Remove test data, read correct string

server/vbv_lernwelt/sso/client.py

@@ -20,11 +20,7 @@ oauth.register(
     client_secret=settings.OAUTH["client_secret"],
     request_token_url=None,
     request_token_params=None,
-    # access_token_url=settings.OAUTH["access_token_url"],
-    access_token_params=settings.OAUTH["access_token_params"],
-    # authorize_url=settings.OAUTH["authorize_url"],
     authorize_params=settings.OAUTH["authorize_params"],
-    # api_base_url=settings.OAUTH["api_base_url"],
     client_kwargs=settings.OAUTH["client_kwargs"],
     server_metadata_url=settings.OAUTH["server_metadata_url"],
 )

server/vbv_lernwelt/sso/urls.py

@@ -7,5 +7,4 @@ app_name = 'sso'
 urlpatterns = [
     path(r'login/', django_view_authentication_exempt(views.login), name='login'),
     path(r'callback/', django_view_authentication_exempt(views.authorize), name='authorize'),
-    path(r'foo/', django_view_authentication_exempt(views.foo), name='foo'),
 ]

server/vbv_lernwelt/sso/views.py

@@ -25,7 +25,7 @@ def authorize(request):
     try:
         logger.debug(request)
         token = getattr(oauth, settings.OAUTH["client_name"]).authorize_access_token(request)
-        deocded_token = decode_jwt(token["access_token"])
+        deocded_token = decode_jwt(token["id_token"])
     except OAuthError as e:
         logger.error(f'OAuth error: {e}')
         if not settings.DEBUG:
@@ -41,14 +41,10 @@ def authorize(request):
     return redirect(f'/{OAUTH_SUCCESS_REDIRECT}?state=success')  # to be defined
 
 
-def foo(request):
-    return HttpResponse(settings.OAUTH["server_metadata_url"])
-
-
 def _user_data_from_token_data(token: dict) -> dict:
     return {
         "first_name": token.get("given_name", ""),
         "last_name": token.get("family_name", ""),
         "username": token.get("preferred_username", ""),
-        "email": token.get("email", ""),
+        "email": token.get("emails", [])[""],
     }