aboutsummaryrefslogtreecommitdiff
path: root/internal/saasproxytoken/tokensource.go
blob: a319d4bb6bff10f62759c5663f8dddb6c438694a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
package saasproxytoken

import (
	"context"
	"net/http"
	"sync"
	"time"

	"golang.org/x/oauth2"
	"google.golang.org/protobuf/types/known/emptypb"
	"xeiaso.net/v4/internal/adminpb"
)

type remoteTokenSource struct {
	curr       *oauth2.Token
	lock       sync.Mutex
	remoteURL  string
	httpClient *http.Client
	ptc        adminpb.Patreon
}

func (r *remoteTokenSource) fetchToken() (*oauth2.Token, error) {
	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
	defer cancel()

	resp, err := r.ptc.GetToken(ctx, &emptypb.Empty{})
	if err != nil {
		return nil, err
	}

	var tok oauth2.Token
	tok.AccessToken = resp.AccessToken
	tok.TokenType = resp.TokenType
	tok.RefreshToken = resp.RefreshToken
	tok.Expiry = resp.Expiry.AsTime()

	return &tok, nil
}

func (r *remoteTokenSource) Token() (*oauth2.Token, error) {
	r.lock.Lock()
	defer r.lock.Unlock()

	if r.curr == nil {
		tok, err := r.fetchToken()
		if err != nil {
			return nil, err
		}
		r.curr = tok
		return tok, nil
	}

	if r.curr.Expiry.Before(time.Now()) {
		tok, err := r.fetchToken()
		if err != nil {
			return nil, err
		}
		r.curr = tok
	}

	return r.curr, nil
}

func RemoteTokenSource(remoteURL string, httpClient *http.Client) oauth2.TokenSource {
	return &remoteTokenSource{
		remoteURL:  remoteURL,
		httpClient: httpClient,
		ptc:        adminpb.NewPatreonProtobufClient(remoteURL, httpClient),
	}
}