mirror of
https://github.com/dat515-2025/Group-8.git
synced 2026-03-22 06:57:47 +01:00
57 lines
1.7 KiB
Python
57 lines
1.7 KiB
Python
import json
|
|
from typing import Optional, Literal, Any
|
|
|
|
from httpx_oauth.oauth2 import T
|
|
|
|
from app.oauth.custom_openid import CustomOpenID
|
|
|
|
|
|
class MojeIDOAuth(CustomOpenID):
|
|
def __init__(self, client_id: str, client_secret: str):
|
|
super().__init__(
|
|
client_id,
|
|
client_secret,
|
|
"https://mojeid.cz/.well-known/openid-configuration/",
|
|
"MojeID",
|
|
base_scopes=["openid", "email", "profile"],
|
|
)
|
|
|
|
async def get_user_info(self, token: str) -> Optional[Any]:
|
|
info = await self.get_profile(token)
|
|
|
|
return {
|
|
"first_name": info.get("given_name"),
|
|
"last_name": info.get("family_name"),
|
|
}
|
|
|
|
async def get_authorization_url(
|
|
self,
|
|
redirect_uri: str,
|
|
state: Optional[str] = None,
|
|
scope: Optional[list[str]] = None,
|
|
code_challenge: Optional[str] = None,
|
|
code_challenge_method: Optional[Literal["plain", "S256"]] = None,
|
|
extras_params: Optional[T] = None,
|
|
) -> str:
|
|
required_fields = {
|
|
'id_token': {
|
|
'name': {'essential': True},
|
|
'given_name': {'essential': True},
|
|
'family_name': {'essential': True},
|
|
'email': {'essential': True},
|
|
'mojeid_valid': {'essential': True},
|
|
}}
|
|
|
|
if extras_params is None:
|
|
extras_params = {}
|
|
extras_params["claims"] = json.dumps(required_fields)
|
|
|
|
return await super().get_authorization_url(
|
|
redirect_uri,
|
|
state,
|
|
scope,
|
|
code_challenge,
|
|
code_challenge_method,
|
|
extras_params,
|
|
)
|