OAuth example for python

[TancsicsGergely]

This PR contains an OAuth module and a database manager module.
The database module is used to store refresh tokens and retrieve them in case the OAuth request needs it.
Both modules are written for asynchronous usage and can be imported into other files.

[Tchekda]

Hi,
Thank you very much for your contribution.
But I can't accept a mix of Python and PHP as a code sample to our OAuth2 services.
Also, try to make something more generic and lightweight that anyone can reuse instead of having something something specific

[TancsicsGergely]

Hi,
Sure I can rework it for generic usage
I'll remove the database and PHP parts and replace them in the oauth file as well
Then it'll still be async and contain token refreshing and user data request, just with "hardcoded" refresh token which will have to be passed as a variable, and still show a basic concept on how to use the API endpoints, if that fits the requirements

[Tchekda]

The 2 use-case we try to showcase in this repo are:

• client_credentials authentication to get an application token and use it to fetch some non-personal data
• SSO flow where a user logs in and his access token is used to fetch some personal data

[TancsicsGergely]

@Tchekda Hey David, the SSO flow part should be done, utilizing a Flask web server to listen to the callback, rest of the functions are appended to the original oauth2 file

[Tchekda]

The OAuth file seems correct but the server part is really strange. You are storing the authorization code in a global variable which causes a lot of issues (security, multi-user, etc...)
Please try to make something generic that can be used in a common website or bot

[TancsicsGergely]

Hi, I agree that is not the best practice, but that was made only to demonstrate how to listen to a callback when attempting to authenticate with the SSO. I will rework it, what would be better in your opinion for this example, should I show how to store authorization codes in JSON, or put back the database handler file, and make this example database-dependent? Apart from that I wouldn't really modify the rest of the code, as this should be enough to implement basically any API interaction which needs OAuth credentials.

[Tchekda]

My suggestion:

• Home page with a login link
• Login handler that redirects to the SSO authorize URL
• SSO Callback handler that extracts the authorization code and exchanges it for an access token
  • With the access token you can query /users/me
  • If you want to store the token, you can use the session or cookie storage

[TancsicsGergely]

Hi @Tchekda, updated the code as requested