From b8ead0d87239e203096af20719fc731d8d8e9941 Mon Sep 17 00:00:00 2001 From: mahdavi Date: Tue, 30 Jul 2024 14:50:46 +0330 Subject: [PATCH] get OIDC_RSA_PRIVATE_KEY from env --- accounts/settings.py | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/accounts/settings.py b/accounts/settings.py index 1178455..2f7e137 100644 --- a/accounts/settings.py +++ b/accounts/settings.py @@ -74,6 +74,12 @@ OAUTH2_PROVIDER_ACCESS_TOKEN_MODEL = 'gooyal_oauth2.AccessToken' OAUTH2_PROVIDER_GRANT_MODEL = 'gooyal_oauth2.Grant' OAUTH2_PROVIDER_REFRESH_TOKEN_MODEL = 'gooyal_oauth2.RefreshToken' +OIDC_RSA_PRIVATE_KEY = None +OIDC_RSA_PRIVATE_KEY_FILE_PATH = config('OIDC_RSA_PRIVATE_KEY_FILE_PATH', default=None) +if OIDC_RSA_PRIVATE_KEY_FILE_PATH: + with open(OIDC_RSA_PRIVATE_KEY_FILE_PATH) as oidc_rsa_private_key_file: + OIDC_RSA_PRIVATE_KEY = oidc_rsa_private_key_file.read() + OAUTH2_PROVIDER = { # this is the list of available scopes 'SCOPES_BACKEND_CLASS': 'apps.gooyal_oauth2.scopes.Scopes', @@ -82,9 +88,8 @@ OAUTH2_PROVIDER = { 'groups': 'Access to your groups', 'introspection': 'Introspect token scope'}, 'OAUTH2_VALIDATOR_CLASS': 'apps.gooyal_oauth2.validators.OAuth2Validator', - # "INTROSPECTION_USER_CREATE_METHOD": 'apps.users.models.create_user_in_introspection', "OIDC_ENABLED": True, - # "OIDC_RSA_PRIVATE_KEY": config("OIDC_RSA_PRIVATE_KEY"), + "OIDC_RSA_PRIVATE_KEY": OIDC_RSA_PRIVATE_KEY, # Enable and configure RP-Initiated Logout "OIDC_RP_INITIATED_LOGOUT_ENABLED": True, "OIDC_RP_INITIATED_LOGOUT_ALWAYS_PROMPT": True,