Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨(oidc) add refresh token tools #584

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

qbey
Copy link
Member

@qbey qbey commented Jan 28, 2025

Purpose

This provides the required "access token" and "refresh token" storage a refresh procedure to allow calls to "La Régie" resource server.

Proposal

  • allow access token storage in user session
  • allow refresh token encrypted storage in user session
  • create middleware for access token refresh and provide a decorator

@qbey qbey self-assigned this Jan 28, 2025
@qbey qbey requested a review from sampaccoud January 28, 2025 13:54
@qbey qbey force-pushed the qbey/oidc-token-storage-and-refresh branch from 86b5bb0 to 97db241 Compare January 28, 2025 13:55
qbey added 3 commits January 30, 2025 11:08
This provides a way to to refresh the OIDC access token.
The OIDC token will be used to request data to a resource server.
This code is highly related to
mozilla/mozilla-django-oidc#377
This code is not very clean but it reduces the footprint
to add refresh token storage in session.
This could be cleaned up once the PR it merged:
mozilla/mozilla-django-oidc#377
Enforce refresh token encryption for the session storage.
@qbey qbey force-pushed the qbey/oidc-token-storage-and-refresh branch from 97db241 to 35a2425 Compare January 30, 2025 10:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant