forked from facebookarchive/python-instagram
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathoauth2.py
More file actions
executable file
·212 lines (171 loc) · 8.23 KB
/
oauth2.py
File metadata and controls
executable file
·212 lines (171 loc) · 8.23 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
from .json_import import simplejson
import urllib.request, urllib.parse, urllib.error
from httplib2 import Http
import mimetypes
class OAuth2AuthExchangeError(Exception):
def __init__(self, description):
self.description = description
def __str__(self):
return self.description
class OAuth2API(object):
host = None
base_path = None
authorize_url = None
access_token_url = None
redirect_uri = None
# some providers use "oauth_token"
access_token_field = "access_token"
protocol = "https"
# override with 'Instagram', etc
api_name = "Generic API"
def __init__(self, client_id=None, client_secret=None, client_ips=None, access_token=None, redirect_uri=None):
self.client_id = client_id
self.client_secret = client_secret
self.client_ips = client_ips
self.access_token = access_token
self.redirect_uri = redirect_uri
def get_authorize_url(self, scope=None):
req = OAuth2AuthExchangeRequest(self)
return req.get_authorize_url(scope=scope)
def get_authorize_login_url(self, scope=None):
""" scope should be a tuple or list of requested scope access levels """
req = OAuth2AuthExchangeRequest(self)
return req.get_authorize_login_url(scope=scope)
def exchange_code_for_access_token(self, code):
req = OAuth2AuthExchangeRequest(self)
return req.exchange_for_access_token(code=code)
def exchange_user_id_for_access_token(self, user_id):
req = OAuth2AuthExchangeRequest(self)
return req.exchange_for_access_token(user_id=user_id)
def exchange_xauth_login_for_access_token(self, username, password, scope=None):
""" scope should be a tuple or list of requested scope access levels """
req = OAuth2AuthExchangeRequest(self)
return req.exchange_for_access_token(username=username, password=password,
scope=scope)
class OAuth2AuthExchangeRequest(object):
def __init__(self, api):
self.api = api
def _url_for_authorize(self, scope=None):
client_params = {
"client_id": self.api.client_id,
"response_type": "code",
"redirect_uri": self.api.redirect_uri
}
if scope:
client_params.update(scope=' '.join(scope))
url_params = urllib.parse.urlencode(client_params)
return "%s?%s" % (self.api.authorize_url, url_params)
def _data_for_exchange(self, code=None, username=None, password=None, scope=None, user_id=None):
client_params = {
"client_id": self.api.client_id,
"client_secret": self.api.client_secret,
"redirect_uri": self.api.redirect_uri,
"grant_type": "authorization_code"
}
if code:
client_params.update(code=code)
elif username and password:
client_params.update(username=username,
password=password,
grant_type="password")
if scope:
client_params.update(scope=' '.join(scope))
elif user_id:
client_params.update(user_id=user_id)
return urllib.parse.urlencode(client_params)
def get_authorize_url(self, scope=None):
return self._url_for_authorize(scope=scope)
def get_authorize_login_url(self, scope=None):
http_object = Http(disable_ssl_certificate_validation=True)
url = self._url_for_authorize(scope=scope)
response, content = http_object.request(url)
if response['status'] != '200':
raise OAuth2AuthExchangeError("The server returned a non-200 response for URL %s" % url)
redirected_to = response['content-location']
return redirected_to
def exchange_for_access_token(self, code=None, username=None, password=None, scope=None, user_id=None):
data = self._data_for_exchange(code, username, password, scope=scope, user_id=user_id)
http_object = Http(disable_ssl_certificate_validation=True)
url = self.api.access_token_url
response, content = http_object.request(url, method="POST", body=data)
parsed_content = simplejson.loads(content)
if int(response['status']) != 200:
raise OAuth2AuthExchangeError(parsed_content.get("error_message", ""))
return parsed_content['access_token'], parsed_content['user']
class OAuth2Request(object):
def __init__(self, api):
self.api = api
def url_for_get(self, path, parameters):
return self._full_url_with_params(path, parameters)
def get_request(self, path, **kwargs):
return self.make_request(self.prepare_request("GET", path, kwargs))
def post_request(self, path, **kwargs):
return self.make_request(self.prepare_request("POST", path, kwargs))
def _full_url(self, path, include_secret=False):
return "%s://%s%s%s%s" % (self.api.protocol,
self.api.host,
self.api.base_path,
path,
self._auth_query(include_secret))
def _full_url_with_params(self, path, params, include_secret=False):
return (self._full_url(path, include_secret) + self._full_query_with_params(params))
def _full_query_with_params(self, params):
params = ("&" + urllib.parse.urlencode(params)) if params else ""
return params
def _auth_query(self, include_secret=False):
if self.api.access_token:
return ("?%s=%s" % (self.api.access_token_field, self.api.access_token))
elif self.api.client_id:
base = ("?client_id=%s" % (self.api.client_id))
if include_secret:
base += "&client_secret=%s" % (self.api.client_secret)
return base
def _post_body(self, params):
return urllib.parse.urlencode(params)
def _encode_multipart(params, files):
boundary = "MuL7Ip4rt80uND4rYF0o"
def get_content_type(file_name):
return mimetypes.guess_type(file_name)[0] or "application/octet-stream"
def encode_field(field_name):
return ("--" + boundary,
'Content-Disposition: form-data; name="%s"' % (field_name),
"", str(params[field_name]))
def encode_file(field_name):
file_name, file_handle = files[field_name]
return ("--" + boundary,
'Content-Disposition: form-data; name="%s"; filename="%s"' % (field_name, file_name),
"Content-Type: " + get_content_type(file_name),
"", file_handle.read())
lines = []
for field in params:
lines.extend(encode_field(field))
for field in files:
lines.extend(encode_file(field))
lines.extend(("--%s--" % (boundary), ""))
body = "\r\n".join(lines)
headers = {"Content-Type": "multipart/form-data; boundary=" + boundary,
"Content-Length": str(len(body))}
return body, headers
def prepare_and_make_request(self, method, path, params, include_secret=False):
url, method, body, headers = self.prepare_request(method, path, params, include_secret)
return self.make_request(url, method, body, headers)
def prepare_request(self, method, path, params, include_secret=False):
url = body = None
headers = {}
if not params.get('files'):
if method == "POST":
body = self._post_body(params)
headers = {'Content-type': 'application/x-www-form-urlencoded'}
url = self._full_url(path, include_secret)
else:
url = self._full_url_with_params(path, params, include_secret)
else:
body, headers = self._encode_multipart(params, params['files'])
url = self._full_url(path)
return url, method, body, headers
def make_request(self, url, method="GET", body=None, headers=None):
headers = headers or {}
if not 'User-Agent' in headers:
headers.update({"User-Agent": "%s Python Client" % self.api.api_name})
http_obj = Http(disable_ssl_certificate_validation=True)
return http_obj.request(url, method, body=body, headers=headers)