From b05722e218d902ec6170dd375549e9755d68b9b4 Mon Sep 17 00:00:00 2001
From: Michael Snoyman <michael@snoyman.com>
Date: Fri, 25 Jun 2010 15:07:12 +0300
Subject: [PATCH] A working Facebook API and simple sample application

---
 Web/Authenticate/Facebook.hs | 65 ++++++++++++++++++++++++++++++++++++
 Web/Authenticate/OpenId.hs   |  4 ---
 Web/Authenticate/Rpxnow.hs   |  4 ---
 authenticate.cabal           |  5 +--
 facebook.hs                  | 56 +++++++++++++++++++++++++++++++
 5 files changed, 124 insertions(+), 10 deletions(-)
 create mode 100644 Web/Authenticate/Facebook.hs
 create mode 100644 facebook.hs

diff --git a/Web/Authenticate/Facebook.hs b/Web/Authenticate/Facebook.hs
new file mode 100644
index 00000000..f802078c
--- /dev/null
+++ b/Web/Authenticate/Facebook.hs
@@ -0,0 +1,65 @@
+{-# LANGUAGE FlexibleContexts #-}
+module Web.Authenticate.Facebook where
+
+import Network.HTTP.Wget
+import Control.Failure hiding (Error)
+import Control.Monad.IO.Class
+import Data.List (intercalate)
+import Data.Object
+import Data.Object.Json
+import Data.ByteString.Char8 (pack)
+
+data Facebook = Facebook
+    { facebookClientId :: String
+    , facebookClientSecret :: String
+    , facebookRedirectUri :: String
+    }
+
+newtype AccessToken = AccessToken { unAccessToken :: String }
+    deriving Show
+
+getForwardUrl :: Facebook -> [String] -> String
+getForwardUrl fb perms = concat
+    [ "https://graph.facebook.com/oauth/authorize?client_id="
+    , facebookClientId fb -- FIXME escape
+    , "&redirect_uri="
+    , facebookRedirectUri fb -- FIXME escape
+    , if null perms
+        then ""
+        else "&scope=" ++ intercalate "," perms
+    ]
+
+accessTokenUrl :: Facebook -> String -> String
+accessTokenUrl fb code = concat
+    [ "https://graph.facebook.com/oauth/access_token?client_id="
+    , facebookClientId fb
+    , "&redirect_uri="
+    , facebookRedirectUri fb
+    , "&client_secret="
+    , facebookClientSecret fb
+    , "&code="
+    , code
+    ]
+
+getAccessToken :: Facebook -> String -> IO AccessToken
+getAccessToken fb code = do
+    let url = accessTokenUrl fb code
+    b <- wget url [] []
+    let (front, back) = splitAt 13 b
+    case front of
+        "access_token=" -> return $ AccessToken back
+        _ -> error $ "Invalid facebook response: " ++ back
+
+graphUrl :: AccessToken -> String -> String
+graphUrl (AccessToken s) func = concat
+    [ "https://graph.facebook.com/"
+    , func
+    , "?access_token="
+    , s
+    ]
+
+getGraphData :: AccessToken -> String -> IO StringObject
+getGraphData at func = do
+    let url = graphUrl at func
+    b <- wget url [] []
+    decode $ pack b
diff --git a/Web/Authenticate/OpenId.hs b/Web/Authenticate/OpenId.hs
index d9f0ff8e..548ff0b9 100644
--- a/Web/Authenticate/OpenId.hs
+++ b/Web/Authenticate/OpenId.hs
@@ -26,11 +26,7 @@ module Web.Authenticate.OpenId
 import Network.HTTP.Wget
 import Text.HTML.TagSoup
 import Numeric (showHex)
-#if MIN_VERSION_transformers(0,2,0)
 import "transformers" Control.Monad.IO.Class
-#else
-import "transformers" Control.Monad.Trans
-#endif
 import Data.Data
 import Control.Failure hiding (Error)
 import Control.Exception
diff --git a/Web/Authenticate/Rpxnow.hs b/Web/Authenticate/Rpxnow.hs
index d9698998..676960da 100644
--- a/Web/Authenticate/Rpxnow.hs
+++ b/Web/Authenticate/Rpxnow.hs
@@ -22,11 +22,7 @@ module Web.Authenticate.Rpxnow
 import Data.Object
 import Data.Object.Json
 import Network.HTTP.Wget
-#if MIN_VERSION_transformers(0,2,0)
 import "transformers" Control.Monad.IO.Class
-#else
-import "transformers" Control.Monad.Trans
-#endif
 import Control.Failure
 import Data.Maybe
 import Web.Authenticate.OpenId (AuthenticateException (..))
diff --git a/authenticate.cabal b/authenticate.cabal
index 33991ddf..4057209c 100644
--- a/authenticate.cabal
+++ b/authenticate.cabal
@@ -1,5 +1,5 @@
 name:            authenticate
-version:         0.6.2
+version:         0.6.3
 license:         BSD3
 license-file:    LICENSE
 author:          Michael Snoyman <michael@snoyman.com>
@@ -23,5 +23,6 @@ library
                      transformers >= 0.1 && < 0.3,
                      bytestring >= 0.9 && < 0.10
     exposed-modules: Web.Authenticate.Rpxnow,
-                     Web.Authenticate.OpenId
+                     Web.Authenticate.OpenId,
+                     Web.Authenticate.Facebook
     ghc-options:     -Wall -fno-warn-orphans
diff --git a/facebook.hs b/facebook.hs
new file mode 100644
index 00000000..585f90cb
--- /dev/null
+++ b/facebook.hs
@@ -0,0 +1,56 @@
+{-# LANGUAGE TypeFamilies, QuasiQuotes #-}
+import Yesod
+import Web.Authenticate.Facebook
+import Data.Object
+import Data.Maybe (fromMaybe)
+
+data FB = FB Facebook
+fb :: FB
+fb = FB $ Facebook "134280699924829" "a7685e10c8977f5435e599aaf1d232eb"
+                   "http://localhost:3000/facebook/"
+mkYesod "FB" [$parseRoutes|
+/ RootR GET
+/facebook FacebookR GET
+|]
+
+instance Yesod FB where approot _ = "http://localhost:3000"
+
+getRootR = do
+    FB f <- getYesod
+    redirectString RedirectTemporary $ getForwardUrl f ["email"]
+    return ()
+
+getFacebookR = do
+    FB f <- getYesod
+    code <- runFormGet $ required $ input "code"
+    at <- liftIO $ getAccessToken f code
+    mreq <-runFormGet $ optional $ input "req"
+    let req = fromMaybe "me" mreq
+    so <- liftIO $ getGraphData at req
+    let so' = objToHamlet so
+    hamletToRepHtml [$hamlet|
+%form
+    %input!type=hidden!name=code!value=$string.code$
+    Request: $
+    %input!type=text!name=req!value=$string.req$
+    \ $
+    %input!type=submit
+%hr
+^so'^
+|]
+
+main = toWaiApp fb >>= basicHandler 3000
+
+objToHamlet :: StringObject -> Hamlet url
+objToHamlet (Scalar s) = [$hamlet|$string.s$|]
+objToHamlet (Sequence list) = [$hamlet|
+%ul
+    $forall list o
+        %li ^objToHamlet.o^
+|]
+objToHamlet (Mapping pairs) = [$hamlet|
+%dl
+    $forall pairs pair
+        %dt $string.fst.pair$
+        %dd ^objToHamlet.snd.pair^
+|]