Migrate to oauthlib and flask-oauthlib

Author: alexisluque

00-Starter-Seed/constants.py

@@ -7,6 +7,7 @@
 AUTH0_CLIENT_SECRET = 'AUTH0_CLIENT_SECRET'
 AUTH0_CALLBACK_URL = 'AUTH0_CALLBACK_URL'
 AUTH0_DOMAIN = 'AUTH0_DOMAIN'
+AUTH0_AUDIENCE = 'AUTH0_AUDIENCE'
 AUTHORIZATION_CODE_KEY = 'authorization_code'
 CLIENT_ID_KEY = 'client_id'
 CLIENT_SECRET_KEY = 'client_secret'
@@ -16,3 +17,4 @@
 PROFILE_KEY = 'profile'
 REDIRECT_URI_KEY = 'redirect_uri'
 SECRET_KEY = 'ThisIsTheSecretKey'
+

00-Starter-Seed/public/app.js

@@ -1,4 +1,4 @@
 flask
 python-dotenv
 requests
-auth0-python
+flask-oauthlib

00-Starter-Seed/requirements.txt

@@ -1,32 +1,46 @@
 """Python Flask WebApp Auth0 integration example
 """
 from functools import wraps
-from urllib.parse import urlparse
-from os import environ as env, path
-import json
-
-from auth0.v3.authentication import GetToken
-from auth0.v3.authentication import Users
-from dotenv import load_dotenv
+from urllib.parse import urlencode
+from os import environ as env
+from dotenv import load_dotenv, find_dotenv
 from flask import Flask
 from flask import redirect
 from flask import render_template
 from flask import request
 from flask import send_from_directory
 from flask import session
+from flask import url_for
+from flask_oauthlib.client import OAuth
 
 import constants
 
-load_dotenv(path.join(path.dirname(__file__), ".env"))
+load_dotenv(find_dotenv())
 AUTH0_CALLBACK_URL = env[constants.AUTH0_CALLBACK_URL]
 AUTH0_CLIENT_ID = env[constants.AUTH0_CLIENT_ID]
 AUTH0_CLIENT_SECRET = env[constants.AUTH0_CLIENT_SECRET]
 AUTH0_DOMAIN = env[constants.AUTH0_DOMAIN]
+AUTH0_AUDIENCE = env.get(constants.AUTH0_AUDIENCE)
 
 APP = Flask(__name__, static_url_path='')
 APP.secret_key = constants.SECRET_KEY
 APP.debug = True
+oauth = OAuth(APP)
+
 
+auth0 = oauth.remote_app(
+ 'auth0',
+ consumer_key=AUTH0_CLIENT_ID,
+ consumer_secret=AUTH0_CLIENT_SECRET,
+ request_token_params={
+ 'scope': 'openid profile',
+ 'audience': AUTH0_AUDIENCE
+ },
+ base_url='https://%s' % AUTH0_DOMAIN,
+ access_token_method='POST',
+ access_token_url='/oauth/token',
+ authorize_url='/authorize',
+)
 
 def requires_auth(f):
  @wraps(f)
@@ -40,6 +54,9 @@ def decorated(*args, **kwargs):
 # Controllers API
 @APP.route('/')
 def home():
+ if constants.PROFILE_KEY in session:
+ return redirect(url_for('dashboard'))
+
  return render_template('home.html', env=env)
 
 
@@ -52,9 +69,8 @@ def dashboard():
 @APP.route('/logout')
 def logout():
  session.clear()
- parsed_base_url = urlparse(AUTH0_CALLBACK_URL)
- base_url = parsed_base_url.scheme + '://' + parsed_base_url.netloc
- return redirect('https://%s/v2/logout?returnTo=%s&client_id=%s' % (AUTH0_DOMAIN, base_url, AUTH0_CLIENT_ID))
+ params = {'returnTo': url_for('home', _external=True), 'client_id': AUTH0_CLIENT_ID}
+ return redirect(auth0.base_url + '/v2/logout?' + urlencode(params))
 
 @APP.route('/public/<path:filename>')
 def static_files(filename):
@@ -63,14 +79,30 @@ def static_files(filename):
 
 @APP.route('/callback')
 def callback_handling():
- code = request.args.get(constants.CODE_KEY)
- get_token = GetToken(AUTH0_DOMAIN)
- auth0_users = Users(AUTH0_DOMAIN)
- token = get_token.authorization_code(AUTH0_CLIENT_ID,
- AUTH0_CLIENT_SECRET, code, AUTH0_CALLBACK_URL)
- user_info = auth0_users.userinfo(token['access_token'])
- session[constants.PROFILE_KEY] = json.loads(user_info)
+ resp = auth0.authorized_response()
+ if resp is None:
+ return 'Access denied: reason=%s error=%s' % (
+ request.args['error_reason'],
+ request.args['error_description']
+ )
+
+ session['access_token'] = (resp['access_token'], '')
+
+ user_info = auth0.get('userinfo')
+ session[constants.PROFILE_KEY] = user_info.data
+
  return redirect('/dashboard')
 
+
+@APP.route('/login')
+def login():
+ return auth0.authorize(callback=AUTH0_CALLBACK_URL)
+
+
+@auth0.tokengetter
+def get_auth0_oauth_token():
+ return session.get('access_token')
+
+
 if __name__ == "__main__":
  APP.run(host='0.0.0.0', port=env.get('PORT', 3000))

00-Starter-Seed/server.py

@@ -5,16 +5,7 @@
  <!-- font awesome from BootstrapCDN -->
  <link href="//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css" rel="stylesheet">
  <link href="//maxcdn.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css" rel="stylesheet">
- <script src="http://code.jquery.com/jquery-3.1.0.min.js" type="text/javascript"></script>
- <script src="https://cdn.auth0.com/js/auth0/8.6.0/auth0.min.js"></script>
- <script src="/public/app.js"> </script>
  <link href="/public/app.css" rel="stylesheet">
- <script>
- var AUTH0_CLIENT_ID = '{{env.AUTH0_CLIENT_ID}}';
- var AUTH0_DOMAIN = '{{env.AUTH0_DOMAIN}}';
- var AUTH0_CALLBACK_URL = '{{env.AUTH0_CALLBACK_URL if env.AUTH0_CALLBACK_URL else "http://localhost:3000/callback" }}';
- var API_AUDIENCE = '{{env.API_ID}}';
- </script>
  </head>
  <body class="home">
  <div class="container">
@@ -23,7 +14,7 @@
  <h1 id="logo"><img src="//cdn.auth0.com/samples/auth0_logo_final_blue_RGB.png" /></h1>
  <img class="avatar" src="{{user['picture']}}"/>
  <h2>Welcome {{user['nickname']}}</h2>
- <a class="btn btn-primary btn-lg btn-logout btn-block">Logout</a>
+ <a class="btn btn-primary btn-lg btn-logout btn-block" href="/logout">Logout</a>
  </div>
  </div>
  </div>

00-Starter-Seed/templates/dashboard.html

@@ -1,8 +1,5 @@
 <html>
  <head>
- <script src="http://code.jquery.com/jquery-3.1.0.min.js" type="text/javascript"></script>
- <script src="https://cdn.auth0.com/js/auth0/8.6.0/auth0.min.js"></script>
-
  <script type="text/javascript" src="//use.typekit.net/iws6ohy.js"></script>
  <script type="text/javascript">try{Typekit.load();}catch(e){}</script>
 
@@ -12,13 +9,6 @@
  <link href="//maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" rel="stylesheet">
  <link href="//maxcdn.bootstrapcdn.com/font-awesome/4.6.3/css/font-awesome.min.css" rel="stylesheet">
 
- <script>
- var AUTH0_CLIENT_ID = '{{env.AUTH0_CLIENT_ID}}';
- var AUTH0_DOMAIN = '{{env.AUTH0_DOMAIN}}';
- var AUTH0_CALLBACK_URL = '{{env.AUTH0_CALLBACK_URL if env.AUTH0_CALLBACK_URL else "http://localhost:3000/callback" }}';
- var API_AUDIENCE = '{{env.API_IDENTIFIER}}';
- </script>
- <script src="/public/app.js"> </script>
  <link href="/public/app.css" rel="stylesheet">
  </head>
  <body class="home">
@@ -28,7 +18,7 @@
  <img src="https://i.cloudup.com/StzWWrY34s.png" />
  <h3>Auth0 Example</h3>
  <p>Zero friction identity infrastructure, built for developers</p>
- <a class="btn btn-primary btn-lg btn-login btn-block">SignIn</a>
+ <a class="btn btn-primary btn-lg btn-login btn-block" href="/login">SignIn</a>
  </div>
  </div>
  </div>