Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion requirements.txt
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
Flask
Flask-SQLAlchemy
Authlib==0.13
Authlib>=1.0
34 changes: 16 additions & 18 deletions website/oauth2.py
Original file line number Diff line number Diff line change
Expand Up @@ -26,9 +26,9 @@
'exp': 3600,
}

def exists_nonce(nonce, req):
def exists_nonce(nonce, request):
exists = OAuth2AuthorizationCode.query.filter_by(
client_id=req.client_id, nonce=nonce
client_id=request.payload.client_id, nonce=nonce
).first()
return bool(exists)

Expand All @@ -37,27 +37,25 @@ def generate_user_info(user, scope):
return UserInfo(sub=str(user.id), name=user.username)


def create_authorization_code(client, grant_user, request):
code = gen_salt(48)
nonce = request.data.get('nonce')
def save_authorization_code(code, request):
nonce = request.payload.data.get('nonce')
item = OAuth2AuthorizationCode(
code=code,
client_id=client.client_id,
redirect_uri=request.redirect_uri,
scope=request.scope,
user_id=grant_user.id,
client_id=request.client.client_id,
redirect_uri=request.payload.redirect_uri,
scope=request.payload.scope,
user_id=request.user.id,
nonce=nonce,
)
db.session.add(item)
db.session.commit()
return code


class AuthorizationCodeGrant(_AuthorizationCodeGrant):
def create_authorization_code(self, client, grant_user, request):
return create_authorization_code(client, grant_user, request)
def save_authorization_code(self, code, request):
return save_authorization_code(code, request)

def parse_authorization_code(self, code, client):
def query_authorization_code(self, code, client):
item = OAuth2AuthorizationCode.query.filter_by(
code=code, client_id=client.client_id).first()
if item and not item.is_expired():
Expand All @@ -75,7 +73,7 @@ class OpenIDCode(_OpenIDCode):
def exists_nonce(self, nonce, request):
return exists_nonce(nonce, request)

def get_jwt_config(self, grant):
def get_jwt_config(self, grant, client):
return DUMMY_JWT_CONFIG

def generate_user_info(self, user, scope):
Expand All @@ -86,21 +84,21 @@ class ImplicitGrant(_OpenIDImplicitGrant):
def exists_nonce(self, nonce, request):
return exists_nonce(nonce, request)

def get_jwt_config(self, grant):
def get_jwt_config(self, client):
return DUMMY_JWT_CONFIG

def generate_user_info(self, user, scope):
return generate_user_info(user, scope)


class HybridGrant(_OpenIDHybridGrant):
def create_authorization_code(self, client, grant_user, request):
return create_authorization_code(client, grant_user, request)
def save_authorization_code(self, code, request):
return save_authorization_code(code, request)

def exists_nonce(self, nonce, request):
return exists_nonce(nonce, request)

def get_jwt_config(self):
def get_jwt_config(self, client):
return DUMMY_JWT_CONFIG

def generate_user_info(self, user, scope):
Expand Down
4 changes: 2 additions & 2 deletions website/routes.py
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
from .oauth2 import authorization, require_oauth, generate_user_info


bp = Blueprint(__name__, 'home')
bp = Blueprint('home', __name__)


def current_user():
Expand Down Expand Up @@ -78,7 +78,7 @@ def authorize():
user = current_user()
if request.method == 'GET':
try:
grant = authorization.validate_consent_request(end_user=user)
grant = authorization.get_consent_grant(end_user=user)
except OAuth2Error as error:
return jsonify(dict(error.get_body()))
return render_template('authorize.html', user=user, grant=grant)
Expand Down