philorg/oidc-fastapi-test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 2 Wiki Activity Actions

Fix scope
All checks were successful
/ test (push) Successful in 5s
Details
/ build (push) Successful in 20s
Details

Browse source
This commit is contained in:
phil 2025-02-08 19:05:13 +01:00
parent 923a63f5d5
commit 38b983c2a5
1 changed files with 5 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

19
src/oidc_test/main.py
View file

@ -95,20 +95,9 @@ async def home(
resources = [] resources = []
oidc_provider_settings = None oidc_provider_settings = None
if user is None:
access_token_scope = None
else:
try:
access_token_scope = user.get_scope(verify_signature=False)
except InvalidTokenError as err:
access_token_scope = None
logger.info("Invalid token")
logger.exception(err)
context = { context = {
"settings": settings.model_dump(), "settings": settings.model_dump(),
"user": user, "user": user,
"access_token_scope": access_token_scope,
"now": now, "now": now,
"oidc_provider": oidc_provider, "oidc_provider": oidc_provider,
"oidc_provider_settings": oidc_provider_settings, "oidc_provider_settings": oidc_provider_settings,
@ -124,13 +113,15 @@ async def home(
assert oidc_provider is not None assert oidc_provider is not None
assert oidc_provider.name is not None assert oidc_provider.name is not None
oidc_provider_settings = oidc_providers_settings[oidc_provider.name] oidc_provider_settings = oidc_providers_settings[oidc_provider.name]
access_token_parsed = oidc_provider_settings.decode(
token["access_token"], verify_signature=False
)
context["access_token_scope"] = access_token_parsed["scope"]
# context["id_token_parsed"] = pretty_details(user, now) # context["id_token_parsed"] = pretty_details(user, now)
context["id_token_parsed"] = oidc_provider_settings.decode( context["id_token_parsed"] = oidc_provider_settings.decode(
token["id_token"], verify_signature=False token["id_token"], verify_signature=False
) )
context["access_token_parsed"] = oidc_provider_settings.decode( context["access_token_parsed"] = access_token_parsed
token["access_token"], verify_signature=False
)
context["refresh_token_parsed"] = oidc_provider_settings.decode( context["refresh_token_parsed"] = oidc_provider_settings.decode(
token["refresh_token"], verify_signature=False token["refresh_token"], verify_signature=False
) )