/modules/mod_oauth/deps/erlang-oauth/src/oauth.erl

http://github.com/zotonic/zotonic · Erlang · 107 lines · 88 code · 19 blank · 0 comment · 0 complexity · f3307b19b501671e7f7f1eeacb6aac58 MD5 · raw file 

    

  1. -module(oauth).
    2. 

  2. 

  3. -export(
    4. 

  4.   [ get/5
    5. 

  5.   , header/1
    6. 

  6.   , post/5
    7. 

  7.   , signature/5
    8. 

  8.   , signature_base_string/3
    9. 

  9.   , signed_params/6
    10. 

  10.   , token/1
    11. 

  11.   , token_secret/1
    12. 

  12.   , uri/2
    13. 

  13.   , verify/6
    14. 

  14.   ]).
    15. 

  15. 

  16. 

  17. get(URL, ExtraParams, Consumer, Token, TokenSecret) ->
    18. 

  18.   SignedParams = signed_params("GET", URL, ExtraParams, Consumer, Token, TokenSecret),
    19. 

  19.   oauth_http:get(uri(URL, SignedParams)).
    20. 

  20. 

  21. post(URL, ExtraParams, Consumer, Token, TokenSecret) ->
    22. 

  22.   SignedParams = signed_params("POST", URL, ExtraParams, Consumer, Token, TokenSecret),
    23. 

  23.   oauth_http:post(URL, oauth_uri:params_to_string(SignedParams)).
    24. 

  24. 

  25. uri(Base, []) ->
    26. 

  26.   Base;
    27. 

  27. uri(Base, Params) ->
    28. 

  28.   lists:concat([Base, "?", oauth_uri:params_to_string(Params)]).
    29. 

  29. 

  30. header(Params) ->
    31. 

  31.   {"Authorization", "OAuth " ++ oauth_uri:params_to_header_string(Params)}.
    32. 

  32. 

  33. token(Params) ->
    34. 

  34.   proplists:get_value("oauth_token", Params).
    35. 

  35. 

  36. token_secret(Params) ->
    37. 

  37.   proplists:get_value("oauth_token_secret", Params).
    38. 

  38. 

  39. verify(Signature, HttpMethod, URL, Params, Consumer, TokenSecret) ->
    40. 

  40.   case signature_method(Consumer) of
    41. 

  41.     plaintext ->
    42. 

  42.       oauth_plaintext:verify(Signature, consumer_secret(Consumer), TokenSecret);
    43. 

  43.     hmac_sha1 ->
    44. 

  44.       BaseString = signature_base_string(HttpMethod, URL, Params),
    45. 

  45.       oauth_hmac_sha1:verify(Signature, BaseString, consumer_secret(Consumer), TokenSecret);
    46. 

  46.     rsa_sha1 ->
    47. 

  47.       BaseString = signature_base_string(HttpMethod, URL, Params),
    48. 

  48.       oauth_rsa_sha1:verify(Signature, BaseString, consumer_secret(Consumer))
    49. 

  49.   end.
    50. 

  50. 

  51. signed_params(HttpMethod, URL, ExtraParams, Consumer, Token, TokenSecret) ->
    52. 

  52.   Params = token_param(Token, params(Consumer, ExtraParams)),
    53. 

  53.   [{"oauth_signature", signature(HttpMethod, URL, Params, Consumer, TokenSecret)}|Params].
    54. 

  54. 

  55. signature(HttpMethod, URL, Params, Consumer, TokenSecret) ->
    56. 

  56.   case signature_method(Consumer) of
    57. 

  57.     plaintext ->
    58. 

  58.       oauth_plaintext:signature(consumer_secret(Consumer), TokenSecret);
    59. 

  59.     hmac_sha1 ->
    60. 

  60.       BaseString = signature_base_string(HttpMethod, URL, Params),
    61. 

  61.       oauth_hmac_sha1:signature(BaseString, consumer_secret(Consumer), TokenSecret);
    62. 

  62.     rsa_sha1 ->
    63. 

  63.       BaseString = signature_base_string(HttpMethod, URL, Params),
    64. 

  64.       oauth_rsa_sha1:signature(BaseString, consumer_secret(Consumer))
    65. 

  65.   end.
    66. 

  66. 

  67. signature_base_string(HttpMethod, URL, Params) ->
    68. 

  68.   NormalizedURL = oauth_uri:normalize(URL),
    69. 

  69.   NormalizedParams = oauth_uri:params_to_string(lists:sort(Params)),
    70. 

  70.   oauth_uri:calate("&", [HttpMethod, NormalizedURL, NormalizedParams]).
    71. 

  71. 

  72. token_param("", Params) ->
    73. 

  73.   Params;
    74. 

  74. token_param(Token, Params) ->
    75. 

  75.   [{"oauth_token", Token}|Params].
    76. 

  76. 

  77. params(Consumer, Params) ->
    78. 

  78.   Nonce = base64:encode_to_string(crypto:rand_bytes(32)), % cf. ruby-oauth
    79. 

  79.   params(Consumer, oauth_unix:timestamp(), Nonce, Params).
    80. 

  80. 

  81. params(Consumer, Timestamp, Nonce, Params) ->
    82. 

  82.   [ {"oauth_version", "1.0"}
    83. 

  83.   , {"oauth_nonce", Nonce}
    84. 

  84.   , {"oauth_timestamp", integer_to_list(Timestamp)}
    85. 

  85.   , {"oauth_signature_method", signature_method_string(Consumer)}
    86. 

  86.   , {"oauth_consumer_key", consumer_key(Consumer)}
    87. 

  87.   | Params
    88. 

  88.   ].
    89. 

  89. 

  90. signature_method_string(Consumer) ->
    91. 

  91.   case signature_method(Consumer) of
    92. 

  92.     plaintext ->
    93. 

  93.       "PLAINTEXT";
    94. 

  94.     hmac_sha1 ->
    95. 

  95.       "HMAC-SHA1";
    96. 

  96.     rsa_sha1 ->
    97. 

  97.       "RSA-SHA1"
    98. 

  98.   end.
    99. 

  99. 

  100. signature_method(_Consumer={_, _, Method}) ->
    101. 

  101.   Method.
    102. 

  102. 

  103. consumer_secret(_Consumer={_, Secret, _}) ->
    104. 

  104.   Secret.
    105. 

  105. 

  106. consumer_key(_Consumer={Key, _, _}) ->
    107. 

  107.   Key.
    108.