snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

server/public/pluginapi/experimental/oauther/oauth2_connect.go

@@ -0,0 +1,38 @@
+// Copyright (c) 2019-present Mattermost, Inc. All Rights Reserved.
+// See License for license information.
+
+package oauther
+
+import (
+	"fmt"
+	"net/http"
+
+	"golang.org/x/oauth2"
+
+	"github.com/mattermost/mattermost/server/public/model"
+	"github.com/mattermost/mattermost/server/public/pluginapi"
+)
+
+func (o *oAuther) oauth2Connect(w http.ResponseWriter, r *http.Request) {
+	if r.Method != http.MethodGet {
+		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
+		return
+	}
+	userID := r.Header.Get("Mattermost-User-ID")
+	if userID == "" {
+		o.logger.Debugf("oauth2Connect: reached by non authed user")
+		http.Error(w, "Not authorized", http.StatusUnauthorized)
+		return
+	}
+
+	state := fmt.Sprintf("%v_%v", model.NewId()[0:15], userID)
+	_, err := o.store.Set(o.getStateKey(userID), state, pluginapi.SetExpiry(o.oAuth2StateTimeToLive))
+	if err != nil {
+		o.logger.Errorf("oauth2Connect: failed to store state, err=%s", err.Error())
+		http.Error(w, "failed to store token state", http.StatusInternalServerError)
+		return
+	}
+
+	redirectURL := o.config.AuthCodeURL(state, oauth2.AccessTypeOffline)
+	http.Redirect(w, r, redirectURL, http.StatusFound)
+}