guillotina-authentication 5.0.1

Authenticate Guillotina with various providers

This guillotina app provides authentication through different providers:

• [x] twitter

• [x] google

• [x] github

• [x] ORY hydra based?

• [ ] facebook (untested)

Example configuration:

auth_providers:
  twitter:
    configuration:
      consumer_key: foobar
      consumer_secret: foobar
  google:
    configuration:
      client_id: foobar
      client_secret: foobar
    scope: openid email
  github:
    configuration:
      client_id: foobar
      client_secret: foobar
    scope: read:user
  hydra:
    configuration:
      client_id: auth-code-client
      client_secret: secret
      base_url: http://localhost:4444/
      authorize_url: http://localhost:4444/oauth2/auth
      access_token_url: http://localhost:4444/oauth2/token
    state: true
    scope: openid offline

# frontend url to handle storing auth
auth_callback_url: http://localhost:8080/foobar
auth_user_identifiers
- guillotina_authentication.identifier.OAuthClientIdentifier

Endpoints

• GET /@authentication-providers

• GET /@authorize/{provider}

• GET /@authenticate/{provider}

• GET /@callback/{provider}

TODO

• be able to specify custom scopes to authenicate with

5.0.1 (2019-07-07)

• Adding VERSION to manifest [bloodbare]

5.0.0 (2019-07-07)

• Update for G5 [bloodbare]

1.0.7 (2019-06-18)

• restrict compat

1.0.6 (2019-03-04)

• Option to refresh token. [bloodbare]

1.0.5 (2019-01-31)

• Optimization and labeling the jwt to know that comes from oauth. [bloodbare]

1.0.4 (2019-01-10)

• Temporal fix on urls. [bloodbare]

1.0.3 (2018-10-20)

• Allow global scopes to be applied [vangheem]

1.0.2 (2018-10-13)

• Be able to customize the requested scopes [vangheem]

1.0.1 (2018-10-11)

• Be able to customize callback [vangheem]

1.0.0 (2018-10-09)

• initial