dashboard/backend/areas/auth/auth.py

from flask import jsonify, request
from flask_jwt_extended import create_access_token
from flask_cors import cross_origin
from datetime import timedelta

from areas import api_v1
from areas.apps import App, AppRole
from config import *
from helpers import HydraOauth, BadRequest, KratosApi


@api_v1.route("/login", methods=["POST"])
@cross_origin()
def login():
    authorization_url = HydraOauth.authorize()
    return jsonify({"authorizationUrl": authorization_url})


@api_v1.route("/hydra/callback")
@cross_origin()
def hydra_callback():
    state = request.args.get("state")
    code = request.args.get("code")
    if state == None:
        raise BadRequest("Missing state query param")

    if code == None:
        raise BadRequest("Missing code query param")

    token = HydraOauth.get_token(state, code)
    user_info = HydraOauth.get_user_info()
    # Match Kratos identity with Hydra
    # identities = KratosApi.get("/identities")
    # identity = None
    # for i in identities.json():
    #     if i["traits"]["email"] == user_info["email"]:
    #         identity = i

    access_token = create_access_token(
        identity=token, expires_delta=timedelta(days=365),
        #additional_claims={"user_id": identity["id"]}
    )

    # apps = App.query.all()
    # app_roles = []
    # for app in apps:
    #     tmp_app_role = AppRole.query.filter_by(
    #         user_id=identity["id"], app_id=app.id
    #     ).first()
    #     app_roles.append(
    #         {
    #             "name": app.slug,
    #             "role_id": tmp_app_role.role_id if tmp_app_role else None,
    #         }
    #     )

    return jsonify(
        {
            "accessToken": access_token,
            "userInfo": {
                "id": user_info["email"],
                "email": user_info["email"],
                "name": user_info["name"],
                "preferredUsername": user_info["preferred_username"],
                # "app_roles": app_roles,
            },
        }
    )