golang框架的安全认证与第三方集成

import (
    "log"

    "github.com/gorilla/mux"
    "golang.org/x/oauth2"
    "golang.org/x/oauth2/google"
)

var (
    clientID     = "YOUR_CLIENT_ID"
    clientSecret = "YOUR_CLIENT_SECRET"
    redirectURI  = "YOUR_REDIRECT_URI"
)

func main() {
    r := mux.NewRouter()

    config := &oauth2.Config{
        ClientID:     clientID,
        ClientSecret: clientSecret,
        RedirectURL:  redirectURI,
        Scopes:       []string{"https://www.googleapis.com/auth/userinfo.profile"},
        Endpoint:     google.Endpoint,
    }

    r.HandleFunc("/login", func(w http.ResponseWriter, r *http.Request) {
        url := config.AuthCodeURL("state-token")
        http.Redirect(w, r, url, http.StatusTemporaryRedirect)
    })

    r.HandleFunc("/callback", func(w http.ResponseWriter, r *http.Request) {
        // Parse the authorization code.
        code := r.URL.Query().Get("code")

        // Exchange the authorization code for an access token.
        token, err := config.Exchange(r.Context(), code)
        if err != nil {
            log.Printf("Error exchanging code: %v", err)
            http.Error(w, http.StatusInternalServerError, err.Error())
            return
        }

        // Retrieve user information from the access token.
        client := config.Client(r.Context(), token)
        info, err := client.Get("https://www.googleapis.com/oauth2/v1/userinfo")
        if err != nil {
            log.Printf("Error retrieving user info: %v", err)
            http.Error(w, http.StatusInternalServerError, err.Error())
            return
        }

        // Store the user information in your database.
        // ...

        // Redirect the user back to your application.
        http.Redirect(w, r, "/", http.StatusFound)
    })

    http.ListenAndServe(":8080", r)
}