Make OAuth client authorizations a Settings panel
Summary: This modernizes and simplifies OAuth client authorizations a bit, moving them to a settings panel similar to the "Sessions" panel.
Test Plan:
- Viewed authorizations.
- Revoked an authorization.
- Created a test authorization.
{F131196}
Reviewers: btrahan
Reviewed By: btrahan
Subscribers: epriestley
Differential Revision: https://secure.phabricator.com/D8561
This commit is contained in:
@@ -17,37 +17,39 @@ extends PhabricatorOAuthServerController {
|
||||
$panels = array();
|
||||
$results = array();
|
||||
|
||||
|
||||
if ($request->isFormPost()) {
|
||||
$action = $request->getStr('action');
|
||||
switch ($action) {
|
||||
case 'testclientauthorization':
|
||||
$user_phid = $current_user->getPHID();
|
||||
$client_phid = $request->getStr('client_phid');
|
||||
$client = id(new PhabricatorOAuthServerClient)
|
||||
->loadOneWhere('phid = %s', $client_phid);
|
||||
if (!$client) {
|
||||
throw new Exception('Failed to load client!');
|
||||
}
|
||||
if ($client->getCreatorPHID() != $user_phid ||
|
||||
$current_user->getPHID() != $user_phid) {
|
||||
throw new Exception(
|
||||
'Only allowed to make test data for yourself '.
|
||||
'for clients you own!'
|
||||
);
|
||||
}
|
||||
// blankclientauthorizations don't get scope
|
||||
$scope = array();
|
||||
$server->setUser($current_user);
|
||||
$server->setClient($client);
|
||||
$authorization = $server->authorizeClient($scope);
|
||||
return id(new AphrontRedirectResponse())
|
||||
->setURI('/oauthserver/clientauthorization/?edited='.
|
||||
$authorization->getPHID());
|
||||
break;
|
||||
default:
|
||||
break;
|
||||
}
|
||||
if (!$request->isFormPost()) {
|
||||
return new Aphront400Response();
|
||||
}
|
||||
|
||||
$action = $request->getStr('action');
|
||||
if ($action !== 'testclientauthorization') {
|
||||
return new Aphront404Response();
|
||||
}
|
||||
|
||||
$user_phid = $current_user->getPHID();
|
||||
$client_phid = $request->getStr('client_phid');
|
||||
$client = id(new PhabricatorOAuthServerClient)
|
||||
->loadOneWhere('phid = %s', $client_phid);
|
||||
if (!$client) {
|
||||
throw new Exception('Failed to load client!');
|
||||
}
|
||||
if ($client->getCreatorPHID() != $user_phid ||
|
||||
$current_user->getPHID() != $user_phid) {
|
||||
throw new Exception(
|
||||
'Only allowed to make test data for yourself '.
|
||||
'for clients you own!'
|
||||
);
|
||||
}
|
||||
|
||||
// blankclientauthorizations don't get scope
|
||||
$scope = array();
|
||||
$server->setUser($current_user);
|
||||
$server->setClient($client);
|
||||
$authorization = $server->authorizeClient($scope);
|
||||
|
||||
$id = $authorization->getID();
|
||||
$panel_uri = '/settings/panel/oauthorizations/?id='.$id;
|
||||
|
||||
return id(new AphrontRedirectResponse())->setURI($panel_uri);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user