/* Spacebar: A FOSS re-implementation and extension of the Discord.com backend. Copyright (C) 2023 Spacebar and Spacebar Contributors This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details. You should have received a copy of the GNU Affero General Public License along with this program. If not, see . */ import { ConnectedAccount, ConnectedAccountCommonOAuthTokenResponse, Connection, ConnectionCallbackSchema, ConnectionLoader, DiscordApiErrors, } from "@spacebar/util"; import wretch from "wretch"; import { RedditSettings } from "./RedditSettings"; export interface UserResponse { verified: boolean; coins: number; id: string; is_mod: boolean; has_verified_email: boolean; total_karma: number; name: string; created: number; gold_creddits: number; created_utc: number; } export interface ErrorResponse { message: string; error: number; } export default class RedditConnection extends Connection { public readonly id = "reddit"; public readonly authorizeUrl = "https://www.reddit.com/api/v1/authorize"; public readonly tokenUrl = "https://www.reddit.com/api/v1/access_token"; public readonly userInfoUrl = "https://oauth.reddit.com/api/v1/me"; public readonly scopes = ["identity"]; settings: RedditSettings = new RedditSettings(); init(): void { const settings = ConnectionLoader.getConnectionConfig( this.id, this.settings, ); if (settings.enabled && (!settings.clientId || !settings.clientSecret)) throw new Error(`Invalid settings for connection ${this.id}`); } getAuthorizationUrl(userId: string): string { const state = this.createState(userId); const url = new URL(this.authorizeUrl); url.searchParams.append("client_id", this.settings.clientId as string); url.searchParams.append("redirect_uri", this.getRedirectUri()); url.searchParams.append("response_type", "code"); url.searchParams.append("scope", this.scopes.join(" ")); url.searchParams.append("state", state); return url.toString(); } getTokenUrl(): string { return this.tokenUrl; } async exchangeCode( state: string, code: string, ): Promise { this.validateState(state); const url = this.getTokenUrl(); return wretch(url.toString()) .headers({ Accept: "application/json", Authorization: `Basic ${Buffer.from( `${this.settings.clientId}:${this.settings.clientSecret}`, ).toString("base64")}`, "Content-Type": "application/x-www-form-urlencoded", }) .body( new URLSearchParams({ grant_type: "authorization_code", code: code, redirect_uri: this.getRedirectUri(), }), ) .post() .json() .catch((e) => { console.error(e); throw DiscordApiErrors.GENERAL_ERROR; }); } async getUser(token: string): Promise { const url = new URL(this.userInfoUrl); return wretch(url.toString()) .headers({ Authorization: `Bearer ${token}`, }) .get() .json() .catch((e) => { console.error(e); throw DiscordApiErrors.GENERAL_ERROR; }); } async handleCallback( params: ConnectionCallbackSchema, ): Promise { const { state, code } = params; if (!code) throw new Error("No code provided"); const userId = this.getUserId(state); const tokenData = await this.exchangeCode(state, code); const userInfo = await this.getUser(tokenData.access_token); const exists = await this.hasConnection(userId, userInfo.id.toString()); if (exists) return null; // TODO: connection metadata return await this.createConnection({ user_id: userId, external_id: userInfo.id.toString(), friend_sync: params.friend_sync, name: userInfo.name, verified: userInfo.has_verified_email, type: this.id, }); } }