forgot to git add files
Signed-off-by: Mark O Brien <markobri@redhat.com>
This commit is contained in:
parent
a3ea497cfb
commit
86b8a42a67
2 changed files with 48 additions and 0 deletions
22
docs/flask-oidc/authlib_code.rst
Normal file
22
docs/flask-oidc/authlib_code.rst
Normal file
|
@ -0,0 +1,22 @@
|
||||||
|
Authlib
|
||||||
|
=========
|
||||||
|
|
||||||
|
Discussion
|
||||||
|
----------
|
||||||
|
|
||||||
|
Authlib implementation for Flask. Flask-oidc uses ouath2client to create a flow
|
||||||
|
based on client secrets using this function `client.flow_from_clientsecrets https://oauth2client.readthedocs.io/en/latest/source/oauth2client.client.html#oauth2client.client.flow_from_clientsecrets`_.
|
||||||
|
to create an ouath2 webserver flow which validates based on oidc tokens.
|
||||||
|
This needs to be replaced using a new library.
|
||||||
|
|
||||||
|
Authlib
|
||||||
|
------
|
||||||
|
Authlib has the functionality to follow this flow and use oidc on top of oauth2
|
||||||
|
functionality https://docs.authlib.org/en/latest/client/oauth2.html#oauth-2-openid-connect
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Conclusion
|
||||||
|
----------
|
||||||
|
Authlib provides the necessary tooling to do this replacement which shows it as
|
||||||
|
suitable for a replacement
|
26
docs/flask-oidc/oauthlib_authlib.rst
Normal file
26
docs/flask-oidc/oauthlib_authlib.rst
Normal file
|
@ -0,0 +1,26 @@
|
||||||
|
Oauthlib vs Authlib
|
||||||
|
=====================
|
||||||
|
|
||||||
|
Resources
|
||||||
|
---------
|
||||||
|
|
||||||
|
* Oauthlib: https://oauthlib.readthedocs.io/en/latest/
|
||||||
|
* Authlib: https://docs.authlib.org/en/latest/
|
||||||
|
|
||||||
|
|
||||||
|
Discussion
|
||||||
|
---------
|
||||||
|
Which library should be used to replace the currently used and deprecated
|
||||||
|
oauth2client. The two main contenders are Oauthlib and Authlib.
|
||||||
|
|
||||||
|
Authlib is the more popular of the two choices as seen in this `graph https://python.libhunt.com/compare-authlib-vs-oauthlib`_.
|
||||||
|
For flask the oauthlib developers themselves recommend using authilib
|
||||||
|
https://github.com/lepture/flask-oauthlib#readme
|
||||||
|
|
||||||
|
|
||||||
|
Conclusion
|
||||||
|
---------
|
||||||
|
Authlib seems to be the best candidate for this initiative. There is knowledge
|
||||||
|
in the team of the library as it was used in bodhi. It also appears to have an
|
||||||
|
easier to implement and has a flask integration and is recommended for use by
|
||||||
|
the developer.
|
Loading…
Add table
Add a link
Reference in a new issue