easy_oidc_flow 1.0.0

a Flask wrapper which handles OIDC authentication, authorization, and the OAuth flow for a given Identity Provider.

Easy OIDC Flow

This python library is designed to be an easy drop in which handles OIDC authentication, authorization, and the OAuth flow.

Example Implementation

from flask import Flask, request
from easy_oidc_flow import EasyOIDCFlow

app = EasyOIDCFlow(Flask(__name__))

@app.route("/")
def main():
  return f"hello {request.user_data["email"]}!"

if __name__ in "__main__":
  app.run(host="0.0.0.0", port=8000, debug=True)

Quickstart

Create a .env file using the .env.template file as a template. Populate with your OAuth Client details (see below)

Run the example server implementation with the following:

uv run --env-file=.env .\example_server.py

IDP Configuration

Google Cloud Platform

0. Create a GCP Project
1. Navigate to https://console.cloud.google.com/auth/clients/
2. Create a Web Application OAuth Client ID
3. Download the OAuth client id .json file
4. Copy .env to .env.template and fill out the client id and client secret from the downloaded OAuth .json file
5. Delete the .json file from your system

Additional Details

This Flask context wrapper overrides the following REST routes: /login /callback

So make sure that your flask app doesn't define these routes, or an error will be thrown.

References

https://developers.google.com/identity/openid-connect/openid-connect#discovery