mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-11-10 21:28:04 +02:00
e7fedf66f4
Some oauth services require the redirect uri be configured on their service, and the reject the redirect_uri param if we send it. Chrome works fine in this scenario, but we have been requiring the redirect_uri be provided. This addresses that requirement by using our own default redirect url, which would be the url used to configure the oauth service. Differential Revision: https://phabricator.services.mozilla.com/D6945 --HG-- extra : moz-landing-system : lando
53 lines
1.8 KiB
JavaScript
53 lines
1.8 KiB
JavaScript
/* -*- Mode: indent-tabs-mode: nil; js-indent-level: 2 -*- */
|
|
/* vim: set sts=2 sw=2 et tw=80: */
|
|
"use strict";
|
|
|
|
var {Constructor: CC} = Components;
|
|
|
|
ChromeUtils.defineModuleGetter(this, "CommonUtils",
|
|
"resource://services-common/utils.js");
|
|
XPCOMUtils.defineLazyPreferenceGetter(this, "redirectDomain",
|
|
"extensions.webextensions.identity.redirectDomain");
|
|
|
|
let CryptoHash = CC("@mozilla.org/security/hash;1", "nsICryptoHash", "initWithString");
|
|
|
|
XPCOMUtils.defineLazyGlobalGetters(this, ["URL", "TextEncoder"]);
|
|
|
|
const computeHash = str => {
|
|
let byteArr = new TextEncoder().encode(str);
|
|
let hash = new CryptoHash("sha1");
|
|
hash.update(byteArr, byteArr.length);
|
|
return CommonUtils.bytesAsHex(hash.finish(false));
|
|
};
|
|
|
|
this.identity = class extends ExtensionAPI {
|
|
getAPI(context) {
|
|
let {extension} = context;
|
|
return {
|
|
identity: {
|
|
getRedirectURL: function(path = "") {
|
|
let hash = computeHash(extension.id);
|
|
let url = new URL(`https://${hash}.${redirectDomain}/`);
|
|
url.pathname = path;
|
|
return url.href;
|
|
},
|
|
launchWebAuthFlow: function(details) {
|
|
// Validate the url and retreive redirect_uri if it was provided.
|
|
let url, redirectURI;
|
|
try {
|
|
url = new URL(details.url);
|
|
} catch (e) {
|
|
return Promise.reject({message: "details.url is invalid"});
|
|
}
|
|
try {
|
|
redirectURI = new URL(url.searchParams.get("redirect_uri") || this.getRedirectURL());
|
|
} catch (e) {
|
|
return Promise.reject({message: "redirect_uri is invalid"});
|
|
}
|
|
|
|
return context.childManager.callParentAsyncFunction("identity.launchWebAuthFlowInParent", [details, redirectURI.href]);
|
|
},
|
|
},
|
|
};
|
|
}
|
|
};
|