woggioni
915a294dc8
kaya-oidc 0.0.6 can run several providers in one app (OIDCProviders), each with its own login route and namespaced session state. Adopt it: providers are configured in indexed, contiguous OIDC_<n>_* blocks (0-based) with OIDC_<n>_PROVIDER naming the provider in its login URL and session keys. The old unindexed OIDC_ISSUER/OIDC_CLIENT_ID/... names are no longer read; startup fails with a rename hint when they are set. With no OIDC variables at all, the single dev mock provider named "default" is used, as before. The platform now authenticates through OIDCProviders: auth.current_user returns the session's user (sessions stay single-identity, so at most one provider is logged in) and require_auth/route handlers use it, while the websocket path keeps scanning for any provider's user. New routes expose the configuration to the SPA and keep old links working: GET /api/auth/providers lists the login URLs, GET /auth/login redirects to the first provider and GET /auth/logout to whichever provider the session is logged in with. The lobby renders one login button per provider from that endpoint. Update the env examples, compose and k8s manifests to the indexed scheme, document the multiple-provider setup and the migration, and cover it with config, auth and route tests.
36 lines
1.3 KiB
Python
36 lines
1.3 KiB
Python
"""Auth routes on the fully wired application.
|
|
|
|
The integration suite's app is built from the indexed test environment
|
|
(one provider named ``default``); these tests pin the public surface the
|
|
SPA and bookmarks rely on.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import unittest
|
|
|
|
from httpx import ASGITransport, AsyncClient
|
|
|
|
from tavolo.app import app
|
|
from tests.helpers import async_test
|
|
|
|
|
|
class AuthRoutesTest(unittest.TestCase):
|
|
@async_test
|
|
async def test_providers_endpoint_reports_the_configured_provider(self) -> None:
|
|
transport = ASGITransport(app=app)
|
|
async with AsyncClient(transport=transport, base_url="http://127.0.0.1") as client:
|
|
response = await client.get("/api/auth/providers")
|
|
self.assertEqual(200, response.status_code)
|
|
self.assertEqual(
|
|
{"providers": [{"name": "default", "login_url": "/auth/default/login"}]},
|
|
response.json(),
|
|
)
|
|
|
|
@async_test
|
|
async def test_generic_login_redirects_to_the_provider(self) -> None:
|
|
transport = ASGITransport(app=app)
|
|
async with AsyncClient(transport=transport, base_url="http://127.0.0.1") as client:
|
|
response = await client.get("/auth/login", follow_redirects=False)
|
|
self.assertEqual(302, response.status_code)
|
|
self.assertEqual("/auth/default/login", response.headers["location"])
|