Implementing Social Login

[fugacityengr]

Hello, I very much like the batteries-included approach by this ORM compared to other ORMs that can be used with FastAPI.

However, I cannot seem to find discussions nor documentation for how to implement social logins (OAuth2) using Piccolo ORM.
Could anyone point me to an example or a discussion that I could follow to implement social login with Piccolo ORM?

[dantownsend]

@fugacityengr I've integrated with things like Google Sign-In with some of my own apps. There isn't really anything explicitly built into Piccolo to support it.

If you're trying to make the admin work with third party login, you could override the login method of BaseUser:

piccolo/piccolo/apps/user/tables.py

Line 153 in 503bf24

async def login(cls, username: str, password: str) -> t.Optional[int]:

For example:

from piccolo.apps.user.tables import BaseUser

class CustomBaseUser(BaseUser):
    @classmethod
    async def login(cls, username: str, password: str) -> t.Optional[int]:
        # Call a third party endpoint, if valid return user ID

Then with Piccolo admin you can do:

create_admin(tables=[Table1, Table2], auth_table=CustomBaseUser)

Is that the kind of thing you're looking for?

[fugacityengr]

@dantownsend Thank you for answering.
Yes something like that.
I am trying to implement social login alongside a normal login (the usual username + password combo).

[sinisaos]

@fugacityengr It's more in the scope of FastAPI than Piccolo, but you can try the Authlib library. Here is an example of Google login (important!!! you must pip install Authlib==1.0.0rc1 because PyPI version (Authlib 0.15.5) does not work for me) . You can create a new Piccolo asgi app and then in app.py you can add code from the Authlib example. Once you get a user from Google modify homepage method to this

# from piccolo.apps.user.tables import BaseUser 
# and all other imports and code

@app.get("/")
async def homepage(request: Request):
    user = request.session.get("user")
    if user:
        # if user is not in db save it
        if not (
            await BaseUser.exists()
            .where(BaseUser.email == user["email"])
            .run()
            or await BaseUser.exists()
            .where(BaseUser.username == user["given_name"])
            .run()
        ):
            await BaseUser(
                username=user["given_name"], email=user["email"]
            ).save().run()
        # if user is in db just show google user
        html = f"<pre>{user}</pre> <a href='/logout'>Logout {user['given_name']}</a>"
        return HTMLResponse(html)
    return HTMLResponse('<a href="/login">Login</a>')

With this method you save Google user to Piccolo BaseUser and later use it as a normal BaseUser. I don’t know it’s a good approach, but it works. I will try to implement a social login in this project template, but it uses Vue as a frontend and I have to think about how to do it.
Hope this help you.

[dantownsend]

Thanks for this - Authlib looks like a great library.