chrp examples

Author: peppelinux

chrp/conf.py

@@ -0,0 +1,84 @@
+# BASE = "https://lingon.ladok.umu.se"
+
+PORT = 8089
+
+# If PORT and not default port
+BASEURL = "https://localhost:{}".format(PORT)
+# else
+# BASEURL = "https://localhost"
+
+# If BASE is https these has to be specified
+SERVER_CERT = "certs/cert.pem"
+SERVER_KEY = "certs/key.pem"
+CA_BUNDLE = None
+
+VERIFY_SSL = False
+
+KEYDEFS = [
+    {"type": "RSA", "key": '', "use": ["sig"]},
+    {"type": "EC", "crv": "P-256", "use": ["sig"]}
+]
+
+PRIVATE_JWKS_PATH = "jwks_dir/jwks.json"
+PUBLIC_JWKS_PATH = 'static/jwks.json'
+# information used when registering the client, this may be the same for all OPs
+
+SERVICES = ['ProviderInfoDiscovery', 'Registration', 'Authorization',
+            'AccessToken', 'RefreshAccessToken', 'UserInfo']
+
+SERVICES_DICT = {'accesstoken': {'class': 'oidcservice.oidc.access_token.AccessToken',
+                                 'kwargs': {}},
+                 'authorization': {'class': 'oidcservice.oidc.authorization.Authorization',
+                                   'kwargs': {}},
+                 'discovery': {'class': 'oidcservice.oidc.provider_info_discovery.ProviderInfoDiscovery',
+                               'kwargs': {}},
+                 'end_session': {'class': 'oidcservice.oidc.end_session.EndSession',
+                                 'kwargs': {}},
+                 'refresh_accesstoken': {'class': 'oidcservice.oidc.refresh_access_token.RefreshAccessToken',
+                                         'kwargs': {}},
+                 'registration': {'class': 'oidcservice.oidc.registration.Registration',
+                                   'kwargs': {}},
+                 'userinfo': {'class': 'oidcservice.oidc.userinfo.UserInfo', 'kwargs': {}}}
+
+CLIENT_PREFS = {
+    "application_type": "web",
+    "application_name": "rphandler",
+    "contacts": ["ops@example.com"],
+    "response_types": ["code", "id_token", "id_token token", "code id_token",
+                       "code id_token token", "code token"],
+    "scope": ["openid", "profile", "email", "address", "phone"],
+    "token_endpoint_auth_method": "client_secret_basic",
+    'services': SERVICES_DICT
+}
+
+# The keys in this dictionary are the OPs short user friendly name
+# not the issuer (iss) name.
+
+CLIENTS = {
+    # The ones that support webfinger, OP discovery and client registration
+    # This is the default, any client that is not listed here is expected to
+    # support dynamic discovery and registration.
+    "": {
+        "client_preferences": CLIENT_PREFS,
+        "redirect_uris": None,
+        "services": {
+            'WebFinger': {},
+            'ProviderInfoDiscovery': {},
+            'Registration': {},
+            'Authorization': {},
+            'AccessToken': {},
+            'RefreshAccessToken': {},
+            'UserInfo': {}
+        }
+    },
+  'flop':
+      {
+        'client_preferences': CLIENT_PREFS,
+        'issuer': 'https://127.0.0.1:5000/',
+        'redirect_uris': ['https://127.0.0.1:8090/authz_cb/flop'],
+        'services': SERVICES_DICT
+      }
+}
+
+# Whether an attempt to fetch the userinfo should be made
+USERINFO = True

chrp/example_conf.py

@@ -26,6 +26,20 @@
 SERVICES = ['ProviderInfoDiscovery', 'Registration', 'Authorization',
             'AccessToken', 'RefreshAccessToken', 'UserInfo']
 
+SERVICES_DICT = {'accesstoken': {'class': 'oidcservice.oidc.access_token.AccessToken',
+                                 'kwargs': {}},
+                 'authorization': {'class': 'oidcservice.oidc.authorization.Authorization',
+                                   'kwargs': {}},
+                 'discovery': {'class': 'oidcservice.oidc.provider_info_discovery.ProviderInfoDiscovery',
+                               'kwargs': {}},
+                 'end_session': {'class': 'oidcservice.oidc.end_session.EndSession',
+                                 'kwargs': {}},
+                 'refresh_accesstoken': {'class': 'oidcservice.oidc.refresh_access_token.RefreshAccessToken',
+                                         'kwargs': {}},
+                 'registration': {'class': 'oidcservice.oidc.registration.Registration',
+                                   'kwargs': {}},
+                 'userinfo': {'class': 'oidcservice.oidc.userinfo.UserInfo', 'kwargs': {}}}
+
 CLIENT_PREFS = {
     "application_type": "web",
     "application_name": "rphandler",

chrp/html/opbyuid.html

@@ -21,12 +21,7 @@ <h3>By entering your unique identifier:</h3>
   <h3><em>Or</em> you can chose one of the preconfigured OpenID Connect Providers</h3>
   <select name="iss">
   <option value=""></option>
-<option value="google">google</option>
-<option value="linkedin">linkedin</option>
-<option value="facebook">facebook</option>
-<option value="github">github</option>
-<option value="microsoft">microsoft</option>
-<option value="salesforce">salesforce</option>
+<option value="flop">flop</option>
   </select>
   <button type="submit">Start</button>
 </form>