providers/proxy: add pb_proxy scope for proxy that sends user_attributes

This commit is contained in:
Jens Langhammer
2020-09-30 11:13:59 +02:00
parent b0b2c0830b
commit 90ea6dba90
2 changed files with 74 additions and 1 deletions

View File

@ -24,6 +24,8 @@ from passbook.providers.oauth2.models import (
ScopeMapping,
)
SCOPE_PB_PROXY = "pb_proxy"
def get_cookie_secret():
"""Generate random 32-character string for cookie-secret"""
@ -80,7 +82,12 @@ class ProxyProvider(OutpostModel, OAuth2Provider):
self.jwt_alg = JWTAlgorithms.RS256
self.rsa_key = CertificateKeyPair.objects.first()
scopes = ScopeMapping.objects.filter(
scope_name__in=[SCOPE_OPENID, SCOPE_OPENID_PROFILE, SCOPE_OPENID_EMAIL]
scope_name__in=[
SCOPE_OPENID,
SCOPE_OPENID_PROFILE,
SCOPE_OPENID_EMAIL,
SCOPE_PB_PROXY,
]
)
self.property_mappings.set(scopes)
self.redirect_uris = "\n".join(