user.auth.clients.oidc

Classes

`OIDCAttributes`	Holds the expected OIDC claims.
`OIDCClient`
`OIDCConnections`

Module Contents

class user.auth.clients.oidc.OIDCAttributes[source]

Holds the expected OIDC claims.

These claims may either be included in the JWT id token or in the response to the user endpoint

source_id: str[source]

username: str[source]

first_name: str[source]

last_name: str[source]

group: str[source]

preferred_username: str[source]

classmethod from_cfg(cfg: dict[str, Any]) → Self[source]

class user.auth.clients.oidc.OIDCClient[source]

issuer: str[source]

client_id: str[source]

client_secret: str[source]

button_text: str[source]

attributes: OIDCAttributes[source]

primary: bool[source]

scope: list[str][source]

fixed_metadata: dict[str, Any][source]

_provider_metadata: dict[str, dict[str, Any]][source]

session(provider: onegov.user.auth.provider.OIDCProvider, request: onegov.core.request.CoreRequest, *, with_openid_scope: bool = False) → requests_oauthlib.OAuth2Session[source]: Returns a requests session tied to a OAuth2 client

metadata(request: onegov.core.request.CoreRequest) → dict[str, Any][source]

validate_token(request: onegov.core.request.CoreRequest, token: dict[str, Any]) → dict[str, Any][source]

class user.auth.clients.oidc.OIDCConnections[source]

connections: dict[str, OIDCClient][source]

client(app: onegov.user.auth.provider.HasApplicationIdAndNamespace) → OIDCClient | None[source]

classmethod from_cfg(config: dict[str, Any]) → Self[source]