Skip to content
This repository was archived by the owner on Jun 1, 2023. It is now read-only.

Validated DPoP support #46

Merged
rohe merged 8 commits into from
Jun 23, 2021
Merged

Validated DPoP support #46

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
6ac0cdf
Editorial changes.
rohe Jun 6, 2021
0a47f8a
Changed such that on can enter an issuer ID for an OP that supports d…
rohe Jun 7, 2021
754171d
An example configuration for an RP that knows DPoP.
rohe Jun 7, 2021
49e9483
Fixed test
rohe Jun 7, 2021
06e2e8d
fix: setup.py - oidcmsg version
peppelinux Jun 15, 2021
12b3ebc
f string handling
rohe Jun 22, 2021
a5f4220
Changed version
rohe Jun 22, 2021
43f660d
Merge branch 'develop' of github.com:IdentityPython/JWTConnect-Python…
rohe Jun 22, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion example/flask_rp/conf.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,7 @@
"client_secret_post"
]
},
"redirect_uris": "None",
"redirect_uris": [],
"services": {
"discovery": {
"class": "oidcrp.oidc.provider_info_discovery.ProviderInfoDiscovery",
Expand Down
218 changes: 218 additions & 0 deletions example/flask_rp/dpop_conf.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,218 @@
{
"logging": {
"version": 1,
"disable_existing_loggers": false,
"root": {
"handlers": [
"file"
],
"level": "DEBUG"
},
"loggers": {
"idp": {
"level": "DEBUG"
}
},
"handlers": {
"file": {
"class": "logging.FileHandler",
"filename": "dpoop_debug.log",
"formatter": "default"
}
},
"formatters": {
"default": {
"format": "%(asctime)s %(name)s %(levelname)s %(message)s"
}
}
},
"port": 8090,
"domain": "127.0.0.1",
"base_url": "https://{domain}:{port}",
"httpc_params": {
"verify": false
},
"rp_keys": {
"private_path": "private/jwks.json",
"key_defs": [
{
"type": "RSA",
"key": "",
"use": [
"sig"
]
},
{
"type": "EC",
"crv": "P-256",
"use": [
"sig"
]
}
],
"public_path": "static/jwks.json",
"read_only": false
},
"services": {
"discovery": {
"class": "oidcrp.oidc.provider_info_discovery.ProviderInfoDiscovery",
"kwargs": {}
},
"registration": {
"class": "oidcrp.oidc.registration.Registration",
"kwargs": {}
},
"authorization": {
"class": "oidcrp.oidc.authorization.Authorization",
"kwargs": {}
},
"accesstoken": {
"class": "oidcrp.oidc.access_token.AccessToken",
"kwargs": {}
},
"userinfo": {
"class": "oidcrp.oidc.userinfo.UserInfo",
"kwargs": {}
},
"end_session": {
"class": "oidcrp.oidc.end_session.EndSession",
"kwargs": {}
}
},
"clients": {
"": {
"client_preferences": {
"application_name": "rphandler",
"application_type": "web",
"contacts": [
"ops@example.com"
],
"response_types": [
"code"
],
"scope": [
"openid",
"profile",
"email",
"address",
"phone"
],
"token_endpoint_auth_method": [
"client_secret_basic",
"client_secret_post"
]
},
"redirect_uris": [],
"services": {
"discovery": {
"class": "oidcrp.oidc.provider_info_discovery.ProviderInfoDiscovery",
"kwargs": {}
},
"registration": {
"class": "oidcrp.oidc.registration.Registration",
"kwargs": {}
},
"authorization": {
"class": "oidcrp.oidc.authorization.Authorization",
"kwargs": {}
},
"accesstoken": {
"class": "oidcrp.oidc.access_token.AccessToken",
"kwargs": {}
},
"userinfo": {
"class": "oidcrp.oidc.userinfo.UserInfo",
"kwargs": {}
},
"end_session": {
"class": "oidcrp.oidc.end_session.EndSession",
"kwargs": {}
}
}
},
"flask_provider": {
"client_preferences": {
"application_name": "rphandler",
"application_type": "web",
"contacts": [
"ops@example.com"
],
"response_types": [
"code"
],
"scope": [
"openid",
"profile",
"email",
"address",
"phone"
],
"token_endpoint_auth_method": [
"client_secret_basic",
"client_secret_post"
]
},
"issuer": "https://127.0.0.1:5000/",
"redirect_uris": [
"https://{domain}:{port}/authz_cb/local"
],
"post_logout_redirect_uris": [
"https://{domain}:{port}/session_logout/local"
],
"frontchannel_logout_uri": "https://{domain}:{port}/fc_logout/local",
"frontchannel_logout_session_required": true,
"backchannel_logout_uri": "https://{domain}:{port}/bc_logout/local",
"backchannel_logout_session_required": true,
"services": {
"discovery": {
"class": "oidcrp.oidc.provider_info_discovery.ProviderInfoDiscovery",
"kwargs": {}
},
"registration": {
"class": "oidcrp.oidc.registration.Registration",
"kwargs": {}
},
"authorization": {
"class": "oidcrp.oidc.authorization.Authorization",
"kwargs": {}
},
"accesstoken": {
"class": "oidcrp.oidc.access_token.AccessToken",
"kwargs": {}
},
"userinfo": {
"class": "oidcrp.oidc.userinfo.UserInfo",
"kwargs": {}
},
"end_session": {
"class": "oidcrp.oidc.end_session.EndSession",
"kwargs": {}
}
},
"add_ons": {
"pkce": {
"function": "oidcrp.oauth2.add_on.pkce.add_support",
"kwargs": {
"code_challenge_length": 64,
"code_challenge_method": "S256"
}
},
"dpop": {
"function": "oidcrp.oauth2.add_on.dpop.add_support",
"kwargs": {
"signing_algorithms": [
"ES256", "ES384", "ES512"
]
}
}
}
}
},
"webserver": {
"port": 8090,
"domain": "127.0.0.1",
"server_cert": "certs/cert.pem",
"server_key": "certs/key.pem",
"debug": true
}
}
6 changes: 4 additions & 2 deletions example/flask_rp/templates/opbyuid.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,11 @@ <h1>OP by UID</h1>
<form action="rp" method="get">
<h2>Start sign in flow</h2>
<h3>By entering your unique identifier:</h3>
<input type="text" id="uid" name="uid" class="form-control" placeholder="UID" autofocus>
<input type="text" id="uid" name="uid" class="form-control" placeholder="UID" autofocus>
<h3>an issuer ID</h3>
<input type="text" id="dyn_iss" name="dyn_iss" class="form-control">
<h3><em>Or</em> you can chose one of the preconfigured OpenID Connect Providers</h3>
<select name="iss">
<select name="static_iss">
<option value=""></option>
{% for op in providers %}
<option value="{{ op }}">{{ op }}</option>
Expand Down
Loading