kumi/django-oidc-provider
1
0
Fork 0
Code Issues 1 Pull requests 3 Projects Releases Packages Wiki Activity

Modify create_id_token function for supporting nonce.

Browse source
This commit is contained in:
juanifioren 2015-07-15 16:18:34 -03:00
parent c995da640c
commit 0de868941a
2 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

3
oidc_provider/lib/endpoints/authorize.py
View file

@ -106,7 +106,8 @@ class AuthorizeEndpoint(object):
elif self.grant_type == 'implicit': elif self.grant_type == 'implicit':
id_token_dic = create_id_token( id_token_dic = create_id_token(
user=self.request.user, user=self.request.user,
aud=self.client.client_id) aud=self.client.client_id,
nonce=self.params.nonce)
token = create_token( token = create_token(
user=self.request.user, user=self.request.user,

8
oidc_provider/lib/utils/token.py
View file

@ -10,7 +10,7 @@ from oidc_provider.models import *
from oidc_provider import settings from oidc_provider import settings
def create_id_token(user, aud, nonce=None): def create_id_token(user, aud, nonce):
""" """
Receives a user object and aud (audience). Receives a user object and aud (audience).
Then creates the id_token dictionary. Then creates the id_token dictionary.
@ -18,16 +18,14 @@ def create_id_token(user, aud, nonce=None):
Return a dic. Return a dic.
""" """
sub = settings.get('OIDC_IDTOKEN_SUB_GENERATOR')( sub = settings.get('OIDC_IDTOKEN_SUB_GENERATOR')(user=user)
user=user)
expires_in = settings.get('OIDC_IDTOKEN_EXPIRE') expires_in = settings.get('OIDC_IDTOKEN_EXPIRE')
now = timezone.now()
# Convert datetimes into timestamps. # Convert datetimes into timestamps.
now = timezone.now()
iat_time = int(time.mktime(now.timetuple())) iat_time = int(time.mktime(now.timetuple()))
exp_time = int(time.mktime((now + timedelta(seconds=expires_in)).timetuple())) exp_time = int(time.mktime((now + timedelta(seconds=expires_in)).timetuple()))
user_auth_time = user.last_login or user.date_joined user_auth_time = user.last_login or user.date_joined
auth_time = int(time.mktime(user_auth_time.timetuple())) auth_time = int(time.mktime(user_auth_time.timetuple()))