osukey/osu.Game/Online/MisskeyAPI/Auth.cs

// Copyright (c) ppy Pty Ltd <contact@ppy.sh>. Licensed under the MIT Licence.
// See the LICENCE file in the repository root for full licence text.

#nullable disable

using System;
using System.Diagnostics;
using System.Net.Http;
using Newtonsoft.Json;
using osu.Framework.Bindables;
using osu.Framework.IO.Network;

namespace osu.Game.Online.MisskeyAPI
{
    public class Auth
    {
        // private readonly string clientId;
        private readonly string endpoint;

        public readonly Bindable<AuthToken> Token = new Bindable<AuthToken>();

        public string TokenString
        {
            get => Token.Value?.ToString();
            set => Token.Value = string.IsNullOrEmpty(value) ? null : AuthToken.Parse(value);
        }

        internal Auth(
            // string clientId,
            string endpoint)
        {
            // Debug.Assert(clientId != null);
            Debug.Assert(endpoint != null);

            // this.clientId = clientId;
            this.endpoint = endpoint;
        }

        internal void AuthenticateWithLogin(string username, string password)
        {
            if (string.IsNullOrEmpty(username)) throw new ArgumentException("Missing username.");
            if (string.IsNullOrEmpty(password)) throw new ArgumentException("Missing password.");

            var accessTokenRequest = new AccessTokenRequestPassword(username, password)
            {
                Url = $@"{endpoint}/api/signin",
                Method = HttpMethod.Post,
                // ClientId = clientId
            };

            using (accessTokenRequest)
            {
                try
                {
                    accessTokenRequest.Perform();
                }
                catch (Exception ex)
                {
                    Token.Value = null;

                    var throwableException = ex;

                    try
                    {
                        // attempt to decode a displayable error string.
                        var error = JsonConvert.DeserializeObject<OAuthError>(accessTokenRequest.GetResponseString() ?? string.Empty);
                        if (error != null)
                            throwableException = new APIException(error.UserDisplayableError, ex);
                    }
                    catch
                    {
                    }

                    throw throwableException;
                }

                Token.Value = accessTokenRequest.ResponseObject;
            }
        }

        // internal bool AuthenticateWithRefresh(string refresh)
        // {
        //     try
        //     {
        //         var refreshRequest = new AccessTokenRequestRefresh(refresh)
        //         {
        //             Url = $@"{endpoint}/api/signin",
        //             Method = HttpMethod.Post,
        //             // ClientId = clientId
        //         };
        //
        //         using (refreshRequest)
        //         {
        //             refreshRequest.Perform();
        //
        //             Token.Value = refreshRequest.ResponseObject;
        //             return true;
        //         }
        //     }
        //     catch
        //     {
        //         //todo: potentially only kill the refresh token on certain exception types.
        //         Token.Value = null;
        //         return false;
        //     }
        // }

        private static readonly object access_token_retrieval_lock = new object();

        /// <summary>
        /// Should be run before any API request to make sure we have a valid key.
        /// 有効なキーがあることを確認するために、API リクエストの前に実行する必要があります。
        /// </summary>
        private bool ensureAccessToken()
        {
            // if we already have a valid access token, let's use it.
            // 有効なアクセス トークンが既にある場合は、それを使用しましょう。
            if (accessTokenValid) return true;

            // we want to ensure only a single authentication update is happening at once.
            // 一度に 1 つの認証更新のみが行われるようにする必要があります。
            lock (access_token_retrieval_lock)
            {
                // re-check if valid, in case another request completed and revalidated our access.
                // 別のリクエストが完了し、アクセスが再検証された場合に備えて、有効かどうかを再確認してください。
                if (accessTokenValid) return true;

                // if not, let's try using our refresh token to request a new access token.
                // そうでない場合は、更新トークンを使用して新しいアクセス トークンをリクエストしてみましょう。
                // if (!string.IsNullOrEmpty(Token.Value?.RefreshToken))
                //     // ReSharper disable once PossibleNullReferenceException
                //     AuthenticateWithRefresh(Token.Value.RefreshToken);

                return accessTokenValid;
            }
        }

        private bool accessTokenValid => Token.Value?.IsValid ?? false;

        internal bool HasValidAccessToken => RequestAccessToken() != null;

        internal string RequestAccessToken()
        {
            if (!ensureAccessToken()) return null;

            return Token.Value.AccessToken;
        }

        internal void Clear()
        {
            Token.Value = null;
        }

        private class AccessTokenRequestRefresh : AccessTokenRequest
        {
            internal readonly string RefreshToken;

            internal AccessTokenRequestRefresh(string refreshToken)
            {
                RefreshToken = refreshToken;
                GrantType = @"refresh_token";
            }

            protected override void PrePerform()
            {
                AddParameter("refresh_token", RefreshToken);

                base.PrePerform();
            }
        }

        private class AccessTokenRequestPassword : AccessTokenRequest
        {
            internal readonly string Username;
            internal readonly string Password;

            internal AccessTokenRequestPassword(string username, string password)
            {
                Username = username;
                Password = password;
                GrantType = @"password";
            }

            protected override void PrePerform()
            {
                object body = new
                {
                    username = Username,
                    password = Password
                };

                AddRaw(JsonConvert.SerializeObject(body));

                base.PrePerform();
            }
        }

        private class AccessTokenRequest : JsonWebRequest<AuthToken>
        {
            protected string GrantType;

            // internal string ClientId;

            protected override void PrePerform()
            {
                // AddParameter("grant_type", GrantType);
                // AddParameter("client_id", ClientId);
                // AddParameter("scope", "*");

                base.PrePerform();
            }
        }

        private class OAuthError
        {
            public string UserDisplayableError => !string.IsNullOrEmpty(Hint) ? Hint : ErrorIdentifier;

            [JsonProperty("error")]
            public string ErrorIdentifier { get; set; }

            [JsonProperty("hint")]
            public string Hint { get; set; }

            [JsonProperty("message")]
            public string Message { get; set; }
        }
    }
}