com.github.lbroudoux.elasticsearch.river.drive.rest.DriveOAuthAction.java Source code

Introduction

Here is the source code for com.github.lbroudoux.elasticsearch.river.drive.rest.DriveOAuthAction.java

Source

/*
 * Licensed to Laurent Broudoux (the "Author") under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership. Author licenses this
 * file to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */
package com.github.lbroudoux.elasticsearch.river.drive.rest;

import java.io.IOException;
import java.util.Arrays;

import org.elasticsearch.client.Client;
import org.elasticsearch.common.inject.Inject;
import org.elasticsearch.common.settings.Settings;
import org.elasticsearch.common.xcontent.XContentBuilder;
import org.elasticsearch.common.xcontent.XContentBuilderString;
import org.elasticsearch.rest.BaseRestHandler;
import org.elasticsearch.rest.BytesRestResponse;
import org.elasticsearch.rest.RestChannel;
import org.elasticsearch.rest.RestController;
import org.elasticsearch.rest.RestRequest;
import org.elasticsearch.rest.RestRequest.Method;
import org.elasticsearch.rest.RestStatus;

import com.google.api.client.googleapis.auth.oauth2.GoogleAuthorizationCodeFlow;
import com.google.api.client.googleapis.auth.oauth2.GoogleTokenResponse;
import com.google.api.client.http.HttpTransport;
import com.google.api.client.http.javanet.NetHttpTransport;
import com.google.api.client.json.JsonFactory;
import com.google.api.client.json.jackson2.JacksonFactory;
import com.google.api.services.drive.DriveScopes;

import static org.elasticsearch.common.xcontent.XContentFactory.jsonBuilder;

/**
 * 
 * @author laurent
 */
public class DriveOAuthAction extends BaseRestHandler {

    @Inject
    public DriveOAuthAction(Settings settings, Client client, RestController controller) {
        super(settings, client);

        // Define Drive REST endpoints.
        controller.registerHandler(Method.GET, "/_drive/oauth/{client_id}/{client_secret}", this);
        controller.registerHandler(Method.GET,
                "/_drive/oauth/{client_id}/{client_secret}/{auth_code}/{auth_code_1}", this);
    }

    @Override
    public void handleRequest(RestRequest request, RestChannel channel, Client client) throws Exception {
        if (logger.isDebugEnabled()) {
            logger.debug("REST DriveOAuthAction called");
        }

        String clientId = request.param("client_id");
        String clientSecret = request.param("client_secret");
        String authCode = request.param("auth_code");
        String authCode1 = request.param("auth_code_1");

        if (clientId == null || clientSecret == null) {
            onFailure(request, channel, new IOException("client_id and client_secret can not be null."));
        }

        try {
            XContentBuilder builder = jsonBuilder();
            // We'll use some transport and json factory for sure.
            HttpTransport httpTransport = new NetHttpTransport();
            JsonFactory jsonFactory = new JacksonFactory();

            if (authCode == null) {
                // It's the first call, we've got to build the authorization url.
                GoogleAuthorizationCodeFlow flow = new GoogleAuthorizationCodeFlow.Builder(httpTransport,
                        jsonFactory, clientId, clientSecret, Arrays.asList(DriveScopes.DRIVE_READONLY))
                                .setAccessType("offline").setApprovalPrompt("force").build();

                builder.startObject()
                        .field(new XContentBuilderString("url"),
                                flow.newAuthorizationUrl().setRedirectUri("urn:ietf:wg:oauth:2.0:oob").build())
                        .endObject();

            } else {
                // We've got auth code from Google and should request an access token and a refresh token.
                GoogleAuthorizationCodeFlow flow = new GoogleAuthorizationCodeFlow.Builder(httpTransport,
                        jsonFactory, clientId, clientSecret, Arrays.asList(DriveScopes.DRIVE_READONLY))
                                .setAccessType("offline").setApprovalPrompt("force").build();

                // authCode main contain a "/"; recreate it if splitted.
                if (authCode1 != null) {
                    authCode = authCode + "/" + authCode1;
                }

                GoogleTokenResponse response = flow.newTokenRequest(authCode)
                        .setRedirectUri("urn:ietf:wg:oauth:2.0:oob").execute();

                builder.startObject().field(new XContentBuilderString("accessToken"), response.getAccessToken())
                        .field(new XContentBuilderString("refreshToken"), response.getRefreshToken()).endObject();
            }
            channel.sendResponse(new BytesRestResponse(RestStatus.OK, builder));
        } catch (IOException ioe) {
            onFailure(request, channel, ioe);
        }
    }

    /** */
    protected void onFailure(RestRequest request, RestChannel channel, Exception e) throws Exception {
        try {
            channel.sendResponse(new BytesRestResponse(channel, e));
        } catch (IOException ioe) {
            logger.error("Sending failure response fails !", e);
            channel.sendResponse(new BytesRestResponse(RestStatus.INTERNAL_SERVER_ERROR));
        }
    }
}