├── .gitattributes
├── .gitignore
└── src
    ├── authproviders
        └── Twitter.authprovider
    ├── classes
        ├── TwitterClientCredentialsAuth.cls
        └── TwitterClientCredentialsAuth.cls-meta.xml
    ├── customMetadata
        └── TwitterAuth.Twitter.md
    ├── layouts
        └── TwitterAuth__mdt-Twitter Auth Layout.layout
    ├── namedCredentials
        ├── TwitterAPI.namedCredential
        └── TwitterTokenService.namedCredential
    ├── objects
        └── TwitterAuth__mdt.object
    └── package.xml


/.gitattributes:
--------------------------------------------------------------------------------
 1 | # Auto detect text files and perform LF normalization
 2 | * text=auto
 3 | 
 4 | # Custom for Visual Studio
 5 | *.cs     diff=csharp
 6 | 
 7 | # Standard to msysgit
 8 | *.doc	 diff=astextplain
 9 | *.DOC	 diff=astextplain
10 | *.docx diff=astextplain
11 | *.DOCX diff=astextplain
12 | *.dot  diff=astextplain
13 | *.DOT  diff=astextplain
14 | *.pdf  diff=astextplain
15 | *.PDF	 diff=astextplain
16 | *.rtf	 diff=astextplain
17 | *.RTF	 diff=astextplain
18 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | # Windows image file caches
 2 | Thumbs.db
 3 | ehthumbs.db
 4 | 
 5 | # Folder config file
 6 | Desktop.ini
 7 | 
 8 | # Recycle Bin used on file shares
 9 | $RECYCLE.BIN/
10 | 
11 | # Windows Installer files
12 | *.cab
13 | *.msi
14 | *.msm
15 | *.msp
16 | 
17 | # Windows shortcuts
18 | *.lnk
19 | 
20 | # =========================
21 | # Operating System Files
22 | # =========================
23 | 
24 | # OSX
25 | # =========================
26 | 
27 | .DS_Store
28 | .AppleDouble
29 | .LSOverride
30 | 
31 | # Thumbnails
32 | ._*
33 | 
34 | # Files that might appear in the root of a volume
35 | .DocumentRevisions-V100
36 | .fseventsd
37 | .Spotlight-V100
38 | .TemporaryItems
39 | .Trashes
40 | .VolumeIcon.icns
41 | 
42 | # Directories potentially created on remote AFP share
43 | .AppleDB
44 | .AppleDesktop
45 | Network Trash Folder
46 | Temporary Items
47 | .apdisk
48 | 


--------------------------------------------------------------------------------
/src/authproviders/Twitter.authprovider:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <AuthProvider xmlns="http://soap.sforce.com/2006/04/metadata">
 3 |     <customMetadataTypeRecord>TwitterAuth__mdt.Twitter</customMetadataTypeRecord>
 4 |     <executionUser>user@example.com</executionUser>
 5 |     <friendlyName>Twitter</friendlyName>
 6 |     <includeOrgIdInIdentifier>false</includeOrgIdInIdentifier>
 7 |     <plugin>TwitterClientCredentialsAuth</plugin>
 8 |     <providerType>Custom</providerType>
 9 |     <sendAccessTokenInHeader>false</sendAccessTokenInHeader>
10 |     <sendClientCredentialsInHeader>false</sendClientCredentialsInHeader>
11 | </AuthProvider>
12 | 


--------------------------------------------------------------------------------
/src/classes/TwitterClientCredentialsAuth.cls:
--------------------------------------------------------------------------------
 1 | public class TwitterClientCredentialsAuth extends Auth.AuthProviderPluginClass {
 2 |     
 3 |     // Name for this auth provider.
 4 |     private String authProvider = 'Twitter'; 
 5 |     
 6 |     // Api name for the custom metadata type created for this auth provider.
 7 |     private String customMetadataTypeApiName = 'TwitterAuth__mdt'; 
 8 |     
 9 |     // Name for the generic username displayed in the named credential configuration.
10 |     private String userName = 'Anonymous User'; 
11 |     
12 |     // Type of token.
13 |     private String tokenType = 'secret';
14 |     
15 |     // Structure of a token response from Twitter
16 |     public class TwitterResponse {
17 |         public String token_type;
18 |         public String access_token;
19 |     }
20 |     
21 |     //name of custom metadata type to embed configuration fields in auth provider
22 |     public String getCustomMetadataType() {
23 |         return customMetadataTypeApiName;
24 |     } 
25 |     
26 |     //directly redirect the user back to the callback URL, as we already have the client key and secret  
27 |     //to be used for authenticating directly
28 |     public PageReference initiate(Map<string,string> authProviderConfiguration, String stateToPropagate) {
29 |         return new PageReference(authProviderConfiguration.get('Callback__c') +'?state=' +stateToPropagate); 
30 |     } 
31 |     
32 |     //handle instantaneous callback and then use named credetial (username and password / client key and secret) to retrieve access token
33 |     public Auth.AuthProviderTokenResponse handleCallback(Map<string,string> authProviderConfiguration, Auth.AuthProviderCallbackState state ) {
34 |         return new Auth.AuthProviderTokenResponse(authProvider, retrieveToken(authProviderConfiguration.get('NamedCredential__c')), tokenType, state.queryParameters.get('state'));
35 |     } 
36 |     
37 |     //if access token expired, reuse named credetial 4to retrieve access token
38 |     public override Auth.OAuthRefreshResult refresh(Map<String,String> authProviderConfiguration, String refreshToken) {
39 |         return new Auth.OAuthRefreshResult(retrieveToken(authProviderConfiguration.get('NamedCredential__c')), tokenType);
40 |     }
41 |     
42 |     //return fake username, as client_credential auth is not tied to a specific user
43 |     public Auth.UserData getUserInfo(Map<string,string> authProviderConfiguration, Auth.AuthProviderTokenResponse response) {
44 |         return new Auth.UserData(null, null, null, null, null, null, userName, null, authProvider, null, new Map<String,String>()); 
45 |     }
46 |     
47 |     //make HTTP call to token endpoint using client credentials to retrieve access token
48 |     private String retrieveToken(String namedCredential) {
49 |         
50 |         HttpRequest req = new HttpRequest();
51 |         
52 |         req.setEndpoint('callout:'+namedCredential); 
53 |         req.setHeader('Content-Type','application/x-www-form-urlencoded;charset=UTF-8'); 
54 |         req.setMethod('POST'); 
55 |         req.setBody('grant_type=client_credentials');
56 |         
57 |         HTTPResponse res = new Http().send(req); 
58 |         
59 |         return deserialiseToken(res);
60 |     }
61 |     
62 |     //deserialise response and return token
63 |     private String deserialiseToken(HTTPResponse res) {
64 |         
65 |         String responseBody = res.getBody();
66 |         
67 |         TwitterResponse parsedResponse = (TwitterResponse) System.JSON.deserialize(responseBody, TwitterResponse.class);
68 |         
69 |         return parsedResponse.access_token;
70 |     }
71 | }
72 | 


--------------------------------------------------------------------------------
/src/classes/TwitterClientCredentialsAuth.cls-meta.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <ApexClass xmlns="http://soap.sforce.com/2006/04/metadata">
3 |     <apiVersion>40.0</apiVersion>
4 |     <status>Active</status>
5 | </ApexClass>
6 | 


--------------------------------------------------------------------------------
/src/customMetadata/TwitterAuth.Twitter.md:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <CustomMetadata xmlns="http://soap.sforce.com/2006/04/metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
 3 |     <label>Twitter</label>
 4 |     <protected>false</protected>
 5 |     <values>
 6 |         <field>Callback__c</field>
 7 |         <value xsi:type="xsd:string">https://test.salesforce.com/services/authcallback/OrgId/AuthProviderName</value>
 8 |     </values>
 9 |     <values>
10 |         <field>NamedCredential__c</field>
11 |         <value xsi:type="xsd:string">TwitterTokenService</value>
12 |     </values>
13 | </CustomMetadata>
14 | 


--------------------------------------------------------------------------------
/src/layouts/TwitterAuth__mdt-Twitter Auth Layout.layout:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <Layout xmlns="http://soap.sforce.com/2006/04/metadata">
 3 |     <layoutSections>
 4 |         <customLabel>false</customLabel>
 5 |         <detailHeading>false</detailHeading>
 6 |         <editHeading>true</editHeading>
 7 |         <label>Information</label>
 8 |         <layoutColumns>
 9 |             <layoutItems>
10 |                 <behavior>Required</behavior>
11 |                 <field>MasterLabel</field>
12 |             </layoutItems>
13 |             <layoutItems>
14 |                 <behavior>Required</behavior>
15 |                 <field>DeveloperName</field>
16 |             </layoutItems>
17 |             <layoutItems>
18 |                 <behavior>Edit</behavior>
19 |                 <field>Callback__c</field>
20 |             </layoutItems>
21 |             <layoutItems>
22 |                 <behavior>Edit</behavior>
23 |                 <field>NamedCredential__c</field>
24 |             </layoutItems>
25 |         </layoutColumns>
26 |         <layoutColumns>
27 |             <layoutItems>
28 |                 <behavior>Edit</behavior>
29 |                 <field>IsProtected</field>
30 |             </layoutItems>
31 |             <layoutItems>
32 |                 <behavior>Required</behavior>
33 |                 <field>NamespacePrefix</field>
34 |             </layoutItems>
35 |         </layoutColumns>
36 |         <style>TwoColumnsTopToBottom</style>
37 |     </layoutSections>
38 |     <layoutSections>
39 |         <customLabel>false</customLabel>
40 |         <detailHeading>false</detailHeading>
41 |         <editHeading>true</editHeading>
42 |         <label>System Information</label>
43 |         <layoutColumns>
44 |             <layoutItems>
45 |                 <behavior>Readonly</behavior>
46 |                 <field>CreatedById</field>
47 |             </layoutItems>
48 |         </layoutColumns>
49 |         <layoutColumns>
50 |             <layoutItems>
51 |                 <behavior>Readonly</behavior>
52 |                 <field>LastModifiedById</field>
53 |             </layoutItems>
54 |         </layoutColumns>
55 |         <style>TwoColumnsTopToBottom</style>
56 |     </layoutSections>
57 |     <layoutSections>
58 |         <customLabel>false</customLabel>
59 |         <detailHeading>false</detailHeading>
60 |         <editHeading>false</editHeading>
61 |         <layoutColumns/>
62 |         <style>CustomLinks</style>
63 |     </layoutSections>
64 |     <showEmailCheckbox>false</showEmailCheckbox>
65 |     <showHighlightsPanel>false</showHighlightsPanel>
66 |     <showInteractionLogPanel>false</showInteractionLogPanel>
67 |     <showRunAssignmentRulesCheckbox>false</showRunAssignmentRulesCheckbox>
68 |     <showSubmitAndAttachButton>false</showSubmitAndAttachButton>
69 | </Layout>
70 | 


--------------------------------------------------------------------------------
/src/namedCredentials/TwitterAPI.namedCredential:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <NamedCredential xmlns="http://soap.sforce.com/2006/04/metadata">
3 |     <authProvider>Twitter</authProvider>
4 |     <endpoint>https://api.twitter.com</endpoint>
5 |     <label>Twitter API</label>
6 |     <principalType>NamedUser</principalType>
7 |     <protocol>Oauth</protocol>
8 | </NamedCredential>
9 | 


--------------------------------------------------------------------------------
/src/namedCredentials/TwitterTokenService.namedCredential:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <NamedCredential xmlns="http://soap.sforce.com/2006/04/metadata">
3 |     <endpoint>https://api.twitter.com/oauth2/token</endpoint>
4 |     <label>Twitter Token Service</label>
5 |     <principalType>NamedUser</principalType>
6 |     <protocol>Password</protocol>
7 |     <username>ClientKey</username>
8 | </NamedCredential>
9 | 


--------------------------------------------------------------------------------
/src/objects/TwitterAuth__mdt.object:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <CustomObject xmlns="http://soap.sforce.com/2006/04/metadata">
 3 |     <fields>
 4 |         <fullName>Callback__c</fullName>
 5 |         <externalId>false</externalId>
 6 |         <fieldManageability>DeveloperControlled</fieldManageability>
 7 |         <label>Callback</label>
 8 |         <length>255</length>
 9 |         <required>false</required>
10 |         <type>Text</type>
11 |         <unique>false</unique>
12 |     </fields>
13 |     <fields>
14 |         <fullName>NamedCredential__c</fullName>
15 |         <externalId>false</externalId>
16 |         <fieldManageability>DeveloperControlled</fieldManageability>
17 |         <label>Named Credential</label>
18 |         <length>255</length>
19 |         <required>false</required>
20 |         <type>Text</type>
21 |         <unique>false</unique>
22 |     </fields>
23 |     <label>Twitter Authentication Configuration</label>
24 |     <pluralLabel>Twitter Authentication Configurations</pluralLabel>
25 |     <visibility>Public</visibility>
26 | </CustomObject>
27 | 


--------------------------------------------------------------------------------
/src/package.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <Package xmlns="http://soap.sforce.com/2006/04/metadata">
 3 |     <types>
 4 |         <members>TwitterClientCredentialsAuth</members>
 5 |         <name>ApexClass</name>
 6 |     </types>
 7 |     <types>
 8 |         <members>Twitter</members>
 9 |         <name>AuthProvider</name>
10 |     </types>
11 |     <types>
12 |         <members>TwitterAuth__mdt.Callback__c</members>
13 |         <members>TwitterAuth__mdt.NamedCredential__c</members>
14 |         <name>CustomField</name>
15 |     </types>
16 |     <types>
17 |         <members>TwitterAuth.Twitter</members>
18 |         <name>CustomMetadata</name>
19 |     </types>
20 |     <types>
21 |         <members>TwitterAuth__mdt</members>
22 |         <name>CustomObject</name>
23 |     </types>
24 |     <types>
25 |         <members>TwitterAuth__mdt-Twitter Auth Layout</members>
26 |         <name>Layout</name>
27 |     </types>
28 |     <types>
29 |         <members>TwitterAPI</members>
30 |         <members>TwitterTokenService</members>
31 |         <name>NamedCredential</name>
32 |     </types>
33 |     <version>40.0</version>
34 | </Package>
35 | 


--------------------------------------------------------------------------------