add backend

backend/areas/auth/__init__.py

@@ -0,0 +1 @@
+from .auth import *

backend/areas/auth/auth.py

@@ -0,0 +1,67 @@
+from flask import jsonify, request
+from flask_jwt_extended import create_access_token
+from flask_cors import cross_origin
+from datetime import timedelta
+
+from areas import api_v1
+from areas.apps import App, AppRole
+from config import *
+from helpers import HydraOauth, BadRequest, KratosApi
+
+
+@api_v1.route("/login", methods=["POST"])
+@cross_origin()
+def login():
+    authorization_url = HydraOauth.authorize()
+    return jsonify({"authorizationUrl": authorization_url})
+
+
+@api_v1.route("/hydra/callback")
+@cross_origin()
+def hydra_callback():
+    state = request.args.get("state")
+    code = request.args.get("code")
+    if state == None:
+        raise BadRequest("Missing state query param")
+
+    if code == None:
+        raise BadRequest("Missing code query param")
+
+    token = HydraOauth.get_token(state, code)
+    user_info = HydraOauth.get_user_info()
+    # Match Kratos identity with Hydra
+    identities = KratosApi.get("/identities")
+    identity = None
+    for i in identities.json():
+        if i["traits"]["email"] == user_info["email"]:
+            identity = i
+
+    access_token = create_access_token(
+        identity=token, expires_delta=timedelta(days=365), additional_claims={"user_id": identity["id"]}
+    )
+
+    apps = App.query.all()
+    app_roles = []
+    for app in apps:
+        tmp_app_role = AppRole.query.filter_by(
+            user_id=identity["id"], app_id=app.id
+        ).first()
+        app_roles.append(
+            {
+                "name": app.slug,
+                "role_id": tmp_app_role.role_id if tmp_app_role else None,
+            }
+        )
+
+    return jsonify(
+        {
+            "accessToken": access_token,
+            "userInfo": {
+                "id": identity["id"],
+                "email": user_info["email"],
+                "name": user_info["name"],
+                "preferredUsername": user_info["preferred_username"],
+                "app_roles": app_roles,
+            },
+        }
+    )