { - headers: headers - } - - return this.http.post(AuthService.BASE_TOKEN_URL, body.toString(), options) - .map(this.restExtractor.extractDataGet) - .map(res => { - res.username = username - return res - }) - .flatMap(res => this.mergeUserInformations(res)) + // Form url encoded + const body = new HttpParams().set('client_id', this.clientId) + .set('client_secret', this.clientSecret) + .set('response_type', 'code') + .set('grant_type', 'password') + .set('scope', 'upload') + .set('username', username) + .set('password', password) + + const headers = new HttpHeaders().set('Content-Type', 'application/x-www-form-urlencoded') + + return this.http.post(AuthService.BASE_TOKEN_URL, body, { headers }) + .map(res => Object.assign(res, { username })) + .flatMap(res => this.mergeUserInformation(res)) .map(res => this.handleLogin(res)) - .catch((res) => this.restExtractor.handleError(res)) + .catch(res => this.restExtractor.handleError(res)) } logout () { @@ -145,33 +166,26 @@ export class AuthService { const refreshToken = this.getRefreshToken() - let body = new URLSearchParams() - body.set('refresh_token', refreshToken) - body.set('client_id', this.clientId) - body.set('client_secret', this.clientSecret) - body.set('response_type', 'code') - body.set('grant_type', 'refresh_token') + // Form url encoded + const body = new HttpParams().set('refresh_token', refreshToken) + .set('client_id', this.clientId) + .set('client_secret', this.clientSecret) + .set('response_type', 'code') + .set('grant_type', 'refresh_token') - let headers = new Headers() - headers.append('Content-Type', 'application/x-www-form-urlencoded') - - let options = { - headers: headers - } + const headers = new HttpHeaders().set('Content-Type', 'application/x-www-form-urlencoded') - return this.http.post(AuthService.BASE_TOKEN_URL, body.toString(), options) - .map(this.restExtractor.extractDataGet) + return this.http.post(AuthService.BASE_TOKEN_URL, body, { headers }) .map(res => this.handleRefreshToken(res)) - .catch((res: Response) => { + .catch(res => { // The refresh token is invalid? - if (res.status === 400 && res.json() && res.json().error === 'invalid_grant') { + if (res.status === 400 && res.error.error === 'invalid_grant') { console.error('Cannot refresh token -> logout...') this.logout() this.router.navigate(['/login']) return Observable.throw({ - json: () => '', - text: () => 'You need to reconnect.' + error: 'You need to reconnect.' }) } @@ -179,61 +193,73 @@ export class AuthService { }) } - refreshUserInformations () { + refreshUserInformation () { const obj = { - access_token: this.user.getAccessToken() + access_token: this.user.getAccessToken(), + refresh_token: null, + token_type: this.user.getTokenType(), + username: this.user.username } - this.mergeUserInformations (obj) - .subscribe( - res => { - this.user.displayNSFW = res.displayNSFW - this.user.role = res.role + this.mergeUserInformation(obj) + .do(() => this.userInformationLoaded.next(true)) + .subscribe( + res => { + this.user.displayNSFW = res.displayNSFW + this.user.role = res.role + this.user.videoChannels = res.videoChannels + this.user.account = res.account - this.user.save() - } - ) + this.user.save() + } + ) } - private mergeUserInformations (obj: { access_token: string }) { - // Do not call authHttp here to avoid circular dependencies headaches + private mergeUserInformation (obj: UserLoginWithUsername): Observable { + // User is not loaded yet, set manually auth header + const headers = new HttpHeaders().set('Authorization', `${obj.token_type} ${obj.access_token}`) - const headers = new Headers() - headers.set('Authorization', `Bearer ${obj.access_token}`) - - return this.http.get(AuthService.BASE_USER_INFORMATIONS_URL, { headers }) - .map(res => res.json()) - .map(res => { - const newProperties = { - id: res.id, - role: res.role, - displayNSFW: res.displayNSFW - } + return this.http.get(AuthService.BASE_USER_INFORMATION_URL, { headers }) + .map(res => { + const newProperties = { + id: res.id, + role: res.role, + displayNSFW: res.displayNSFW, + email: res.email, + videoQuota: res.videoQuota, + account: res.account, + videoChannels: res.videoChannels + } - return Object.assign(obj, newProperties) - } + return Object.assign(obj, newProperties) + } ) } - private handleLogin (obj: any) { - const id = obj.id - const username = obj.username - const role = obj.role - const email = obj.email - const displayNSFW = obj.displayNSFW + private handleLogin (obj: UserLoginWithUserInformation) { + const hashUser: UserConstructorHash = { + id: obj.id, + username: obj.username, + role: obj.role, + email: obj.email, + displayNSFW: obj.displayNSFW, + videoQuota: obj.videoQuota, + videoChannels: obj.videoChannels, + account: obj.account + } const hashTokens = { accessToken: obj.access_token, tokenType: obj.token_type, refreshToken: obj.refresh_token } - this.user = new AuthUser({ id, username, role, displayNSFW, email }, hashTokens) + this.user = new AuthUser(hashUser, hashTokens) this.user.save() this.setStatus(AuthStatus.LoggedIn) } - private handleRefreshToken (obj: any) { + private handleRefreshToken (obj: UserRefreshToken) { this.user.refreshTokens(obj.access_token, obj.refresh_token) this.user.save() } @@ -241,5 +267,4 @@ export class AuthService { private setStatus (status: AuthStatus) { this.loginChanged.next(status) } - }