78 lines
2.1 KiB
Python
78 lines
2.1 KiB
Python
# Copyright (c) 2019. Tobias Kurze
|
|
"""
|
|
OIDC login auth module
|
|
"""
|
|
|
|
import flask
|
|
from flask import jsonify, redirect, url_for
|
|
from flask_login import login_user
|
|
from flask_pyoidc.flask_pyoidc import OIDCAuthentication
|
|
from flask_pyoidc.user_session import UserSession
|
|
|
|
from backend import app, db
|
|
from backend.models.user_model import User
|
|
from . import auth_bp
|
|
from .oidc_config import PROVIDER_NAME, OIDC_PROVIDERS
|
|
|
|
|
|
OIDCAuthentication.oidc_auth_orig = OIDCAuthentication.oidc_auth
|
|
OIDCAuthentication.oidc_logout_orig = OIDCAuthentication.oidc_logout
|
|
|
|
|
|
def oidc_auth_default_provider(self):
|
|
"""monkey patch oidc_auth"""
|
|
return self.oidc_auth_orig(PROVIDER_NAME)
|
|
|
|
|
|
def oidc_logout_default_provider(self):
|
|
"""monkey patch oidc_logout"""
|
|
return self.oidc_logout_orig(PROVIDER_NAME)
|
|
|
|
|
|
OIDCAuthentication.oidc_auth = oidc_auth_default_provider
|
|
OIDCAuthentication.oidc_logout = oidc_logout_default_provider
|
|
|
|
oidc_auth = OIDCAuthentication(OIDC_PROVIDERS)
|
|
|
|
|
|
def create_or_retrieve_user_from_userinfo(userinfo):
|
|
"""Updates and returns ar creates a user from userinfo (part of OIDC token)."""
|
|
try:
|
|
email = userinfo["email"]
|
|
except KeyError:
|
|
return None
|
|
user = User.get_by_identifier(email)
|
|
|
|
if user is not None:
|
|
app.logger.info("user found")
|
|
#TODO: update user!
|
|
return user
|
|
|
|
user = User(email=email, first_name=userinfo.get("given_name", ""),
|
|
last_name=userinfo.get("family_name", ""))
|
|
|
|
app.logger.info("creating new user")
|
|
|
|
db.session.add(user)
|
|
db.session.commit()
|
|
return user
|
|
|
|
|
|
|
|
@auth_bp.route('/oidc', methods=['GET'])
|
|
@oidc_auth.oidc_auth()
|
|
def oidc():
|
|
user_session = UserSession(flask.session)
|
|
app.logger.info(user_session.userinfo)
|
|
user = create_or_retrieve_user_from_userinfo(user_session.userinfo)
|
|
login_user(user)
|
|
return jsonify(id_token=user_session.id_token,
|
|
access_token=flask.session['access_token'],
|
|
userinfo=user_session.userinfo)
|
|
|
|
|
|
@auth_bp.route('/oidc_logout', methods=['GET'])
|
|
def oidc_logout():
|
|
oidc_auth.oidc_logout()
|
|
return redirect('/')
|