WordPressDotCom.hs

{-# LANGUAGE OverloadedStrings #-}

module Yesod.Auth.OAuth2.WordPressDotCom
  ( oauth2WordPressDotCom
  ) where

import qualified Data.Text as T
import Yesod.Auth.OAuth2.Prelude

pluginName :: Text
pluginName = "WordPress.com"

newtype WpUser = WpUser Int

instance FromJSON WpUser where
  parseJSON = withObject "WpUser" $ \o -> WpUser <$> o .: "ID"

oauth2WordPressDotCom
  :: (YesodAuth m)
  => Text -- ^ Client Id
  -> Text -- ^ Client Secret
  -> AuthPlugin m
oauth2WordPressDotCom clientId clientSecret =
  authOAuth2 pluginName oauth2 $ \manager token -> do
    (WpUser userId, userResponse) <- authGetProfile
      pluginName
      manager
      token
      "https://public-api.wordpress.com/rest/v1/me/"

    pure Creds { credsPlugin = pluginName
               , credsIdent  = T.pack $ show userId
               , credsExtra  = setExtra token userResponse
               }

 where
  oauth2 = OAuth2
    { oauth2ClientId          = clientId
    , oauth2ClientSecret      = Just clientSecret
    , oauth2AuthorizeEndpoint =
      "https://public-api.wordpress.com/oauth2/authorize"
        `withQuery` [scopeParam "," ["auth"]]
    , oauth2TokenEndpoint     = "https://public-api.wordpress.com/oauth2/token"
    , oauth2RedirectUri       = Nothing
    }