from flask import jsonify, request from flask_jwt_extended import create_access_token from flask_cors import cross_origin from datetime import timedelta from areas import api_v1 from areas.apps import AppRole from config import * from helpers import HydraOauth, BadRequest, KratosApi @api_v1.route("/login", methods=["POST"]) @cross_origin() def login(): authorization_url = HydraOauth.authorize() return jsonify({"authorizationUrl": authorization_url}) @api_v1.route("/hydra/callback") @cross_origin() def hydra_callback(): state = request.args.get("state") code = request.args.get("code") if state == None: raise BadRequest("Missing state query param") if code == None: raise BadRequest("Missing code query param") token = HydraOauth.get_token(state, code) user_info = HydraOauth.get_user_info() # Match Kratos identity with Hydra identities = KratosApi.get("/identities") identity = None for i in identities.json(): if i["traits"]["email"] == user_info["email"]: identity = i access_token = create_access_token( identity=token, expires_delta=timedelta(days=365) ) app_role = AppRole.query.filter_by(user_id=identity["id"]).first() return jsonify( { "accessToken": access_token, "userInfo": { "id": identity["id"], "email": user_info["email"], "name": user_info["name"], "preferredUsername": user_info["preferred_username"], "role_id": app_role.role_id if app_role else None, }, } )