Skip to content

Latest commit

 

History

History
30 lines (20 loc) · 1.77 KB

README.md

File metadata and controls

30 lines (20 loc) · 1.77 KB
Raw

Flask-pyoidc

PyPI

This repository contains an example of how to use the pyoidc library to provide simple OpenID Connect authentication (using the "Code Flow".

Usage

The extension support both static and dynamic provider configuration discovery as well as static and dynamic client registration. The different modes of provider configuration can be combined in any way with the different client registration modes.

  • Static provider configuration: OIDCAuthentication(provider_configuration_info=provider_config), where provider_config is a dictionary containing the provider metadata.
  • Dynamic provider configuration: OIDCAuthentication(issuer=issuer_url), where issuer_url is the issuer URL of the provider.
  • Static client registration: OIDCAuthentication(client_registration_info=client_info), where client_info is all the registered metadata about the client. The redirect_uris registered with the provider MUST include <flask_url>/redirect_uri, where <flask_url> is the URL for the Flask application.

The application using this extension MUST set the following builtin configuration values of Flask:

  • SERVER_NAME (MUST be the same as <flask_url> if using static client registration
  • SECRET_KEY (this extension relies on Flask session, which requires SECRET_KEY)

Have a look at the example Flask app in app.py for an idea of how to use it.