Mail

venv/lib/python3.12/site-packages/allauth/socialaccount/providers/openid_connect/provider.py

@@ -0,0 +1,82 @@
+from django.urls import reverse
+from django.utils.http import urlencode
+
+from allauth.account.models import EmailAddress
+from allauth.socialaccount.providers.base import ProviderAccount
+from allauth.socialaccount.providers.oauth2.provider import OAuth2Provider
+
+
+class OpenIDConnectProviderAccount(ProviderAccount):
+    def to_str(self):
+        dflt = super(OpenIDConnectProviderAccount, self).to_str()
+        return self.account.extra_data.get("name", dflt)
+
+
+class OpenIDConnectProvider(OAuth2Provider):
+    id = "openid_connect"
+    name = "OpenID Connect"
+    account_class = OpenIDConnectProviderAccount
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        self.name = self.app.name
+
+    @property
+    def server_url(self):
+        url = self.app.settings["server_url"]
+        return self.wk_server_url(url)
+
+    def wk_server_url(self, url):
+        well_known_uri = "/.well-known/openid-configuration"
+        if not url.endswith(well_known_uri):
+            url += well_known_uri
+        return url
+
+    def get_login_url(self, request, **kwargs):
+        url = reverse(
+            self.app.provider + "_login", kwargs={"provider_id": self.app.provider_id}
+        )
+        if kwargs:
+            url = url + "?" + urlencode(kwargs)
+        return url
+
+    def get_callback_url(self):
+        return reverse(
+            self.app.provider + "_callback",
+            kwargs={"provider_id": self.app.provider_id},
+        )
+
+    @property
+    def token_auth_method(self):
+        return self.app.settings.get("token_auth_method")
+
+    def get_default_scope(self):
+        return ["openid", "profile", "email"]
+
+    def extract_uid(self, data):
+        return str(data["sub"])
+
+    def extract_common_fields(self, data):
+        return dict(
+            email=data.get("email"),
+            username=data.get("preferred_username"),
+            name=data.get("name"),
+            user_id=data.get("user_id"),
+            picture=data.get("picture"),
+        )
+
+    def extract_email_addresses(self, data):
+        addresses = []
+        email = data.get("email")
+        if email:
+            addresses.append(
+                EmailAddress(
+                    email=email,
+                    verified=data.get("email_verified", False),
+                    primary=True,
+                )
+            )
+        return addresses
+
+
+provider_classes = [OpenIDConnectProvider]

venv/lib/python3.12/site-packages/allauth/socialaccount/providers/openid_connect/tests.py

@@ -0,0 +1,10 @@
+from allauth.socialaccount.tests import OpenIDConnectTests
+from allauth.tests import TestCase
+
+
+class OpenIDConnectTests(OpenIDConnectTests, TestCase):
+    provider_id = "unittest-server"
+
+
+class OtherOpenIDConnectTests(OpenIDConnectTests, TestCase):
+    provider_id = "ther-server"

venv/lib/python3.12/site-packages/allauth/socialaccount/providers/openid_connect/urls.py

@@ -0,0 +1,24 @@
+from django.urls import include, path, re_path
+
+from . import views
+
+
+urlpatterns = [
+    re_path(
+        r"^(?P<provider_id>[^/]+)/",
+        include(
+            [
+                path(
+                    "login/",
+                    views.login,
+                    name="openid_connect_login",
+                ),
+                path(
+                    "login/callback/",
+                    views.callback,
+                    name="openid_connect_callback",
+                ),
+            ]
+        ),
+    )
+]

venv/lib/python3.12/site-packages/allauth/socialaccount/providers/openid_connect/views.py

@@ -0,0 +1,73 @@
+import requests
+
+from django.urls import reverse
+
+from allauth.socialaccount.providers.oauth2.views import (
+    OAuth2Adapter,
+    OAuth2CallbackView,
+    OAuth2LoginView,
+)
+from allauth.utils import build_absolute_uri
+
+
+class OpenIDConnectAdapter(OAuth2Adapter):
+    supports_state = True
+
+    def __init__(self, request, provider_id):
+        self.provider_id = provider_id
+        super().__init__(request)
+
+    @property
+    def openid_config(self):
+        if not hasattr(self, "_openid_config"):
+            server_url = self.get_provider().server_url
+            resp = requests.get(server_url)
+            resp.raise_for_status()
+            self._openid_config = resp.json()
+        return self._openid_config
+
+    @property
+    def basic_auth(self):
+        token_auth_method = self.get_provider().app.settings.get("token_auth_method")
+        if token_auth_method:
+            return token_auth_method == "client_secret_basic"
+        return "client_secret_basic" in self.openid_config.get(
+            "token_endpoint_auth_methods_supported", []
+        )
+
+    @property
+    def access_token_url(self):
+        return self.openid_config["token_endpoint"]
+
+    @property
+    def authorize_url(self):
+        return self.openid_config["authorization_endpoint"]
+
+    @property
+    def profile_url(self):
+        return self.openid_config["userinfo_endpoint"]
+
+    def complete_login(self, request, app, token, response):
+        response = requests.get(
+            self.profile_url, headers={"Authorization": "Bearer " + str(token)}
+        )
+        response.raise_for_status()
+        extra_data = response.json()
+        return self.get_provider().sociallogin_from_response(request, extra_data)
+
+    def get_callback_url(self, request, app):
+        callback_url = reverse(
+            "openid_connect_callback", kwargs={"provider_id": self.provider_id}
+        )
+        protocol = self.redirect_uri_protocol
+        return build_absolute_uri(request, callback_url, protocol)
+
+
+def login(request, provider_id):
+    view = OAuth2LoginView.adapter_view(OpenIDConnectAdapter(request, provider_id))
+    return view(request)
+
+
+def callback(request, provider_id):
+    view = OAuth2CallbackView.adapter_view(OpenIDConnectAdapter(request, provider_id))
+    return view(request)