fix: acr value in documentation and examples

Author: peppelinux

doc/source/contents/conf.rst

@@ -79,7 +79,7 @@ An example::
 
     "authentication": {
         "user": {
-          "acr": "oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD",
+          "acr": "urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword",
           "class": "oidcop.user_authn.user.UserPassJinja2",
           "kwargs": {
             "verify_endpoint": "verify/user",
@@ -368,7 +368,7 @@ An example::
         "kwargs": {
           "scheme_map": {
             "email": [
-              "oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD"
+              "urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword"
             ]
           }
         }
@@ -436,7 +436,7 @@ For any further customization of template here an example of what used in django
 
       "authentication": {
         "user": {
-          "acr": "oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD",
+          "acr": "urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword",
           "class": "oidc_provider.users.UserPassDjango",
           "kwargs": {
             "verify_endpoint": "verify/oidc_user_login/",
@@ -570,8 +570,8 @@ An example::
     }
 
 This is somethig that can be customized.
-For example in the django-oidc-op implementation we use something like
-the following (see `example/django_op/oidc_provider`)::
+For example in the django-oidc-op implementation is used something like
+the following::
 
     "userinfo": {
         "class": "oidc_provider.users.UserInfo",

example/flask_op/config.json

@@ -88,7 +88,7 @@
       },
       "authentication": {
         "user": {
-          "acr": "oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD",
+          "acr": "urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword",
           "class": "oidcop.user_authn.user.UserPassJinja2",
           "kwargs": {
             "verify_endpoint": "verify/user",
@@ -288,7 +288,7 @@
         "kwargs": {
           "scheme_map": {
             "email": [
-              "oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD"
+              "urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword"
             ]
           }
         }

example/flask_op/config.yaml

@@ -191,7 +191,7 @@ op:
         db_file: users.json
     authentication:
       user:
-        acr: oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD
+        acr: urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword
         class: oidcop.user_authn.user.UserPassJinja2
         kwargs:
           verify_endpoint: 'verify/user'
@@ -235,7 +235,7 @@ op:
       kwargs:
         scheme_map:
           email:
-            - oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD
+            - urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword
 
     # this adds PKCE support as mandatory - disable it if needed (essential: False)
     add_on:

src/oidcop/authn_event.py

@@ -47,7 +47,6 @@ def create_authn_event(
     :param kwargs:
     :return:
     """
-
     args = {"uid": uid, "authn_info": authn_info}
 
     if sub:

src/oidcop/configure.py

@@ -384,7 +384,7 @@ def __init__(
     },
     "authentication": {
         "user": {
-            "acr": "oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD",
+            "acr": "urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword",
             "class": "oidcop.user_authn.user.UserPassJinja2",
             "kwargs": {
                 "verify_endpoint": "verify/user",
@@ -515,7 +515,7 @@ def __init__(
     "login_hint2acrs": {
         "class": "oidcop.login_hint.LoginHint2Acrs",
         "kwargs": {
-            "scheme_map": {"email": ["oidcop.user_authn.authn_context.INTERNETPROTOCOLPASSWORD"]}
+            "scheme_map": {"email": ["urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword"]}
         },
     },
     "session_key": {"filename": "private/session_jwk.json", "type": "OCT", "use": "sig", },

src/oidcop/token/id_token.py

@@ -185,7 +185,7 @@ def payload(
             _args.update(extra_claims)
 
         # Left hashes of code and/or access_token
-        halg = "HS%s" % alg[-3:]
+        halg = f"HS{alg[-3:]}"
         if code:
             _args["c_hash"] = left_hash(code.encode("utf-8"), halg)
         if access_token: