A Python OpenID Connect implementation
This is a complete implementation of OpenID Connect as specified in the OpenID Connect Core specification. And as a side effect, a complete implementation of OAuth2.0 too.
Please see the CHANGELOG.md to review the latest changes.
Documentation
The documentation is graciously hosted by Read the Docs. Unfortunately, the documentation has been largely left unmaintained and there are various issues. However, the maintainers are trying to remedy this lately with some new momentum. Please help us by submitting pull requests if you can help improve the documentation.
Examples
Unfortunately, the current examples included in this repository are unmaintained and there are many issues. We’re currently in the process of creating a working canonical example implementation, however, until that time, the current examples largely do not work. Please help us by submitting pull requests that may bring these examples back into a working condition if you get something working locally.
Acknowledgements
Cudos to Vladislav Mladenov and Christian Mainka both at Horst Görtz Institute for IT-Security, Ruhr-University Bochum, Germany for helping me making the implementation more secure.
Maintainers Needed
If you’re interested in helping maintain and improve this package, we’re looking for you! We’re working on the project on a best effort basis but we still maintain a good flow of reviewing each others pull requests and driving discussions on what should be done.
Please contact one of the current maintainers @rohe, @tpazderka or @schlenk.
Contribute
Fork the repository, clone your copy and install pipenv.
Then just run:
$ make installNext, running the tests:
$ make testThis will not affect your system level Python installation. Please review our issues to see what needs working on. Do not hesitate to ask questions if something is unclear. We mark easy issues as newcomer-friendly, so they are a good place to start if you want to contribute.
Windows
If you happen to work in a Windows environment, the above will not work out of the box due to the lack of a GNU Make on Windows. In addition one of the dependencies for ldap_authn is not available as a prebuilt wheel from pypi, so use these slightly modified instructions.
With pipenv in your path you run:
pipenv install --dev -e .[develop,testing,docs,quality]Next you can run the tests:
pipenv run pytest tests
Release files for oic 1.7.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| oic-1.7.0.tar.gz | 260.8 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| oic-1.7.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 453.2 kB
Release files / oic-1.7.0.tar.gz
| Download URL | oic-1.7.0.tar.gz |
|---|---|
| Size | 260.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e51705d0c14c97e9ca594374bfb54269a72c9b489e0e979598344c0189bfcb64
|
|
BLAKE2b-256 checksum How to use checksums |
bc221f46483b2095750161b862a034e334bf471f4a8c865e39058502983a73ea
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.0.0 CPython/3.10.9
|
Release files / oic-1.7.0-py3-none-any.whl
| Download URL | oic-1.7.0-py3-none-any.whl |
|---|---|
| Size | 192.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b74bd06c7de1ab4f8e798f714062e6a68f68ad9cdbed1f1c30a7fb887602f321
|
|
BLAKE2b-256 checksum How to use checksums |
4b1d7a8f80ab17f9d78c05de9d998d501baf71c81d2f3a27b86bde45ca14c55f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.0.0 CPython/3.10.9
|
Security for oic 1.7.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
