chore: 初始化 Cloudreve 源码仓库

2026-09-13 11:28:59 +08:00
commit 2a7b03ab1d
489 changed files with 163867 additions and 0 deletions
@@ -0,0 +1,89 @@
+package oauth
+
+import (
+	"encoding/gob"
+
+	"github.com/cloudreve/Cloudreve/v4/ent"
+)
+
+const (
+	authCodeKeyPrefix = "oauth_code_"
+)
+
+type AppRegistration struct {
+	ID               string   `json:"id"`
+	Name             string   `json:"name"`
+	HomepageURL      string   `json:"homepage_url,omitempty"`
+	Icon             string   `json:"icon,omitempty"`
+	Description      string   `json:"description,omitempty"`
+	ConstentedScopes []string `json:"consented_scopes,omitempty"`
+}
+
+func BuildAppRegistration(app *ent.OAuthClient, grant *ent.OAuthGrant) *AppRegistration {
+	res := &AppRegistration{
+		ID:          app.GUID,
+		Name:        app.Name,
+		HomepageURL: app.HomepageURL,
+	}
+
+	if app.Props != nil {
+		res.Description = app.Props.Description
+		res.Icon = app.Props.Icon
+	}
+
+	if grant != nil {
+		res.ConstentedScopes = grant.Scopes
+	}
+
+	return res
+}
+
+type GrantResponse struct {
+	Code  string `json:"code"`
+	State string `json:"state"`
+}
+
+// TokenResponse represents the OAuth token response.
+type TokenResponse struct {
+	AccessToken           string `json:"access_token"`
+	TokenType             string `json:"token_type"`
+	ExpiresIn             int64  `json:"expires_in"`
+	RefreshTokenExpiresIn int64  `json:"refresh_token_expires_in"`
+	RefreshToken          string `json:"refresh_token,omitempty"`
+	Scope                 string `json:"scope"`
+}
+
+// UserInfoResponse represents the OpenID Connect userinfo response.
+// Fields are conditionally included based on granted scopes.
+type UserInfoResponse struct {
+	// Always included (openid scope)
+	Sub string `json:"sub"`
+
+	// Profile scope
+	Name              string `json:"name,omitempty"`
+	PreferredUsername string `json:"preferred_username,omitempty"`
+	Picture           string `json:"picture,omitempty"`
+	UpdatedAt         int64  `json:"updated_at,omitempty"`
+
+	// Email scope
+	Email         string `json:"email,omitempty"`
+	EmailVerified bool   `json:"email_verified,omitempty"`
+}
+
+// AuthorizationCode represents the data stored in KV for an OAuth authorization code.
+// Used for PKCE verification during token exchange.
+type AuthorizationCode struct {
+	ClientID      string   `json:"client_id"`
+	UserID        int      `json:"user_id"`
+	Scopes        []string `json:"scopes"`
+	RedirectURI   string   `json:"redirect_uri"`
+	CodeChallenge string   `json:"code_challenge"`
+}
+
+func authCodeKey(code string) string {
+	return authCodeKeyPrefix + code
+}
+
+func init() {
+	gob.Register(&AuthorizationCode{})
+}