From a74b35ee3758545dabd811fe8ac9d0c68a3420ca Mon Sep 17 00:00:00 2001
From: Fabien Meghazi <fme@openerp.com>
Date: Mon, 24 Sep 2012 12:39:31 +0200
Subject: [PATCH] [ADD] Added oauth approval wip

bzr revid: fme@openerp.com-20120924103931-d2zj6p8shpljf0v9
---
 .../static/src/js/oauth_provider.js           | 40 ++++++++++++-------
 .../static/src/xml/oauth_provider.xml         | 11 +++++
 2 files changed, 36 insertions(+), 15 deletions(-)

diff --git a/addons/auth_oauth_provider/static/src/js/oauth_provider.js b/addons/auth_oauth_provider/static/src/js/oauth_provider.js
index eb2c1982d31..a5e05c60283 100644
--- a/addons/auth_oauth_provider/static/src/js/oauth_provider.js
+++ b/addons/auth_oauth_provider/static/src/js/oauth_provider.js
@@ -20,15 +20,22 @@ instance.auth_oauth_provider.ProviderAction = instance.web.Widget.extend({
         // TODO: check if client_id application is authorized to use the service, and get it's name
         // that should be displayed in the approval confirmation dialog.
 
-        // params.approval_prompt TODO
         if (!this._error) {
-            instance.session.rpc('/oauth2/get_token', {
-                client_id: params.client_id || '',
-                scope: params.scope || '',
-            }).then(function(result) {
-                self.redirect(result);
-            }).fail(function() {
-                self.error(_t("An error occured while contacting the OpenERP server."));
+            // params.approval_prompt TODO
+            // TODO: get client_id and scope
+            this.$('.oe_oauth_provider_approval').show().on('click', '.oe_oauth_provider_allow', function() {
+                instance.session.rpc('/oauth2/get_token', {
+                    client_id: params.client_id || '',
+                    scope: params.scope || '',
+                }).then(function(result) {
+                    self.redirect(result);
+                }).fail(function() {
+                    self.error(_t("An error occured while contacting the OpenERP server."));
+                });
+            }).on('click', '.oe_oauth_provider_deny', function() {
+                self.redirect({
+                    error: 'access_denied'
+                });
             });
         }
     },
@@ -36,16 +43,19 @@ instance.auth_oauth_provider.ProviderAction = instance.web.Widget.extend({
         var params = $.deparam($.param.querystring());
         var a = document.createElement('a');
         a.href = params.redirect_uri;
-        var new_params = {
-            access_token: result.access_token,
-            token_type: 'Bearer',
-        };
+        var new_params = {};
+        if (!result.error) {
+            new_params.access_token = result.access_token;
+            new_params.token_type = 'Bearer';
+            if (result.expires_in) {
+                new_params.expires_in = result.expires_in;
+            }
+        } else {
+            new_params.error = result.error;
+        }
         if (params.state) {
             new_params.state = params.state;
         }
-        if (result.expires_in) {
-            new_params.expires_in = result.expires_in;
-        }
         var redirect = a.protocol + '//' + a.host + a.pathname + '?' + $.param(new_params) + a.hash;
         //window.location = redirect;
         console.log("redirect to", redirect);
diff --git a/addons/auth_oauth_provider/static/src/xml/oauth_provider.xml b/addons/auth_oauth_provider/static/src/xml/oauth_provider.xml
index ddf6ff08789..85985e4e974 100644
--- a/addons/auth_oauth_provider/static/src/xml/oauth_provider.xml
+++ b/addons/auth_oauth_provider/static/src/xml/oauth_provider.xml
@@ -8,6 +8,17 @@
             <span class="oe_i">D</span>
             <ul/>
         </div>
+        <div style="display: none" class="oe_oauth_provider_approval">
+            <b>TODO: get ClientID name</b> asks permission for:
+            <ul>
+                <li>
+                    TODO: get Client Scopes<br/>
+                    Basic information about your account
+                </li>
+            </ul>
+            <button class="oe_button oe_oauth_provider_allow">Allow Access</button>
+            <button class="oe_button oe_oauth_provider_deny">No thanks</button>
+        </div>
     </div>
 </t>
 </template>