discourse/plugins/discourse-microsoft-auth/lib/omniauth-microsoft365.rb

# frozen_string_literal: true

require "omniauth/strategies/oauth2"

module OmniAuth
  module Strategies
    class MicrosoftOffice365 < OmniAuth::Strategies::OAuth2
      option :name, :microsoft_office365

      DEFAULT_SCOPE = "openid email profile https://graph.microsoft.com/User.Read"

      option :authorize_options, [:scope]

      uid { raw_info["id"] }

      info do
        {
          name: raw_info["displayName"] || raw_info["userPrincipalName"],
          email: raw_info["mail"] || raw_info["userPrincipalName"],
        }
      end

      extra { { "raw_info" => raw_info } }

      def raw_info
        @raw_info ||= access_token.get("https://graph.microsoft.com/v1.0/me").parsed
      end

      def authorize_params
        super.tap do |params|
          %w[display score auth_type].each do |v|
            params[v.to_sym] = request.params[v] if request.params[v]
          end

          params[:scope] ||= DEFAULT_SCOPE
        end
      end

      def callback_url
        full_host + script_name + callback_path
      end
    end
  end
end