249 lines
11 KiB
Swift
249 lines
11 KiB
Swift
//
|
|
// https://mczachurski.dev
|
|
// Copyright © 2023 Marcin Czachurski and the repository contributors.
|
|
// Licensed under the MIT License.
|
|
//
|
|
|
|
import Foundation
|
|
import MastodonKit
|
|
import AuthenticationServices
|
|
|
|
/// Srvice responsible for login user into the Pixelfed account.
|
|
public class AuthorizationService {
|
|
public static let shared = AuthorizationService()
|
|
private init() { }
|
|
|
|
/// Access token verification.
|
|
public func verifyAccount(session: AuthorizationSession, currentAccount: AccountData?, _ result: @escaping (AccountData?) -> Void) async {
|
|
// When we dont have even one account stored in database then we have to ask user to enter server and sign in.
|
|
guard let currentAccount, let accessToken = currentAccount.accessToken else {
|
|
result(nil)
|
|
return
|
|
}
|
|
|
|
// When we have at least one account then we have to verify access token.
|
|
let client = MastodonClient(baseURL: currentAccount.serverUrl).getAuthenticated(token: accessToken)
|
|
|
|
do {
|
|
let account = try await client.verifyCredentials()
|
|
try await self.update(account: currentAccount,
|
|
basedOn: account,
|
|
accessToken: accessToken,
|
|
refreshToken: currentAccount.refreshToken)
|
|
|
|
result(currentAccount)
|
|
} catch {
|
|
do {
|
|
try await self.refreshCredentials(for: currentAccount, presentationContextProvider: session)
|
|
result(currentAccount)
|
|
} catch {
|
|
ErrorService.shared.handle(error, message: "Issues during refreshing credentials.", showToastr: true)
|
|
}
|
|
}
|
|
}
|
|
|
|
/// Sign in to the Pixelfed server.
|
|
public func sign(in serverAddress: String, session: AuthorizationSession, _ result: @escaping (AccountData) -> Void) async throws {
|
|
|
|
guard let baseUrl = URL(string: serverAddress) else {
|
|
throw AuthorisationError.badServerUrl
|
|
}
|
|
|
|
let client = MastodonClient(baseURL: baseUrl)
|
|
|
|
// Verify address.
|
|
_ = try await client.readInstanceInformation()
|
|
|
|
// Create application (we will get clientId and clientSecret).
|
|
let oAuthApp = try await client.createApp(
|
|
named: AppConstants.oauthApplicationName,
|
|
redirectUri: AppConstants.oauthRedirectUri,
|
|
scopes: Scopes(AppConstants.oauthScopes),
|
|
website: baseUrl)
|
|
|
|
// Authorize a user (browser, we will get clientCode).
|
|
let oAuthSwiftCredential = try await client.authenticate(
|
|
app: oAuthApp,
|
|
scope: Scopes(AppConstants.oauthScopes),
|
|
callbackUrlScheme: AppConstants.oauthScheme,
|
|
presentationContextProvider: session)
|
|
|
|
// Get authenticated client.
|
|
let authenticatedClient = client.getAuthenticated(token: oAuthSwiftCredential.oauthToken)
|
|
|
|
// Get account information from server.
|
|
let account = try await authenticatedClient.verifyCredentials()
|
|
|
|
// Get/create account object in database.
|
|
let accountData = self.getAccountData(account: account)
|
|
|
|
accountData.id = account.id
|
|
accountData.username = account.username
|
|
accountData.acct = account.acct
|
|
accountData.displayName = account.displayNameWithoutEmojis
|
|
accountData.note = account.note
|
|
accountData.url = account.url
|
|
accountData.avatar = account.avatar
|
|
accountData.header = account.header
|
|
accountData.locked = account.locked
|
|
accountData.createdAt = account.createdAt
|
|
accountData.followersCount = Int32(account.followersCount)
|
|
accountData.followingCount = Int32(account.followingCount)
|
|
accountData.statusesCount = Int32(account.statusesCount)
|
|
|
|
// Store data about Server and OAuth client.
|
|
accountData.serverUrl = baseUrl
|
|
accountData.clientId = oAuthApp.clientId
|
|
accountData.clientSecret = oAuthApp.clientSecret
|
|
accountData.clientVapidKey = oAuthApp.vapidKey ?? String.empty()
|
|
|
|
// Store data about oauth tokens.
|
|
accountData.accessToken = oAuthSwiftCredential.oauthToken
|
|
accountData.refreshToken = oAuthSwiftCredential.oauthRefreshToken
|
|
|
|
// Download avatar image.
|
|
if let avatarUrl = account.avatar {
|
|
do {
|
|
let avatarData = try await RemoteFileService.shared.fetchData(url: avatarUrl)
|
|
accountData.avatarData = avatarData
|
|
}
|
|
catch {
|
|
ErrorService.shared.handle(error, message: "Avatar has not been downloaded.")
|
|
}
|
|
}
|
|
|
|
// Set newly created account as current.
|
|
let defaultSettings = ApplicationSettingsHandler.shared.getDefaultSettings()
|
|
defaultSettings.currentAccount = accountData.id
|
|
|
|
// Save account data in database and in application state.
|
|
CoreDataHandler.shared.save()
|
|
|
|
// Return account data.
|
|
result(accountData)
|
|
}
|
|
|
|
public func refreshAccessTokens() async {
|
|
let accounts = AccountDataHandler.shared.getAccountsData()
|
|
|
|
await withTaskGroup(of: Void.self) { group in
|
|
for account in accounts {
|
|
group.addTask {
|
|
do {
|
|
try await self.refreshAccessToken(accountData: account)
|
|
|
|
#if DEBUG
|
|
ToastrService.shared.showSuccess("New access tokens has been retrieved", imageSystemName: "key.fill")
|
|
#endif
|
|
} catch {
|
|
#if DEBUG
|
|
ErrorService.shared.handle(error, message: "Error during refreshing access token for account '\(account.acct)'.", showToastr: true)
|
|
#else
|
|
ErrorService.shared.handle(error, message: "Error during refreshing access token for account '\(account.acct)'.")
|
|
#endif
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
private func refreshAccessToken(accountData: AccountData) async throws {
|
|
let client = MastodonClient(baseURL: accountData.serverUrl)
|
|
|
|
guard let refreshToken = accountData.refreshToken else {
|
|
return
|
|
}
|
|
|
|
let oAuthSwiftCredential = try await client.refreshToken(clientId: accountData.clientId,
|
|
clientSecret: accountData.clientSecret,
|
|
refreshToken: refreshToken)
|
|
|
|
// Get authenticated client.
|
|
let authenticatedClient = client.getAuthenticated(token: oAuthSwiftCredential.oauthToken)
|
|
|
|
// Get account information from server.
|
|
let account = try await authenticatedClient.verifyCredentials()
|
|
try await self.update(account: accountData,
|
|
basedOn: account,
|
|
accessToken: oAuthSwiftCredential.oauthToken,
|
|
refreshToken: oAuthSwiftCredential.oauthRefreshToken)
|
|
}
|
|
|
|
private func refreshCredentials(for accountData: AccountData,
|
|
presentationContextProvider: ASWebAuthenticationPresentationContextProviding
|
|
) async throws {
|
|
|
|
let client = MastodonClient(baseURL: accountData.serverUrl)
|
|
|
|
// Create application (we will get clientId and clientSecret).
|
|
let oAuthApp = Application(clientId: accountData.clientId,
|
|
clientSecret: accountData.clientSecret,
|
|
redirectUri: AppConstants.oauthRedirectUri)
|
|
|
|
// Authorize a user (browser, we will get clientCode).
|
|
let oAuthSwiftCredential = try await client.authenticate(app: oAuthApp,
|
|
scope: Scopes(AppConstants.oauthScopes),
|
|
callbackUrlScheme: AppConstants.oauthScheme,
|
|
presentationContextProvider: presentationContextProvider)
|
|
|
|
// Get authenticated client.
|
|
let authenticatedClient = client.getAuthenticated(token: oAuthSwiftCredential.oauthToken)
|
|
|
|
// Get account information from server.
|
|
let account = try await authenticatedClient.verifyCredentials()
|
|
try await self.update(account: accountData,
|
|
basedOn: account,
|
|
accessToken: oAuthSwiftCredential.oauthToken,
|
|
refreshToken: oAuthSwiftCredential.oauthRefreshToken)
|
|
}
|
|
|
|
private func update(account dbAccount: AccountData,
|
|
basedOn account: Account,
|
|
accessToken: String,
|
|
refreshToken: String?
|
|
) async throws {
|
|
dbAccount.username = account.username
|
|
dbAccount.acct = account.acct
|
|
dbAccount.displayName = account.displayNameWithoutEmojis
|
|
dbAccount.note = account.note
|
|
dbAccount.url = account.url
|
|
dbAccount.avatar = account.avatar
|
|
dbAccount.header = account.header
|
|
dbAccount.locked = account.locked
|
|
dbAccount.createdAt = account.createdAt
|
|
dbAccount.followersCount = Int32(account.followersCount)
|
|
dbAccount.followingCount = Int32(account.followingCount)
|
|
dbAccount.statusesCount = Int32(account.statusesCount)
|
|
|
|
// Store data about new oauth tokens.
|
|
dbAccount.accessToken = accessToken
|
|
dbAccount.refreshToken = refreshToken
|
|
|
|
// Download avatar image.
|
|
if let avatarUrl = account.avatar {
|
|
do {
|
|
let avatarData = try await RemoteFileService.shared.fetchData(url: avatarUrl)
|
|
dbAccount.avatarData = avatarData
|
|
}
|
|
catch {
|
|
ErrorService.shared.handle(error, message: "Avatar has not been downloaded.")
|
|
}
|
|
}
|
|
|
|
// We have to be sure that account id is saved as default account.
|
|
let defaultSettings = ApplicationSettingsHandler.shared.getDefaultSettings()
|
|
defaultSettings.currentAccount = dbAccount.id
|
|
|
|
// Save account data in database and in application state.
|
|
CoreDataHandler.shared.save()
|
|
}
|
|
|
|
private func getAccountData(account: Account) -> AccountData {
|
|
if let accountFromDb = AccountDataHandler.shared.getAccountData(accountId: account.id) {
|
|
return accountFromDb
|
|
}
|
|
|
|
return AccountDataHandler.shared.createAccountDataEntity()
|
|
}
|
|
}
|