57 lines
1.5 KiB
Python
57 lines
1.5 KiB
Python
import os
|
|
import uuid
|
|
from flask import Flask, redirect, url_for, session, render_template
|
|
from flask_sqlalchemy import SQLAlchemy
|
|
from authlib.integrations.flask_client import OAuth
|
|
|
|
app = Flask(__name__)
|
|
app.config['SQLALCHEMY_DATABASE_URI'] = 'mysql+pymysql://flaskuser:flaskpass@mariadb/flaskdb'
|
|
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
|
|
app.secret_key = os.environ.get("SECRET_KEY", "dev-key")
|
|
|
|
db = SQLAlchemy(app)
|
|
|
|
# Configuration de Authlib
|
|
oauth = OAuth(app)
|
|
|
|
keycloak = oauth.register(
|
|
name='keycloak',
|
|
client_id='flask-app',
|
|
client_secret='T5G5jzCBiphnBNh9uuj0f6YNc9HrP8r4',
|
|
server_metadata_url='https://keycloak.ninolbt.com/realms/gesthub/.well-known/openid-configuration',
|
|
client_kwargs={
|
|
'scope': 'openid profile email',
|
|
}
|
|
)
|
|
|
|
@app.route('/')
|
|
def index():
|
|
user = session.get('user')
|
|
if user:
|
|
return render_template('view/index.html', user=user)
|
|
|
|
return redirect(url_for('login'))
|
|
|
|
@app.route('/login')
|
|
def login():
|
|
nonce = uuid.uuid4().hex
|
|
session['nonce'] = nonce
|
|
redirect_uri = url_for('auth', _external=True, _scheme='https')
|
|
return keycloak.authorize_redirect(redirect_uri, nonce=nonce)
|
|
|
|
@app.route('/auth')
|
|
def auth():
|
|
token = keycloak.authorize_access_token()
|
|
nonce = session.pop('nonce', None)
|
|
userinfo = keycloak.parse_id_token(token, nonce=nonce)
|
|
session['user'] = userinfo
|
|
return redirect('/')
|
|
|
|
@app.route('/logout')
|
|
def logout():
|
|
session.pop('user', None)
|
|
return redirect('/')
|
|
|
|
if __name__ == '__main__':
|
|
app.run(host='0.0.0.0')
|