snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

selfservice/strategy/oidc/provider_patreon.go

@@ -0,0 +1,124 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package oidc
+
+import (
+	"context"
+	"encoding/json"
+	"net/url"
+
+	"github.com/hashicorp/go-retryablehttp"
+
+	"github.com/ory/x/httpx"
+
+	"github.com/pkg/errors"
+	"golang.org/x/oauth2"
+
+	"github.com/ory/herodot"
+)
+
+var _ OAuth2Provider = (*ProviderPatreon)(nil)
+
+type ProviderPatreon struct {
+	config *Configuration
+	reg    Dependencies
+}
+
+type PatreonIdentityResponse struct {
+	Data struct {
+		Attributes struct {
+			Email     string `json:"email"`
+			FirstName string `json:"first_name"`
+			FullName  string `json:"full_name"`
+			ImageURL  string `json:"image_url"`
+			LastName  string `json:"last_name"`
+		} `json:"attributes"`
+		ID   string `json:"id"`
+		Type string `json:"type"`
+	} `json:"data"`
+}
+
+func NewProviderPatreon(
+	config *Configuration,
+	reg Dependencies,
+) Provider {
+	return &ProviderPatreon{
+		config: config,
+		reg:    reg,
+	}
+}
+
+func (d *ProviderPatreon) Config() *Configuration {
+	return d.config
+}
+
+func (d *ProviderPatreon) oauth2(ctx context.Context) *oauth2.Config {
+	return &oauth2.Config{
+		ClientID:     d.config.ClientID,
+		ClientSecret: d.config.ClientSecret,
+		Endpoint: oauth2.Endpoint{
+			AuthURL:  "https://www.patreon.com/oauth2/authorize",
+			TokenURL: "https://www.patreon.com/api/oauth2/token",
+		},
+		RedirectURL: d.config.Redir(d.reg.Config().OIDCRedirectURIBase(ctx)),
+		Scopes:      d.config.Scope,
+	}
+}
+
+func (d *ProviderPatreon) OAuth2(ctx context.Context) (*oauth2.Config, error) {
+	return d.oauth2(ctx), nil
+}
+
+func (d *ProviderPatreon) AuthCodeURLOptions(r ider) []oauth2.AuthCodeOption {
+	if isForced(r) {
+		return []oauth2.AuthCodeOption{
+			oauth2.SetAuthURLParam("prompt", "consent"),
+		}
+	}
+	return []oauth2.AuthCodeOption{
+		oauth2.SetAuthURLParam("prompt", "none"),
+	}
+}
+
+func (d *ProviderPatreon) Claims(ctx context.Context, exchange *oauth2.Token, query url.Values) (*Claims, error) {
+	identityURL := "https://www.patreon.com/api/oauth2/v2/identity?fields%5Buser%5D=first_name,last_name,url,full_name,email,image_url"
+
+	o := d.oauth2(ctx)
+	ctx, client := httpx.SetOAuth2(ctx, d.reg.HTTPClient(ctx), o, exchange)
+	req, err := retryablehttp.NewRequestWithContext(ctx, "GET", identityURL, nil)
+	if err != nil {
+		return nil, errors.WithStack(herodot.ErrInternalServerError().WithReasonf("%s", err))
+	}
+	req.Header.Add("Content-Type", "application/json")
+	req.Header.Add("Authorization", "Bearer "+exchange.AccessToken)
+
+	res, err := client.Do(req)
+	if err != nil {
+		return nil, errors.WithStack(herodot.ErrUpstreamError().WithWrap(err).WithReasonf("%s", err))
+	}
+	defer func() { _ = res.Body.Close() }()
+
+	if err := logUpstreamError(d.reg.Logger(), res); err != nil {
+		return nil, err
+	}
+
+	data := PatreonIdentityResponse{}
+	jsonErr := json.NewDecoder(res.Body).Decode(&data)
+	if jsonErr != nil {
+		return nil, errors.WithStack(herodot.ErrUpstreamError().WithWrap(jsonErr).WithReasonf("%s", jsonErr))
+	}
+
+	claims := &Claims{
+		Issuer:     "https://www.patreon.com/",
+		Subject:    data.Data.ID,
+		Name:       data.Data.Attributes.FullName,
+		Email:      data.Data.Attributes.Email,
+		GivenName:  data.Data.Attributes.FirstName,
+		FamilyName: data.Data.Attributes.LastName,
+		LastName:   data.Data.Attributes.LastName,
+		Picture:    data.Data.Attributes.ImageURL,
+	}
+
+	return claims, nil
+}