EVOLUTION-MANAGER

Edit File: flask_fas_openid.html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 
 <title>FAS Flask OpenID Auth Plugin &mdash; python-fedora 0.10.0 documentation</title>
 
 <link rel="stylesheet" href="_static/default.css" type="text/css" />
 <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
 
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '',
 VERSION: '0.10.0',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true
 };
 </script>
 <script type="text/javascript" src="_static/jquery.js"></script>
 <script type="text/javascript" src="_static/underscore.js"></script>
 <script type="text/javascript" src="_static/doctools.js"></script>
 <link rel="search" type="application/opensearchdescription+xml"
 title="Search within python-fedora 0.10.0 documentation"
 href="_static/opensearch.xml"/>
 <link rel="top" title="python-fedora 0.10.0 documentation" href="index.html" />
 <link rel="up" title="Authentication to FAS" href="auth.html" />
 <link rel="next" title="FASWho Plugin" href="faswho.html" />
 <link rel="prev" title="FAS Flask Auth Plugin" href="flask_fas.html" /> 
 </head>
 <body>
 <div class="related">
 <h3>Navigation</h3>
 <ul>
 <li class="right" style="margin-right: 10px">
 <a href="genindex.html" title="General Index"
 accesskey="I">index</a></li>
 <li class="right" >
 <a href="py-modindex.html" title="Python Module Index"
 >modules</a> |</li>
 <li class="right" >
 <a href="faswho.html" title="FASWho Plugin"
 accesskey="N">next</a> |</li>
 <li class="right" >
 <a href="flask_fas.html" title="FAS Flask Auth Plugin"
 accesskey="P">previous</a> |</li>
 <li><a href="index.html">python-fedora 0.10.0 documentation</a> &raquo;</li>
 <li><a href="auth.html" accesskey="U">Authentication to FAS</a> &raquo;</li> 
 </ul>
 </div>

<div class="document">
 <div class="documentwrapper">
 <div class="bodywrapper">
 <div class="body">
 
 <div class="section" id="fas-flask-openid-auth-plugin">
<h1>FAS Flask OpenID Auth Plugin<a class="headerlink" href="#fas-flask-openid-auth-plugin" title="Permalink to this headline">¶</a></h1>
<table class="docutils field-list" frame="void" rules="none">
<col class="field-name" />
<col class="field-body" />
<tbody valign="top">
<tr class="field-odd field"><th class="field-name">Authors:</th><td class="field-body">Patrick Uiterwjk</td>
</tr>
<tr class="field-even field"><th class="field-name">Date:</th><td class="field-body">18 February 2013</td>
</tr>
<tr class="field-odd field"><th class="field-name">For Version:</th><td class="field-body">0.3.x</td>
</tr>
</tbody>
</table>
The <a class="reference internal" href="existing.html#fedora-account-system">Fedora Account System</a> has a <a class="reference internal" href="glossary.html#term-openid">OpenID</a> provider that applications
can use to authenticate users in web apps. For our <a class="reference internal" href="glossary.html#term-flask">Flask</a> applications
we have an identity provider that uses this OpenID service to authenticate users.
It is almost completely compatible with <a class="reference internal" href="auth.html#flask-fas">Flask Auth Plugin</a> except that it does not
use the username/password provided by the client application (it is silently
ignored). It can be configured to use any OpenID authentication service that
implements the OpenID Teams Extension, Simple Registration Extension and
CLA Extension.
<div class="section" id="configuration">
<h2>Configuration<a class="headerlink" href="#configuration" title="Permalink to this headline">¶</a></h2>
The FAS OpenID auth plugin has several config values that can be used to control
how the auth plugin functions. You can set these in your application&#8217;s config
file.
<dl class="docutils">
<dt>FAS_OPENID_ENDPOINT</dt>
<dd>Set this to the OpenID endpoint url you are authenticating against.
Default is &#8220;<a class="reference external" href="http://id.fedoraproject.org/">http://id.fedoraproject.org/</a>&#8220;</dd>
<dt>FAS_CHECK_CERT</dt>
<dd>When set, this will check the SSL Certificate for the FAS server to make
sure that it is who it claims to be. This is useful to set to False when
testing against a local FAS server but should always be set to True in
production. Default: True</dd>
</dl>
</div>
<div class="section" id="sample-application">
<h2>Sample Application<a class="headerlink" href="#sample-application" title="Permalink to this headline">¶</a></h2>
The following is a sample, minimal flask application that uses fas_flask for
authentication:
<div class="highlight-python"><div class="highlight"><pre>#!/usr/bin/python -tt
# Flask-FAS-OpenID - A Flask extension for authorizing users with OpenID
# Primary maintainer: Patrick Uiterwijk &lt;puiterwijk@fedoraproject.org&gt;
#
# Copyright (c) 2012-2013, Red Hat, Inc., Patrick Uiterwijk
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#
# * Redistributions of source code must retain the above copyright notice, this
# list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above copyright notice,
# this list of conditions and the following disclaimer in the documentation
# and/or other materials provided with the distribution.
# * Neither the name of the Red Hat, Inc. nor the names of its contributors may
# be used to endorse or promote products derived from this software without
# specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS &#39;&#39;AS IS&#39;&#39; AND ANY
# EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY
# DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
# ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

# This is a sample application.

import flask
from flask_fas_openid import fas_login_required, cla_plus_one_required, FAS

# Set up Flask application
app = flask.Flask(__name__)
# Set up FAS extension
fas = FAS(app)

# Application configuration
# SECRET_KEY is necessary for the Flask session system. It nees to be secret to
# make the sessions secret but if you have multiple servers behind
# a load balancer, the key needs to be the same on each.
app.config[&#39;SECRET_KEY&#39;] = &#39;change me!&#39;
# Other configuration options for Flask-FAS-OpenID:
# FAS_OPENID_ENDPOINT: the OpenID endpoint URL
# (default http://id.fedoraproject.org/)
# FAS_CHECK_CERT: check the SSL certificate of FAS (default True)
# You should use these options&#39; defaults for production applications!
app.config[&#39;FAS_OPENID_ENDPOINT&#39;] = &#39;http://id.fedoraproject.org/&#39;
app.config[&#39;FAS_CHECK_CERT&#39;] = True

# Inline templates keep this test application all in one file. Don&#39;t do this in
# a real application. Please.
TEMPLATE_START = &quot;&quot;&quot;
&lt;h1&gt;Flask-FAS-OpenID test app&lt;/h1&gt;
{% if g.fas_user %}
 &lt;p&gt;Hello, {{ g.fas_user.username }} &amp;mdash;
 &lt;a href=&quot;{{ url_for(&quot;logout&quot;) }}&quot;&gt;Log out&lt;/a&gt;
{% else %}
 &lt;p&gt;You are not logged in &amp;mdash;
 &lt;a href=&quot;{{ url_for(&quot;auth_login&quot;, next=request.url) + &#39;&#39; }}&quot;&gt;Log in&lt;/a&gt;
{% endif %}
&amp;mdash; &lt;a href=&quot;{{ url_for(&quot;index&quot;) }}&quot;&gt;Main page&lt;/a&gt;&lt;/p&gt;
&quot;&quot;&quot;

@app.route(&#39;/&#39;)
def index():
 data = TEMPLATE_START
 data += &#39;&lt;p&gt;&lt;a href=&quot;%s&quot;&gt;Check if you are cla+1&lt;/a&gt;&lt;/p&gt;&#39; % \
 flask.url_for(&#39;claplusone&#39;)
 data += &#39;&lt;p&gt;&lt;a href=&quot;%s&quot;&gt;See a secret message (requires login)&lt;/a&gt;&lt;/p&gt;&#39; % \
 flask.url_for(&#39;secret&#39;)
 return flask.render_template_string(data)

@app.route(&#39;/login&#39;, methods=[&#39;GET&#39;, &#39;POST&#39;])
def auth_login():
 # Your application should probably do some checking to make sure the URL
 # given in the next request argument is sane. (For example, having next set
 # to the login page will cause a redirect loop.) Some more information:
 # http://flask.pocoo.org/snippets/62/
 if &#39;next&#39; in flask.request.args:
 next_url = flask.request.args[&#39;next&#39;]
 else:
 next_url = flask.url_for(&#39;index&#39;)
 # If user is already logged in, return them to where they were last
 if flask.g.fas_user:
 return flask.redirect(next_url)
 return fas.login(return_url=next_url)

@app.route(&#39;/logout&#39;)
def logout():
 if flask.g.fas_user:
 fas.logout()
 return flask.redirect(flask.url_for(&#39;index&#39;))

# This demonstrates the use of the fas_login_required decorator. The
# secret message can only be viewed by those who are logged in.
@app.route(&#39;/secret&#39;)
@fas_login_required
def secret():
 data = TEMPLATE_START + &#39;&lt;p&gt;Be sure to drink your Ovaltine&lt;/p&gt;&#39;
 return flask.render_template_string(data)

# This demonstrates checking for group membership inside of a function.
# The flask_fas adapter also provides a cla_plus_one_required decorator that
# can restrict a url so that you can only access it from an account that has
# cla +1.
@app.route(&#39;/claplusone&#39;)
@cla_plus_one_required
def claplusone():
 data = TEMPLATE_START
 data += &#39;&lt;p&gt;Your account is cla+1.&lt;/p&gt;&#39;
 return flask.render_template_string(data)

if __name__ == &#39;__main__&#39;:
 app.run(debug=True)
</pre></div>
</div>
</div>
</div>

</div>
 </div>
 </div>
 <div class="sphinxsidebar">
 <div class="sphinxsidebarwrapper">
 <h3><a href="index.html">Table Of Contents</a></h3>
 <ul>
<li><a class="reference internal" href="#">FAS Flask OpenID Auth Plugin</a><ul>
<li><a class="reference internal" href="#configuration">Configuration</a></li>
<li><a class="reference internal" href="#sample-application">Sample Application</a></li>
</ul>
</li>
</ul>

<h4>Previous topic</h4>
 <a href="flask_fas.html"
 title="previous chapter">FAS Flask Auth Plugin</a>
 <h4>Next topic</h4>
 <a href="faswho.html"
 title="next chapter">FASWho Plugin</a>
 <h3>This Page</h3>
 <ul class="this-page-menu">
 <li><a href="_sources/flask_fas_openid.txt"
 rel="nofollow">Show Source</a></li>
 </ul>
<div id="searchbox" style="display: none">
 <h3>Quick search</h3>
 <form class="search" action="search.html" method="get">
 <input type="text" name="q" />
 <input type="submit" value="Go" />
 <input type="hidden" name="check_keywords" value="yes" />
 <input type="hidden" name="area" value="default" />
 </form>
 
 Enter search terms or a module, class or function name.
 
</div>
<script type="text/javascript">$('#searchbox').show(0);</script>
 </div>
 </div>
 <div class="clearer"></div>
 </div>
 <div class="related">
 <h3>Navigation</h3>
 <ul>
 <li class="right" style="margin-right: 10px">
 <a href="genindex.html" title="General Index"
 >index</a></li>
 <li class="right" >
 <a href="py-modindex.html" title="Python Module Index"
 >modules</a> |</li>
 <li class="right" >
 <a href="faswho.html" title="FASWho Plugin"
 >next</a> |</li>
 <li class="right" >
 <a href="flask_fas.html" title="FAS Flask Auth Plugin"
 >previous</a> |</li>
 <li><a href="index.html">python-fedora 0.10.0 documentation</a> &raquo;</li>
 <li><a href="auth.html" >Authentication to FAS</a> &raquo;</li> 
 </ul>
 </div>
 <div class="footer">
 &copy; Copyright 2007-2018 Red Hat, Inc..
 Last updated on Feb 01, 2018.
 Created using <a href="http://sphinx.pocoo.org/">Sphinx</a> 1.1.3.
 </div>
 </body>
</html>