feat(auth): add OAuth PKCE browser flow (#198)

* feat(auth): add OAuth PKCE browser flow

* chore: update taskfile

* fix: remove unused variable

* fix(oauth): replace OOB OAuth flow with local callback server

* fix: prevent Slowloris attack

* chore: factorize to oauth_flow

Author: LorrisSaintGenez

.github/workflows/releases.yml

@@ -38,6 +38,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
           CHOCOLATEY_API_KEY: ${{ secrets.CHOCOLATEY_API_KEY }}
+          ALGOLIA_DASHBOARD_URL: ${{ secrets.ALGOLIA_DASHBOARD_URL }}
+          ALGOLIA_API_URL: ${{ secrets.ALGOLIA_API_URL }}
+          ALGOLIA_OAUTH_CLIENT_ID: ${{ secrets.ALGOLIA_OAUTH_CLIENT_ID }}
+          ALGOLIA_OAUTH_SCOPE: ${{ secrets.ALGOLIA_OAUTH_SCOPE }}
       - name: Docs checkout
         uses: actions/checkout@v4
         with:

.goreleaser.yml

@@ -16,7 +16,12 @@ builds:
       binary: algolia
       main: ./cmd/algolia/main.go
       ldflags:
-        - -s -w -X github.com/algolia/cli/pkg/version.Version={{.Version}}
+        - -s -w
+          -X github.com/algolia/cli/pkg/version.Version={{.Version}}
+          -X github.com/algolia/cli/api/dashboard.DefaultDashboardURL={{ .Env.ALGOLIA_DASHBOARD_URL }}
+          -X github.com/algolia/cli/api/dashboard.DefaultAPIURL={{ .Env.ALGOLIA_API_URL }}
+          -X github.com/algolia/cli/pkg/auth.DefaultOAuthClientID={{ .Env.ALGOLIA_OAUTH_CLIENT_ID }}
+          -X github.com/algolia/cli/api/dashboard.DefaultOAuthScope={{ .Env.ALGOLIA_OAUTH_SCOPE }}
     id: macos
     goos: [darwin]
     goarch: [amd64, arm64]

Makefile

@@ -61,7 +61,14 @@ api-specs-pr:
 # Build the binary
 build:
 	go generate ./...
-	go build -ldflags "-s -w -X=github.com/algolia/cli/pkg/version.Version=$(VERSION)" -o algolia cmd/algolia/main.go
+	go build -ldflags "\
+		-s -w \
+		-X=github.com/algolia/cli/pkg/version.Version=$(VERSION) \
+		-X=github.com/algolia/cli/api/dashboard.DefaultDashboardURL=$(ALGOLIA_DASHBOARD_URL) \
+		-X=github.com/algolia/cli/api/dashboard.DefaultAPIURL=$(ALGOLIA_API_URL) \
+		-X=github.com/algolia/cli/pkg/auth.DefaultOAuthClientID=$(ALGOLIA_OAUTH_CLIENT_ID) \
+		-X 'github.com/algolia/cli/api/dashboard.DefaultOAuthScope=$(ALGOLIA_OAUTH_SCOPE)'" \
+		-o algolia cmd/algolia/main.go
 .PHONY: build
 
 ## Install & uninstall tasks are here for use on *nix platform only.

Taskfile.yml

@@ -1,5 +1,6 @@
 version: 3
 output: prefixed
+dotenv: [.env]
 vars:
   # The URL to the "old" Algolia docs repo
   docs_remote: https://github.com/algolia/doc.git
@@ -11,7 +12,15 @@ tasks:
   build:
     desc: Build the binary
     deps: [generate]
-    cmd: go build -ldflags "-s -w -X=github.com/algolia/cli/pkg/version.Version={{ .VERSION }}" -o algolia cmd/algolia/main.go
+    cmd: >-
+      go build -ldflags
+      "-s -w
+      -X github.com/algolia/cli/pkg/version.Version={{ .VERSION }}
+      -X github.com/algolia/cli/api/dashboard.DefaultDashboardURL=$ALGOLIA_DASHBOARD_URL
+      -X github.com/algolia/cli/api/dashboard.DefaultAPIURL=$ALGOLIA_API_URL
+      -X github.com/algolia/cli/pkg/auth.DefaultOAuthClientID=$ALGOLIA_OAUTH_CLIENT_ID
+      -X 'github.com/algolia/cli/api/dashboard.DefaultOAuthScope=$ALGOLIA_OAUTH_SCOPE'"
+      -o algolia cmd/algolia/main.go
     vars:
       VERSION: '{{ .VERSION | default "main" }}'
   test:
@@ -26,7 +35,6 @@ tasks:
       To run them, create a `.env` file with the `ALGOLIA_APPLICATION_ID`
       and `ALGOLIA_API_KEY` credentials.
     cmd: go test ./e2e -tags=e2e
-    dotenv: [.env]
   lint:
     desc: Lint code
     cmd: golangci-lint run