brazil-data-cube/bdc-auth-client

A client package for authentication and authorization based on OAuth 2.0 and BDC-Auth

A Client Package for Authentication and Authorization Based on OAuth 2.0

About

BDC-Auth-Client is a client package for authentication and authorization based on OAuth 2.0.

Installation

See INSTALL.rst.

Usage

See USAGE.rst.

Developer Documentation

See https://bdc-auth-client.readthedocs.io/en/latest.

License

Copyright (C) 2022 INPE.

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

bdc-auth-client's Issues

Retrieve user id in decorators

Prepare the repository structure

return an empty list when there are no roles (cache)

update bdc_auth_client/decorator.py

Create a log when an exception occurs

Currently when a invalid client_id or client_secret is used there is no error message for the app.

Add decorator to require the personal access token to validate with BDC-Auth

Reference bdc-auth - PR 76

The others validations like roles must be discussed in the next releases.

Add error handler for expired token

When an access token is invalid, the current context is being set to 403 without any tip.
We should add a tip like Token expired.

When a token is expired, the token introspection results in {"active": False}

Adapt decorator oauth2_required to work with Token Introspection

Add support for OR operations

The @oauth2 decorator accepts one or more role. Ex: ['role-a' AND [an 'role-b' OR a 'role-c']]

Add drone support

Add documentation on how to use the package

Remove travis CI

Exception when token expired

the following error occurs when token is inactive:

Traceback (most recent call last):
File "/home/user/venv/lib/python3.9/site-packages/bdc_auth_client/decorators.py", line 95, in wrapped
    user_roles = res['sub'].get('roles', [])
KeyError: 'sub'

The JSON data is:

{"active": false}

Extend user information in token introspection

Add user key in flask request. This value is retrieved from token introspection

Expand all keys from token introspection in request context

Prepare for release 0.2.0

Tasks:

• Inform the right version in: bdc_auth_client/version.py
• Review the CHANGES.rst.
• Create a branch named: b-0.2.
• Review links in the documentation for the stable version (README.rst).
• Create a tag named: v0.2.0.
• In the master branch increase version in bdc_auth_client/version.py to 0.4.0a.
• Notify to the community the release of a new version.