Wolfgang Taferner
c444b5a293
Error thrown by google request is an urllib2.HTTPError that can be read and loaded in JSON. However in some cases the result of the read may be void or not JSON-ready. This was causing a crash in the error management and hid the actual issue. This commit tries to read and JSON-load the error but fall back on simply displaying the raw error in case of issue when handling it. Closes #17308 .
204 lines
9.4 KiB
Python
204 lines
9.4 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from datetime import datetime
|
|
import json
|
|
import logging
|
|
import urllib2
|
|
import werkzeug.urls
|
|
|
|
from odoo import api, fields, models, registry, _
|
|
from odoo.http import request
|
|
|
|
|
|
_logger = logging.getLogger(__name__)
|
|
|
|
TIMEOUT = 20
|
|
|
|
GOOGLE_AUTH_ENDPOINT = 'https://accounts.google.com/o/oauth2/auth'
|
|
GOOGLE_TOKEN_ENDPOINT = 'https://accounts.google.com/o/oauth2/token'
|
|
GOOGLE_API_BASE_URL = 'https://www.googleapis.com'
|
|
|
|
|
|
# FIXME : this needs to become an AbstractModel, to be inhereted by google_calendar_service and google_drive_service
|
|
class GoogleService(models.TransientModel):
|
|
_name = 'google.service'
|
|
|
|
@api.model
|
|
def generate_refresh_token(self, service, authorization_code):
|
|
""" Call Google API to refresh the token, with the given authorization code
|
|
:param service : the name of the google service to actualize
|
|
:param authorization_code : the code to exchange against the new refresh token
|
|
:returns the new refresh token
|
|
"""
|
|
Parameters = self.env['ir.config_parameter'].sudo()
|
|
client_id = Parameters.get_param('google_%s_client_id' % service)
|
|
client_secret = Parameters.get_param('google_%s_client_secret' % service)
|
|
redirect_uri = Parameters.get_param('google_redirect_uri')
|
|
|
|
# Get the Refresh Token From Google And store it in ir.config_parameter
|
|
headers = {"Content-type": "application/x-www-form-urlencoded"}
|
|
data = werkzeug.url_encode({
|
|
'code': authorization_code,
|
|
'client_id': client_id,
|
|
'client_secret': client_secret,
|
|
'redirect_uri': redirect_uri,
|
|
'grant_type': "authorization_code"
|
|
})
|
|
try:
|
|
req = urllib2.Request(GOOGLE_TOKEN_ENDPOINT, data, headers)
|
|
content = urllib2.urlopen(req, timeout=TIMEOUT).read()
|
|
except urllib2.HTTPError:
|
|
error_msg = _("Something went wrong during your token generation. Maybe your Authorization Code is invalid or already expired")
|
|
raise self.env['res.config.settings'].get_config_warning(error_msg)
|
|
|
|
content = json.loads(content)
|
|
return content.get('refresh_token')
|
|
|
|
@api.model
|
|
def _get_google_token_uri(self, service, scope):
|
|
Parameters = self.env['ir.config_parameter'].sudo()
|
|
encoded_params = werkzeug.url_encode({
|
|
'scope': scope,
|
|
'redirect_uri': Parameters.get_param('google_redirect_uri'),
|
|
'client_id': Parameters.get_param('google_%s_client_id' % service),
|
|
'response_type': 'code',
|
|
})
|
|
return '%s?%s' % (GOOGLE_AUTH_ENDPOINT, encoded_params)
|
|
|
|
@api.model
|
|
def _get_authorize_uri(self, from_url, service, scope=False):
|
|
""" This method return the url needed to allow this instance of Odoo to access to the scope
|
|
of gmail specified as parameters
|
|
"""
|
|
state = {
|
|
'd': self.env.cr.dbname,
|
|
's': service,
|
|
'f': from_url
|
|
}
|
|
|
|
Parameters = self.env['ir.config_parameter']
|
|
base_url = Parameters.get_param('web.base.url', default='http://www.odoo.com?NoBaseUrl')
|
|
client_id = Parameters.sudo().get_param('google_%s_client_id' % (service,), default=False)
|
|
|
|
encoded_params = werkzeug.url_encode({
|
|
'response_type': 'code',
|
|
'client_id': client_id,
|
|
'state': json.dumps(state),
|
|
'scope': scope or '%s/auth/%s' % (GOOGLE_API_BASE_URL, service), # If no scope is passed, we use service by default to get a default scope
|
|
'redirect_uri': base_url + '/google_account/authentication',
|
|
'approval_prompt': 'force',
|
|
'access_type': 'offline'
|
|
})
|
|
return "%s?%s" % (GOOGLE_AUTH_ENDPOINT, encoded_params)
|
|
|
|
@api.model
|
|
def _get_google_token_json(self, authorize_code, service):
|
|
""" Call Google API to exchange authorization code against token, with POST request, to
|
|
not be redirected.
|
|
"""
|
|
Parameters = self.env['ir.config_parameter']
|
|
base_url = Parameters.get_param('web.base.url', default='http://www.odoo.com?NoBaseUrl')
|
|
client_id = Parameters.sudo().get_param('google_%s_client_id' % (service,), default=False)
|
|
client_secret = Parameters.sudo().get_param('google_%s_client_secret' % (service,), default=False)
|
|
|
|
headers = {"content-type": "application/x-www-form-urlencoded"}
|
|
data = werkzeug.url_encode({
|
|
'code': authorize_code,
|
|
'client_id': client_id,
|
|
'client_secret': client_secret,
|
|
'grant_type': 'authorization_code',
|
|
'redirect_uri': base_url + '/google_account/authentication'
|
|
})
|
|
try:
|
|
dummy, response, dummy = self._do_request(GOOGLE_TOKEN_ENDPOINT, params=data, headers=headers, type='POST', preuri='')
|
|
return response
|
|
except urllib2.HTTPError:
|
|
error_msg = _("Something went wrong during your token generation. Maybe your Authorization Code is invalid")
|
|
raise self.env['res.config.settings'].get_config_warning(error_msg)
|
|
|
|
# FIXME : this method update a field defined in google_calendar module. Since it is used only in that module, maybe it should be moved.
|
|
@api.model
|
|
def _refresh_google_token_json(self, refresh_token, service): # exchange_AUTHORIZATION vs Token (service = calendar)
|
|
Parameters = self.env['ir.config_parameter'].sudo()
|
|
client_id = Parameters.get_param('google_%s_client_id' % (service,), default=False)
|
|
client_secret = Parameters.get_param('google_%s_client_secret' % (service,), default=False)
|
|
|
|
headers = {"content-type": "application/x-www-form-urlencoded"}
|
|
data = werkzeug.url_encode({
|
|
'refresh_token': refresh_token,
|
|
'client_id': client_id,
|
|
'client_secret': client_secret,
|
|
'grant_type': 'refresh_token',
|
|
})
|
|
|
|
try:
|
|
dummy, response, dummy = self._do_request(GOOGLE_TOKEN_ENDPOINT, params=data, headers=headers, type='POST', preuri='')
|
|
return response
|
|
except urllib2.HTTPError, error:
|
|
if error.code == 400: # invalid grant
|
|
with registry(request.session.db).cursor() as cur:
|
|
self.env(cur)['res.users'].browse(self.env.uid).write({'google_%s_rtoken' % service: False})
|
|
try:
|
|
error_file = error.read()
|
|
error_key = json.loads(error_file).get("error", "nc")
|
|
except:
|
|
error_key = error
|
|
_logger.exception("Bad google request : %s !", error_key)
|
|
error_msg = _("Something went wrong during your token generation. Maybe your Authorization Code is invalid or already expired [%s]") % error_key
|
|
raise self.env['res.config.settings'].get_config_warning(error_msg)
|
|
|
|
# TODO JEM : remove preuri param, and rename type into method
|
|
@api.model
|
|
def _do_request(self, uri, params={}, headers={}, type='POST', preuri="https://www.googleapis.com"):
|
|
""" Execute the request to Google API. Return a tuple ('HTTP_CODE', 'HTTP_RESPONSE')
|
|
:param uri : the url to contact
|
|
:param params : dict or already encoded parameters for the request to make
|
|
:param headers : headers of request
|
|
:param type : the method to use to make the request
|
|
:param preuri : pre url to prepend to param uri.
|
|
"""
|
|
_logger.debug("Uri: %s - Type : %s - Headers: %s - Params : %s !" % (uri, type, headers, werkzeug.url_encode(params) if type == 'GET' else params))
|
|
|
|
status = 418
|
|
response = ""
|
|
ask_time = fields.Datetime.now()
|
|
try:
|
|
if type.upper() == 'GET' or type.upper() == 'DELETE':
|
|
data = werkzeug.url_encode(params)
|
|
req = urllib2.Request(preuri + uri + "?" + data)
|
|
elif type.upper() == 'POST' or type.upper() == 'PATCH' or type.upper() == 'PUT':
|
|
req = urllib2.Request(preuri + uri, params, headers)
|
|
else:
|
|
raise Exception(_('Method not supported [%s] not in [GET, POST, PUT, PATCH or DELETE]!') % (type))
|
|
req.get_method = lambda: type.upper()
|
|
|
|
resp = urllib2.urlopen(req, timeout=TIMEOUT)
|
|
status = resp.getcode()
|
|
|
|
if int(status) in (204, 404): # Page not found, no response
|
|
response = False
|
|
else:
|
|
content = resp.read()
|
|
response = json.loads(content)
|
|
|
|
try:
|
|
ask_time = datetime.strptime(resp.headers.get('date'), "%a, %d %b %Y %H:%M:%S %Z")
|
|
except:
|
|
pass
|
|
except urllib2.HTTPError, error:
|
|
if error.code in (204, 404):
|
|
status = error.code
|
|
response = ""
|
|
else:
|
|
_logger.exception("Bad google request : %s !", error.read())
|
|
if error.code in (400, 401, 410):
|
|
raise error
|
|
raise self.env['res.config.settings'].get_config_warning(_("Something went wrong with your request to google"))
|
|
return (status, response, ask_time)
|
|
|
|
# TODO : remove me, it is only used in google calendar. Make google_calendar use the constants
|
|
@api.model
|
|
def get_client_id(self, service):
|
|
return self.env['ir.config_parameter'].sudo().get_param('google_%s_client_id' % (service,), default=False)
|