1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
|
from __future__ import annotations
import base64
import json
from datetime import datetime, UTC
from getpass import getpass
from pathlib import Path
import shlex
from urllib.parse import urlencode, quote
import requests
from dotenv import load_dotenv
from jose import jwt
import os
ROOT_DIR = Path(__file__).resolve().parent.parent
AUTH_FILE = ROOT_DIR / "backend" / "src" / "cache" / "auth.json"
ENV_FILE = ROOT_DIR / ".env"
REDIRECT_URI = "https://localhost/callback/"
TOKEN_URL = "https://login.eveonline.com/v2/oauth/token"
AUTH_URL = "https://login.eveonline.com/v2/oauth/authorize/"
SCOPES = [
"esi-assets.read_assets.v1",
"esi-location.read_location.v1",
"esi-location.read_online.v1",
"esi-wallet.read_character_wallet.v1",
"esi-ui.open_window.v1",
"esi-ui.write_waypoint.v1",
]
def build_auth_url(client_id: str) -> str:
params = {
"response_type": "code",
"redirect_uri": REDIRECT_URI,
"client_id": client_id,
"state": "haul-local",
"scope": " ".join(SCOPES),
}
return f"{AUTH_URL}?{urlencode(params, quote_via=quote)}"
def prompt_for_value(name: str, secret: bool = False) -> str:
while True:
value = getpass(f"{name}: ") if secret else input(f"{name}: ").strip()
if value:
return value
print(f"{name} is required.")
def append_missing_env_values(values: dict[str, str]) -> None:
existing_text = ENV_FILE.read_text(encoding="utf-8") if ENV_FILE.exists() else ""
existing_keys = set()
for raw_line in existing_text.splitlines():
line = raw_line.strip()
if not line or line.startswith("#") or "=" not in line:
continue
key, _ = line.split("=", 1)
existing_keys.add(key.strip())
lines_to_add = []
for key, value in values.items():
if key not in existing_keys:
lines_to_add.append(f"{key}={shlex.quote(value)}")
if not lines_to_add:
return
if existing_text and not existing_text.endswith("\n"):
existing_text += "\n"
ENV_FILE.write_text(existing_text + "\n".join(lines_to_add) + "\n", encoding="utf-8")
def main() -> int:
load_dotenv(ENV_FILE)
client_id = os.getenv("CLIENT_ID") or prompt_for_value("CLIENT_ID")
secret_key = os.getenv("SECRET_KEY") or prompt_for_value("SECRET_KEY", secret=True)
print("Open this URL in your browser and complete the EVE SSO flow:\n")
print("If you authenticated earlier without wallet access, reauthorization is required for transaction-backed route confirmation.\n")
print(build_auth_url(client_id))
print("\nAfter the redirect, copy the 'code' query parameter and paste it below.")
code = input("Authorization code: ").strip()
if not code:
print("No authorization code provided.")
return 1
user_pass = f"{client_id}:{secret_key}".encode("utf-8")
headers = {
"Authorization": f"Basic {base64.urlsafe_b64encode(user_pass).decode()}",
"Content-Type": "application/x-www-form-urlencoded",
"Host": "login.eveonline.com",
}
form_values = {
"grant_type": "authorization_code",
"code": code,
}
response = requests.post(TOKEN_URL, data=form_values, headers=headers, timeout=30)
response.raise_for_status()
auth_data = response.json()
auth_data["expires_at"] = int(datetime.now(UTC).timestamp()) + int(auth_data.get("expires_in", 0))
AUTH_FILE.parent.mkdir(parents=True, exist_ok=True)
AUTH_FILE.write_text(json.dumps(auth_data, indent=2), encoding="utf-8")
claims = jwt.get_unverified_claims(auth_data["access_token"])
character_id = claims.get("sub", "").split(":")[-1] if claims.get("sub") else "unknown"
character_name = claims.get("name", "unknown")
append_missing_env_values(
{
"CLIENT_ID": client_id,
"SECRET_KEY": secret_key,
"character_id": character_id,
}
)
print(f"Saved auth cache to {AUTH_FILE}")
print(f"Detected character: {character_name} ({character_id})")
print(f"Ensured runtime env values exist in {ENV_FILE}")
return 0
if __name__ == "__main__":
raise SystemExit(main())
|
