member/member-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(login): switch frontend account login to oidc flow

Browse Source
This commit is contained in:
Chris
2026-03-31 23:43:57 +08:00
parent 4060ebff70
commit f6105f079d
1 changed files with 17 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
app/api/auth.py
View File

@@ -112,7 +112,11 @@ def login(payload: LoginRequest) -> LoginResponse:
@router.get("/oidc/url", response_model=OIDCAuthUrlResponse) @router.get("/oidc/url", response_model=OIDCAuthUrlResponse)
def get_oidc_authorize_url(redirect_uri: str) -> OIDCAuthUrlResponse: def get_oidc_authorize_url(
redirect_uri: str,
login_hint: str | None = None,
prompt: str = "login",
) -> OIDCAuthUrlResponse:
settings = get_settings() settings = get_settings()
client_id = settings.authentik_client_id or settings.authentik_audience client_id = settings.authentik_client_id or settings.authentik_audience
if not settings.authentik_base_url or not client_id: if not settings.authentik_base_url or not client_id:
@@ -120,16 +124,18 @@ def get_oidc_authorize_url(redirect_uri: str) -> OIDCAuthUrlResponse:
authorize_endpoint = urljoin(settings.authentik_base_url.rstrip("/") + "/", "application/o/authorize/") authorize_endpoint = urljoin(settings.authentik_base_url.rstrip("/") + "/", "application/o/authorize/")
state = secrets.token_urlsafe(24) state = secrets.token_urlsafe(24)
params = httpx.QueryParams( query = {
{
"client_id": client_id, "client_id": client_id,
"response_type": "code", "response_type": "code",
"scope": "openid profile email", "scope": "openid profile email",
"redirect_uri": redirect_uri, "redirect_uri": redirect_uri,
"state": state, "state": state,
"prompt": "login", "prompt": prompt or "login",
} }
) if login_hint:
query["login_hint"] = login_hint
params = httpx.QueryParams(query)
return OIDCAuthUrlResponse(authorize_url=f"{authorize_endpoint}?{params}") return OIDCAuthUrlResponse(authorize_url=f"{authorize_endpoint}?{params}")