36018d19ae
The Dynamic Client Registration spec specifies multiple response_types and grant_types per client (https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata). Since grant_types can be inferred from response_types we should be able to support both without needing to store grant_types. This also helps with oidc-client-js which expects a client that supports both "id_token" and "id_token token".
52 lines
2.3 KiB
Python
52 lines
2.3 KiB
Python
# Generated by Django 2.0.7 on 2018-08-15 20:44
|
|
|
|
from django.db import migrations, models
|
|
|
|
|
|
def migrate_response_type(apps, schema_editor):
|
|
RESPONSE_TYPES = [
|
|
('code', 'code (Authorization Code Flow)'),
|
|
('id_token', 'id_token (Implicit Flow)'),
|
|
('id_token token', 'id_token token (Implicit Flow)'),
|
|
('code token', 'code token (Hybrid Flow)'),
|
|
('code id_token', 'code id_token (Hybrid Flow)'),
|
|
('code id_token token', 'code id_token token (Hybrid Flow)'),
|
|
]
|
|
# ensure we get proper, versioned model with the deleted response_type field;
|
|
# importing directly yields the latest without response_type
|
|
ResponseType = apps.get_model('oidc_provider', 'ResponseType')
|
|
Client = apps.get_model('oidc_provider', 'Client')
|
|
for value, description in RESPONSE_TYPES:
|
|
ResponseType.objects.create(value=value, description=description)
|
|
for client in Client.objects.all():
|
|
client.response_types.add(ResponseType.objects.get(value=client.response_type))
|
|
|
|
|
|
class Migration(migrations.Migration):
|
|
|
|
dependencies = [
|
|
('oidc_provider', '0025_user_field_codetoken'),
|
|
]
|
|
|
|
operations = [
|
|
migrations.CreateModel(
|
|
name='ResponseType',
|
|
fields=[
|
|
('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
|
|
('value', models.CharField(choices=[('code', 'code (Authorization Code Flow)'), ('id_token', 'id_token (Implicit Flow)'), ('id_token token', 'id_token token (Implicit Flow)'), ('code token', 'code token (Hybrid Flow)'), ('code id_token', 'code id_token (Hybrid Flow)'), ('code id_token token', 'code id_token token (Hybrid Flow)')], max_length=30, unique=True, verbose_name='Response Type Value')),
|
|
('description', models.CharField(max_length=50)),
|
|
],
|
|
),
|
|
migrations.AddField(
|
|
model_name='client',
|
|
name='response_types',
|
|
field=models.ManyToManyField(to='oidc_provider.ResponseType'),
|
|
),
|
|
# omitting reverse migrate_response_type since removing response_type is irreversible (nonnull and no default)
|
|
migrations.RunPython(migrate_response_type),
|
|
migrations.RemoveField(
|
|
model_name='client',
|
|
name='response_type',
|
|
),
|
|
]
|