대학 연구실을 위한 웹 프로토타이핑 (with Python) 후기

router = APIRouter()

from dotenv import load_dotenv
import os

load_dotenv()

DATABASE_URL = os.getenv("DATABASE_URL") 
AUTHORIZATION_URL = os.getenv("AUTHORIZATION_URL") 
TOKEN_URL = os.getenv("TOKEN_URL") 
GOOGLE_CLIENT_ID = os.getenv("GOOGLE_CLIENT_ID") 
GOOGLE_CLIENT_SECRET = os.getenv("GOOGLE_CLIENT_SECRET") 
REDIRECT_URI = os.getenv("REDIRECT_URI") 

scopes = {
    "openid": "OpenID connect to authenticate",
    "profile": "Access to your profile",
    "email": "Access to your email",
}

oauth2_scheme = OAuth2AuthorizationCodeBearer(
    authorizationUrl=AUTHORIZATION_URL,
    tokenUrl=TOKEN_URL,
    scopes=scopes,
)

@router.get("/login")
async def google_login():
    google_login_url = f"https://accounts.google.com/o/oauth2/auth?response_type=code&client_id={GOOGLE_CLIENT_ID}&redirect_uri={REDIRECT_URI}&scope=openid%20profile%20email&access_type=offline"
    return RedirectResponse(url=google_login_url)

@router.get("/login/callback")
async def google_login_callback(request: Request, code: str = Query(...)):
    async with httpx.AsyncClient() as client:
        # 로그인해서 받은 code를 사용해 Google의 토큰 엔드포인트(TOKEN_URL)에 POST 요청
        token_response = await client.post(
            TOKEN_URL,
            data={
                "client_id": GOOGLE_CLIENT_ID,
                "client_secret": GOOGLE_CLIENT_SECRET,
                "code": code,
                "grant_type": "authorization_code",
                "redirect_uri": REDIRECT_URI
            },
        )
    # 액세스 토큰을 받아 json으로 변환
    token_response_json = token_response.json()
    if token_response.is_error:
        raise HTTPException(
            status_code=status.HTTP_400_BAD_REQUEST,
            detail=token_response_json,
        )
    
    # 액세스 토큰을 사용해 사용자 정보 엔드포인트에 GET 요청 -> 유저 정보 획득
    access_token = token_response_json.get("access_token")
    async with httpx.AsyncClient() as client:
        user_info_response = await client.get("https://www.googleapis.com/oauth2/v1/userinfo", headers={"Authorization": f"Bearer {access_token}"})
    user_info = user_info_response.json()

    user_email = user_info.get("email")
    user_email_encoded = quote(user_email)
    final_url = f"http://localhost:8501?user_info={user_email_encoded}"
    return RedirectResponse(url=final_url)

@router.get("/logout")
async def logout():
    logout_redirect_url = "http://localhost:8501" # streamlit 웹 페이지 포트
    return RedirectResponse(url=logout_redirect_url)