mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-20 17:32:15 +03:00
c0f32b7746
refs 2f1123d6ca
Usage of the raw Error class has been deprecated in favour of our own
errors, which are more descriptive and have built in HTTP status codes.
This also updates the same errors to use @tryghost/tpl for the error
messages, which is the new pattern we are following in order for us to
deprecate the i18n module.
79 lines
2.6 KiB
JavaScript
79 lines
2.6 KiB
JavaScript
const errors = require('@tryghost/errors');
|
|
const tpl = require('@tryghost/tpl');
|
|
const {Buffer} = require('buffer');
|
|
const {randomBytes} = require('crypto');
|
|
const {URL} = require('url');
|
|
|
|
const messages = {
|
|
incorrectState: 'State did not match.'
|
|
};
|
|
|
|
const STATE_PROP = 'stripe-connect-state';
|
|
|
|
const liveClientID = 'ca_8LBuZWhYshxF0A55KgCXu8PRTquCKC5x';
|
|
const testClientID = 'ca_8LBum4Ctv3mmJ1oD0ZRmxjdAhNrrBUy3';
|
|
const redirectURI = 'https://stripe.ghost.org';
|
|
|
|
/**
|
|
* @function getStripeConnectOAuthUrl
|
|
* @desc Returns a url for the auth endpoint for Stripe Connect, generates state and stores it on the session.
|
|
*
|
|
* @param {(prop: string, val: any) => Promise<void>} setSessionProp - A function to set data on the current session
|
|
* @param {'live' | 'test'} mode - Which stripe mode to set up
|
|
*
|
|
* @returns {Promise<URL>}
|
|
*/
|
|
async function getStripeConnectOAuthUrl(setSessionProp, mode = 'live') {
|
|
const randomState = randomBytes(16).toString('hex');
|
|
const state = Buffer.from(JSON.stringify({
|
|
mode,
|
|
randomState
|
|
})).toString('base64');
|
|
|
|
await setSessionProp(STATE_PROP, state);
|
|
|
|
const clientID = mode === 'live' ? liveClientID : testClientID;
|
|
|
|
const authUrl = new URL('https://connect.stripe.com/oauth/authorize');
|
|
authUrl.searchParams.set('response_type', 'code');
|
|
authUrl.searchParams.set('scope', 'read_write');
|
|
authUrl.searchParams.set('client_id', clientID);
|
|
authUrl.searchParams.set('redirect_uri', redirectURI);
|
|
authUrl.searchParams.set('state', state);
|
|
|
|
return authUrl;
|
|
}
|
|
|
|
/**
|
|
* @function getStripeConnectTokenData
|
|
* @desc Returns the api keys and the livemode for a Stripe Connect integration after validating the state.
|
|
*
|
|
* @param {string} encodedData - A string encoding the response from Stripe Connect
|
|
* @param {(prop: string) => Promise<any>} getSessionProp - A function to retrieve data from the current session
|
|
*
|
|
* @returns {Promise<{secret_key: string, public_key: string, livemode: boolean, display_name: string, account_id: string}>}
|
|
*/
|
|
async function getStripeConnectTokenData(encodedData, getSessionProp) {
|
|
const data = JSON.parse(Buffer.from(encodedData, 'base64').toString());
|
|
|
|
const state = await getSessionProp(STATE_PROP);
|
|
|
|
if (state !== data.s) {
|
|
throw new errors.NoPermissionError(tpl(messages.incorrectState));
|
|
}
|
|
|
|
return {
|
|
public_key: data.p,
|
|
secret_key: data.a,
|
|
livemode: data.l,
|
|
display_name: data.n,
|
|
account_id: data.i
|
|
};
|
|
}
|
|
|
|
module.exports = {
|
|
getStripeConnectOAuthUrl,
|
|
getStripeConnectTokenData,
|
|
STATE_PROP
|
|
};
|