implement oidc as a new provider

README.md

@@ -10,6 +10,7 @@ OAuth:
 - Microsoft
 - Github
 - Gitlab
+- OIDC / oAuth2
 - SAML
 
 ## Installation

lib/code0/identities.rb

@@ -11,6 +11,7 @@
 require_relative "identities/provider/google"
 require_relative "identities/provider/discord"
 require_relative "identities/provider/github"
+require_relative "identities/provider/oidc"
 require_relative "identities/provider/saml"
 
 module Code0

lib/code0/identities/provider/oidc.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+module Code0
+  module Identities
+    module Provider
+      class Oidc < BaseOauth
+        def token_url
+          config[:token_url]
+        end
+
+        def token_payload(code)
+          { code: code,
+            grant_type: "authorization_code",
+            redirect_uri: config[:redirect_uri],
+            client_id: config[:client_id],
+            client_secret: config[:client_secret] }
+        end
+
+        def user_details_url
+          config[:user_details_url]
+        end
+
+        def authorization_url
+          config[:authorization_url]
+            .gsub("{client_id}", config[:client_id])
+            .gsub("{redirect_uri}", config[:redirect_uri])
+        end
+
+        def create_identity(response, *)
+          body = response.parsed_response
+
+          Identity.new(config[:provider_name],
+                       find_attribute(body, config[:attribute_statements][:identifier]),
+                       find_attribute(body, config[:attribute_statements][:username]),
+                       find_attribute(body, config[:attribute_statements][:email]),
+                       find_attribute(body, config[:attribute_statements][:firstname]),
+                       find_attribute(body, config[:attribute_statements][:lastname]))
+        end
+
+        def config
+          config = super
+
+          # rubocop:disable Layout/LineLength
+          config[:provider_name] ||= :oidc
+          config[:attribute_statements] ||= {}
+          config[:attribute_statements][:identifier] ||= %w[sub id identifier]
+          config[:attribute_statements][:username] ||= %w[username name login]
+          config[:attribute_statements][:email] ||= %w[email mail]
+          config[:attribute_statements][:firstname] ||= %w[first_name firstname firstName givenname given_name givenName]
+          config[:attribute_statements][:lastname] ||= %w[last_name lastname lastName family_name familyName familyname]
+          # rubocop:enable Layout/LineLength
+
+          config
+        end
+
+        def find_attribute(attributes, attribute_statements)
+          attribute_statements.each do |statement|
+            return attributes[statement] unless attributes[statement].nil?
+          end
+          nil
+        end
+      end
+    end
+  end
+end

sig/code0/identities/provider/oidc.rbs

@@ -0,0 +1,17 @@
+module Code0
+  module Identities
+    module Provider
+      class Oidc < BaseOauth
+        def token_url: () -> String
+
+        def token_payload: (code: String) -> { code: String, grant_type: "authorization_code", redirect_uri: String, client_id: String, client_secret: String }
+
+        def user_details_url: () -> String
+
+        def authorization_url: () -> String
+
+        def create_identity: (response: Net::HTTPResponse) -> Identity
+      end
+    end
+  end
+end