venv added, updated
This commit is contained in:
@@ -0,0 +1,51 @@
|
||||
from werkzeug.local import LocalProxy
|
||||
from .integration import FlaskIntegration, token_update
|
||||
from .apps import FlaskOAuth1App, FlaskOAuth2App
|
||||
from ..base_client import BaseOAuth, OAuthError
|
||||
|
||||
|
||||
class OAuth(BaseOAuth):
|
||||
oauth1_client_cls = FlaskOAuth1App
|
||||
oauth2_client_cls = FlaskOAuth2App
|
||||
framework_integration_cls = FlaskIntegration
|
||||
|
||||
def __init__(self, app=None, cache=None, fetch_token=None, update_token=None):
|
||||
super().__init__(
|
||||
cache=cache, fetch_token=fetch_token, update_token=update_token)
|
||||
self.app = app
|
||||
if app:
|
||||
self.init_app(app)
|
||||
|
||||
def init_app(self, app, cache=None, fetch_token=None, update_token=None):
|
||||
"""Initialize lazy for Flask app. This is usually used for Flask application
|
||||
factory pattern.
|
||||
"""
|
||||
self.app = app
|
||||
if cache is not None:
|
||||
self.cache = cache
|
||||
|
||||
if fetch_token:
|
||||
self.fetch_token = fetch_token
|
||||
if update_token:
|
||||
self.update_token = update_token
|
||||
|
||||
app.extensions = getattr(app, 'extensions', {})
|
||||
app.extensions['authlib.integrations.flask_client'] = self
|
||||
|
||||
def create_client(self, name):
|
||||
if not self.app:
|
||||
raise RuntimeError('OAuth is not init with Flask app.')
|
||||
return super().create_client(name)
|
||||
|
||||
def register(self, name, overwrite=False, **kwargs):
|
||||
self._registry[name] = (overwrite, kwargs)
|
||||
if self.app:
|
||||
return self.create_client(name)
|
||||
return LocalProxy(lambda: self.create_client(name))
|
||||
|
||||
|
||||
__all__ = [
|
||||
'OAuth', 'FlaskIntegration',
|
||||
'FlaskOAuth1App', 'FlaskOAuth2App',
|
||||
'token_update', 'OAuthError',
|
||||
]
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,107 @@
|
||||
from flask import g, redirect, request, session
|
||||
from ..requests_client import OAuth1Session, OAuth2Session
|
||||
from ..base_client import (
|
||||
BaseApp, OAuthError,
|
||||
OAuth1Mixin, OAuth2Mixin, OpenIDMixin,
|
||||
)
|
||||
|
||||
|
||||
class FlaskAppMixin:
|
||||
@property
|
||||
def token(self):
|
||||
attr = f'_oauth_token_{self.name}'
|
||||
token = g.get(attr)
|
||||
if token:
|
||||
return token
|
||||
if self._fetch_token:
|
||||
token = self._fetch_token()
|
||||
self.token = token
|
||||
return token
|
||||
|
||||
@token.setter
|
||||
def token(self, token):
|
||||
attr = f'_oauth_token_{self.name}'
|
||||
setattr(g, attr, token)
|
||||
|
||||
def _get_requested_token(self, *args, **kwargs):
|
||||
return self.token
|
||||
|
||||
def save_authorize_data(self, **kwargs):
|
||||
state = kwargs.pop('state', None)
|
||||
if state:
|
||||
self.framework.set_state_data(session, state, kwargs)
|
||||
else:
|
||||
raise RuntimeError('Missing state value')
|
||||
|
||||
def authorize_redirect(self, redirect_uri=None, **kwargs):
|
||||
"""Create a HTTP Redirect for Authorization Endpoint.
|
||||
|
||||
:param redirect_uri: Callback or redirect URI for authorization.
|
||||
:param kwargs: Extra parameters to include.
|
||||
:return: A HTTP redirect response.
|
||||
"""
|
||||
rv = self.create_authorization_url(redirect_uri, **kwargs)
|
||||
self.save_authorize_data(redirect_uri=redirect_uri, **rv)
|
||||
return redirect(rv['url'])
|
||||
|
||||
|
||||
class FlaskOAuth1App(FlaskAppMixin, OAuth1Mixin, BaseApp):
|
||||
client_cls = OAuth1Session
|
||||
|
||||
def authorize_access_token(self, **kwargs):
|
||||
"""Fetch access token in one step.
|
||||
|
||||
:return: A token dict.
|
||||
"""
|
||||
params = request.args.to_dict(flat=True)
|
||||
state = params.get('oauth_token')
|
||||
if not state:
|
||||
raise OAuthError(description='Missing "oauth_token" parameter')
|
||||
|
||||
data = self.framework.get_state_data(session, state)
|
||||
if not data:
|
||||
raise OAuthError(description='Missing "request_token" in temporary data')
|
||||
|
||||
params['request_token'] = data['request_token']
|
||||
params.update(kwargs)
|
||||
self.framework.clear_state_data(session, state)
|
||||
token = self.fetch_access_token(**params)
|
||||
self.token = token
|
||||
return token
|
||||
|
||||
|
||||
class FlaskOAuth2App(FlaskAppMixin, OAuth2Mixin, OpenIDMixin, BaseApp):
|
||||
client_cls = OAuth2Session
|
||||
|
||||
def authorize_access_token(self, **kwargs):
|
||||
"""Fetch access token in one step.
|
||||
|
||||
:return: A token dict.
|
||||
"""
|
||||
if request.method == 'GET':
|
||||
error = request.args.get('error')
|
||||
if error:
|
||||
description = request.args.get('error_description')
|
||||
raise OAuthError(error=error, description=description)
|
||||
|
||||
params = {
|
||||
'code': request.args.get('code'),
|
||||
'state': request.args.get('state'),
|
||||
}
|
||||
else:
|
||||
params = {
|
||||
'code': request.form.get('code'),
|
||||
'state': request.form.get('state'),
|
||||
}
|
||||
|
||||
claims_options = kwargs.pop('claims_options', None)
|
||||
state_data = self.framework.get_state_data(session, params.get('state'))
|
||||
self.framework.clear_state_data(session, params.get('state'))
|
||||
params = self._format_state_params(state_data, params)
|
||||
token = self.fetch_access_token(**params, **kwargs)
|
||||
self.token = token
|
||||
|
||||
if 'id_token' in token and 'nonce' in state_data:
|
||||
userinfo = self.parse_id_token(token, nonce=state_data['nonce'], claims_options=claims_options)
|
||||
token['userinfo'] = userinfo
|
||||
return token
|
||||
@@ -0,0 +1,28 @@
|
||||
from flask import current_app
|
||||
from flask.signals import Namespace
|
||||
from ..base_client import FrameworkIntegration
|
||||
|
||||
_signal = Namespace()
|
||||
#: signal when token is updated
|
||||
token_update = _signal.signal('token_update')
|
||||
|
||||
|
||||
class FlaskIntegration(FrameworkIntegration):
|
||||
def update_token(self, token, refresh_token=None, access_token=None):
|
||||
token_update.send(
|
||||
current_app,
|
||||
name=self.name,
|
||||
token=token,
|
||||
refresh_token=refresh_token,
|
||||
access_token=access_token,
|
||||
)
|
||||
|
||||
@staticmethod
|
||||
def load_config(oauth, name, params):
|
||||
rv = {}
|
||||
for k in params:
|
||||
conf_key = f'{name}_{k}'.upper()
|
||||
v = oauth.app.config.get(conf_key, None)
|
||||
if v is not None:
|
||||
rv[k] = v
|
||||
return rv
|
||||
Reference in New Issue
Block a user