endi-oidc-provider 5.0.1

Getting Started

• cd <directory containing this file>

• $VENV/bin/pip install -e .

• $VENV/bin/initialize_endi_oidc_provider_db development.ini

• $VENV/bin/pserve development.ini

Authorization handling

Generate a new client’s key :

oidc-manage <config_uri> clientadd --client=<client> --uri=<redirect_uri> --scopes=<scopes> --cert_salt=<cert_salt>

config_uri : Your ini file

client: A label for your client

redirect_uri : The redirect uri has described in the openid connect specifications (The one passed in the Authorize step)

scopes : The scope the application is requesting (at least the openid scope should be provided) e.g: “openid profile”

cert_salt : A salt random key that will be used to encrypt the client secret in the database

After generating both client_id and client_secret. The client app is able to request authentication.

enDI integration

In your enDI’s ini file add the following :

pyramid.includes =
                    ...
                    endi_oidc_provider
                    ...

(That’s for model registration so that the db startup initialize the tables)

And add the following :

endi.includes =
                    ...
                    endi_oidc_provider.plugin
                    ...

That register OIDC client application configuration UI :

• routes

• views

• traversal tree branch

• template api stuff

• templates

• menu entries