summaryrefslogtreecommitdiffstats
path: root/src/DotNetOpenAuth.Web/Clients/OAuth/TwitterClient.cs
diff options
context:
space:
mode:
Diffstat (limited to 'src/DotNetOpenAuth.Web/Clients/OAuth/TwitterClient.cs')
-rw-r--r--src/DotNetOpenAuth.Web/Clients/OAuth/TwitterClient.cs94
1 files changed, 94 insertions, 0 deletions
diff --git a/src/DotNetOpenAuth.Web/Clients/OAuth/TwitterClient.cs b/src/DotNetOpenAuth.Web/Clients/OAuth/TwitterClient.cs
new file mode 100644
index 0000000..6d82607
--- /dev/null
+++ b/src/DotNetOpenAuth.Web/Clients/OAuth/TwitterClient.cs
@@ -0,0 +1,94 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Net;
+using System.Xml.Linq;
+using DotNetOpenAuth.Messaging;
+using DotNetOpenAuth.OAuth;
+using DotNetOpenAuth.OAuth.ChannelElements;
+using DotNetOpenAuth.OAuth.Messages;
+
+namespace DotNetOpenAuth.Web.Clients
+{
+ /// <summary>
+ /// Represents a Twitter client
+ /// </summary>
+ internal class TwitterClient : OAuthClient
+ {
+ /// <summary>
+ /// The description of Twitter's OAuth protocol URIs for use with their "Sign in with Twitter" feature.
+ /// </summary>
+ public static readonly ServiceProviderDescription TwitterServiceDescription = new ServiceProviderDescription
+ {
+ RequestTokenEndpoint = new MessageReceivingEndpoint("http://twitter.com/oauth/request_token", HttpDeliveryMethods.GetRequest | HttpDeliveryMethods.AuthorizationHeaderRequest),
+ UserAuthorizationEndpoint = new MessageReceivingEndpoint("http://twitter.com/oauth/authenticate", HttpDeliveryMethods.GetRequest | HttpDeliveryMethods.AuthorizationHeaderRequest),
+ AccessTokenEndpoint = new MessageReceivingEndpoint("http://twitter.com/oauth/access_token", HttpDeliveryMethods.GetRequest | HttpDeliveryMethods.AuthorizationHeaderRequest),
+ TamperProtectionElements = new ITamperProtectionChannelBindingElement[] { new HmacSha1SigningBindingElement() },
+ };
+
+ /// <summary>
+ /// Initializes a new instance of the <see cref="TwitterClient"/> class with the specified consumer key and consumer secret.
+ /// </summary>
+ /// <param name="consumerKey">The consumer key.</param>
+ /// <param name="consumerSecret">The consumer secret.</param>
+ [System.Diagnostics.CodeAnalysis.SuppressMessage(
+ "Microsoft.Reliability",
+ "CA2000:Dispose objects before losing scope",
+ Justification = "We can't dispose the object because we still need it through the app lifetime.")]
+ public TwitterClient(string consumerKey, string consumerSecret) :
+ base("twitter", TwitterServiceDescription, consumerKey, consumerSecret)
+ {
+ }
+
+ /// <summary>
+ /// Check if authentication succeeded after user is redirected back from the service provider.
+ /// </summary>
+ /// <param name="response">The response token returned from service provider</param>
+ /// <returns>
+ /// Authentication result
+ /// </returns>
+ [System.Diagnostics.CodeAnalysis.SuppressMessage(
+ "Microsoft.Design",
+ "CA1031:DoNotCatchGeneralExceptionTypes",
+ Justification = "We don't care if the request for additional data fails.")]
+ protected override AuthenticationResult VerifyAuthenticationCore(AuthorizedTokenResponse response)
+ {
+ string accessToken = response.AccessToken;
+ string userId = response.ExtraData["user_id"];
+ string userName = response.ExtraData["screen_name"];
+
+ string profileRequestUrl = "http://api.twitter.com/1/users/show.xml?user_id=" + Uri.EscapeDataString(userId);
+ var profileEndpoint = new MessageReceivingEndpoint(profileRequestUrl, HttpDeliveryMethods.GetRequest);
+ HttpWebRequest request = WebWorker.PrepareAuthorizedRequest(profileEndpoint, accessToken);
+
+ var extraData = new Dictionary<string, string>();
+ try
+ {
+ using (WebResponse profileResponse = request.GetResponse())
+ {
+ using (Stream responseStream = profileResponse.GetResponseStream())
+ {
+ XDocument document = XDocument.Load(responseStream);
+ extraData.AddDataIfNotEmpty(document, "name");
+ extraData.AddDataIfNotEmpty(document, "location");
+ extraData.AddDataIfNotEmpty(document, "description");
+ extraData.AddDataIfNotEmpty(document, "url");
+ }
+ }
+ }
+ catch (Exception)
+ {
+ // At this point, the authentication is already successful.
+ // Here we are just trying to get additional data if we can.
+ // If it fails, no problem.
+ }
+
+ return new AuthenticationResult(
+ isSuccessful: true,
+ provider: ProviderName,
+ providerUserId: userId,
+ userName: userName,
+ extraData: extraData);
+ }
+ }
+} \ No newline at end of file