
* add initial Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add web stage for session end Signed-off-by: Jens Langhammer <jens@goauthentik.io> * migrate saml and tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * cleanup Signed-off-by: Jens Langhammer <jens@goauthentik.io> * group flow settings when providers have multiple flows Signed-off-by: Jens Langhammer <jens@goauthentik.io> * adjust name for default provider invalidation Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-make migrations Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add invalidation_flow to saml importer Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-do migrations again Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update web stuff to get rid of old libraries Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make unbind flow for ldap configurable Signed-off-by: Jens Langhammer <jens@goauthentik.io> * unrelated: fix flow inspector Signed-off-by: Jens Langhammer <jens@goauthentik.io> * handle invalidation_flow as optional, as it should be Signed-off-by: Jens Langhammer <jens@goauthentik.io> * also fix ldap outpost Signed-off-by: Jens Langhammer <jens@goauthentik.io> * don't generate URL in client Signed-off-by: Jens Langhammer <jens@goauthentik.io> * actually make it work??? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * format Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix migration breaking things...? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start fixing tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix fallback Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-migrate Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix duplicate flow setting Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add migration Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix race condition with brand Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix oauth test Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix SAML tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add to wizard, fix required Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update docs Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make required, start release notes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Signed-off-by: Jens Langhammer <jens@goauthentik.io>
71 lines
2.3 KiB
Python
71 lines
2.3 KiB
Python
"""OAuth provider URLs"""
|
|
|
|
from django.urls import path
|
|
from django.views.generic.base import RedirectView
|
|
|
|
from authentik.providers.oauth2.api.providers import OAuth2ProviderViewSet
|
|
from authentik.providers.oauth2.api.scopes import ScopeMappingViewSet
|
|
from authentik.providers.oauth2.api.tokens import (
|
|
AccessTokenViewSet,
|
|
AuthorizationCodeViewSet,
|
|
RefreshTokenViewSet,
|
|
)
|
|
from authentik.providers.oauth2.views.authorize import AuthorizationFlowInitView
|
|
from authentik.providers.oauth2.views.device_backchannel import DeviceView
|
|
from authentik.providers.oauth2.views.end_session import EndSessionView
|
|
from authentik.providers.oauth2.views.introspection import TokenIntrospectionView
|
|
from authentik.providers.oauth2.views.jwks import JWKSView
|
|
from authentik.providers.oauth2.views.provider import ProviderInfoView
|
|
from authentik.providers.oauth2.views.token import TokenView
|
|
from authentik.providers.oauth2.views.token_revoke import TokenRevokeView
|
|
from authentik.providers.oauth2.views.userinfo import UserInfoView
|
|
|
|
urlpatterns = [
|
|
path(
|
|
"authorize/",
|
|
AuthorizationFlowInitView.as_view(),
|
|
name="authorize",
|
|
),
|
|
path("token/", TokenView.as_view(), name="token"),
|
|
path("device/", DeviceView.as_view(), name="device"),
|
|
path(
|
|
"userinfo/",
|
|
UserInfoView.as_view(),
|
|
name="userinfo",
|
|
),
|
|
path(
|
|
"introspect/",
|
|
TokenIntrospectionView.as_view(),
|
|
name="token-introspection",
|
|
),
|
|
path(
|
|
"revoke/",
|
|
TokenRevokeView.as_view(),
|
|
name="token-revoke",
|
|
),
|
|
path(
|
|
"<slug:application_slug>/end-session/",
|
|
EndSessionView.as_view(),
|
|
name="end-session",
|
|
),
|
|
path("<slug:application_slug>/jwks/", JWKSView.as_view(), name="jwks"),
|
|
path(
|
|
"<slug:application_slug>/",
|
|
RedirectView.as_view(pattern_name="authentik_providers_oauth2:provider-info"),
|
|
name="provider-root",
|
|
),
|
|
path(
|
|
"<slug:application_slug>/.well-known/openid-configuration",
|
|
ProviderInfoView.as_view(),
|
|
name="provider-info",
|
|
),
|
|
]
|
|
|
|
api_urlpatterns = [
|
|
("providers/oauth2", OAuth2ProviderViewSet),
|
|
("propertymappings/provider/scope", ScopeMappingViewSet),
|
|
("oauth2/authorization_codes", AuthorizationCodeViewSet),
|
|
("oauth2/refresh_tokens", RefreshTokenViewSet),
|
|
("oauth2/access_tokens", AccessTokenViewSet),
|
|
]
|