woggioni
915a294dc8
kaya-oidc 0.0.6 can run several providers in one app (OIDCProviders), each with its own login route and namespaced session state. Adopt it: providers are configured in indexed, contiguous OIDC_<n>_* blocks (0-based) with OIDC_<n>_PROVIDER naming the provider in its login URL and session keys. The old unindexed OIDC_ISSUER/OIDC_CLIENT_ID/... names are no longer read; startup fails with a rename hint when they are set. With no OIDC variables at all, the single dev mock provider named "default" is used, as before. The platform now authenticates through OIDCProviders: auth.current_user returns the session's user (sessions stay single-identity, so at most one provider is logged in) and require_auth/route handlers use it, while the websocket path keeps scanning for any provider's user. New routes expose the configuration to the SPA and keep old links working: GET /api/auth/providers lists the login URLs, GET /auth/login redirects to the first provider and GET /auth/logout to whichever provider the session is logged in with. The lobby renders one login button per provider from that endpoint. Update the env examples, compose and k8s manifests to the indexed scheme, document the multiple-provider setup and the migration, and cover it with config, auth and route tests.
19 lines
765 B
Python
19 lines
765 B
Python
"""Test package init.
|
|
|
|
Sets environment overrides BEFORE any test module imports
|
|
:mod:`tavolo.app` (which evaluates :data:`tavolo.config.settings`
|
|
at import time). Works under both ``python -m unittest discover`` and
|
|
``pytest``; conftest.py mirrors this for pytest-only collection.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
|
|
os.environ.setdefault("DATABASE_URL", "sqlite://:memory:")
|
|
os.environ.setdefault("OIDC_0_PROVIDER", "default")
|
|
os.environ.setdefault("OIDC_0_ISSUER", "http://localhost:8180/tavolo")
|
|
os.environ.setdefault("OIDC_0_CLIENT_ID", "tavolo")
|
|
os.environ.setdefault("OIDC_0_REDIRECT_URI", "http://localhost:8080/auth/default/callback")
|
|
# Unset REDIS_URL: sessions and live games use the in-memory fallbacks.
|
|
os.environ.pop("REDIS_URL", None)
|