SWAMPy

✎ CARVE FLESH

EDITING: facebook.rb

# frozen_string_literal: true

#
# Copyright (C) 2015 - present Instructure, Inc.
#
# This file is part of Canvas.
#
# Canvas is free software: you can redistribute it and/or modify it under
# the terms of the GNU Affero General Public License as published by the Free
# Software Foundation, version 3 of the License.
#
# Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
# A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
# details.
#
# You should have received a copy of the GNU Affero General Public License along
# with this program. If not, see <http://www.gnu.org/licenses/>.
#

class AuthenticationProvider::Facebook < AuthenticationProvider::OAuth2
  include AuthenticationProvider::PluginSettings

self.plugin = :facebook
  plugin_settings :app_id, app_secret: :app_secret_dec

SENSITIVE_PARAMS = [:app_secret].freeze

alias_attribute :app_id, :client_id
  alias_attribute :app_secret, :client_secret

def client_id
    self.class.globally_configured? ? app_id : super
  end

def client_secret
    self.class.globally_configured? ? app_secret : super
  end

def self.recognized_params
    super + [:login_attribute, :jit_provisioning].freeze
  end

def self.login_attributes
    ["id", "email"].freeze
  end
  validates :login_attribute, inclusion: login_attributes

def self.recognized_federated_attributes
    %w[
      email
      first_name
      id
      last_name
      locale
      name
    ].freeze
  end

def login_attribute
    super || "id"
  end

def unique_id(token)
    me(token)[login_attribute]
  end

def provider_attributes(token)
    me(token)
  end

protected

def me(token)
    # abusing AccessToken#options as a useful place to cache this response
    token.options[:me] ||= begin
      attributes = ([login_attribute] + federated_attributes.values.pluck("attribute")).uniq
      token.get("me?fields=#{attributes.join(",")}").parsed
    end
  end

def authorize_options
    if login_attribute == "email" || federated_attributes.any? { |(_k, v)| v["attribute"] == "email" }
      { scope: "email" }.freeze
    else
      {}.freeze
    end
  end

def client_options
    {
      site: "https://graph.facebook.com",
      authorize_url: "https://www.facebook.com/dialog/oauth",
      token_url: "oauth/access_token"
    }
  end
end

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📁 saml/	DIR	—	2023-09-24 03:39
📄 apple.rb	RB	3.3 KB	2023-09-24 03:39	EDIT
📄 canvas.rb	RB	2 KB	2023-09-24 03:36	EDIT
📄 cas.rb	RB	1.7 KB	2023-09-24 03:36	EDIT
📄 clever.rb	RB	2.8 KB	2023-09-24 03:36	EDIT
📄 delegated.rb	RB	1.5 KB	2023-09-24 03:36	EDIT
📄 facebook.rb	RB	2.4 KB	2023-09-24 03:36	EDIT
📄 git_hub.rb	RB	2.3 KB	2023-09-24 03:36	EDIT
📄 google.rb	RB	3 KB	2023-09-24 03:36	EDIT
📄 ldap.rb	RB	10.4 KB	2023-09-24 03:39	EDIT
📄 linked_in.rb	RB	2.6 KB	2023-09-24 03:39	EDIT
📄 microsoft.rb	RB	2.5 KB	2023-09-24 03:36	EDIT
📄 oauth.rb	RB	1.3 KB	2023-09-24 03:39	EDIT
📄 oauth2.rb	RB	1.8 KB	2023-09-24 03:39	EDIT
📄 open_id_connect.rb	RB	4.8 KB	2023-09-24 03:39	EDIT
📄 plugin_settings.rb	RB	2.1 KB	2023-09-24 03:36	EDIT
📄 saml.rb	RB	18 KB	2023-09-24 03:36	EDIT
📄 saml_idp_discovery.rb	RB	1.1 KB	2023-09-24 03:36	EDIT
📄 twitter.rb	RB	1.8 KB	2023-09-24 03:36	EDIT