update branch

CHANGES.md

@@ -1,5 +1,6 @@
-- Fix invited account verified status [#4776](https://github.com/appwrite/appwrite/pull/4776)
-- Get default region from environment on project create [#4780](https://github.com/appwrite/appwrite/pull/4780)
+# Unreleased version
+## Features
+- Added LINE OAuth2 Provider [#4426](https://github.com/appwrite/appwrite/pull/4426)
 
 # Version 1.1.2
 ## Changes
@@ -14,6 +15,8 @@
 
 # Version 1.1.1
 ## Bugs
+- Fix invited account verified status [#4776](https://github.com/appwrite/appwrite/pull/4776)
+- Get default region from environment on project create [#4780](https://github.com/appwrite/appwrite/pull/4780)
 - Fix Deletes worker using incorrect device for file deletion [#4662](https://github.com/appwrite/appwrite/pull/4662)
 - Fix Migration for Stats adding the region attribute [#4704](https://github.com/appwrite/appwrite/pull/4704)
 - Fix Migration stopping scheduled functions [#4704](https://github.com/appwrite/appwrite/pull/4704)

app/config/providers.php

@@ -171,6 +171,16 @@ return [ // Ordered by ABC.
         'beta' => false,
         'mock' => false,
     ],
+    'line' => [
+        'name' => 'Line',
+        'developers' => 'https://developers.line.biz/en/docs/line-login/integrate-line-login/',
+        'icon' => 'icon-line',
+        'enabled' => true,
+        'sandbox' => false,
+        'form' => false,
+        'beta' => false,
+        'mock' => false,
+    ],
     'linkedin' => [
         'name' => 'LinkedIn',
         'developers' => 'https://developer.linkedin.com/',

src/Appwrite/Auth/OAuth2/Line.php

@@ -0,0 +1,187 @@
+<?php
+
+namespace Appwrite\Auth\OAuth2;
+
+use Appwrite\Auth\OAuth2;
+
+class Line extends OAuth2
+{
+    /**
+     * @var array
+     */
+    protected array $user = [];
+
+    /**
+     * @var array
+     */
+    protected array $tokens = [];
+
+    /**
+     * @var array
+     */
+    protected array $scopes = [
+        'profile',
+        'openid',
+        'email',
+    ];
+
+    /**
+     * @return string
+     */
+    public function getName(): string
+    {
+        return 'line';
+    }
+
+    /**
+     * @return string
+     */
+    public function getLoginURL(): string
+    {
+        return 'https://access.line.me/oauth2/v2.1/authorize?' . \http_build_query([
+            'client_id' => $this->appID,
+            'redirect_uri' => $this->callback,
+            'response_type' => 'code',
+            'scope' => \implode(' ', $this->getScopes()),
+            'state' => \json_encode($this->state)
+
+        ]);
+    }
+
+    /**
+     * @param string $code
+     *
+     * @return array
+     */
+    protected function getTokens(string $code): array
+    {
+        if (empty($this->tokens)) {
+            $this->tokens = \json_decode($this->request(
+                'POST',
+                'https://api.line.me/oauth2/v2.1/token',
+                ['Content-Type: application/x-www-form-urlencoded'],
+                \http_build_query([
+                    'grant_type' => 'authorization_code',
+                    'code' => $code,
+                    'redirect_uri' => $this->callback,
+                    'client_id' => $this->appID,
+                    'client_secret' => $this->appSecret,
+
+                ])
+            ), true);
+        }
+
+        return $this->tokens;
+    }
+
+    /**
+     * @param string $refreshToken
+     *
+     * @return array
+     */
+    public function refreshTokens(string $refreshToken): array
+    {
+        $this->tokens = \json_decode($this->request(
+            'POST',
+            'https://api.line.me/oauth2/v2.1/token',
+            ['Content-Type: application/x-www-form-urlencoded'],
+            \http_build_query([
+                'grant_type' => 'refresh_token',
+                'refresh_token' => $refreshToken,
+                'client_id' => $this->appID,
+                'client_secret' => $this->appSecret,
+
+            ])
+        ), true);
+
+        if (empty($this->tokens['refresh_token'])) {
+            $this->tokens['refresh_token'] = $refreshToken;
+        }
+
+        return $this->tokens;
+    }
+
+    /**
+     * @param string $accessToken
+     *
+     * @return string
+     */
+    public function getUserID(string $accessToken): string
+    {
+        $user = $this->getUser($accessToken);
+
+        return $user['sub'] ?? '';
+    }
+
+    /**
+     * @param string $accessToken
+     *
+     * @return string
+     */
+    public function getUserEmail(string $accessToken): string
+    {
+        $user = $this->getUser($accessToken);
+
+        return  $user['email'] ?? '';
+    }
+
+    /**
+     * Check if the OAuth email is verified
+     *
+     * @link https://docs.github.com/en/rest/users/emails#list-email-addresses-for-the-authenticated-user
+     *
+     * @param string $accessToken
+     *
+     * @return bool
+     */
+    public function isEmailVerified(string $accessToken): bool
+    {
+        $email = $this->getUserEmail($accessToken);
+
+        return !empty($email);
+    }
+
+    /**
+     * @param string $accessToken
+     *
+     * @return string
+     */
+    public function getUserName(string $accessToken): string
+    {
+        $user = $this->getUser($accessToken);
+
+        return $user['name'] ?? '';
+    }
+
+    /**
+     * @param string $accessToken
+     *
+     * @return array
+     */
+    protected function getUser(string $accessToken): array
+    {
+        if (empty($this->user)) {
+            $headers = ['Authorization: Bearer ' . \urlencode($accessToken)];
+            $user = $this->request('GET', 'https://api.line.me/oauth2/v2.1/userinfo', $headers);
+            $this->user = \json_decode($user, true);
+
+            $emailInfo = \json_decode($this->request(
+                'POST',
+                'https://api.line.me/oauth2/v2.1/verify',
+                ['Content-Type: application/x-www-form-urlencoded'],
+                \http_build_query([
+                    'id_token' => $this->tokens['id_token'],
+                    'client_id' => $this->appID,
+                    'client_secret' => $this->appSecret,
+
+                ])
+            ), true);
+
+            if (isset($emailInfo['email'])) {
+                $this->user['email'] = $emailInfo['email'];
+            }
+        }
+
+        return $this->user;
+    }
+}