1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
/* -*- Mode: indent-tabs-mode: nil; js-indent-level: 2 -*- */
/* vim: set sts=2 sw=2 et tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
* You can obtain one at http://mozilla.org/MPL/2.0/. */
"use strict";
var { Constructor: CC } = Components;
ChromeUtils.defineESModuleGetters(this, {
CommonUtils: "resource://services-common/utils.sys.mjs",
});
XPCOMUtils.defineLazyPreferenceGetter(
this,
"redirectDomain",
"extensions.webextensions.identity.redirectDomain"
);
let CryptoHash = CC(
"@mozilla.org/security/hash;1",
"nsICryptoHash",
"initWithString"
);
XPCOMUtils.defineLazyGlobalGetters(this, ["URL", "TextEncoder"]);
const computeHash = str => {
let byteArr = new TextEncoder().encode(str);
let hash = new CryptoHash("sha1");
hash.update(byteArr, byteArr.length);
return CommonUtils.bytesAsHex(hash.finish(false));
};
this.identity = class extends ExtensionAPI {
getAPI(context) {
let { extension } = context;
return {
identity: {
getRedirectURL: function (path = "") {
let hash = computeHash(extension.id);
let url = new URL(`https://${hash}.${redirectDomain}/`);
url.pathname = path;
return url.href;
},
launchWebAuthFlow: function (details) {
// Validate the url and retreive redirect_uri if it was provided.
let url, redirectURI;
let baseRedirectURL = this.getRedirectURL();
// Allow using loopback address for native OAuth flows as some
// providers do not accept the URL provided by getRedirectURL.
// For more context, see bug 1635344.
let loopbackURL = `http://127.0.0.1/mozoauth2/${computeHash(
extension.id
)}`;
try {
url = new URL(details.url);
} catch (e) {
return Promise.reject({ message: "details.url is invalid" });
}
try {
redirectURI = new URL(
url.searchParams.get("redirect_uri") || baseRedirectURL
);
if (
!redirectURI.href.startsWith(baseRedirectURL) &&
!redirectURI.href.startsWith(loopbackURL)
) {
return Promise.reject({ message: "redirect_uri not allowed" });
}
} catch (e) {
return Promise.reject({ message: "redirect_uri is invalid" });
}
return context.childManager.callParentAsyncFunction(
"identity.launchWebAuthFlowInParent",
[details, redirectURI.href]
);
},
},
};
}
};
|
