Auth0 Integration V2

README.md

@@ -54,6 +54,7 @@ For general configuration, [click here](docs_website/docs/configurations/general
     -   Google Cloud OAuth
     -   Okta OAuth
     -   GitHub OAuth
+    -   Auth0 OAuth
 -   LDAP
 
 ### Metastore

docs_website/docs/integrations/add_auth.mdx

@@ -73,6 +73,16 @@ OAUTH_CLIENT_ID: '---Redacted---'
 OAUTH_CLIENT_SECRET: '---Redacted---'
 ```
 
+#### Auth0
+
+```yaml
+AUTH_BACKEND: 'app.auth.auth0_auth'
+OAUTH_CLIENT_ID: '---Redacted---'
+OAUTH_CLIENT_SECRET: '---Redacted---'
+AUTH0_BASE_URL: https://[Redacted].[Redacted].auth0.com/
+PUBLIC_URL: http://localhost:10001
+```
+
 :::caution
 DO NOT CHECK IN `OAUTH_CLIENT_SECRET` to the codebase. The example above is for testing only. For production, please use environment variables to provide this value.
 :::

querybook/server/app/auth/auth0_auth.py

@@ -0,0 +1,36 @@
+import requests
+from env import get_env_config
+
+from app.auth.okta_auth import OAUTH_CALLBACK_PATH, OktaLoginManager
+
+
+class NoopAuth(requests.auth.AuthBase):
+    """
+    This auth doesn't do anything.
+    It only used to override oauthlib's behavior.
+    """
+
+    def __call__(self, r):
+        return r
+
+
+class Auth0LoginManager(OktaLoginManager):
+    def get_oauth_urls(self):
+        auth0_base_url = get_env_config("AUTH0_BASE_URL")
+        authorization_url = f"{auth0_base_url}/authorize"
+        token_url = f"{auth0_base_url}/oauth/token"
+        profile_url = f"{auth0_base_url}/userinfo"
+        return authorization_url, token_url, profile_url
+
+
+login_manager = Auth0LoginManager()
+
+ignore_paths = [OAUTH_CALLBACK_PATH]
+
+
+def init_app(app):
+    login_manager.init_app(app)
+
+
+def login(request):
+    return login_manager.login(request)

querybook/server/app/auth/okta_auth.py

@@ -28,7 +28,7 @@ def __call__(self, r):
 
 
 class OktaLoginManager(OAuthLoginManager):
-    def get_okta_urls(self):
+    def get_oauth_urls(self):
         okta_base_url = get_env_config("OKTA_BASE_URL")
         authorization_url = f"{okta_base_url}/v1/authorize"
         token_url = f"{okta_base_url}/v1/token"
@@ -38,7 +38,7 @@ def get_okta_urls(self):
     @property
     @in_mem_memoized()
     def oauth_config(self):
-        authorization_url, token_url, profile_url = self.get_okta_urls()
+        authorization_url, token_url, profile_url = self.get_oauth_urls()
 
         return {
             "callback_url": "{}{}".format(