From 1f2e453d0c9f8412b9032cb4e655713ecdcf1fa3 Mon Sep 17 00:00:00 2001
From: LLLL Colonq <llll@colonq>
Date: Mon, 26 May 2025 04:43:38 -0400
Subject: web: Refactor major style

---
 fig-web/src/Fig/Web/Auth.hs | 89 ---------------------------------------------
 1 file changed, 89 deletions(-)
 delete mode 100644 fig-web/src/Fig/Web/Auth.hs

(limited to 'fig-web/src/Fig/Web/Auth.hs')

diff --git a/fig-web/src/Fig/Web/Auth.hs b/fig-web/src/Fig/Web/Auth.hs
deleted file mode 100644
index b78e3b3..0000000
--- a/fig-web/src/Fig/Web/Auth.hs
+++ /dev/null
@@ -1,89 +0,0 @@
-module Fig.Web.Auth where
-
-import Fig.Prelude
-
-import qualified Network.HTTP.Req as R
-
-import Data.Maybe (mapMaybe)
-import qualified Data.Text as Text
-import qualified Data.Text.Lazy as Text.Lazy
-import qualified Data.Map.Strict as Map
-import qualified Data.Aeson as Aeson
-import qualified Data.Aeson.Types as Aeson
-
-import qualified Jose.Jwk as Jwk
-import qualified Jose.Jwt as Jwt
-
-import qualified Web.Scotty as Sc
-
-import Fig.Web.Utils
-
-data TokenContents = TokenContents
-  { aud :: !Text
-  , exp :: !Int
-  , iat :: !Int
-  , iss :: !Text
-  , sub :: !Text
-  , azp :: !(Maybe Text)
-  , nonce :: !Text
-  , preferred_username :: !Text
-  } deriving (Show, Eq, Generic)
-instance Aeson.FromJSON TokenContents
-
-fetchJwk :: MonadIO m => m (Maybe Jwk.Jwk)
-fetchJwk = do
-  resp <- R.responseBody <$> R.runReq R.defaultHttpConfig do
-    R.req R.GET (R.https "id.twitch.tv" R./: "oauth2" R./: "keys") R.NoReqBody R.jsonResponse mempty
-  let mkeys = Aeson.parseMaybe (Aeson..: "keys") resp
-  let mjwk = mkeys >>= headMay
-  log $ tshow mjwk
-  pure mjwk
-
-validateToken :: MonadIO m => ByteString -> m (Maybe TokenContents)
-validateToken encodedToken = fetchJwk >>= \case
-  Nothing -> pure Nothing
-  Just jwk -> liftIO (Jwt.decode [jwk] Nothing encodedToken) >>= \case
-    Left err -> do
-      log $ "Failed to decode token: " <> tshow err
-      pure Nothing
-    Right jwt -> do
-      let contents = case jwt of
-            Jwt.Unsecured bs -> bs
-            Jwt.Jws (_, bs) -> bs
-            Jwt.Jwe (_, bs) -> bs
-      log $ tshow contents
-      pure $ Aeson.decodeStrict contents
-
-data Auth = Auth { id :: !Text, name :: !Text } deriving Show
-checkAuth :: Config -> Sc.ActionM (Maybe Auth)
-checkAuth cfg =
-  Sc.header "Authorization"
-  >>= \case
-    Just authstrLazy -> do
-      let authstr = drop 1 $ Text.splitOn " " $ Text.Lazy.toStrict authstrLazy
-      let pairs = Map.fromList $ flip mapMaybe authstr \s ->
-            case Text.splitOn "=" s of
-              [k, v] -> Just (k, Text.takeWhile (/='"') $ Text.drop 1 v)
-              _other -> Nothing
-      case (Map.lookup "token" pairs, Map.lookup "nonce" pairs) of
-        (Just token, Just nonce) -> do
-          validateToken (encodeUtf8 token) >>= \case
-            Just tc
-              | tc.aud == cfg.clientId
-              , tc.nonce == nonce
-                -> do
-                  pure . Just $ Auth
-                    { name = tc.preferred_username
-                    , id = tc.sub
-                    }
-            _else -> do
-              pure Nothing
-        _else -> pure Nothing
-    _else -> pure Nothing
-
-authed :: Config -> (Auth -> Sc.ActionM ()) -> Sc.ActionM ()
-authed cfg f = checkAuth cfg >>= \case
-  Nothing -> do
-    Sc.status status401
-    Sc.text "unauthorized"
-  Just auth -> f auth
-- 
cgit v1.2.3