server.py

"""Python Flask WebApp Authgear integration example
"""

import json
from os import environ as env

from authlib.integrations.flask_client import OAuth
from dotenv import find_dotenv, load_dotenv
from flask import Flask, redirect, render_template, session, url_for
from datetime import datetime

ENV_FILE = find_dotenv()
if ENV_FILE:
    load_dotenv(ENV_FILE)

app = Flask(__name__)
app.secret_key = env.get("APP_SECRET_KEY")
app.config.from_object('config')


oauth = OAuth(app)

oauth.register(
    "authgear",
    client_kwargs={
        "scope": "openid offline_access",
        "grant_type": "authorization_code"
    },
    server_metadata_url=f'{env.get("AUTHGEAR_DOMAIN")}/.well-known/openid-configuration',
)


@app.route("/")
def home():
    return render_template(
        "home.html",
        session=session.get("user"),
        pretty=json.dumps(session.get("user"), indent=4),
    )

@app.route("/user")
def user():
    response = oauth.authgear.get(env.get("AUTHGEAR_DOMAIN") + "/oauth2/userinfo", token=session.get("user"))
    profile = response.json()
    return json.dumps(profile, indent=4)


@app.route("/callback", methods=["GET", "POST"])
def callback():
    token = oauth.authgear.authorize_access_token(client_id=env.get("AUTHGEAR_CLIENT_ID"), client_secret=env.get("AUTHGEAR_CLIENT_SECRET"))
    session["user"] = token
    return redirect("/")


@app.route("/login")
def login():
    return oauth.authgear.authorize_redirect(
        redirect_uri=url_for("callback", _external=True)
    )


@app.route("/logout")
def logout():
    session.clear()
    return redirect(env.get("AUTHGEAR_DOMAIN")
        + "/oauth2/end_session"
    )


if __name__ == "__main__":
    app.run(host="0.0.0.0", port=env.get("PORT", 3000))