add integration

id.saladeaula.digital/app/routes/authorize.py

@@ -1,33 +1,84 @@
-from uuid import uuid4
+from http import HTTPStatus
+from http.cookies import SimpleCookie
+from urllib.parse import ParseResult, quote, urlencode, urlunparse
 
 from authlib.oauth2 import OAuth2Error
 from authlib.oauth2.rfc6749 import errors
+from aws_lambda_powertools import Logger
+from aws_lambda_powertools.event_handler import Response
 from aws_lambda_powertools.event_handler.api_gateway import Router
 
+from jose_ import verify_jwt
 from oauth2 import authorization
 
 router = Router()
+logger = Logger(__name__)
 
 
 @router.get('/authorize')
 def authorize():
-    user = {
-        'id': str(uuid4()),
-        'sub': 'sergio@somosbeta.com.br',
-    }
+    current_event = router.current_event
+    cookies = _parse_cookies(current_event.get('cookies', []))  # type: ignore
+    id_token = cookies.get('id_token')
+    continue_url = quote(
+        urlunparse(
+            ParseResult(
+                scheme='',
+                netloc='',
+                path=current_event.path,
+                params='',
+                query=urlencode(current_event.query_string_parameters),
+                fragment='',
+            )
+        ),
+        safe='',
+    )
+    login_url = f'/login?continue={continue_url}'
+
+    if not id_token:
+        return Response(
+            status_code=HTTPStatus.FOUND,
+            headers={'Location': login_url},
+        )
+
+    try:
+        user = verify_jwt(id_token)
+    except Exception as exc:
+        logger.exception(exc)
+        return Response(
+            status_code=HTTPStatus.FOUND,
+            headers={'Location': login_url},
+        )
+
     try:
         grant = authorization.get_consent_grant(
             request=router.current_event,
-            end_user=user,
+            end_user={'id': user['sub']},
         )
     except OAuth2Error as err:
+        logger.exception(err)
         return dict(err.get_body())
 
     try:
         return authorization.create_authorization_response(
             request=router.current_event,
-            grant_user=user,
+            grant_user={'id': user['sub']},
             grant=grant,
         )
-    except errors.OAuth2Error:
+    except errors.OAuth2Error as err:
+        logger.exception(err)
         return {}
+
+
+def _parse_cookies(cookies: list[str] | None) -> dict[str, str]:
+    parsed_cookies = {}
+
+    if not cookies:
+        return parsed_cookies
+
+    for s in cookies:
+        c = SimpleCookie()
+        c.load(s)
+        parsed_cookies.update({k: morsel.value for k, morsel in c.items()})
+
+    return parsed_cookies