func AuthHandler(c http.ResponseWriter, r *http.Request) {
var o = new(openid.OpenID)
o.ParseRPUrl(r.RawURL)
grant, e := o.Verify()
if e != nil {
emsg := fmt.Sprintln("Error in openid auth handler:", e)
fmt.Println(emsg)
fmt.Fprintln(c, emsg)
return
}
if !grant {
fmt.Println("Permission denied!")
fmt.Fprintln(c, "Access denied by user or internal error.")
return
}
s := session.Get(c, r)
fmt.Println("Permission granted!")
fmt.Println(o)
wantedValues := []string{"value.email", "value.first", "value.last", "value.country", "value.lang"}
for _, wantedValue := range wantedValues {
value, _ := http.URLUnescape(o.Params["openid.ext1."+wantedValue])
s.Set("openid-"+wantedValue[len("value."):], value)
}
id, _ := http.URLUnescape(o.Params["openid.ext1.value.email"])
continueURL := s.Get("openid-continue-url")
if continueURL == "" {
continueURL = "/"
}
fmt.Println(c, r, continueURL)
http.Redirect(c, r, continueURL, 307)
fmt.Fprintln(c, "Authenticated as", id)
return
}
func Get(c http.ResponseWriter, r *http.Request) (u *User, err os.Error) {
s := session.Get(c, r)
if err != nil {
return nil, err
}
u = new(User)
u.ID = s.Get("openid-email")
err = u.Load()
return
}
func Handler(c http.ResponseWriter, r *http.Request) {
host := r.Host
s := session.Get(c, r)
query, _ := http.ParseQuery(r.URL.RawQuery)
continueURLS := query["continue-url"]
continueURL := ""
if len(continueURLS) >= 1 {
continueURL = continueURLS[0]
}
if len(continueURL) == 0 {
continueURL = "/"
}
fmt.Println(continueURL)
s.Set("openid-continue-url", continueURL)
fmt.Println(s.Get("openid-name-first"))
url := "https://www.google.com/accounts/o8/ud"
var urlParams = map[string]string{
"openid.ns": "http://specs.openid.net/auth/2.0",
"openid.claimed_id": "http://specs.openid.net/auth/2.0/identifier_select",
"openid.identity": "http://specs.openid.net/auth/2.0/identifier_select",
"openid.return_to": "http://" + host + "/openid/auth",
"openid.realm": "http://" + host,
"openid.mode": "checkid_setup",
"openid.ns.ui": "http://specs.openid.net/extensions/ui/1.0",
"openid.ns.ext1": "http://openid.net/srv/ax/1.0",
"openid.ext1.mode": "fetch_request",
"openid.ext1.type.email": "http://axschema.org/contact/email",
"openid.ext1.type.first": "http://axschema.org/namePerson/first",
"openid.ext1.type.last": "http://axschema.org/namePerson/last",
"openid.ext1.type.country": "http://axschema.org/contact/country/home",
"openid.ext1.type.lang": "http://axschema.org/pref/language",
"openid.ext1.required": "email,first,last,country,lang",
"openid.ns.oauth": "http://specs.openid.net/extensions/oauth/1.0",
"openid.oauth.consumer": host,
"openid.oauth.scope": "http://picasaweb.google.com/data/"}
queryURL := "?"
for name, value := range urlParams {
queryURL += http.URLEscape(name) + "=" + http.URLEscape(value) + "&"
}
queryURL = queryURL[0 : len(queryURL)-1]
fmt.Println(queryURL)
http.Redirect(c, r, url+queryURL, 307)
}