diff --git a/server/vbv_lernwelt/sso/client.py b/server/vbv_lernwelt/sso/client.py index 71d1954a..123c06ff 100644 --- a/server/vbv_lernwelt/sso/client.py +++ b/server/vbv_lernwelt/sso/client.py @@ -20,11 +20,7 @@ oauth.register( client_secret=settings.OAUTH["client_secret"], request_token_url=None, request_token_params=None, - # access_token_url=settings.OAUTH["access_token_url"], - access_token_params=settings.OAUTH["access_token_params"], - # authorize_url=settings.OAUTH["authorize_url"], authorize_params=settings.OAUTH["authorize_params"], - # api_base_url=settings.OAUTH["api_base_url"], client_kwargs=settings.OAUTH["client_kwargs"], server_metadata_url=settings.OAUTH["server_metadata_url"], ) diff --git a/server/vbv_lernwelt/sso/urls.py b/server/vbv_lernwelt/sso/urls.py index 44f0d80e..56785481 100644 --- a/server/vbv_lernwelt/sso/urls.py +++ b/server/vbv_lernwelt/sso/urls.py @@ -7,5 +7,4 @@ app_name = 'sso' urlpatterns = [ path(r'login/', django_view_authentication_exempt(views.login), name='login'), path(r'callback/', django_view_authentication_exempt(views.authorize), name='authorize'), - path(r'foo/', django_view_authentication_exempt(views.foo), name='foo'), ] diff --git a/server/vbv_lernwelt/sso/views.py b/server/vbv_lernwelt/sso/views.py index b3cb51c0..21edd544 100644 --- a/server/vbv_lernwelt/sso/views.py +++ b/server/vbv_lernwelt/sso/views.py @@ -25,7 +25,7 @@ def authorize(request): try: logger.debug(request) token = getattr(oauth, settings.OAUTH["client_name"]).authorize_access_token(request) - deocded_token = decode_jwt(token["access_token"]) + deocded_token = decode_jwt(token["id_token"]) except OAuthError as e: logger.error(f'OAuth error: {e}') if not settings.DEBUG: @@ -41,14 +41,10 @@ def authorize(request): return redirect(f'/{OAUTH_SUCCESS_REDIRECT}?state=success') # to be defined -def foo(request): - return HttpResponse(settings.OAUTH["server_metadata_url"]) - - def _user_data_from_token_data(token: dict) -> dict: return { "first_name": token.get("given_name", ""), "last_name": token.get("family_name", ""), "username": token.get("preferred_username", ""), - "email": token.get("email", ""), + "email": token.get("emails", [])[""], }