/mordor/http/oauth.h

#ifndef __MORDOR_HTTP_OAUTH_H__
#define __MORDOR_HTTP_OAUTH_H__
// Copyright (c) 2009 - Mozy, Inc.

#include <boost/function.hpp>

#include "broker.h"

namespace Mordor {
namespace HTTP {
namespace OAuth {

std::pair<std::string, std::string>
getTemporaryCredentials(RequestBroker::ptr requestBroker, const URI &uri,
    const std::string &method, const std::string &signatureMethod,
    const std::pair<std::string, std::string> &clientCredentials,
    const URI &callbackUri = URI());

std::pair<std::string, std::string>
getTokenCredentials(RequestBroker::ptr requestBroker, const URI &uri,
    const std::string &method, const std::string &signatureMethod,
    const std::pair<std::string, std::string> &clientCredentials,
    const std::pair<std::string, std::string> &temporaryCredentials,
    const std::string &verifier);

void authorize(Request &nextRequest,
    const std::string &signatureMethod,
    const std::pair<std::string, std::string> &clientCredentials,
    const std::pair<std::string, std::string> &tokenCredentials,
    const std::string &realm = std::string(),
    const std::string &scheme = std::string());

// Helpers for setting up an OAuth request
template <class T>
void nonceAndTimestamp(T &oauthParameters);

// oauthParameters should *not* be empty; instead if oauth params are in the
// POST body or in the querystring, those fields should be empty instead
template <class T>
std::string generateSignature(const URI &uri, const std::string &method,
    const std::string &clientSecret, const std::string &tokenSecret,
    const T &oauthParameters,
    const URI::QueryString &postParameters = URI::QueryString());

template <class T>
void sign(const URI &uri, const std::string &method,
    const std::string &signatureMethod, const std::string &clientSecret,
    const std::string &tokenSecret, T &oauthParameters,
    const URI::QueryString &postParameters = URI::QueryString());

template <class T>
bool validate(const URI &uri, const std::string &method,
    const std::string &clientSecret, const std::string &tokenSecret,
    const T &oauthParameters,
    const URI::QueryString &postParameters = URI::QueryString());

std::pair<std::string, std::string>
extractCredentials(boost::shared_ptr<ClientRequest> request);

class RequestBroker : public RequestBrokerFilter
{
public:
    RequestBroker(HTTP::RequestBroker::ptr parent,
        boost::function<bool (const URI &,
            boost::shared_ptr<ClientRequest> /* priorRequest = ClientRequest::ptr() */,
            std::string & /* signatureMethod */,
            std::pair<std::string, std::string> & /* clientCredentials */,
            std::pair<std::string, std::string> & /* tokenCredentials */,
            std::string & /* realm */,
            size_t /* attempts */)> getCredentialsDg)
        : RequestBrokerFilter(parent),
          m_getCredentialsDg(getCredentialsDg)
    {}

    boost::shared_ptr<ClientRequest> request(Request &requestHeaders,
        bool forceNewConnection = false,
        boost::function<void (boost::shared_ptr<ClientRequest>)> bodyDg = NULL);

private:
    boost::function<bool (const URI &, boost::shared_ptr<ClientRequest>, std::string &,
        std::pair<std::string, std::string> &,
        std::pair<std::string, std::string> &,
        std::string &, size_t)> m_getCredentialsDg;
};

}}}

#endif