feat(third_party/lieer): Overwrite included client secret
This commit is contained in:
parent
a260eba3cf
commit
41eea96e63
4 changed files with 35 additions and 1 deletions
BIN
ops/secrets/lieer-client-secret
Normal file
BIN
ops/secrets/lieer-client-secret
Normal file
Binary file not shown.
1
third_party/default.nix
vendored
1
third_party/default.nix
vendored
|
@ -40,6 +40,7 @@ let
|
|||
fira
|
||||
fira-code
|
||||
fira-mono
|
||||
gettext
|
||||
git
|
||||
glibc
|
||||
gnutar
|
||||
|
|
20
third_party/lieer/api_client.patch
vendored
Normal file
20
third_party/lieer/api_client.patch
vendored
Normal file
|
@ -0,0 +1,20 @@
|
|||
diff --git a/lieer/remote.py b/lieer/remote.py
|
||||
index 6e3973a..62728f7 100644
|
||||
--- a/lieer/remote.py
|
||||
+++ b/lieer/remote.py
|
||||
@@ -25,12 +25,12 @@ class Remote:
|
||||
# * https://stackoverflow.com/questions/19615372/client-secret-in-oauth-2-0?rq=1
|
||||
#
|
||||
OAUTH2_CLIENT_SECRET = {
|
||||
- "client_id":"753933720722-ju82fu305lii0v9rdo6mf9hj40l5juv0.apps.googleusercontent.com",
|
||||
- "project_id":"capable-pixel-160614",
|
||||
+ "client_id":"945192553054-84bml3hfvv0floml1natqc4cribs0tmt.apps.googleusercontent.com",
|
||||
+ "project_id":"tazjins-lieer-project",
|
||||
"auth_uri":"https://accounts.google.com/o/oauth2/auth",
|
||||
"token_uri":"https://accounts.google.com/o/oauth2/token",
|
||||
"auth_provider_x509_cert_url":"https://www.googleapis.com/oauth2/v1/certs",
|
||||
- "client_secret":"8oudEG0Tvb7YI2V0ykp2Pzz9",
|
||||
+ "client_secret":"${CLIENT_SECRET}",
|
||||
"redirect_uris":["urn:ietf:wg:oauth:2.0:oob", "http://localhost"]
|
||||
}
|
||||
|
15
third_party/lieer/default.nix
vendored
15
third_party/lieer/default.nix
vendored
|
@ -7,7 +7,18 @@
|
|||
|
||||
with pkgs.third_party;
|
||||
|
||||
python3Packages.buildPythonApplication rec {
|
||||
let
|
||||
# My employer does not allow third-party projects to use our email
|
||||
# accounts, but I want to use lieer for it anyways.
|
||||
#
|
||||
# To accomplish this the following derivation creates a patch that
|
||||
# replaces the API client with one that I control.
|
||||
authPatch = runCommand "client_secret.patch" {} ''
|
||||
export PATH=${lib.makeBinPath [ gettext ]}:$PATH
|
||||
export CLIENT_SECRET='${builtins.getEnv "LIEER_CLIENT_SECRET"}'
|
||||
cat ${./api_client.patch} | envsubst > $out
|
||||
'';
|
||||
in python3Packages.buildPythonApplication rec {
|
||||
name = "lieer-${version}";
|
||||
version = "1.0";
|
||||
|
||||
|
@ -18,6 +29,8 @@ python3Packages.buildPythonApplication rec {
|
|||
sha256 = "1zzylv8xbcrh34bz0s29dawzcyx39lai8y8wk0bl4x75v1jfynvf";
|
||||
};
|
||||
|
||||
patches = [ authPatch ];
|
||||
|
||||
propagatedBuildInputs = with python3Packages; [
|
||||
notmuch
|
||||
oauth2client
|
||||
|
|
Loading…
Reference in a new issue