example-oidc-server-fastapi

KO | EN

gitlite — search

#python #hacktoberfest #react #ai #typescript #llm #go #deep-learning #docker #windows #awesome #kubernetes #awesome-list #ios

example-oidc-server-fastapi

(★ 13)

No description available.

example-oidc-server-fastapi Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# How to create an OpenID Connect 1.0 Provider

This is an example of OpenID Connect 1.0 server in [FastAPI](https://fastapi.tiangolo.com/) and [Authlib](https://authlib.org/).

- FastAPI Repo: <https://github.com/tiangolo/fastapi>
- Authlib Repo: <https://github.com/lepture/authlib>

---

## Take a quick look

This is a ready to run example, let's take a quick experience at first. To
run the example, we need to install all the dependencies:

```bash
$ pip install -r requirements.txt
```

Set FastAPI and Authlib environment variables:

```bash
# disable check https (DO NOT SET THIS IN PRODUCTION)
$ export AUTHLIB_INSECURE_TRANSPORT=1
```

Create Database and run the development server:

```bash
$ uvicorn main:app --host 127.0.0.1 --port 5000 --reload
```

Now, you can open your browser with `http://127.0.0.1:5000/`.

Before testing, we need to create a client:

![create a client](https://user-images.githubusercontent.com/290496/64176341-35888100-ce98-11e9-8395-fd4cdc029fd2.png)

**NOTE: YOU MUST ADD `openid` SCOPE IN YOUR CLIENT**

Let's take `authorization_code` grant type as an example. Visit:

```bash
$ curl -i -XPOST http://127.0.0.1:5000/oauth/authorize?client_id=${CLIENT_ID}&response_type=code&scope=openid+profile&nonce=abc -F uuid=XXXXXXX
```

After that, you will be redirect to a URL. For instance:

```bash
HTTP/1.1 100 Continue

HTTP/1.1 302 Found
date: Tue, 06 Oct 2020 22:21:12 GMT
server: uvicorn
location: https://example.com/?code=RSv6j745Ri0DhBSvi2RQu5JKpIVvLm8SFd5ObjOZZSijohe0
content-length: 2
content-type: application/json
```

Copy the code value, use `curl` to get the access token:

```bash
$ curl -u "${CLIENT_ID}:${CLIENT_SECRET}" -XPOST http://127.0.0.1:5000/oauth/token -F grant_type=authorization_code -F code=RSv6j745Ri0DhBSvi2RQu5JKpIVvLm8SFd5ObjOZZSijohe0 -F scope=profile
```

Now you can access `/oauth/userinfo`:

```bash
$ curl -H "Authorization: Bearer ${access_token}" http://127.0.0.1:5000/oauth/userinfo
```

example-oidc-server-fastapi

example-oidc-server-fastapi Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

example-oidc-server-fastapi

example-oidc-server-fastapi Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README