oauth/client.py
author durandn
Mon, 29 Feb 2016 12:22:07 +0100
changeset 5 4407b131a70e
parent 3 3f52a017e6f5
child 10 50b532f5e6cb
permissions -rw-r--r--
adjustments on Oauth server and mock ged client + Readme
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
3
3f52a017e6f5 Added link to open a new Renkan from mock GED client
durandn
parents: 1
diff changeset
     1
from flask import Flask, url_for, session, request, jsonify, render_template, redirect
1
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
     2
from flask_oauthlib.client import OAuth
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
     3
from settings.client_settings import ClientSettings
5
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
     4
import base64
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
     5
import requests
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
     6
import json
1
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
     7
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
     8
app = Flask(__name__)
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
     9
app.debug = True
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    10
app.secret_key = 'secret'
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    11
app.config.from_object(ClientSettings)
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    12
oauth = OAuth(app)
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    13
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    14
remote = oauth.remote_app(
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    15
    'remote',
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    16
    consumer_key=app.config.get("CLIENT_ID", ""),
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    17
    consumer_secret=app.config.get("CLIENT_SECRET", ""),
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    18
    request_token_params=app.config.get("REQUEST_TOKEN_PARAMS", ""),
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    19
    base_url=app.config.get("BASE_URL", ""),
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    20
    request_token_url=app.config.get("REQUEST_TOKEN_URL", ""),
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    21
    access_token_url=app.config.get("ACCESS_TOKEN_URL", ""),
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    22
    authorize_url=app.config.get("AUTHORIZE_URL", "")
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    23
)
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    24
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    25
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    26
@app.route('/')
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    27
def index():
5
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    28
    if 'remote_oauth_authorizationcode' not in session:
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    29
        next_url = request.args.get('next') or request.referrer or None
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    30
        return remote.authorize(
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    31
            callback=url_for('authorized', next=next_url, _external=True)
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    32
        )
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    33
    if 'me' not in session:
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    34
        resp = remote.get('user/InfoComplete')
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    35
        print("authcode resp data: "+str(resp.data))
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    36
        me = resp.data.get("username", "")
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    37
        session["me"] = me
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    38
    if 'remote_oauth_clientcredentials' not in session:
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    39
        auth_string = bytes(app.config["CLIENT_ID"]+':'+app.config['CLIENT_SECRET'], "utf-8")
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    40
        auth_code = base64.b64encode(auth_string).decode("utf-8")
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    41
        resp = requests.post(app.config["ACCESS_TOKEN_URL"]+"?grant_type=client_credentials&scope=basic", data={}, headers={
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    42
            'Authorization': 'Basic %s' % auth_code,
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    43
        })
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    44
        if resp is None:
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    45
            return 'Access denied: reason=%s error=%s' % (
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    46
                request.args['error_reason'],
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    47
                request.args['error_description']
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    48
            )
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    49
        session['remote_oauth_clientcredentials'] = (json.loads(resp.text)['access_token'], '')
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    50
        resp = remote.get('user/InfoComplete')
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    51
        print("clientcredentials resp data: "+str(resp.data))
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    52
        server = resp.data.get("username", "")
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    53
        session["server"] = server
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    54
    return render_template('client/index.html', current_username=session["me"], oauth_username=session["server"])
1
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    55
5
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    56
@app.route('/renkan-request')
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    57
def renkan_request():
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    58
    if 'remote_oauth_clientcredentials' in session:
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    59
        resp = requests.post(
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    60
            app.config["CREATE_RENKAN_ENDPOINT"]+"?act_as="+session.get("me", "anonymous"), 
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    61
            {"title": "RENKAN_FROM_GED"},
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    62
            headers={
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    63
                'Authorization': 'Bearer %s' % session['remote_oauth_clientcredentials'][0],
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    64
                'renkan-act-as': session.get("me", "anonymous")
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    65
            }
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    66
        )
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    67
        print(resp.text)
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    68
    return redirect('/')
1
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    69
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    70
@app.route('/authorized')
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    71
def authorized():
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    72
    resp = remote.authorized_response()
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    73
    if resp is None:
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    74
        return 'Access denied: reason=%s error=%s' % (
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    75
            request.args['error_reason'],
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    76
            request.args['error_description']
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    77
        )
5
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    78
    session['remote_oauth_authorizationcode'] = (resp['access_token'], '')
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    79
    
3
3f52a017e6f5 Added link to open a new Renkan from mock GED client
durandn
parents: 1
diff changeset
    80
    return redirect('/')
1
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    81
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    82
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    83
@remote.tokengetter
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    84
def get_oauth_token():
5
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    85
    print("referrer : "+request.referrer)
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    86
    if 'remote_oauth_clientcredentials' in session and 'server' not in session:
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    87
        return session['remote_oauth_clientcredentials']
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    88
    else:
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    89
        return session.get('remote_oauth_authorizationcode', '')
4407b131a70e adjustments on Oauth server and mock ged client + Readme
durandn
parents: 3
diff changeset
    90
1
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    91
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    92
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    93
if __name__ == '__main__':
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    94
    import os
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    95
    os.environ['DEBUG'] = 'true'
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    96
    os.environ['OAUTHLIB_INSECURE_TRANSPORT'] = 'true'
5f50937893ac Commit work on metaeducation
durandn
parents:
diff changeset
    97
    app.run(host='localhost', port=8000)