forked from developer italia
This commit is contained in:
gabdevele
@@ -0,0 +1,3 @@
|
||||
*/db.sqlite3
|
||||
*/logs/
|
||||
*/static/
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
FROM python:3.10-slim
|
||||
|
||||
ENV PYTHONDONTWRITEBYTECODE=1
|
||||
ENV PYTHONUNBUFFERED=1
|
||||
|
||||
RUN apt-get update \
|
||||
&& apt-get install -y --no-install-recommends build-essential git \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
RUN pip install --no-cache-dir --upgrade pip \
|
||||
&& pip install --no-cache-dir \
|
||||
"git+https://github.com/italia/spid-cie-oidc-django.git" \
|
||||
"design-django-theme==v1.4.8"
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
COPY entrypoint.sh /entrypoint.sh
|
||||
RUN chmod +x /entrypoint.sh
|
||||
|
||||
ENTRYPOINT ["/entrypoint.sh"]
|
||||
@@ -0,0 +1,106 @@
|
||||
# Visione Local CIE Stack
|
||||
|
||||
This folder is a ready-to-run local stack for CIE auth integration with Visione.
|
||||
|
||||
Included services:
|
||||
- `federation-authority`
|
||||
- `provider`
|
||||
- `relying-party`
|
||||
|
||||
They run through one compose file and use the modified relying party bridge for Visione.
|
||||
|
||||
## Prerequisites
|
||||
- Visione backend running on `http://127.0.0.1:5555`
|
||||
- Docker with Compose
|
||||
|
||||
## Visione config
|
||||
Set in `config.json`:
|
||||
|
||||
```json
|
||||
"cie_auth": {
|
||||
"service_base_url": "http://127.0.0.1:8001",
|
||||
"start_path": "/visione/start",
|
||||
"shared_secret": "change-me-for-local-dev",
|
||||
"state_ttl_minutes": 10,
|
||||
"default_frontend_redirect_uri": "http://localhost:3000/auth/cie/callback"
|
||||
}
|
||||
```
|
||||
|
||||
Keep same secret also in:
|
||||
- `relying_party/relying_party/settingslocal.py`
|
||||
`VISIONE_SHARED_SECRET`
|
||||
|
||||
## Start stack
|
||||
From repo root:
|
||||
|
||||
```bash
|
||||
docker compose up -d
|
||||
docker compose -f infra/cie-auth/docker-compose.yml up --build -d
|
||||
```
|
||||
|
||||
This starts:
|
||||
- MySQL + Mailpit from root compose
|
||||
- authority on `127.0.0.1:8000`
|
||||
- provider on `127.0.0.1:8002`
|
||||
- relying party on `127.0.0.1:8001`
|
||||
|
||||
## Start Visione
|
||||
From repo root:
|
||||
|
||||
```bash
|
||||
cmake -S . -B build -G Ninja -DCMAKE_BUILD_TYPE=Debug
|
||||
cmake --build build
|
||||
./build/visione-backend
|
||||
```
|
||||
|
||||
## Smoke test
|
||||
Start login:
|
||||
|
||||
```bash
|
||||
curl -sS -X POST http://127.0.0.1:5555/api/v1/auth/cie/start \
|
||||
-H 'Content-Type: application/json' \
|
||||
-d '{"frontend_redirect_uri":"http://localhost:3000/auth/cie/callback"}'
|
||||
```
|
||||
|
||||
Expected JSON:
|
||||
- `authorization_url`
|
||||
- `state`
|
||||
|
||||
Then:
|
||||
1. open `authorization_url` in browser
|
||||
2. complete demo CIE login
|
||||
3. browser lands on `http://localhost:3000/auth/cie/callback?state=...`
|
||||
|
||||
Poll result:
|
||||
|
||||
```bash
|
||||
curl -sS http://127.0.0.1:5555/api/v1/auth/cie/session/<state>
|
||||
```
|
||||
|
||||
Expected success:
|
||||
- `status = "authenticated"`
|
||||
- `auth.token` present
|
||||
|
||||
## Frontend flow
|
||||
1. call `POST /api/v1/auth/cie/start`
|
||||
2. redirect browser to `authorization_url`
|
||||
3. callback page reads `state`
|
||||
4. poll `GET /api/v1/auth/cie/session/{state}`
|
||||
5. when authenticated, save `auth.token`
|
||||
6. call `GET /api/v1/me`
|
||||
|
||||
## Reset local auth DBs
|
||||
If you want a clean auth stack:
|
||||
|
||||
```bash
|
||||
rm -f infra/cie-auth/federation_authority/db.sqlite3
|
||||
rm -f infra/cie-auth/provider/db.sqlite3
|
||||
rm -f infra/cie-auth/relying_party/db.sqlite3
|
||||
docker compose -f infra/cie-auth/docker-compose.yml down
|
||||
docker compose -f infra/cie-auth/docker-compose.yml up --build -d
|
||||
```
|
||||
|
||||
## Logs
|
||||
```bash
|
||||
docker compose -f infra/cie-auth/docker-compose.yml logs -f
|
||||
```
|
||||
@@ -0,0 +1,35 @@
|
||||
services:
|
||||
federation-authority:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Dockerfile
|
||||
network_mode: host
|
||||
working_dir: /app/federation_authority
|
||||
command: ["/app/federation_authority", "8000"]
|
||||
volumes:
|
||||
- ./federation_authority:/app/federation_authority
|
||||
|
||||
provider:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Dockerfile
|
||||
network_mode: host
|
||||
working_dir: /app/provider
|
||||
command: ["/app/provider", "8002"]
|
||||
volumes:
|
||||
- ./provider:/app/provider
|
||||
depends_on:
|
||||
- federation-authority
|
||||
|
||||
relying-party:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Dockerfile
|
||||
network_mode: host
|
||||
working_dir: /app/relying_party
|
||||
command: ["/app/relying_party", "8001"]
|
||||
volumes:
|
||||
- ./relying_party:/app/relying_party
|
||||
depends_on:
|
||||
- federation-authority
|
||||
- provider
|
||||
@@ -0,0 +1,18 @@
|
||||
#!/bin/sh
|
||||
set -eu
|
||||
|
||||
APP_DIR="$1"
|
||||
PORT="$2"
|
||||
|
||||
cd "$APP_DIR"
|
||||
|
||||
mkdir -p logs static
|
||||
|
||||
if [ ! -f db.sqlite3 ]; then
|
||||
python manage.py migrate
|
||||
python manage.py loaddata dumps/example.json
|
||||
else
|
||||
python manage.py migrate
|
||||
fi
|
||||
|
||||
exec python manage.py runserver 0.0.0.0:"$PORT"
|
||||
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
./manage.py dumpdata -e admin -e spid_cie_oidc_relying_party -e spid_cie_oidc_provider -e spid_cie_oidc_relying_party_test -e auth -e contenttypes -e sessions --indent 2 > dumps/example.json
|
||||
File diff suppressed because one or more lines are too long
Binary file not shown.
@@ -0,0 +1,16 @@
|
||||
"""
|
||||
ASGI config for example project.
|
||||
|
||||
It exposes the ASGI callable as a module-level variable named ``application``.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/howto/deployment/asgi/
|
||||
"""
|
||||
|
||||
import os
|
||||
|
||||
from django.core.asgi import get_asgi_application
|
||||
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'federation_authority.settings')
|
||||
|
||||
application = get_asgi_application()
|
||||
@@ -0,0 +1,81 @@
|
||||
"""
|
||||
Django settings for example project.
|
||||
|
||||
Generated by 'django-admin startproject' using Django 4.0.2.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/topics/settings/
|
||||
|
||||
For the full list of settings and their values, see
|
||||
https://docs.djangoproject.com/en/4.0/ref/settings/
|
||||
"""
|
||||
|
||||
from pathlib import Path
|
||||
from .settingslocal import * # noqa: F401
|
||||
|
||||
# Build paths inside the project like this: BASE_DIR / 'subdir'.
|
||||
BASE_DIR = Path(__file__).resolve().parent.parent
|
||||
|
||||
|
||||
# Quick-start development settings - unsuitable for production
|
||||
# See https://docs.djangoproject.com/en/4.0/howto/deployment/checklist/
|
||||
|
||||
MIDDLEWARE = [
|
||||
'django.middleware.security.SecurityMiddleware',
|
||||
'django.contrib.sessions.middleware.SessionMiddleware',
|
||||
'django.middleware.common.CommonMiddleware',
|
||||
'django.middleware.csrf.CsrfViewMiddleware',
|
||||
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
||||
'django.contrib.messages.middleware.MessageMiddleware',
|
||||
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
||||
]
|
||||
|
||||
ROOT_URLCONF = 'federation_authority.urls'
|
||||
|
||||
TEMPLATES = [
|
||||
{
|
||||
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
||||
'DIRS': ['templates'],
|
||||
'APP_DIRS': True,
|
||||
'OPTIONS': {
|
||||
'context_processors': [
|
||||
'django.template.context_processors.debug',
|
||||
'django.template.context_processors.request',
|
||||
'django.contrib.auth.context_processors.auth',
|
||||
'django.contrib.messages.context_processors.messages',
|
||||
],
|
||||
},
|
||||
},
|
||||
]
|
||||
|
||||
WSGI_APPLICATION = 'federation_authority.wsgi.application'
|
||||
|
||||
# Password validation
|
||||
# https://docs.djangoproject.com/en/4.0/ref/settings/#auth-password-validators
|
||||
|
||||
AUTH_PASSWORD_VALIDATORS = [
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
|
||||
},
|
||||
]
|
||||
|
||||
|
||||
# Static files (CSS, JavaScript, Images)
|
||||
# https://docs.djangoproject.com/en/4.0/howto/static-files/
|
||||
|
||||
STATIC_URL = 'static/'
|
||||
STATIC_ROOT = os.path.join(BASE_DIR, 'static')
|
||||
|
||||
# Default primary key field type
|
||||
# https://docs.djangoproject.com/en/4.0/ref/settings/#default-auto-field
|
||||
|
||||
DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
|
||||
@@ -0,0 +1,106 @@
|
||||
import aiohttp
|
||||
import os
|
||||
|
||||
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
||||
|
||||
SECRET_KEY = 'visione-cie-authority-local-dev'
|
||||
DEBUG = True
|
||||
ADMIN_PATH = 'admin/'
|
||||
APPEND_SLASH = False
|
||||
|
||||
OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
|
||||
OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
|
||||
OIDCFED_PROVIDER_PROFILE = "spid"
|
||||
OIDCFED_PROVIDER_MAX_REFRESH = 10
|
||||
OIDCFED_REQUIRED_TRUST_MARKS = []
|
||||
|
||||
OIDCFED_FEDERATION_TRUST_MARKS_PROFILES = {
|
||||
"openid_relying_party__public": {},
|
||||
"openid_relying_party__private": {},
|
||||
}
|
||||
|
||||
HTTPC_PARAMS = {
|
||||
"connection": {"ssl": True},
|
||||
"session": {"timeout": aiohttp.ClientTimeout(total=4)},
|
||||
}
|
||||
|
||||
LOGIN_REDIRECT_URL = "/oidc/rp/echo_attributes"
|
||||
LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
|
||||
LOGIN_URL = "/oidc/rp/landing"
|
||||
|
||||
ALLOWED_HOSTS = ['*']
|
||||
AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
|
||||
|
||||
INSTALLED_APPS = [
|
||||
'spid_cie_oidc.accounts',
|
||||
'django.contrib.admin',
|
||||
'django.contrib.auth',
|
||||
'django.contrib.contenttypes',
|
||||
'django.contrib.sessions',
|
||||
'django.contrib.messages',
|
||||
'django.contrib.staticfiles',
|
||||
"bootstrap_italia_template",
|
||||
'spid_cie_oidc.entity',
|
||||
'spid_cie_oidc.authority',
|
||||
'spid_cie_oidc.onboarding',
|
||||
'spid_cie_oidc.relying_party',
|
||||
'spid_cie_oidc.relying_party_test',
|
||||
'spid_cie_oidc.provider',
|
||||
'djagger'
|
||||
]
|
||||
|
||||
TEMPLATE_LOADERS = (
|
||||
'django.template.loaders.eggs.Loader'
|
||||
)
|
||||
|
||||
DJAGGER_DOCUMENT = {
|
||||
"app_names": ['spid_cie_oidc'],
|
||||
}
|
||||
|
||||
DATABASES = {
|
||||
'default': {
|
||||
'ENGINE': 'django.db.backends.sqlite3',
|
||||
'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
|
||||
}
|
||||
}
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
DATA_UPLOAD_MAX_NUMBER_FIELDS = 65000
|
||||
|
||||
ADMINS = [('Visione', '[email protected]')]
|
||||
|
||||
LOGGING = {
|
||||
'version': 1,
|
||||
'disable_existing_loggers': False,
|
||||
'formatters': {
|
||||
'default': {
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s',
|
||||
},
|
||||
},
|
||||
'handlers': {
|
||||
'console': {
|
||||
'formatter': 'default',
|
||||
'level': 'DEBUG',
|
||||
'class': 'logging.StreamHandler',
|
||||
},
|
||||
},
|
||||
'loggers': {
|
||||
'django': {
|
||||
'handlers': ['console'],
|
||||
'level': 'ERROR',
|
||||
'propagate': False,
|
||||
},
|
||||
'spid_cie_oidc': {
|
||||
'handlers': ['console'],
|
||||
'level': 'INFO',
|
||||
'propagate': False,
|
||||
}
|
||||
}
|
||||
}
|
||||
SESSION_COOKIE_NAME = 'visione_authority_sessionid'
|
||||
CSRF_COOKIE_NAME = 'visione_authority_csrftoken'
|
||||
@@ -0,0 +1,271 @@
|
||||
import aiohttp
|
||||
import os
|
||||
|
||||
import sys
|
||||
import logging
|
||||
|
||||
from spid_cie_oidc import __version__
|
||||
|
||||
|
||||
if len(sys.argv) > 1 and sys.argv[1] == 'test':
|
||||
logging.disable(logging.CRITICAL)
|
||||
|
||||
# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
|
||||
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
||||
|
||||
# SECURITY WARNING: keep the secret key used in production secret!
|
||||
# CHANGE THIS VALUE
|
||||
SECRET_KEY = 'lrx(fg&+2e=$l=y8$!£$%$/£%412345234534543--345234-dfdfgsdf-myg%r3z!yjm(lg*l%-z'
|
||||
|
||||
# SECURITY WARNING: don't run with debug turned on in production!
|
||||
DEBUG = True
|
||||
|
||||
# the path corresponding the admin backend, default if not defined: admin/
|
||||
# CHANGE THIS VALUE
|
||||
ADMIN_PATH = 'admin/'
|
||||
APPEND_SLASH = False
|
||||
|
||||
# required for onboarding checks and also for all the leafs
|
||||
OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
|
||||
|
||||
OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
|
||||
|
||||
OIDCFED_PROVIDER_PROFILE = "spid"
|
||||
OIDCFED_PROVIDER_MAX_REFRESH = 10 #used in SPID
|
||||
|
||||
# OIDCFED_PROVIDER_MAX_CONSENT_TIMEFRAME = 3600 #used in CIE (seconds)
|
||||
|
||||
# for RP only
|
||||
OIDCFED_IDENTITY_PROVIDERS = {
|
||||
"spid": {
|
||||
"http://127.0.0.1:8000/oidc/op" : OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
},
|
||||
"cie": {
|
||||
"http://127.0.0.1:8002/oidc/op" : OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
}
|
||||
}
|
||||
|
||||
OIDCFED_REQUIRED_TRUST_MARKS = []
|
||||
|
||||
OIDCFED_FEDERATION_TRUST_MARKS_PROFILES = {
|
||||
"openid_relying_party__public": {},
|
||||
"openid_relying_party__private": {},
|
||||
}
|
||||
|
||||
HTTPC_PARAMS = {
|
||||
"connection": {"ssl": True},
|
||||
"session": {"timeout": aiohttp.ClientTimeout(total=4)},
|
||||
}
|
||||
|
||||
LOGIN_REDIRECT_URL = "/oidc/rp/echo_attributes"
|
||||
LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
|
||||
LOGIN_URL = "/oidc/rp/landing"
|
||||
|
||||
|
||||
FEDERATION_DEFAULT_POLICY = {
|
||||
"openid_relying_party": {
|
||||
# TODO: to be customized for each entities, not somethinf to default!
|
||||
# "client_id": {"value": "https://rp.example.it/spid"},
|
||||
# "redirect_uris": {
|
||||
# "subset_of": [
|
||||
# "https://rp.example.it/spid/cb1",
|
||||
# "https://rp.example.it/spid/cb2"
|
||||
# ]
|
||||
# },
|
||||
# "organization_name": {"value": "Example RP organization name"},
|
||||
# "logo_uri": {
|
||||
# "one_of": [
|
||||
# "https://rp.example.it/logo_small.jpg",
|
||||
# "https://rp.example.it/logo_big.jpg"
|
||||
# ],
|
||||
# "default": "https://rp.example.it/logo_small.jpg"
|
||||
# },
|
||||
# "policy_uri": {
|
||||
# "value": "https://rp.example.it/policy.html"
|
||||
# },
|
||||
# "tos_uri": {
|
||||
# "value": "https://rp.example.it/tos.html"
|
||||
# },
|
||||
"grant_types": {
|
||||
"subset_of": [
|
||||
"authorization_code",
|
||||
"refresh_token"
|
||||
]
|
||||
},
|
||||
# TODO: to be customized for each actor
|
||||
"constraints": {
|
||||
# "naming_constraints": {
|
||||
# "permitted": [
|
||||
# "https://rp.example.it"
|
||||
# ]
|
||||
# },
|
||||
|
||||
# defines how many intermediaries are allowed to this trust anchor
|
||||
"max_path_length": 1
|
||||
},
|
||||
},
|
||||
# TODO: TBD
|
||||
"openid_provider": {},
|
||||
"federation_entity": {},
|
||||
"oauth_resource": {}
|
||||
}
|
||||
|
||||
ALLOWED_HOSTS = ['*']
|
||||
AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
|
||||
|
||||
INSTALLED_APPS = [
|
||||
'spid_cie_oidc.accounts',
|
||||
'django.contrib.admin',
|
||||
'django.contrib.auth',
|
||||
'django.contrib.contenttypes',
|
||||
'django.contrib.sessions',
|
||||
'django.contrib.messages',
|
||||
'django.contrib.staticfiles',
|
||||
# 'prettyjson',
|
||||
"bootstrap_italia_template",
|
||||
'spid_cie_oidc.entity',
|
||||
'spid_cie_oidc.authority',
|
||||
'spid_cie_oidc.onboarding',
|
||||
'spid_cie_oidc.relying_party',
|
||||
'spid_cie_oidc.relying_party_test',
|
||||
'spid_cie_oidc.provider',
|
||||
'djagger'
|
||||
]
|
||||
|
||||
TEMPLATE_LOADERS = (
|
||||
'django.template.loaders.eggs.Loader'
|
||||
)
|
||||
|
||||
DJAGGER_DOCUMENT = {
|
||||
"info": dict(
|
||||
title = "SPID/CIE OIDC OpenAPI 3.0 Documentation",
|
||||
description = "OpenAPI 3.0 Document Description",
|
||||
termsOfService = "",
|
||||
contact = {
|
||||
"email": "[email protected]",
|
||||
"url": "https://github.com/italia/spid-cie-oidc-django",
|
||||
"name" : "Developers Italia"
|
||||
},
|
||||
license = {
|
||||
"name": "CC BY 4.0",
|
||||
"url": "https://creativecommons.org/licenses/by/4.0/"
|
||||
},
|
||||
version = __version__,
|
||||
x_logo = {
|
||||
"name": "Developers italia",
|
||||
"url": "https://developers.italia.it/assets/icons/logo-it.svg"
|
||||
}
|
||||
),
|
||||
"url_names": [
|
||||
# Federation Authority
|
||||
'oidcfed_fetch',
|
||||
'oidcfed_resolve',
|
||||
'oidcfed_list',
|
||||
'oidcfed_trust_mark_status',
|
||||
'oidcfed_advanced_entity_listing',
|
||||
|
||||
# Provider
|
||||
'oidc_provider_authnrequest',
|
||||
'oidc_provider_token_endpoint',
|
||||
'oidc_provider_userinfo_endpoint',
|
||||
'introspection_endpoint',
|
||||
'oidc_provider_revoke_session',
|
||||
|
||||
# Relying Party
|
||||
'spid_cie_rp_begin',
|
||||
'spid_cie_rp_callback',
|
||||
'spid_cie_rpinitiated_logout'
|
||||
]
|
||||
}
|
||||
|
||||
DATABASES = {
|
||||
# if you need more power
|
||||
# 'default': {
|
||||
# 'ENGINE': 'django.db.backends.mysql',
|
||||
# 'NAME': 'that-username',
|
||||
# 'HOST': 'localhost',
|
||||
# 'USER': 'that-user',
|
||||
# 'PASSWORD': 'that-password',
|
||||
# 'PORT': '',
|
||||
# 'OPTIONS': {'init_command': "SET sql_mode='STRICT_TRANS_TABLES'"}
|
||||
# },
|
||||
'default': {
|
||||
'ENGINE': 'django.db.backends.sqlite3',
|
||||
'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
|
||||
}
|
||||
}
|
||||
|
||||
# https://docs.djangoproject.com/en/2.0/topics/i18n/
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
DATA_UPLOAD_MAX_NUMBER_FIELDS = 65000
|
||||
|
||||
# email notification on errors
|
||||
# DEFAULT_FROM_EMAIL = 'fedauth-noreply@DOMAIN'
|
||||
# SERVER_EMAIL = DEFAULT_FROM_EMAIL
|
||||
# EMAIL_HOST = 'smtpservice.yourdomain.it'
|
||||
# EMAIL_HOST_USER = '[email protected]'
|
||||
# EMAIL_HOST_PASSWORD = 'mypassword'
|
||||
# EMAIL_PORT = 587
|
||||
# EMAIL_USE_TLS = True
|
||||
|
||||
ADMINS = [('name surname', 'user1@DOMAIN'),
|
||||
('name surnale', 'user2@DOMAIN'),]
|
||||
|
||||
# LOGGING
|
||||
LOGGING = {
|
||||
'version': 1,
|
||||
'disable_existing_loggers': False,
|
||||
'formatters': {
|
||||
'default': {
|
||||
# exact format is not important, this is the minimum information
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s',
|
||||
},
|
||||
'detailed': {
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s [%(pathname)s %(funcName)s:%(lineno)s]'
|
||||
},
|
||||
},
|
||||
'filters': {
|
||||
'require_debug_false': {
|
||||
'()': 'django.utils.log.RequireDebugFalse'
|
||||
}
|
||||
},
|
||||
'handlers': {
|
||||
'mail_admins': {
|
||||
'formatter': 'detailed',
|
||||
'level': 'ERROR',
|
||||
'filters': ['require_debug_false'],
|
||||
'class': 'django.utils.log.AdminEmailHandler'
|
||||
},
|
||||
'console': {
|
||||
'formatter': 'default',
|
||||
'level': 'DEBUG',
|
||||
'class': 'logging.StreamHandler',
|
||||
},
|
||||
"daily": {
|
||||
"class": "logging.handlers.TimedRotatingFileHandler",
|
||||
"level": "INFO",
|
||||
"formatter": "default",
|
||||
"filename": f"{BASE_DIR}/logs/trust_anchor.log",
|
||||
"when": "midnight",
|
||||
"backupCount": 96
|
||||
}
|
||||
},
|
||||
'loggers': {
|
||||
'django': {
|
||||
'handlers': ['console', 'mail_admins'],
|
||||
'level': 'ERROR',
|
||||
'propagate': False,
|
||||
},
|
||||
'spid_cie_oidc': {
|
||||
'handlers': ['console', 'mail_admins', "daily"],
|
||||
'level': 'INFO',
|
||||
'propagate': False,
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,99 @@
|
||||
"""acsia_agent_proj URL Configuration
|
||||
|
||||
The `urlpatterns` list routes URLs to views. For more information please see:
|
||||
https://docs.djangoproject.com/en/4.0/topics/http/urls/
|
||||
Examples:
|
||||
Function views
|
||||
1. Add an import: from my_app import views
|
||||
2. Add a URL to urlpatterns: path('', views.home, name='home')
|
||||
Class-based views
|
||||
1. Add an import: from other_app.views import Home
|
||||
2. Add a URL to urlpatterns: path('', Home.as_view(), name='home')
|
||||
Including another URLconf
|
||||
1. Import the include() function: from django.urls import include, path
|
||||
2. Add a URL to urlpatterns: path('blog/', include('blog.urls'))
|
||||
"""
|
||||
from django.conf import settings
|
||||
from django.contrib import admin
|
||||
from django.urls import include, path, re_path
|
||||
from django.views.static import serve
|
||||
|
||||
from spid_cie_oidc.entity.urls import urlpatterns as entity_urlpatterns
|
||||
from spid_cie_oidc.authority.urls import urlpatterns as ta_urlpatterns
|
||||
from spid_cie_oidc.onboarding.urls import urlpatterns as onb_urlpatterns
|
||||
from spid_cie_oidc.provider.urls import urlpatterns as prov_urlpatterns
|
||||
|
||||
admin.site.site_header = "OIDC Federation Entity Administration"
|
||||
admin.site.site_title = "OIDC Federation"
|
||||
admin.site.index_title = "Welcome to OIDC Federation Entity Admin backend"
|
||||
|
||||
ADMIN_PATH = getattr(settings, 'ADMIN_PATH', 'admin/')
|
||||
|
||||
urlpatterns = []
|
||||
|
||||
urlpatterns.extend(entity_urlpatterns)
|
||||
urlpatterns.extend(prov_urlpatterns)
|
||||
urlpatterns.extend(ta_urlpatterns)
|
||||
urlpatterns.extend(onb_urlpatterns)
|
||||
|
||||
urlpatterns.extend(
|
||||
(
|
||||
path(f"{ADMIN_PATH}", admin.site.urls),
|
||||
re_path('^static/(?P<path>.*)$',
|
||||
serve, {
|
||||
'document_root': settings.STATIC_ROOT,
|
||||
# 'show_indexes': True
|
||||
}
|
||||
),
|
||||
|
||||
)
|
||||
)
|
||||
|
||||
if 'spid_cie_oidc.relying_party' in settings.INSTALLED_APPS:
|
||||
from spid_cie_oidc.relying_party.urls import urlpatterns as rp_urlpatterns
|
||||
urlpatterns.extend(rp_urlpatterns)
|
||||
|
||||
from spid_cie_oidc.entity.views import entity_configuration, resolve_entity_statement
|
||||
|
||||
urlpatterns.extend(
|
||||
[
|
||||
path(
|
||||
f"oidc/rp/.well-known/openid-federation",
|
||||
entity_configuration,
|
||||
name="rp_entity_configuration",
|
||||
),
|
||||
path(
|
||||
"oidc/rp/resolve",
|
||||
resolve_entity_statement,
|
||||
name="rp_entity_resolve",
|
||||
),
|
||||
]
|
||||
)
|
||||
|
||||
if 'spid_cie_oidc.provider' in settings.INSTALLED_APPS:
|
||||
from spid_cie_oidc.provider.urls import urlpatterns as op_urlpatterns
|
||||
urlpatterns.extend(op_urlpatterns)
|
||||
|
||||
from spid_cie_oidc.entity.views import entity_configuration
|
||||
|
||||
urlpatterns.extend(
|
||||
[
|
||||
path(
|
||||
f"oidc/op/.well-known/openid-federation",
|
||||
entity_configuration,
|
||||
name="op_entity_configuration",
|
||||
),
|
||||
path(
|
||||
"oidc/op/resolve",
|
||||
resolve_entity_statement,
|
||||
name="op_entity_resolve",
|
||||
),
|
||||
]
|
||||
)
|
||||
|
||||
if 'spid_cie_oidc.relying_party_test' in settings.INSTALLED_APPS:
|
||||
from spid_cie_oidc.relying_party_test.urls import urlpatterns as rp_urlpatterns_test
|
||||
urlpatterns.extend(rp_urlpatterns_test)
|
||||
|
||||
if 'djagger' in settings.INSTALLED_APPS:
|
||||
urlpatterns.append(path('rest/', include('djagger.urls')))
|
||||
@@ -0,0 +1,16 @@
|
||||
"""
|
||||
WSGI config for example project.
|
||||
|
||||
It exposes the WSGI callable as a module-level variable named ``application``.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/howto/deployment/wsgi/
|
||||
"""
|
||||
|
||||
import os
|
||||
|
||||
from django.core.wsgi import get_wsgi_application
|
||||
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'federation_authority.settings')
|
||||
|
||||
application = get_wsgi_application()
|
||||
Executable
+22
@@ -0,0 +1,22 @@
|
||||
#!/usr/bin/env python
|
||||
"""Django's command-line utility for administrative tasks."""
|
||||
import os
|
||||
import sys
|
||||
|
||||
|
||||
def main():
|
||||
"""Run administrative tasks."""
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'federation_authority.settings')
|
||||
try:
|
||||
from django.core.management import execute_from_command_line
|
||||
except ImportError as exc:
|
||||
raise ImportError(
|
||||
"Couldn't import Django. Are you sure it's installed and "
|
||||
"available on your PYTHONPATH environment variable? Did you "
|
||||
"forget to activate a virtual environment?"
|
||||
) from exc
|
||||
execute_from_command_line(sys.argv)
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
@@ -0,0 +1,19 @@
|
||||
{% extends "admin/change_form.html" %}
|
||||
{% block admin_change_form_document_ready %}
|
||||
{{ block.super }}
|
||||
<script>
|
||||
Array.from(document.querySelectorAll('div.readonly')).forEach(div => {
|
||||
let data;
|
||||
try {
|
||||
data = JSON.parse(div.innerText);
|
||||
} catch {
|
||||
// Not valid JSON
|
||||
return;
|
||||
}
|
||||
div.style.whiteSpace = 'pre-wrap';
|
||||
div.style.fontFamily = 'courier';
|
||||
div.style.fontSize = '0.9em';
|
||||
div.innerText = JSON.stringify(data, null, 2);
|
||||
});
|
||||
</script>
|
||||
{% endblock %}
|
||||
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
./manage.py dumpdata -e admin -e spid_cie_oidc_provider -e auth -e contenttypes -e sessions --indent 2 > dumps/example.json
|
||||
@@ -0,0 +1,775 @@
|
||||
[
|
||||
{
|
||||
"model": "spid_cie_oidc_accounts.user",
|
||||
"pk": 1,
|
||||
"fields": {
|
||||
"password": "pbkdf2_sha256$320000$FIyN55FCASEozeA1pWYRm1$8QzndgdnJkC7OPhEGPVHrrAxsa5KDoydMkl4zgrn0fs=",
|
||||
"last_login": "2022-04-23T15:44:06.367Z",
|
||||
"is_superuser": true,
|
||||
"username": "admin",
|
||||
"is_staff": true,
|
||||
"date_joined": "2022-03-02T22:51:34.537Z",
|
||||
"first_name": null,
|
||||
"last_name": null,
|
||||
"is_active": true,
|
||||
"email": "[email protected]",
|
||||
"origin": null,
|
||||
"attributes": {
|
||||
"https://attributes.eid.gov.it/fiscal_number": "TINIT-RSSMRA80A01H501U",
|
||||
"given_name": "Mario",
|
||||
"family_name": "Rossi",
|
||||
"place_of_birth": {
|
||||
"region": "RM",
|
||||
"locality": "H501"
|
||||
},
|
||||
"birthdate": "1980-01-01",
|
||||
"gender": "male",
|
||||
"email": "[email protected]",
|
||||
"email_verified": "true",
|
||||
"document_details": {
|
||||
"type": "cartaIdentita",
|
||||
"document_number": "CA000001AA",
|
||||
"issuer": {
|
||||
"name": "ComuneRoma"
|
||||
},
|
||||
"date_of_issuance": "2021-01-15",
|
||||
"date_of_expiry": "2031-01-14"
|
||||
},
|
||||
"sub": "6f0f6a5f9d5f4e0e91d875d99b15f3f1c2d7b6a4b0c1d2e3f4a5b6c7d8e9f001",
|
||||
"username": "http://127.0.0.1:8000/oidc/op/__6f0f6a5f9d5f4e0e91d875d99b15f3f1c2d7b6a4b0c1d2e3f4a5b6c7d8e9f001",
|
||||
"phone_number": "393331112233",
|
||||
"phone_number_verified": "true",
|
||||
"https://attributes.eid.gov.it/e_delivery_service": "[email protected]",
|
||||
"address": {
|
||||
"street_address": "Via Appia Nuova 10",
|
||||
"postal_code": "00183",
|
||||
"locality": "Roma",
|
||||
"region": "RM",
|
||||
"country_code": "IT"
|
||||
}
|
||||
},
|
||||
"groups": [],
|
||||
"user_permissions": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_accounts.user",
|
||||
"pk": 2,
|
||||
"fields": {
|
||||
"password": "pbkdf2_sha256$320000$AhIzWIg12g3HskebsrXn98$vnuNV6C91Bnc1JobVWj392ekqHkKiI12bhgd0q6ApZk=",
|
||||
"last_login": "2022-04-23T15:48:20.734Z",
|
||||
"is_superuser": false,
|
||||
"username": "user",
|
||||
"is_staff": false,
|
||||
"date_joined": "2022-03-11T22:09:22.789Z",
|
||||
"first_name": null,
|
||||
"last_name": null,
|
||||
"is_active": true,
|
||||
"email": "[email protected]",
|
||||
"origin": null,
|
||||
"attributes": {
|
||||
"https://attributes.eid.gov.it/fiscal_number": "TINIT-VRDLGU85C15A662T",
|
||||
"given_name": "Giulia",
|
||||
"family_name": "Verdi",
|
||||
"place_of_birth": {
|
||||
"region": "BA",
|
||||
"locality": "A662"
|
||||
},
|
||||
"birthdate": "1985-03-15",
|
||||
"gender": "female",
|
||||
"email": "[email protected]",
|
||||
"email_verified": "true",
|
||||
"document_details": {
|
||||
"type": "cartaIdentita",
|
||||
"document_number": "CA000002BB",
|
||||
"issuer": {
|
||||
"name": "ComuneBari"
|
||||
},
|
||||
"date_of_issuance": "2022-06-01",
|
||||
"date_of_expiry": "2032-05-31"
|
||||
},
|
||||
"sub": "12b7d3c9a4e54b13a6d0f998ab27bc01ef23456789abcdef0123456789abcd",
|
||||
"username": "http://127.0.0.1:8000/oidc/op/__12b7d3c9a4e54b13a6d0f998ab27bc01ef23456789abcdef0123456789abcd",
|
||||
"phone_number": "393339998877",
|
||||
"phone_number_verified": "true",
|
||||
"https://attributes.eid.gov.it/e_delivery_service": "[email protected]",
|
||||
"address": {
|
||||
"street_address": "Via Sparano 25",
|
||||
"postal_code": "70121",
|
||||
"locality": "Bari",
|
||||
"region": "BA",
|
||||
"country_code": "IT"
|
||||
}
|
||||
},
|
||||
"groups": [],
|
||||
"user_permissions": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.federationentityconfiguration",
|
||||
"pk": 1,
|
||||
"fields": {
|
||||
"created": "2022-03-16T09:48:07.724Z",
|
||||
"modified": "2022-03-23T16:12:05.478Z",
|
||||
"uuid": "dca85f48-0dbe-4b35-b74d-9ed42f9d00a7",
|
||||
"sub": "http://127.0.0.1:8002/oidc/op",
|
||||
"default_exp": 2880,
|
||||
"default_signature_alg": "RS256",
|
||||
"authority_hints": [
|
||||
"http://127.0.0.1:8000"
|
||||
],
|
||||
"jwks_fed": [
|
||||
{
|
||||
"use": "sig",
|
||||
"kty": "RSA",
|
||||
"n": "tg3aE9fd6ltXzNrim_4CGKYWfC3nqc_tv4Xjaw473CcrfiqDzeTKHfRfbvbqb1DwmI4fvCOi51EVcmKLnThzXynAUpyUvswvL8_uzgDWO1RSmBG1L0RE-CkKih4keXh1ku9hNs1_V-82dK5oLOR-VJLnhZCqThR4HH6TqLjjWrrXfsHVRvauJilX6FxGb5JFoc27VxxdH2c6P2SHC9wuB8tnfG7OSrSD1g2h7lTXbIfm78a0op67d_jupzkoKoCTmzkR2zvwTVVDd99vkDLY2WXmb8hIwG6dQZXYlkhqAYKzTuTZ0tjVh0OrqfDxYtLH3wQzzaJORewZYqLyB09P8w",
|
||||
"e": "AQAB",
|
||||
"d": "QjX5eTwKJoDABu4YenlAE-zbwqADYBwSMJSmKDpOBPxt8f3OX-R0qb5Fsxq0GnYKesE9w3QGfDBeJ3K1qiFsvFB39NOjuVyTUMVD6cIeKAe73jiad61RlBuBDMh3pYHs6NqMtZy5UqbaXEdN9f3IAERJVadOeQUyxdI3K6bKcSVjuA-J_pKm2x-HOdKDSz9wRF9rsHQUIaUafcmlERohdhTU_f4VBvPjifgUswwlWoQNP-DN1JNgtOoCD2qdmi4wwZJvMolQXuTGLEhQwmpV5UiskhpGY43NcnjZqhfYcjSpjGegBxdNPUPa_WUgf7bzn_BU9yFWo4rJyTvoEMKjqQ",
|
||||
"p": "34kWBXizCjTq5Qa1PujAJcNM-NCbMcs3QPTh0QVuepZEN1B0g8gtReEwLfXt--7D3N_MtwZkW7wBjZNDTzo4mtuNMdDkuT7Qr3zoJqXuS3mai8bNOUzmDzusAlxn98dWPW0Xd1wprnV9uac5aoSZrH3TGRjHCqTMvUsOmxI4mac",
|
||||
"q": "0H6DX4XzwjYmoiAL_-oIo0VCwRZoi7TWtT2I2y3jE_HUvp1BzRe0QA1sA-yJAgVnPmxSpVy3mDGnM5vdDCFK1E8InHYgfkDYqi4r5DGKb_iErCPVEN7yekdy5Rzvs-Inb8Jc6ocEV8AD9VOlNySZzNMjaUSwq3hLEfB8wBQLyNU",
|
||||
"kid": "ZhSoaOedVOsBw6m2vclwSWiqqnGeOStT-gUclot_67w"
|
||||
}
|
||||
],
|
||||
"jwks_core": [
|
||||
{
|
||||
"use": "sig",
|
||||
"kty": "RSA",
|
||||
"e": "AQAB",
|
||||
"n": "rJoSYv1stwlbM11tR9SYGIJuzqlJe2bv2N35oPRbwV_epjNWvGG2ZqEj53YFMC8AMZNFhuLa_LNwr1kLVE-jXQe8xjiLhe7DgMf1OnSzq9yAEXVo19BPBwkgJe2jp9HIgM_nfbIsUbSSkFAM2CKvGb0Bk2GvvqXZ12P-fpbVyA9hIQr6rNTqnCGx2-v4oViGG4u_3iTw7D1ZvLWmrmZOaKnDAqG3MJSdQ-2ggQ-Aiahg48si9C9D_JgnBV9tJ2eCS58ZC6kVG5sftElQVdH6e26mz464TZj5QgCwZCTsAQfIvBoXSdCKxpnvsFfrajz4q9BiXAryxIOl5fLmCFVNhw",
|
||||
"d": "ElMxTI03c59srWFn7s5lb4S5mvtiL9XX9SBsFmibLUaubtrYhJujL_Y_x51CI8F5tcm7Af0n3th2SEed6k-iOohNxIXQWmHlI9EW-iPVx5NbjX73qKIXIdoYLa6zR2gAb5yjKTc3eV1Aik3Vb0UPbh4hArLGY-lb3YBiTrJY9CpxFpZ1m8Q-KiTpt3EowutwWX1Awn5ZOhfQnEzzc-VKthmaLSt6UFUCz0U_DOnCWT37l8uOoBxZ3iABsvq_wt8AlH3ErrpjIcfRYZCx5MXeNCgPfj49YGY-bPO6LC-lQMQ_Ce_7Q8uSystQ-Rju7ikT4vDEtgIChog1nwcdDhM-MQ",
|
||||
"p": "4hTyExGzt1ga8isTv5VOOx34UZIzurWAtrepA_sa2nHyjGG7UC410at2A2Kgs6O3KxnTU1IR2fnA0aG509729Z_2tdTrmsRDT_Ezob3zI9VAEe_UjHxwtNNM67OxCh-MJCDs7ZwCDOKkOYDB1Qjmr3ZPkf3-y1MEHRqw6j-Wy-U",
|
||||
"q": "w3FdsulIIQCoMrCqTHhsL-CZKUip6zcRAx3dCRlBWX7opuPNCObf5NMcptN-gEKSn5yGLmwRa6-fMfV5fpX4L4gHta8C34N1bF9NLz0Apr6tAyps2RWtpTm3Qk0MAHoKsrpD2ywxlpnuEUSihaxRuNX3cdtC9G3waDli8j9_lPs",
|
||||
"kid": "Pd2N9-TZz_AWS3GFCkoYdRaXXls8YPhx_d_Ez7JwjQI"
|
||||
}
|
||||
],
|
||||
"trust_marks": [],
|
||||
"trust_mark_issuers": {},
|
||||
"entity_type": "openid_provider",
|
||||
"metadata": {
|
||||
"federation_entity": {
|
||||
"federation_resolve_endpoint": "http://127.0.0.1:8002/oidc/op/resolve",
|
||||
"organization_name": "CIE OIDC identity provider",
|
||||
"homepage_uri": "http://127.0.0.1:8002",
|
||||
"policy_uri": "http://127.0.0.1:8002/oidc/op/en/website/legal-information",
|
||||
"logo_uri": "http://127.0.0.1:8002/static/svg/logo-cie.svg",
|
||||
"contacts": [
|
||||
"[email protected]"
|
||||
]
|
||||
},
|
||||
"openid_provider": {
|
||||
"authorization_endpoint": "http://127.0.0.1:8002/oidc/op/authorization",
|
||||
"revocation_endpoint": "http://127.0.0.1:8002/oidc/op/revocation",
|
||||
"id_token_encryption_alg_values_supported": [
|
||||
"RSA-OAEP"
|
||||
],
|
||||
"id_token_encryption_enc_values_supported": [
|
||||
"A128CBC-HS256"
|
||||
],
|
||||
"token_endpoint": "http://127.0.0.1:8002/oidc/op/token",
|
||||
"userinfo_endpoint": "http://127.0.0.1:8002/oidc/op/userinfo",
|
||||
"introspection_endpoint": "http://127.0.0.1:8002/oidc/op/introspection",
|
||||
"claims_parameter_supported": true,
|
||||
"contacts": [
|
||||
"ops@https://idp.it"
|
||||
],
|
||||
"code_challenge_methods_supported": [
|
||||
"S256"
|
||||
],
|
||||
"client_registration_types_supported": [
|
||||
"automatic"
|
||||
],
|
||||
"request_authentication_methods_supported": {
|
||||
"ar": [
|
||||
"request_object"
|
||||
]
|
||||
},
|
||||
"acr_values_supported": [
|
||||
"https://www.spid.gov.it/SpidL1",
|
||||
"https://www.spid.gov.it/SpidL2",
|
||||
"https://www.spid.gov.it/SpidL3"
|
||||
],
|
||||
"claims_supported": [
|
||||
"given_name",
|
||||
"family_name",
|
||||
"birthdate",
|
||||
"gender",
|
||||
"phone_number",
|
||||
"https://attributes.eid.gov.it/fiscal_number",
|
||||
"phone_number_verified",
|
||||
"email",
|
||||
"address",
|
||||
"document_details",
|
||||
"https://attributes.eid.gov.it/physical_phone_number"
|
||||
],
|
||||
"grant_types_supported": [
|
||||
"authorization_code",
|
||||
"refresh_token"
|
||||
],
|
||||
"id_token_signing_alg_values_supported": [
|
||||
"RS256",
|
||||
"ES256"
|
||||
],
|
||||
"issuer": "http://127.0.0.1:8002/oidc/op",
|
||||
"jwks_uri": "http://127.0.0.1:8002/oidc/op/openid_provider/jwks.json",
|
||||
"signed_jwks_uri": "http://127.0.0.1:8002/oidc/op/openid_provider/jwks.jose",
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"use": "sig",
|
||||
"e": "AQAB",
|
||||
"n": "rJoSYv1stwlbM11tR9SYGIJuzqlJe2bv2N35oPRbwV_epjNWvGG2ZqEj53YFMC8AMZNFhuLa_LNwr1kLVE-jXQe8xjiLhe7DgMf1OnSzq9yAEXVo19BPBwkgJe2jp9HIgM_nfbIsUbSSkFAM2CKvGb0Bk2GvvqXZ12P-fpbVyA9hIQr6rNTqnCGx2-v4oViGG4u_3iTw7D1ZvLWmrmZOaKnDAqG3MJSdQ-2ggQ-Aiahg48si9C9D_JgnBV9tJ2eCS58ZC6kVG5sftElQVdH6e26mz464TZj5QgCwZCTsAQfIvBoXSdCKxpnvsFfrajz4q9BiXAryxIOl5fLmCFVNhw",
|
||||
"kid": "Pd2N9-TZz_AWS3GFCkoYdRaXXls8YPhx_d_Ez7JwjQI"
|
||||
}
|
||||
]
|
||||
},
|
||||
"scopes_supported": [
|
||||
"openid",
|
||||
"offline_access"
|
||||
],
|
||||
"logo_uri": "http://127.0.0.1:8002/static/images/logo-cie.png",
|
||||
"organization_name": "SPID OIDC identity provider",
|
||||
"op_policy_uri": "http://127.0.0.1:8002/oidc/op/en/website/legal-information",
|
||||
"request_parameter_supported": true,
|
||||
"request_uri_parameter_supported": true,
|
||||
"require_request_uri_registration": true,
|
||||
"response_types_supported": [
|
||||
"code"
|
||||
],
|
||||
"response_modes_supported": [
|
||||
"query",
|
||||
"form_post"
|
||||
],
|
||||
"subject_types_supported": [
|
||||
"pairwise",
|
||||
"public"
|
||||
],
|
||||
"token_endpoint_auth_methods_supported": [
|
||||
"private_key_jwt"
|
||||
],
|
||||
"token_endpoint_auth_signing_alg_values_supported": [
|
||||
"RS256",
|
||||
"RS384",
|
||||
"RS512",
|
||||
"ES256",
|
||||
"ES384",
|
||||
"ES512"
|
||||
],
|
||||
"userinfo_encryption_alg_values_supported": [
|
||||
"RSA-OAEP",
|
||||
"RSA-OAEP-256"
|
||||
],
|
||||
"userinfo_encryption_enc_values_supported": [
|
||||
"A128CBC-HS256",
|
||||
"A192CBC-HS384",
|
||||
"A256CBC-HS512",
|
||||
"A128GCM",
|
||||
"A192GCM",
|
||||
"A256GCM"
|
||||
],
|
||||
"userinfo_signing_alg_values_supported": [
|
||||
"RS256",
|
||||
"RS384",
|
||||
"RS512",
|
||||
"ES256",
|
||||
"ES384",
|
||||
"ES512"
|
||||
],
|
||||
"request_object_encryption_alg_values_supported": [
|
||||
"RSA-OAEP",
|
||||
"RSA-OAEP-256"
|
||||
],
|
||||
"request_object_encryption_enc_values_supported": [
|
||||
"A128CBC-HS256",
|
||||
"A192CBC-HS384",
|
||||
"A256CBC-HS512",
|
||||
"A128GCM",
|
||||
"A192GCM",
|
||||
"A256GCM"
|
||||
],
|
||||
"request_object_signing_alg_values_supported": [
|
||||
"RS256",
|
||||
"RS384",
|
||||
"RS512",
|
||||
"ES256",
|
||||
"ES384",
|
||||
"ES512"
|
||||
]
|
||||
}
|
||||
},
|
||||
"constraints": {},
|
||||
"is_active": true
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.fetchedentitystatement",
|
||||
"pk": 12,
|
||||
"fields": {
|
||||
"created": "2022-03-18T08:40:57.339Z",
|
||||
"modified": "2022-03-18T08:40:57.339Z",
|
||||
"iss": "http://127.0.0.1:8000",
|
||||
"sub": "http://127.0.0.1:8000",
|
||||
"exp": "2022-04-23T16:12:24Z",
|
||||
"iat": "2022-04-23T15:39:24Z",
|
||||
"statement": {
|
||||
"exp": 1650730344,
|
||||
"iat": 1650728364,
|
||||
"iss": "http://127.0.0.1:8000",
|
||||
"sub": "http://127.0.0.1:8000",
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"e": "AQAB",
|
||||
"n": "o8IolRjZlkzct-48rhrVlTnYU1pkMbVJD-DU05oMS9RVGrsFypg98m-Kw4H4qNPyQVx2OQORi-xShgk7HU-gK_2pVguYkv06FajL_edEAqqsqt_74Qf2WLRC5pfJG_z9OPzY8JGyk-z3SbeHN_BXKI8GY5E4WU2SstmQ9fyL4CxtRfjUia8limTC_3MOpT3zi5nr03jfbjpnjga51qXurxnlzc3a_xjk5RAApKxUvNwhJ275M0CmB99DjPwF6BLvUgJqgyCpUOn36LOhI4FquVqhqhiwKlMmiMe3yy0yNQ7FXBWxjzhexbpyc3Vu7zFIHPAcC4UyIQhc3waEj2viXw",
|
||||
"kid": "BXvfrlnhAMuHR07ajUmAcBRQcSzmw0c_RAgJnpS-9WQ"
|
||||
}
|
||||
]
|
||||
},
|
||||
"metadata": {
|
||||
"federation_entity": {
|
||||
"contacts": [
|
||||
"ops@localhost"
|
||||
],
|
||||
"federation_fetch_endpoint": "http://127.0.0.1:8000/fetch",
|
||||
"federation_resolve_endpoint": "http://127.0.0.1:8000/resolve",
|
||||
"federation_trust_mark_status_endpoint": "http://127.0.0.1:8000/trust_mark_status",
|
||||
"homepage_uri": "http://127.0.0.1:8000",
|
||||
"organization_name": "example TA",
|
||||
"policy_uri": "http://127.0.0.1:8000/en/website/legal-information",
|
||||
"logo_uri": "http://127.0.0.1:8000/static/svg/spid-logo-c-lb.svg",
|
||||
"federation_list_endpoint": "http://127.0.0.1:8000/list"
|
||||
}
|
||||
},
|
||||
"trust_mark_issuers": {
|
||||
"https://www.spid.gov.it/certification/rp/public": [
|
||||
"https://registry.spid.agid.gov.it",
|
||||
"https://public.intermediary.spid.it"
|
||||
],
|
||||
"https://www.spid.gov.it/certification/rp/private": [
|
||||
"https://registry.spid.agid.gov.it",
|
||||
"https://private.other.intermediary.it"
|
||||
],
|
||||
"https://sgd.aa.it/onboarding": [
|
||||
"https://sgd.aa.it"
|
||||
]
|
||||
},
|
||||
"constraints": {
|
||||
"max_path_length": 1
|
||||
}
|
||||
},
|
||||
"jwt": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.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.eChjKE0kg9UnrLriCQB6rds7D2ftdaTTY-W2qYxdgJFKxNVju6Fa1fUygubEwV8fSL6VTvXlmv-z8M_8ig9p7bDAty37hEo75DBSNAJZW86CY630pujNl5RiioHAEs8fsk2r_U_Jhj4QOymI7M2GCLC48Ryw4VN-krjxlRB84dj8zCmJJJ2ym7e8s0Ne_MrEOm8Jn7FsjZI9m9UkuTfEUl0n2BTGgpLuc7WKjRKwsf4DTkYp1HpbV2bRQUxO5p8FXE7XPyykndVGQJwtB2nf6oCBTA_aZfeAYH8yN5n3IpP1tGFGmeBy78mUspnkyhBt0QumggJgBbW7A9zQaMYJnQ"
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.fetchedentitystatement",
|
||||
"pk": 13,
|
||||
"fields": {
|
||||
"created": "2022-03-18T08:40:57.521Z",
|
||||
"modified": "2022-03-18T08:40:57.521Z",
|
||||
"iss": "http://127.0.0.1:8000/oidc/rp",
|
||||
"sub": "http://127.0.0.1:8000/oidc/rp",
|
||||
"exp": "2022-04-25T15:47:47Z",
|
||||
"iat": "2022-04-23T15:47:47Z",
|
||||
"statement": {
|
||||
"exp": 1650901667,
|
||||
"iat": 1650728867,
|
||||
"iss": "http://127.0.0.1:8000/oidc/rp",
|
||||
"sub": "http://127.0.0.1:8000/oidc/rp",
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"e": "AQAB",
|
||||
"n": "pn_IchC66SFQMhbTHLtbD58jKiYYvYo7S4wjPjzECMu27c6FJVFNXtlubtb7sC6-WTQ1Hv4rSQdPhafJbIxa32R51sRQpkTr3JFMYP7x22DRQD_ixtQJRaiHw-npnZ8qgVHJ_t4gRTc4HJkehBLGv4-rHVAKzFiQNU1u2AFw1fWMnMH4ob_pyisXVgcku3dy14l7sYSANlpXufY_qnkQFTv0wMH-C6Izl-akENS2UHpvTLhfCBVKPrFXJxul4XDbUwUbvNZUxTernEx8lV5gxCSgKSBEgoH9MgpD1YWFPbAnwi7p7e7MNGz5lH7eDFKkPQhXLWABU8UvEIIWyA95SQ",
|
||||
"kid": "k54HQtDibyGcs9ZWVMfviHf-2qLcFUtpwY2rgxBk88M"
|
||||
}
|
||||
]
|
||||
},
|
||||
"metadata": {
|
||||
"openid_relying_party": {
|
||||
"application_type": "web",
|
||||
"client_id": "http://127.0.0.1:8000/oidc/rp",
|
||||
"client_registration_types": [
|
||||
"automatic"
|
||||
],
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"use": "sig",
|
||||
"n": "5s4qi1Ta-sEuKb5rJ8TzHmyGKaSu89pIXIi6w4Ekx6GL56mJDNE_MWJHsFjWXajfMdMQmZrSXAvLtXxmbhUui9Mq_IormhmEyyEJS0SyE9UKTxWzi0yd_n_C7OjFBhM-0ZyUlgl81E_sr-35P1A6b5WSYwMvRSR-P9yx_NI-XBQ48G_zdmk3CbuuzZsXZqqgj5U7OGWH-4Huosn9nH3FVkwX0OlWkgWM-J9DEWzGBjl9hfbbrMtM_obljHL2NfT6RJYER2IpdI8RCyQS3sMPt6ZHDskmuNlyMDNATCChXQJLnltwEjxcgvzjw_G9J25DwfdfVEhDF_0kCp44UMmS3Q",
|
||||
"e": "AQAB",
|
||||
"kid": "2HnoFS3YnC9tjiCaivhWLVUJ3AxwGGz_98uRFaqMEEs"
|
||||
}
|
||||
]
|
||||
},
|
||||
"client_name": "Name of an example organization",
|
||||
"contacts": [
|
||||
"[email protected]"
|
||||
],
|
||||
"grant_types": [
|
||||
"refresh_token",
|
||||
"authorization_code"
|
||||
],
|
||||
"redirect_uris": [
|
||||
"http://127.0.0.1:8000/oidc/rp/callback"
|
||||
],
|
||||
"response_types": [
|
||||
"code"
|
||||
],
|
||||
"subject_type": "pairwise"
|
||||
}
|
||||
},
|
||||
"trust_marks": [
|
||||
{
|
||||
"id": "https://www.spid.gov.it/openid-federation/agreement/sp-public",
|
||||
"trust_mark": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkZpZll4MDNibm9zRDhtNmdZUUlmTkhOUDljTV9TYW05VGM1bkxsb0lJcmMifQ.eyJpc3MiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvIiwic3ViIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwL29pZGMvcnAvIiwiaWF0IjoxNjQ1NjEyNDAxLCJpZCI6Imh0dHBzOi8vd3d3LnNwaWQuZ292Lml0L2NlcnRpZmljYXRpb24vcnAiLCJtYXJrIjoiaHR0cHM6Ly93d3cuYWdpZC5nb3YuaXQvdGhlbWVzL2N1c3RvbS9hZ2lkL2xvZ28uc3ZnIiwicmVmIjoiaHR0cHM6Ly9kb2NzLml0YWxpYS5pdC9pdGFsaWEvc3BpZC9zcGlkLXJlZ29sZS10ZWNuaWNoZS1vaWRjL2l0L3N0YWJpbGUvaW5kZXguaHRtbCJ9.mSPNR0AOPBn3UNJAIbrWUMQ8vGTetQajpa3i59JDKDXYWqo2TUGh4AQBghCiG3qqV9cl-hleLtuwoeZ1InKHeslTLftVdcR3meeMLs3mLobHYr26Mi7pC7-jx1ZFVyk4GXl7mn9WVSQGEUOiuhL01tdlUfxf0TJSFSOMEZGpCA3hXroLOnEl3FjkAw7sPvjfImsbadbHVusb72HTTs1n5Xo7z3As3fDWHcxD-fvvq0beu9cx-L2sT4YaNC-ELd1M3m5r0NIjjEUAt4Gnot-l5Z3-C_bA41uvh2hX34U_fGZ6jpmuluJo1Lqi26N8LTB-Rbu0UMaZnkRg9E72_YRZig"
|
||||
}
|
||||
],
|
||||
"authority_hints": [
|
||||
"http://127.0.0.1:8000"
|
||||
]
|
||||
},
|
||||
"jwt": "eyJhbGciOiJSUzI1NiIsImtpZCI6Ims1NEhRdERpYnlHY3M5WldWTWZ2aUhmLTJxTGNGVXRwd1kycmd4Qms4OE0iLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.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.O2phF_XHLiPCk45I8cMjAKdPxH-pb7p2w46Ump1-te8KaAK5HI7bcqrtD7xUb3OUERBTxozBJx68X57k_JFn_g1r04QnYMGBzSBCyXVYgo-1Jy8npqze4quusFeisjN2yl6yMV5UhV2kNfs52VjrrgGkLX10SLznEyM8ntVAAMKTI7TN7N1tz0idwpBIFbHQtNjb5Zqa5xIA1tB-F8w9Zyjm5WrsyoCkFNdSOIha0hqRpMBDh5I3YGiu-Q5t5LDSUbdfvG5HKl-Mg--xCAz23V1Pr5f88u9ftdrMjZ_teab19jE1YOuG8Zc42nLRZtn8uUX1EWX8b7Lmo5Af7xePJg"
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.fetchedentitystatement",
|
||||
"pk": 14,
|
||||
"fields": {
|
||||
"created": "2022-03-18T08:40:57.534Z",
|
||||
"modified": "2022-03-18T08:40:57.534Z",
|
||||
"iss": "http://127.0.0.1:8000",
|
||||
"sub": "http://127.0.0.1:8000/oidc/rp",
|
||||
"exp": "2022-04-25T15:47:47Z",
|
||||
"iat": "2022-04-23T15:47:47Z",
|
||||
"statement": {
|
||||
"exp": 1650901667,
|
||||
"iat": 1650728867,
|
||||
"iss": "http://127.0.0.1:8000",
|
||||
"sub": "http://127.0.0.1:8000/oidc/rp",
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"e": "AQAB",
|
||||
"n": "pn_IchC66SFQMhbTHLtbD58jKiYYvYo7S4wjPjzECMu27c6FJVFNXtlubtb7sC6-WTQ1Hv4rSQdPhafJbIxa32R51sRQpkTr3JFMYP7x22DRQD_ixtQJRaiHw-npnZ8qgVHJ_t4gRTc4HJkehBLGv4-rHVAKzFiQNU1u2AFw1fWMnMH4ob_pyisXVgcku3dy14l7sYSANlpXufY_qnkQFTv0wMH-C6Izl-akENS2UHpvTLhfCBVKPrFXJxul4XDbUwUbvNZUxTernEx8lV5gxCSgKSBEgoH9MgpD1YWFPbAnwi7p7e7MNGz5lH7eDFKkPQhXLWABU8UvEIIWyA95SQ",
|
||||
"kid": "k54HQtDibyGcs9ZWVMfviHf-2qLcFUtpwY2rgxBk88M"
|
||||
}
|
||||
]
|
||||
},
|
||||
"metadata_policy": {
|
||||
"openid_relying_party": {
|
||||
"scope": {
|
||||
"superset_of": [
|
||||
"openid"
|
||||
],
|
||||
"subset_of": [
|
||||
"openid",
|
||||
"offline_access",
|
||||
"profile",
|
||||
"email"
|
||||
]
|
||||
},
|
||||
"contacts": {
|
||||
"add": [
|
||||
"[email protected]"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"trust_marks": [
|
||||
{
|
||||
"id": "https://www.spid.gov.it/openid-federation/agreement/sp-public",
|
||||
"trust_mark": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJ0cnVzdC1tYXJrK2p3dCJ9.eyJpc3MiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvIiwic3ViIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwL29pZGMvcnAvIiwiaWF0IjoxNjUwNzI4ODY3LCJpZCI6Imh0dHBzOi8vd3d3LnNwaWQuZ292Lml0L2NlcnRpZmljYXRpb24vcnAiLCJtYXJrIjoiaHR0cHM6Ly93d3cuYWdpZC5nb3YuaXQvdGhlbWVzL2N1c3RvbS9hZ2lkL2xvZ28uc3ZnIiwicmVmIjoiaHR0cHM6Ly9kb2NzLml0YWxpYS5pdC9pdGFsaWEvc3BpZC9zcGlkLXJlZ29sZS10ZWNuaWNoZS1vaWRjL2l0L3N0YWJpbGUvaW5kZXguaHRtbCJ9.HbA5gmMuD1x-YreL9ost4VsTqU4YlxxKbEHB7-Wh2tTU1R4-mtuhbDwe9xSiYEUgOLLnCItJsf7BX59ZSs1hYZomvynOrcUA7Ot5cMIe3q71HAk6rT11-O1yniKi00hKgM4XzT-hyx05fVoUHdEsjoJNV-sv_5U_6tWIABCQky2odt4eOQmIbDz8aSNBYqKoX7GdyHRKl5FAE9GfsPtmPjCfvcGboLkZciwb_v2Baq3YY3fvxzExifJ1FxH5g7q-3Xot-fuOxYgAc9KDCF5HydkordjDxfvt4-E72rW1XptF9InvAhRDa_h4uydTuTrDz4QEkdLvjL58zp27lqdgmQ"
|
||||
},
|
||||
{
|
||||
"id": "https://www.spid.gov.it/openid-federation/agreement/sp-private",
|
||||
"trust_mark": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJ0cnVzdC1tYXJrK2p3dCJ9.eyJpc3MiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvIiwic3ViIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwL29pZGMvcnAvIiwiaWF0IjoxNjUwNzI4ODY3LCJpZCI6Imh0dHBzOi8vd3d3LnNwaWQuZ292Lml0L2NlcnRpZmljYXRpb24vcnAvcHJpdmF0ZSIsImxvZ29fdXJpIjoiaHR0cHM6Ly93d3cuYWdpZC5nb3YuaXQvdGhlbWVzL2N1c3RvbS9hZ2lkL2xvZ28uc3ZnIiwicmVmIjoiaHR0cHM6Ly9kb2NzLml0YWxpYS5pdC9pdGFsaWEvc3BpZC9zcGlkLXJlZ29sZS10ZWNuaWNoZS1vaWRjL2l0L3N0YWJpbGUvaW5kZXguaHRtbCJ9.jIhrqohigF3RKvCRLHNSL1lMeddtPBySJs2ANveaBy-3C6QMyJI2IdnsepMOznR6DgsC2SzEB0erCXWpHZeJFXWwQMyUNkJzw70-WPhrssRNpWsVHTFVmQ6rTdR7ZmzTrj_kU28Zi4Ljzgd2j8rFuwLTCjDknN7R1dR0KTSMihu4-gBtxDPUmuYXiN88kC6n4zjzLLMqps3tY-k36Iq3QQv5qstvAyUQdpl9yFgmgDXN71tTIM5o_DICM62NjDUfIAiNl0KcJQz3pi5Od4AkTGYiNHebU5ZPDwW-yx_DBa0eSY5hs7t9ZtU4aVDv_bsZ9hweFw9fATBYCHatIgSVZQ"
|
||||
}
|
||||
]
|
||||
},
|
||||
"jwt": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.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.YxONV2gFObDwld6WwWQJVzs0K0ZDZRoQQa4iRQQikj5qHO-ralKboz4VXUY10HmI2PjNeiXFtT2v-y5TyySEnTlNMHn1Smdx52otVOHzPq66NeKmG5n3omC-UqiWdCuGAwEFLHUsc3XiMMw5jw66MBekNMHxLSwEt_r9537ulPKYmKYqWQMl6tPx68bN6uhwsXmKqk9jyYI4fekWKot9mmJjNYU3OR21YIXGponhw6b-fZxyexwphKdiz5iYZpA2gQDLvlcVLCixTc5E-htDQHrs5nDnI-Tlp87d3acBCY6d7qctRb4cN3o2iyhGE3y-emZQfCIxGfDelWc1-hjzQg"
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.fetchedentitystatement",
|
||||
"pk": 15,
|
||||
"fields": {
|
||||
"created": "2022-03-18T11:59:36.536Z",
|
||||
"modified": "2022-03-18T11:59:36.536Z",
|
||||
"iss": "http://127.0.0.1:8001",
|
||||
"sub": "http://127.0.0.1:8001",
|
||||
"exp": "2022-04-23T16:12:24Z",
|
||||
"iat": "2022-04-23T15:39:24Z",
|
||||
"statement": {
|
||||
"exp": 1650730344,
|
||||
"iat": 1650728364,
|
||||
"iss": "http://127.0.0.1:8001",
|
||||
"sub": "http://127.0.0.1:8001",
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"e": "AQAB",
|
||||
"n": "6SDksa64IjBk7HNQC7x5C9nMARGaanfaUm3wC2WulwG_8a5aIy4CEwXN2LENkCyypODqWZcTAwCzWsiihVN9kDcEs7UNu-X1WokK252D7_DRY-FXI8AB3P0CxTngs0k-OjcmbxqVW2U8G56rJFp4G_CYA4vzBoAP_5skFBt-4a5lYJlBfJ2gJlE0vh4_46oyNuUT9kmKauR7npVSHjBUSxYyDELzoaPmvR7SkX4sJe0MK39HES6s4no9G7BraLp75eOwEQmHgEhESWscSOf_CmC5ALnzWJ3FcFhxgsuMkdjoU7bH09y8pdKs64kR2znxs-yIWrPFW8hJKnySc2fk8w",
|
||||
"kid": "wL_LmP8UjLVN-sAeoZ7KGEMJfBkFtbNLd24eDD9RGCs"
|
||||
}
|
||||
]
|
||||
},
|
||||
"metadata": {
|
||||
"openid_relying_party": {
|
||||
"application_type": "web",
|
||||
"client_id": "http://127.0.0.1:8001",
|
||||
"client_registration_types": [
|
||||
"automatic"
|
||||
],
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"use": "sig",
|
||||
"n": "uXfJA-wTlTCA4FdsoE0qZfmKIgedmarrtWgQbElKbWg9RDR7Z8JVBaRLFqwyfyG1JJFm64G51cBJwLIFwWoF7nxsH9VYLm5ocjAnsR4RhlfVE0y_60wjf8skJgBRpiXQPlwH9jDGaqVE_PEBTObDO5w3XourD1F360-v5cLDLRHdFJIitdEVtqATqY5DglRDaKiBhis7a5_1bk839PDLaQhju4XJk4tvDy5-LVkMy5sP2zU6-1tJdA-VmaBZLXy9n0967FGIWmMzpafrBMOuHFcUOH56o-clDah_CITH1dq2D64K0MYhEpACO2p8AH4K8Q6YuJ1dnkVDDwZp2C84sQ",
|
||||
"e": "AQAB",
|
||||
"kid": "YhuIJU6o15EUCyqA0LHEqJd-xVPJgoyW5wZ1o4padWs"
|
||||
}
|
||||
]
|
||||
},
|
||||
"client_name": "Name of an example organization",
|
||||
"contacts": [
|
||||
"[email protected]"
|
||||
],
|
||||
"grant_types": [
|
||||
"refresh_token",
|
||||
"authorization_code"
|
||||
],
|
||||
"redirect_uris": [
|
||||
"http://127.0.0.1:8001/oidc/rp/callback"
|
||||
],
|
||||
"response_types": [
|
||||
"code"
|
||||
],
|
||||
"subject_type": "pairwise"
|
||||
}
|
||||
},
|
||||
"trust_marks": [
|
||||
{
|
||||
"id": "https://www.spid.gov.it/openid-federation/agreement/sp-public",
|
||||
"trust_mark": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkZpZll4MDNibm9zRDhtNmdZUUlmTkhOUDljTV9TYW05VGM1bkxsb0lJcmMifQ.eyJpc3MiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvIiwic3ViIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwL29pZGMvcnAvIiwiaWF0IjoxNjQ1NjEyNDAxLCJpZCI6Imh0dHBzOi8vd3d3LnNwaWQuZ292Lml0L2NlcnRpZmljYXRpb24vcnAiLCJtYXJrIjoiaHR0cHM6Ly93d3cuYWdpZC5nb3YuaXQvdGhlbWVzL2N1c3RvbS9hZ2lkL2xvZ28uc3ZnIiwicmVmIjoiaHR0cHM6Ly9kb2NzLml0YWxpYS5pdC9pdGFsaWEvc3BpZC9zcGlkLXJlZ29sZS10ZWNuaWNoZS1vaWRjL2l0L3N0YWJpbGUvaW5kZXguaHRtbCJ9.mSPNR0AOPBn3UNJAIbrWUMQ8vGTetQajpa3i59JDKDXYWqo2TUGh4AQBghCiG3qqV9cl-hleLtuwoeZ1InKHeslTLftVdcR3meeMLs3mLobHYr26Mi7pC7-jx1ZFVyk4GXl7mn9WVSQGEUOiuhL01tdlUfxf0TJSFSOMEZGpCA3hXroLOnEl3FjkAw7sPvjfImsbadbHVusb72HTTs1n5Xo7z3As3fDWHcxD-fvvq0beu9cx-L2sT4YaNC-ELd1M3m5r0NIjjEUAt4Gnot-l5Z3-C_bA41uvh2hX34U_fGZ6jpmuluJo1Lqi26N8LTB-Rbu0UMaZnkRg9E72_YRZig"
|
||||
}
|
||||
],
|
||||
"authority_hints": [
|
||||
"http://127.0.0.1:8000"
|
||||
]
|
||||
},
|
||||
"jwt": "eyJhbGciOiJSUzI1NiIsImtpZCI6IndMX0xtUDhVakxWTi1zQWVvWjdLR0VNSmZCa0Z0Yk5MZDI0ZUREOVJHQ3MiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.eyJleHAiOjE2NTA3MzAzNDQsImlhdCI6MTY1MDcyODM2NCwiaXNzIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAxLyIsInN1YiI6Imh0dHA6Ly8xMjcuMC4wLjE6ODAwMS8iLCJqd2tzIjp7ImtleXMiOlt7Imt0eSI6IlJTQSIsImUiOiJBUUFCIiwibiI6IjZTRGtzYTY0SWpCazdITlFDN3g1QzluTUFSR2FhbmZhVW0zd0MyV3Vsd0dfOGE1YUl5NENFd1hOMkxFTmtDeXlwT0RxV1pjVEF3Q3pXc2lpaFZOOWtEY0VzN1VOdS1YMVdva0syNTJEN19EUlktRlhJOEFCM1AwQ3hUbmdzMGstT2pjbWJ4cVZXMlU4RzU2ckpGcDRHX0NZQTR2ekJvQVBfNXNrRkJ0LTRhNWxZSmxCZkoyZ0psRTB2aDRfNDZveU51VVQ5a21LYXVSN25wVlNIakJVU3hZeURFTHpvYVBtdlI3U2tYNHNKZTBNSzM5SEVTNnM0bm85RzdCcmFMcDc1ZU93RVFtSGdFaEVTV3NjU09mX0NtQzVBTG56V0ozRmNGaHhnc3VNa2Rqb1U3YkgwOXk4cGRLczY0a1Iyem54cy15SVdyUEZXOGhKS255U2MyZms4dyIsImtpZCI6IndMX0xtUDhVakxWTi1zQWVvWjdLR0VNSmZCa0Z0Yk5MZDI0ZUREOVJHQ3MifV19LCJtZXRhZGF0YSI6eyJvcGVuaWRfcmVseWluZ19wYXJ0eSI6eyJhcHBsaWNhdGlvbl90eXBlIjoid2ViIiwiY2xpZW50X2lkIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAxLyIsImNsaWVudF9yZWdpc3RyYXRpb25fdHlwZXMiOlsiYXV0b21hdGljIl0sImp3a3MiOnsia2V5cyI6W3sia3R5IjoiUlNBIiwidXNlIjoic2lnIiwibiI6InVYZkpBLXdUbFRDQTRGZHNvRTBxWmZtS0lnZWRtYXJydFdnUWJFbEtiV2c5UkRSN1o4SlZCYVJMRnF3eWZ5RzFKSkZtNjRHNTFjQkp3TElGd1dvRjdueHNIOVZZTG01b2NqQW5zUjRSaGxmVkUweV82MHdqZjhza0pnQlJwaVhRUGx3SDlqREdhcVZFX1BFQlRPYkRPNXczWG91ckQxRjM2MC12NWNMRExSSGRGSklpdGRFVnRxQVRxWTVEZ2xSRGFLaUJoaXM3YTVfMWJrODM5UERMYVFoanU0WEprNHR2RHk1LUxWa015NXNQMnpVNi0xdEpkQS1WbWFCWkxYeTluMDk2N0ZHSVdtTXpwYWZyQk1PdUhGY1VPSDU2by1jbERhaF9DSVRIMWRxMkQ2NEswTVloRXBBQ08ycDhBSDRLOFE2WXVKMWRua1ZERHdacDJDODRzUSIsImUiOiJBUUFCIiwia2lkIjoiWWh1SUpVNm8xNUVVQ3lxQTBMSEVxSmQteFZQSmdveVc1d1oxbzRwYWRXcyJ9XX0sImNsaWVudF9uYW1lIjoiTmFtZSBvZiBhbiBleGFtcGxlIG9yZ2FuaXphdGlvbiIsImNvbnRhY3RzIjpbIm9wc0BycC5leGFtcGxlLml0Il0sImdyYW50X3R5cGVzIjpbInJlZnJlc2hfdG9rZW4iLCJhdXRob3JpemF0aW9uX2NvZGUiXSwicmVkaXJlY3RfdXJpcyI6WyJodHRwOi8vMTI3LjAuMC4xOjgwMDEvb2lkYy9ycC9jYWxsYmFjayJdLCJyZXNwb25zZV90eXBlcyI6WyJjb2RlIl0sInN1YmplY3RfdHlwZSI6InBhaXJ3aXNlIn19LCJ0cnVzdF9tYXJrcyI6W3siaWQiOiJodHRwczovL3d3dy5zcGlkLmdvdi5pdC9vcGVuaWQtZmVkZXJhdGlvbi9hZ3JlZW1lbnQvc3AtcHVibGljLyIsInRydXN0X21hcmsiOiJleUpoYkdjaU9pSlNVekkxTmlJc0ltdHBaQ0k2SWtacFpsbDRNRE5pYm05elJEaHRObWRaVVVsbVRraE9VRGxqVFY5VFlXMDVWR00xYmt4c2IwbEpjbU1pZlEuZXlKcGMzTWlPaUpvZEhSd09pOHZNVEkzTGpBdU1DNHhPamd3TURBdklpd2ljM1ZpSWpvaWFIUjBjRG92THpFeU55NHdMakF1TVRvNE1EQXdMMjlwWkdNdmNuQXZJaXdpYVdGMElqb3hOalExTmpFeU5EQXhMQ0pwWkNJNkltaDBkSEJ6T2k4dmQzZDNMbk53YVdRdVoyOTJMbWwwTDJObGNuUnBabWxqWVhScGIyNHZjbkFpTENKdFlYSnJJam9pYUhSMGNITTZMeTkzZDNjdVlXZHBaQzVuYjNZdWFYUXZkR2hsYldWekwyTjFjM1J2YlM5aFoybGtMMnh2WjI4dWMzWm5JaXdpY21WbUlqb2lhSFIwY0hNNkx5OWtiMk56TG1sMFlXeHBZUzVwZEM5cGRHRnNhV0V2YzNCcFpDOXpjR2xrTFhKbFoyOXNaUzEwWldOdWFXTm9aUzF2YVdSakwybDBMM04wWVdKcGJHVXZhVzVrWlhndWFIUnRiQ0o5Lm1TUE5SMEFPUEJuM1VOSkFJYnJXVU1ROHZHVGV0UWFqcGEzaTU5SkRLRFhZV3FvMlRVR2g0QVFCZ2hDaUczcXFWOWNsLWhsZUx0dXdvZVoxSW5LSGVzbFRMZnRWZGNSM21lZU1MczNtTG9iSFlyMjZNaTdwQzctangxWkZWeWs0R1hsN21uOVdWU1FHRVVPaXVoTDAxdGRsVWZ4ZjBUSlNGU09NRVpHcENBM2hYcm9MT25FbDNGamtBdzdzUHZqZkltc2JhZGJIVnVzYjcySFRUczFuNVhvN3ozQXMzZkRXSGN4RC1mdnZxMGJldTljeC1MMnNUNFlhTkMtRUxkMU0zbTVyME5JampFVUF0NEdub3QtbDVaMy1DX2JBNDF1dmgyaFgzNFVfZkdaNmpwbXVsdUpvMUxxaTI2TjhMVEItUmJ1MFVNYVpua1JnOUU3Ml9ZUlppZyJ9XSwiYXV0aG9yaXR5X2hpbnRzIjpbImh0dHA6Ly8xMjcuMC4wLjE6ODAwMC8iXX0.OiKYUbZxMVpdu7htjZDAjpVaEODyiOqCm1pyYec_k0N6LkFpVBBSQMl8Kx3Kev1ShcF6SwVDdhv4DQeUKh9OzwztNax4WBFsP_Sn3tdXIX8I7c_Ln45CkYwK33CAnFenBZq5QkLE5atu-ojQny5Pndf9tmTujM4qz7h7cpMrx0vcTQ1jxKsVhrHnIlGemJEX2iqEgzrVmTxcg_lT8RuhxTwZ6lWsnSY9TZKrhHds70TsSaZaz3z24pyAOsEiPAfkwewLHxUVhL-0RAHkAKOUrXoDpjtvgZGsFNjJpJ5_D3WIqwDSy_m0omqO7K81V5MGmXfeWbz5QiX-M0044FQi9g"
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.fetchedentitystatement",
|
||||
"pk": 16,
|
||||
"fields": {
|
||||
"created": "2022-03-18T11:59:36.550Z",
|
||||
"modified": "2022-03-18T11:59:36.550Z",
|
||||
"iss": "http://127.0.0.1:8000",
|
||||
"sub": "http://127.0.0.1:8001",
|
||||
"exp": "2022-04-25T15:39:24Z",
|
||||
"iat": "2022-04-23T15:39:24Z",
|
||||
"statement": {
|
||||
"exp": 1650901164,
|
||||
"iat": 1650728364,
|
||||
"iss": "http://127.0.0.1:8000",
|
||||
"sub": "http://127.0.0.1:8001",
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"e": "AQAB",
|
||||
"n": "6SDksa64IjBk7HNQC7x5C9nMARGaanfaUm3wC2WulwG_8a5aIy4CEwXN2LENkCyypODqWZcTAwCzWsiihVN9kDcEs7UNu-X1WokK252D7_DRY-FXI8AB3P0CxTngs0k-OjcmbxqVW2U8G56rJFp4G_CYA4vzBoAP_5skFBt-4a5lYJlBfJ2gJlE0vh4_46oyNuUT9kmKauR7npVSHjBUSxYyDELzoaPmvR7SkX4sJe0MK39HES6s4no9G7BraLp75eOwEQmHgEhESWscSOf_CmC5ALnzWJ3FcFhxgsuMkdjoU7bH09y8pdKs64kR2znxs-yIWrPFW8hJKnySc2fk8w",
|
||||
"kid": "wL_LmP8UjLVN-sAeoZ7KGEMJfBkFtbNLd24eDD9RGCs"
|
||||
}
|
||||
]
|
||||
},
|
||||
"metadata_policy": {
|
||||
"openid_relying_party": {
|
||||
"grant_types": {
|
||||
"subset_of": [
|
||||
"authorization_code",
|
||||
"refresh_token"
|
||||
]
|
||||
},
|
||||
"scope": {
|
||||
"superset_of": [
|
||||
"openid"
|
||||
],
|
||||
"subset_of": [
|
||||
"openid",
|
||||
"offline_access"
|
||||
]
|
||||
},
|
||||
"contacts": {
|
||||
"add": [
|
||||
"[email protected]"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"trust_marks": [
|
||||
{
|
||||
"id": "https://www.spid.gov.it/openid-federation/agreement/sp-public",
|
||||
"trust_mark": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJ0cnVzdC1tYXJrK2p3dCJ9.eyJpc3MiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvIiwic3ViIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAxLyIsImlhdCI6MTY1MDcyODM2NCwiaWQiOiJodHRwczovL3d3dy5zcGlkLmdvdi5pdC9jZXJ0aWZpY2F0aW9uL3JwIiwibWFyayI6Imh0dHBzOi8vd3d3LmFnaWQuZ292Lml0L3RoZW1lcy9jdXN0b20vYWdpZC9sb2dvLnN2ZyIsInJlZiI6Imh0dHBzOi8vZG9jcy5pdGFsaWEuaXQvaXRhbGlhL3NwaWQvc3BpZC1yZWdvbGUtdGVjbmljaGUtb2lkYy9pdC9zdGFiaWxlL2luZGV4Lmh0bWwifQ.FugN-gKtPnCUraLZ_psOSvdcD8khIcPl1UtmKgDIGkG7tqInYiVT2DCSEl16lx2R-IqOIeGlOvjQrzHjmC0JOeugea7XuyEd_yVEha77Qjt4dBKLyO1IHKJoDQyghnqkYq_WiWNO8orUlwkQpympW1vbUiwJQkQU4XXFzrfrMasOusJVxsJgCK1WEnHLpV5L_m3qNoghFqypbLSe5UiF56MbR4mtDd_6-5JPuS0GKDuYilC8vLBsrYL_2Mf6CrenIlsxs5LplxgoFtGqu0m8jHKzSSes6IupNnwpAXHLSjl3NvgVziPjXckMzlKeK4fM4oWqEfL1i2qHFsXZ9Pni2g"
|
||||
}
|
||||
]
|
||||
},
|
||||
"jwt": "eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.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.XFK2o1p8S6r4jllxIbOEgdfBvGMDYibM3vcA_eKjXTDjjU82aRmIswQtcJ1pXTcpqFiE4MjxHDq5BVfp4CwsFbxg1f3h6Y4bAV6_ZyzN3FOPoGMB48rFNRv27iRL5mvXfzSVdh7bDjgkQ_r_tUg-1azSJPvt1-X0PCta5BF35MeXiX97ocQImrPG66A3EvSKCLVZ4_eSf9dU-aH4aJpYlPNnQPMWGSerJcwb0OcEjdcfG0uHIQPIRR2rQHe-h1ec4SOrEEjuKpcy0qt7pWWLAeZbQvrJIeY5uCXnyXftUEbCdBmxAeakuXuUTYf3ucD2BsHFxgQdLBrToLiSA-4V7Q"
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.trustchain",
|
||||
"pk": 8,
|
||||
"fields": {
|
||||
"created": "2022-03-18T13:01:38.314Z",
|
||||
"modified": "2022-03-18T13:01:38.314Z",
|
||||
"sub": "http://127.0.0.1:8001",
|
||||
"trust_anchor": 12,
|
||||
"exp": "2022-04-23T16:12:24Z",
|
||||
"iat": "2022-03-18T13:01:38.314Z",
|
||||
"chain": [
|
||||
"eyJhbGciOiJSUzI1NiIsImtpZCI6IndMX0xtUDhVakxWTi1zQWVvWjdLR0VNSmZCa0Z0Yk5MZDI0ZUREOVJHQ3MiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.eyJleHAiOjE2NTA3MzAzNDQsImlhdCI6MTY1MDcyODM2NCwiaXNzIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAxLyIsInN1YiI6Imh0dHA6Ly8xMjcuMC4wLjE6ODAwMS8iLCJqd2tzIjp7ImtleXMiOlt7Imt0eSI6IlJTQSIsImUiOiJBUUFCIiwibiI6IjZTRGtzYTY0SWpCazdITlFDN3g1QzluTUFSR2FhbmZhVW0zd0MyV3Vsd0dfOGE1YUl5NENFd1hOMkxFTmtDeXlwT0RxV1pjVEF3Q3pXc2lpaFZOOWtEY0VzN1VOdS1YMVdva0syNTJEN19EUlktRlhJOEFCM1AwQ3hUbmdzMGstT2pjbWJ4cVZXMlU4RzU2ckpGcDRHX0NZQTR2ekJvQVBfNXNrRkJ0LTRhNWxZSmxCZkoyZ0psRTB2aDRfNDZveU51VVQ5a21LYXVSN25wVlNIakJVU3hZeURFTHpvYVBtdlI3U2tYNHNKZTBNSzM5SEVTNnM0bm85RzdCcmFMcDc1ZU93RVFtSGdFaEVTV3NjU09mX0NtQzVBTG56V0ozRmNGaHhnc3VNa2Rqb1U3YkgwOXk4cGRLczY0a1Iyem54cy15SVdyUEZXOGhKS255U2MyZms4dyIsImtpZCI6IndMX0xtUDhVakxWTi1zQWVvWjdLR0VNSmZCa0Z0Yk5MZDI0ZUREOVJHQ3MifV19LCJtZXRhZGF0YSI6eyJvcGVuaWRfcmVseWluZ19wYXJ0eSI6eyJhcHBsaWNhdGlvbl90eXBlIjoid2ViIiwiY2xpZW50X2lkIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAxLyIsImNsaWVudF9yZWdpc3RyYXRpb25fdHlwZXMiOlsiYXV0b21hdGljIl0sImp3a3MiOnsia2V5cyI6W3sia3R5IjoiUlNBIiwidXNlIjoic2lnIiwibiI6InVYZkpBLXdUbFRDQTRGZHNvRTBxWmZtS0lnZWRtYXJydFdnUWJFbEtiV2c5UkRSN1o4SlZCYVJMRnF3eWZ5RzFKSkZtNjRHNTFjQkp3TElGd1dvRjdueHNIOVZZTG01b2NqQW5zUjRSaGxmVkUweV82MHdqZjhza0pnQlJwaVhRUGx3SDlqREdhcVZFX1BFQlRPYkRPNXczWG91ckQxRjM2MC12NWNMRExSSGRGSklpdGRFVnRxQVRxWTVEZ2xSRGFLaUJoaXM3YTVfMWJrODM5UERMYVFoanU0WEprNHR2RHk1LUxWa015NXNQMnpVNi0xdEpkQS1WbWFCWkxYeTluMDk2N0ZHSVdtTXpwYWZyQk1PdUhGY1VPSDU2by1jbERhaF9DSVRIMWRxMkQ2NEswTVloRXBBQ08ycDhBSDRLOFE2WXVKMWRua1ZERHdacDJDODRzUSIsImUiOiJBUUFCIiwia2lkIjoiWWh1SUpVNm8xNUVVQ3lxQTBMSEVxSmQteFZQSmdveVc1d1oxbzRwYWRXcyJ9XX0sImNsaWVudF9uYW1lIjoiTmFtZSBvZiBhbiBleGFtcGxlIG9yZ2FuaXphdGlvbiIsImNvbnRhY3RzIjpbIm9wc0BycC5leGFtcGxlLml0Il0sImdyYW50X3R5cGVzIjpbInJlZnJlc2hfdG9rZW4iLCJhdXRob3JpemF0aW9uX2NvZGUiXSwicmVkaXJlY3RfdXJpcyI6WyJodHRwOi8vMTI3LjAuMC4xOjgwMDEvb2lkYy9ycC9jYWxsYmFjayJdLCJyZXNwb25zZV90eXBlcyI6WyJjb2RlIl0sInN1YmplY3RfdHlwZSI6InBhaXJ3aXNlIn19LCJ0cnVzdF9tYXJrcyI6W3siaWQiOiJodHRwczovL3d3dy5zcGlkLmdvdi5pdC9vcGVuaWQtZmVkZXJhdGlvbi9hZ3JlZW1lbnQvc3AtcHVibGljLyIsInRydXN0X21hcmsiOiJleUpoYkdjaU9pSlNVekkxTmlJc0ltdHBaQ0k2SWtacFpsbDRNRE5pYm05elJEaHRObWRaVVVsbVRraE9VRGxqVFY5VFlXMDVWR00xYmt4c2IwbEpjbU1pZlEuZXlKcGMzTWlPaUpvZEhSd09pOHZNVEkzTGpBdU1DNHhPamd3TURBdklpd2ljM1ZpSWpvaWFIUjBjRG92THpFeU55NHdMakF1TVRvNE1EQXdMMjlwWkdNdmNuQXZJaXdpYVdGMElqb3hOalExTmpFeU5EQXhMQ0pwWkNJNkltaDBkSEJ6T2k4dmQzZDNMbk53YVdRdVoyOTJMbWwwTDJObGNuUnBabWxqWVhScGIyNHZjbkFpTENKdFlYSnJJam9pYUhSMGNITTZMeTkzZDNjdVlXZHBaQzVuYjNZdWFYUXZkR2hsYldWekwyTjFjM1J2YlM5aFoybGtMMnh2WjI4dWMzWm5JaXdpY21WbUlqb2lhSFIwY0hNNkx5OWtiMk56TG1sMFlXeHBZUzVwZEM5cGRHRnNhV0V2YzNCcFpDOXpjR2xrTFhKbFoyOXNaUzEwWldOdWFXTm9aUzF2YVdSakwybDBMM04wWVdKcGJHVXZhVzVrWlhndWFIUnRiQ0o5Lm1TUE5SMEFPUEJuM1VOSkFJYnJXVU1ROHZHVGV0UWFqcGEzaTU5SkRLRFhZV3FvMlRVR2g0QVFCZ2hDaUczcXFWOWNsLWhsZUx0dXdvZVoxSW5LSGVzbFRMZnRWZGNSM21lZU1MczNtTG9iSFlyMjZNaTdwQzctangxWkZWeWs0R1hsN21uOVdWU1FHRVVPaXVoTDAxdGRsVWZ4ZjBUSlNGU09NRVpHcENBM2hYcm9MT25FbDNGamtBdzdzUHZqZkltc2JhZGJIVnVzYjcySFRUczFuNVhvN3ozQXMzZkRXSGN4RC1mdnZxMGJldTljeC1MMnNUNFlhTkMtRUxkMU0zbTVyME5JampFVUF0NEdub3QtbDVaMy1DX2JBNDF1dmgyaFgzNFVfZkdaNmpwbXVsdUpvMUxxaTI2TjhMVEItUmJ1MFVNYVpua1JnOUU3Ml9ZUlppZyJ9XSwiYXV0aG9yaXR5X2hpbnRzIjpbImh0dHA6Ly8xMjcuMC4wLjE6ODAwMC8iXX0.OiKYUbZxMVpdu7htjZDAjpVaEODyiOqCm1pyYec_k0N6LkFpVBBSQMl8Kx3Kev1ShcF6SwVDdhv4DQeUKh9OzwztNax4WBFsP_Sn3tdXIX8I7c_Ln45CkYwK33CAnFenBZq5QkLE5atu-ojQny5Pndf9tmTujM4qz7h7cpMrx0vcTQ1jxKsVhrHnIlGemJEX2iqEgzrVmTxcg_lT8RuhxTwZ6lWsnSY9TZKrhHds70TsSaZaz3z24pyAOsEiPAfkwewLHxUVhL-0RAHkAKOUrXoDpjtvgZGsFNjJpJ5_D3WIqwDSy_m0omqO7K81V5MGmXfeWbz5QiX-M0044FQi9g",
|
||||
"eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.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.eChjKE0kg9UnrLriCQB6rds7D2ftdaTTY-W2qYxdgJFKxNVju6Fa1fUygubEwV8fSL6VTvXlmv-z8M_8ig9p7bDAty37hEo75DBSNAJZW86CY630pujNl5RiioHAEs8fsk2r_U_Jhj4QOymI7M2GCLC48Ryw4VN-krjxlRB84dj8zCmJJJ2ym7e8s0Ne_MrEOm8Jn7FsjZI9m9UkuTfEUl0n2BTGgpLuc7WKjRKwsf4DTkYp1HpbV2bRQUxO5p8FXE7XPyykndVGQJwtB2nf6oCBTA_aZfeAYH8yN5n3IpP1tGFGmeBy78mUspnkyhBt0QumggJgBbW7A9zQaMYJnQ",
|
||||
[
|
||||
"eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.eyJleHAiOjE2NTA5MDExNjQsImlhdCI6MTY1MDcyODM2NCwiaXNzIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwLyIsInN1YiI6Imh0dHA6Ly8xMjcuMC4wLjE6ODAwMS8iLCJqd2tzIjp7ImtleXMiOlt7Imt0eSI6IlJTQSIsImUiOiJBUUFCIiwibiI6IjZTRGtzYTY0SWpCazdITlFDN3g1QzluTUFSR2FhbmZhVW0zd0MyV3Vsd0dfOGE1YUl5NENFd1hOMkxFTmtDeXlwT0RxV1pjVEF3Q3pXc2lpaFZOOWtEY0VzN1VOdS1YMVdva0syNTJEN19EUlktRlhJOEFCM1AwQ3hUbmdzMGstT2pjbWJ4cVZXMlU4RzU2ckpGcDRHX0NZQTR2ekJvQVBfNXNrRkJ0LTRhNWxZSmxCZkoyZ0psRTB2aDRfNDZveU51VVQ5a21LYXVSN25wVlNIakJVU3hZeURFTHpvYVBtdlI3U2tYNHNKZTBNSzM5SEVTNnM0bm85RzdCcmFMcDc1ZU93RVFtSGdFaEVTV3NjU09mX0NtQzVBTG56V0ozRmNGaHhnc3VNa2Rqb1U3YkgwOXk4cGRLczY0a1Iyem54cy15SVdyUEZXOGhKS255U2MyZms4dyIsImtpZCI6IndMX0xtUDhVakxWTi1zQWVvWjdLR0VNSmZCa0Z0Yk5MZDI0ZUREOVJHQ3MifV19LCJtZXRhZGF0YV9wb2xpY3kiOnsib3BlbmlkX3JlbHlpbmdfcGFydHkiOnsiZ3JhbnRfdHlwZXMiOnsic3Vic2V0X29mIjpbImF1dGhvcml6YXRpb25fY29kZSIsInJlZnJlc2hfdG9rZW4iXX0sInNjb3BlIjp7InN1cGVyc2V0X29mIjpbIm9wZW5pZCJdLCJzdWJzZXRfb2YiOlsib3BlbmlkIiwib2ZmbGluZV9hY2Nlc3MiXX0sImNvbnRhY3RzIjp7ImFkZCI6WyJ0aGF0LmVtYWlsQGNpYW8uaXQiXX19fSwidHJ1c3RfbWFya3MiOlt7ImlkIjoiaHR0cHM6Ly93d3cuc3BpZC5nb3YuaXQvb3BlbmlkLWZlZGVyYXRpb24vYWdyZWVtZW50L3NwLXB1YmxpYy8iLCJ0cnVzdF9tYXJrIjoiZXlKaGJHY2lPaUpTVXpJMU5pSXNJbXRwWkNJNklrSllkbVp5Ykc1b1FVMTFTRkl3TjJGcVZXMUJZMEpTVVdOVGVtMTNNR05mVWtGblNtNXdVeTA1VjFFaUxDSjBlWEFpT2lKMGNuVnpkQzF0WVhKcksycDNkQ0o5LmV5SnBjM01pT2lKb2RIUndPaTh2TVRJM0xqQXVNQzR4T2pnd01EQXZJaXdpYzNWaUlqb2lhSFIwY0Rvdkx6RXlOeTR3TGpBdU1UbzRNREF4THlJc0ltbGhkQ0k2TVRZMU1EY3lPRE0yTkN3aWFXUWlPaUpvZEhSd2N6b3ZMM2QzZHk1emNHbGtMbWR2ZGk1cGRDOWpaWEowYVdacFkyRjBhVzl1TDNKd0lpd2liV0Z5YXlJNkltaDBkSEJ6T2k4dmQzZDNMbUZuYVdRdVoyOTJMbWwwTDNSb1pXMWxjeTlqZFhOMGIyMHZZV2RwWkM5c2IyZHZMbk4yWnlJc0luSmxaaUk2SW1oMGRIQnpPaTh2Wkc5amN5NXBkR0ZzYVdFdWFYUXZhWFJoYkdsaEwzTndhV1F2YzNCcFpDMXlaV2R2YkdVdGRHVmpibWxqYUdVdGIybGtZeTlwZEM5emRHRmlhV3hsTDJsdVpHVjRMbWgwYld3aWZRLkZ1Z04tZ0t0UG5DVXJhTFpfcHNPU3ZkY0Q4a2hJY1BsMVV0bUtnRElHa0c3dHFJbllpVlQyRENTRWwxNmx4MlItSXFPSWVHbE92alFyekhqbUMwSk9ldWdlYTdYdXlFZF95VkVoYTc3UWp0NGRCS0x5TzFJSEtKb0RReWdobnFrWXFfV2lXTk84b3JVbHdrUXB5bXBXMXZiVWl3SlFrUVU0WFhGenJmck1hc091c0pWeHNKZ0NLMVdFbkhMcFY1TF9tM3FOb2doRnF5cGJMU2U1VWlGNTZNYlI0bXREZF82LTVKUHVTMEdLRHVZaWxDOHZMQnNyWUxfMk1mNkNyZW5JbHN4czVMcGx4Z29GdEdxdTBtOGpIS3pTU2VzNkl1cE5ud3BBWEhMU2psM052Z1Z6aVBqWGNrTXpsS2VLNGZNNG9XcUVmTDFpMnFIRnNYWjlQbmkyZyJ9XX0.XFK2o1p8S6r4jllxIbOEgdfBvGMDYibM3vcA_eKjXTDjjU82aRmIswQtcJ1pXTcpqFiE4MjxHDq5BVfp4CwsFbxg1f3h6Y4bAV6_ZyzN3FOPoGMB48rFNRv27iRL5mvXfzSVdh7bDjgkQ_r_tUg-1azSJPvt1-X0PCta5BF35MeXiX97ocQImrPG66A3EvSKCLVZ4_eSf9dU-aH4aJpYlPNnQPMWGSerJcwb0OcEjdcfG0uHIQPIRR2rQHe-h1ec4SOrEEjuKpcy0qt7pWWLAeZbQvrJIeY5uCXnyXftUEbCdBmxAeakuXuUTYf3ucD2BsHFxgQdLBrToLiSA-4V7Q"
|
||||
]
|
||||
],
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"e": "AQAB",
|
||||
"n": "6SDksa64IjBk7HNQC7x5C9nMARGaanfaUm3wC2WulwG_8a5aIy4CEwXN2LENkCyypODqWZcTAwCzWsiihVN9kDcEs7UNu-X1WokK252D7_DRY-FXI8AB3P0CxTngs0k-OjcmbxqVW2U8G56rJFp4G_CYA4vzBoAP_5skFBt-4a5lYJlBfJ2gJlE0vh4_46oyNuUT9kmKauR7npVSHjBUSxYyDELzoaPmvR7SkX4sJe0MK39HES6s4no9G7BraLp75eOwEQmHgEhESWscSOf_CmC5ALnzWJ3FcFhxgsuMkdjoU7bH09y8pdKs64kR2znxs-yIWrPFW8hJKnySc2fk8w",
|
||||
"kid": "wL_LmP8UjLVN-sAeoZ7KGEMJfBkFtbNLd24eDD9RGCs"
|
||||
}
|
||||
]
|
||||
},
|
||||
"metadata": {
|
||||
"openid_relying_party": {
|
||||
"application_type": "web",
|
||||
"client_id": "http://127.0.0.1:8001",
|
||||
"client_registration_types": [
|
||||
"automatic"
|
||||
],
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"use": "sig",
|
||||
"n": "uXfJA-wTlTCA4FdsoE0qZfmKIgedmarrtWgQbElKbWg9RDR7Z8JVBaRLFqwyfyG1JJFm64G51cBJwLIFwWoF7nxsH9VYLm5ocjAnsR4RhlfVE0y_60wjf8skJgBRpiXQPlwH9jDGaqVE_PEBTObDO5w3XourD1F360-v5cLDLRHdFJIitdEVtqATqY5DglRDaKiBhis7a5_1bk839PDLaQhju4XJk4tvDy5-LVkMy5sP2zU6-1tJdA-VmaBZLXy9n0967FGIWmMzpafrBMOuHFcUOH56o-clDah_CITH1dq2D64K0MYhEpACO2p8AH4K8Q6YuJ1dnkVDDwZp2C84sQ",
|
||||
"e": "AQAB",
|
||||
"kid": "YhuIJU6o15EUCyqA0LHEqJd-xVPJgoyW5wZ1o4padWs"
|
||||
}
|
||||
]
|
||||
},
|
||||
"client_name": "Name of an example organization",
|
||||
"contacts": [
|
||||
"[email protected]"
|
||||
],
|
||||
"grant_types": [
|
||||
"refresh_token",
|
||||
"authorization_code"
|
||||
],
|
||||
"redirect_uris": [
|
||||
"http://127.0.0.1:8001/oidc/rp/callback"
|
||||
],
|
||||
"response_types": [
|
||||
"code"
|
||||
],
|
||||
"subject_type": "pairwise"
|
||||
}
|
||||
},
|
||||
"trust_marks": [],
|
||||
"parties_involved": [
|
||||
"http://127.0.0.1:8001",
|
||||
"http://127.0.0.1:8000"
|
||||
],
|
||||
"status": "valid",
|
||||
"log": "",
|
||||
"processing_start": "2022-04-23T15:39:24.428Z",
|
||||
"is_active": true
|
||||
}
|
||||
},
|
||||
{
|
||||
"model": "spid_cie_oidc_entity.trustchain",
|
||||
"pk": 9,
|
||||
"fields": {
|
||||
"created": "2022-03-21T05:39:18.213Z",
|
||||
"modified": "2022-03-21T05:39:18.213Z",
|
||||
"sub": "http://127.0.0.1:8000/oidc/rp",
|
||||
"trust_anchor": 12,
|
||||
"exp": "2022-04-23T16:12:24Z",
|
||||
"iat": "2022-03-21T05:39:18.213Z",
|
||||
"chain": [
|
||||
"eyJhbGciOiJSUzI1NiIsImtpZCI6Ims1NEhRdERpYnlHY3M5WldWTWZ2aUhmLTJxTGNGVXRwd1kycmd4Qms4OE0iLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.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.O2phF_XHLiPCk45I8cMjAKdPxH-pb7p2w46Ump1-te8KaAK5HI7bcqrtD7xUb3OUERBTxozBJx68X57k_JFn_g1r04QnYMGBzSBCyXVYgo-1Jy8npqze4quusFeisjN2yl6yMV5UhV2kNfs52VjrrgGkLX10SLznEyM8ntVAAMKTI7TN7N1tz0idwpBIFbHQtNjb5Zqa5xIA1tB-F8w9Zyjm5WrsyoCkFNdSOIha0hqRpMBDh5I3YGiu-Q5t5LDSUbdfvG5HKl-Mg--xCAz23V1Pr5f88u9ftdrMjZ_teab19jE1YOuG8Zc42nLRZtn8uUX1EWX8b7Lmo5Af7xePJg",
|
||||
"eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.eyJleHAiOjE2NTA3MzAzNDQsImlhdCI6MTY1MDcyODM2NCwiaXNzIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwLyIsInN1YiI6Imh0dHA6Ly8xMjcuMC4wLjE6ODAwMC8iLCJqd2tzIjp7ImtleXMiOlt7Imt0eSI6IlJTQSIsImUiOiJBUUFCIiwibiI6Im84SW9sUmpabGt6Y3QtNDhyaHJWbFRuWVUxcGtNYlZKRC1EVTA1b01TOVJWR3JzRnlwZzk4bS1LdzRINHFOUHlRVngyT1FPUmkteFNoZ2s3SFUtZ0tfMnBWZ3VZa3YwNkZhakxfZWRFQXFxc3F0Xzc0UWYyV0xSQzVwZkpHX3o5T1B6WThKR3lrLXozU2JlSE5fQlhLSThHWTVFNFdVMlNzdG1ROWZ5TDRDeHRSZmpVaWE4bGltVENfM01PcFQzemk1bnIwM2pmYmpwbmpnYTUxcVh1cnhubHpjM2FfeGprNVJBQXBLeFV2TndoSjI3NU0wQ21COTlEalB3RjZCTHZVZ0pxZ3lDcFVPbjM2TE9oSTRGcXVWcWhxaGl3S2xNbWlNZTN5eTB5TlE3RlhCV3hqemhleGJweWMzVnU3ekZJSFBBY0M0VXlJUWhjM3dhRWoydmlYdyIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EifV19LCJtZXRhZGF0YSI6eyJmZWRlcmF0aW9uX2VudGl0eSI6eyJjb250YWN0cyI6WyJvcHNAbG9jYWxob3N0Il0sImZlZGVyYXRpb25fZmV0Y2hfZW5kcG9pbnQiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvZmV0Y2gvIiwiZmVkZXJhdGlvbl9yZXNvbHZlX2VuZHBvaW50IjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwL3Jlc29sdmUvIiwiZmVkZXJhdGlvbl9zdGF0dXNfZW5kcG9pbnQiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvdHJ1c3RfbWFya19zdGF0dXMvIiwiaG9tZXBhZ2VfdXJpIjoiaHR0cDovLzEyNy4wLjAuMTo4MDAwIiwibmFtZSI6ImV4YW1wbGUgVEEiLCJmZWRlcmF0aW9uX2xpc3RfZW5kcG9pbnQiOiJodHRwOi8vMTI3LjAuMC4xOjgwMDAvbGlzdC8ifX0sInRydXN0X21hcmtzX2lzc3VlcnMiOnsiaHR0cHM6Ly93d3cuc3BpZC5nb3YuaXQvY2VydGlmaWNhdGlvbi9ycC9wdWJsaWMiOlsiaHR0cHM6Ly9yZWdpc3RyeS5zcGlkLmFnaWQuZ292Lml0IiwiaHR0cHM6Ly9wdWJsaWMuaW50ZXJtZWRpYXJ5LnNwaWQuaXQiXSwiaHR0cHM6Ly93d3cuc3BpZC5nb3YuaXQvY2VydGlmaWNhdGlvbi9ycC9wcml2YXRlIjpbImh0dHBzOi8vcmVnaXN0cnkuc3BpZC5hZ2lkLmdvdi5pdCIsImh0dHBzOi8vcHJpdmF0ZS5vdGhlci5pbnRlcm1lZGlhcnkuaXQiXSwiaHR0cHM6Ly9zZ2QuYWEuaXQvb25ib2FyZGluZyI6WyJodHRwczovL3NnZC5hYS5pdCJdfSwiY29uc3RyYWludHMiOnsibWF4X3BhdGhfbGVuZ3RoIjoxfX0.eChjKE0kg9UnrLriCQB6rds7D2ftdaTTY-W2qYxdgJFKxNVju6Fa1fUygubEwV8fSL6VTvXlmv-z8M_8ig9p7bDAty37hEo75DBSNAJZW86CY630pujNl5RiioHAEs8fsk2r_U_Jhj4QOymI7M2GCLC48Ryw4VN-krjxlRB84dj8zCmJJJ2ym7e8s0Ne_MrEOm8Jn7FsjZI9m9UkuTfEUl0n2BTGgpLuc7WKjRKwsf4DTkYp1HpbV2bRQUxO5p8FXE7XPyykndVGQJwtB2nf6oCBTA_aZfeAYH8yN5n3IpP1tGFGmeBy78mUspnkyhBt0QumggJgBbW7A9zQaMYJnQ",
|
||||
[
|
||||
"eyJhbGciOiJSUzI1NiIsImtpZCI6IkJYdmZybG5oQU11SFIwN2FqVW1BY0JSUWNTem13MGNfUkFnSm5wUy05V1EiLCJ0eXAiOiJlbnRpdHktc3RhdGVtZW50K2p3dCJ9.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.YxONV2gFObDwld6WwWQJVzs0K0ZDZRoQQa4iRQQikj5qHO-ralKboz4VXUY10HmI2PjNeiXFtT2v-y5TyySEnTlNMHn1Smdx52otVOHzPq66NeKmG5n3omC-UqiWdCuGAwEFLHUsc3XiMMw5jw66MBekNMHxLSwEt_r9537ulPKYmKYqWQMl6tPx68bN6uhwsXmKqk9jyYI4fekWKot9mmJjNYU3OR21YIXGponhw6b-fZxyexwphKdiz5iYZpA2gQDLvlcVLCixTc5E-htDQHrs5nDnI-Tlp87d3acBCY6d7qctRb4cN3o2iyhGE3y-emZQfCIxGfDelWc1-hjzQg"
|
||||
]
|
||||
],
|
||||
"jwks": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"n": "pn_IchC66SFQMhbTHLtbD58jKiYYvYo7S4wjPjzECMu27c6FJVFNXtlubtb7sC6-WTQ1Hv4rSQdPhafJbIxa32R51sRQpkTr3JFMYP7x22DRQD_ixtQJRaiHw-npnZ8qgVHJ_t4gRTc4HJkehBLGv4-rHVAKzFiQNU1u2AFw1fWMnMH4ob_pyisXVgcku3dy14l7sYSANlpXufY_qnkQFTv0wMH-C6Izl-akENS2UHpvTLhfCBVKPrFXJxul4XDbUwUbvNZUxTernEx8lV5gxCSgKSBEgoH9MgpD1YWFPbAnwi7p7e7MNGz5lH7eDFKkPQhXLWABU8UvEIIWyA95SQ",
|
||||
"e": "AQAB",
|
||||
"d": "jOvIjuqkGF-OzeZNpprY1t79V1ZJSFtwFmA1EB9EWKF7YcmTHeOzVZ04f-3LtvHJQB0U_PdpUXUzlE9QB2TAISWcje84x5G8A8Ki39HIiMJoOTYZTen3MxMSXfpkNXma8ztzeRkuPQcgoevjTSvLNiV2UegGS7CF1eeE8qQ9iYjeimPSnfVeLx70L9Rat9-2cs3tqxkPOPPechnKrLJneVbxSmimiAEOQ238gGyEwmlfEGPn3OiIdU5oT-qvyp2KasmLucNgQxGLCkc5ppC_RsstQyNjs8bj88bjq3ahVDCiCFs8n6iRHAEZC1CM7xcEyZjyJ9ozC5nB-Pw3hLBSdQ",
|
||||
"p": "0LeDPVA0DOSV3Gy3M1t5JxPMmPsgsCbx8y1thLuP21FOiVwRixRsXW10CxH56mX1qS9WVodlcCsqy1U-7yGJK9r-De8FvQtS8hbKEiVGMW61qIcMCv8krWOk5qU7uhxHLTL6qkvCsCpLdHeR7x842Aq3AnMCsNuWpLl3G4c0Cps",
|
||||
"q": "zDfdUHIR1PvvBGleEnJFqe0Kw8bW9dOEGusZJ4bDoz61QRyn149Y64b8VW1f4kp1aGBySDm40BgnvPJtTMY0Bm-dPmL7XupsTyt-WHLmD178HQmsVTVIL0VLEIm0yKX7SdpgBOV9FFpHAkn1Mq3H0-tm48DwhCyi-84_bkc2h-s",
|
||||
"kid": "k54HQtDibyGcs9ZWVMfviHf-2qLcFUtpwY2rgxBk88M"
|
||||
}
|
||||
],
|
||||
"metadata": {
|
||||
"openid_relying_party": {
|
||||
"application_type": "web",
|
||||
"client_id": "http://127.0.0.1:8000/oidc/rp",
|
||||
"client_registration_types": [
|
||||
"automatic"
|
||||
],
|
||||
"jwks": {
|
||||
"keys": [
|
||||
{
|
||||
"kty": "RSA",
|
||||
"use": "sig",
|
||||
"n": "5s4qi1Ta-sEuKb5rJ8TzHmyGKaSu89pIXIi6w4Ekx6GL56mJDNE_MWJHsFjWXajfMdMQmZrSXAvLtXxmbhUui9Mq_IormhmEyyEJS0SyE9UKTxWzi0yd_n_C7OjFBhM-0ZyUlgl81E_sr-35P1A6b5WSYwMvRSR-P9yx_NI-XBQ48G_zdmk3CbuuzZsXZqqgj5U7OGWH-4Huosn9nH3FVkwX0OlWkgWM-J9DEWzGBjl9hfbbrMtM_obljHL2NfT6RJYER2IpdI8RCyQS3sMPt6ZHDskmuNlyMDNATCChXQJLnltwEjxcgvzjw_G9J25DwfdfVEhDF_0kCp44UMmS3Q",
|
||||
"e": "AQAB",
|
||||
"kid": "2HnoFS3YnC9tjiCaivhWLVUJ3AxwGGz_98uRFaqMEEs"
|
||||
}
|
||||
]
|
||||
},
|
||||
"client_name": "Name of an example organization",
|
||||
"contacts": [
|
||||
"[email protected]"
|
||||
],
|
||||
"grant_types": [
|
||||
"refresh_token",
|
||||
"authorization_code"
|
||||
],
|
||||
"redirect_uris": [
|
||||
"http://127.0.0.1:8000/oidc/rp/callback"
|
||||
],
|
||||
"response_types": [
|
||||
"code"
|
||||
],
|
||||
"subject_type": "pairwise"
|
||||
}
|
||||
},
|
||||
"trust_marks": [],
|
||||
"parties_involved": [
|
||||
"http://127.0.0.1:8000/oidc/rp",
|
||||
"http://127.0.0.1:8000"
|
||||
],
|
||||
"status": "valid",
|
||||
"log": "",
|
||||
"processing_start": "2022-04-23T15:47:47.547Z",
|
||||
"is_active": true
|
||||
}
|
||||
}
|
||||
]
|
||||
Executable
+22
@@ -0,0 +1,22 @@
|
||||
#!/usr/bin/env python
|
||||
"""Django's command-line utility for administrative tasks."""
|
||||
import os
|
||||
import sys
|
||||
|
||||
|
||||
def main():
|
||||
"""Run administrative tasks."""
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'provider.settings')
|
||||
try:
|
||||
from django.core.management import execute_from_command_line
|
||||
except ImportError as exc:
|
||||
raise ImportError(
|
||||
"Couldn't import Django. Are you sure it's installed and "
|
||||
"available on your PYTHONPATH environment variable? Did you "
|
||||
"forget to activate a virtual environment?"
|
||||
) from exc
|
||||
execute_from_command_line(sys.argv)
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
Binary file not shown.
@@ -0,0 +1,16 @@
|
||||
"""
|
||||
ASGI config for provider project.
|
||||
|
||||
It exposes the ASGI callable as a module-level variable named ``application``.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/howto/deployment/asgi/
|
||||
"""
|
||||
|
||||
import os
|
||||
|
||||
from django.core.asgi import get_asgi_application
|
||||
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'provider.settings')
|
||||
|
||||
application = get_asgi_application()
|
||||
@@ -0,0 +1,83 @@
|
||||
"""
|
||||
Django settings for provider project.
|
||||
|
||||
Generated by 'django-admin startproject' using Django 4.0.2.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/topics/settings/
|
||||
|
||||
For the full list of settings and their values, see
|
||||
https://docs.djangoproject.com/en/4.0/ref/settings/
|
||||
"""
|
||||
|
||||
from .settingslocal import * # noqa: F401
|
||||
|
||||
|
||||
MIDDLEWARE = [
|
||||
'django.middleware.security.SecurityMiddleware',
|
||||
'django.contrib.sessions.middleware.SessionMiddleware',
|
||||
'django.middleware.common.CommonMiddleware',
|
||||
'django.middleware.csrf.CsrfViewMiddleware',
|
||||
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
||||
'django.contrib.messages.middleware.MessageMiddleware',
|
||||
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
||||
]
|
||||
|
||||
ROOT_URLCONF = 'provider.urls'
|
||||
|
||||
TEMPLATES = [
|
||||
{
|
||||
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
||||
'DIRS': [],
|
||||
'APP_DIRS': True,
|
||||
'OPTIONS': {
|
||||
'context_processors': [
|
||||
'django.template.context_processors.debug',
|
||||
'django.template.context_processors.request',
|
||||
'django.contrib.auth.context_processors.auth',
|
||||
'django.contrib.messages.context_processors.messages',
|
||||
],
|
||||
},
|
||||
},
|
||||
]
|
||||
|
||||
WSGI_APPLICATION = 'provider.wsgi.application'
|
||||
|
||||
# Password validation
|
||||
# https://docs.djangoproject.com/en/4.0/ref/settings/#auth-password-validators
|
||||
|
||||
AUTH_PASSWORD_VALIDATORS = [
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
|
||||
},
|
||||
]
|
||||
|
||||
|
||||
# Internationalization
|
||||
# https://docs.djangoproject.com/en/4.0/topics/i18n/
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
# Static files (CSS, JavaScript, Images)
|
||||
# https://docs.djangoproject.com/en/4.0/howto/static-files/
|
||||
|
||||
STATIC_URL = 'static/'
|
||||
STATIC_ROOT = os.path.join(BASE_DIR, 'static')
|
||||
|
||||
# Default primary key field type
|
||||
# https://docs.djangoproject.com/en/4.0/ref/settings/#default-auto-field
|
||||
|
||||
DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
|
||||
@@ -0,0 +1,107 @@
|
||||
import aiohttp
|
||||
import os
|
||||
|
||||
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
||||
|
||||
SECRET_KEY = 'visione-cie-provider-local-dev'
|
||||
DEBUG = True
|
||||
ADMIN_PATH = 'admin/'
|
||||
APPEND_SLASH = False
|
||||
|
||||
OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
|
||||
OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
|
||||
OIDCFED_PROVIDER_PROFILE = "cie"
|
||||
OIDCFED_PROVIDER_MAX_CONSENT_TIMEFRAME = 3600
|
||||
OIDCFED_REQUIRED_TRUST_MARKS = []
|
||||
|
||||
OIDCFED_IDENTITY_PROVIDERS = {
|
||||
"spid": {
|
||||
"http://127.0.0.1:8000/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
},
|
||||
"cie": {
|
||||
"http://127.0.0.1:8002/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
},
|
||||
}
|
||||
|
||||
HTTPC_PARAMS = {
|
||||
"connection": {"ssl": True},
|
||||
"session": {"timeout": aiohttp.ClientTimeout(total=4)},
|
||||
}
|
||||
|
||||
LOGIN_REDIRECT_URL = "/oidc/op/landing"
|
||||
LOGOUT_REDIRECT_URL = "/oidc/op/landing"
|
||||
LOGIN_URL = "/oidc/op/landing"
|
||||
|
||||
ALLOWED_HOSTS = ['*']
|
||||
AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
|
||||
|
||||
INSTALLED_APPS = [
|
||||
'spid_cie_oidc.accounts',
|
||||
'django.contrib.admin',
|
||||
'django.contrib.auth',
|
||||
'django.contrib.contenttypes',
|
||||
'django.contrib.sessions',
|
||||
'django.contrib.messages',
|
||||
'django.contrib.staticfiles',
|
||||
"bootstrap_italia_template",
|
||||
'spid_cie_oidc.entity',
|
||||
'spid_cie_oidc.authority',
|
||||
'spid_cie_oidc.provider',
|
||||
'djagger'
|
||||
]
|
||||
|
||||
TEMPLATE_LOADERS = (
|
||||
'django.template.loaders.eggs.Loader'
|
||||
)
|
||||
|
||||
DJAGGER_DOCUMENT = {
|
||||
"app_names": ['spid_cie_oidc'],
|
||||
}
|
||||
|
||||
DATABASES = {
|
||||
'default': {
|
||||
'ENGINE': 'django.db.backends.sqlite3',
|
||||
'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
|
||||
}
|
||||
}
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
DATA_UPLOAD_MAX_NUMBER_FIELDS = 65000
|
||||
|
||||
ADMINS = [('Visione', '[email protected]')]
|
||||
|
||||
LOGGING = {
|
||||
'version': 1,
|
||||
'disable_existing_loggers': False,
|
||||
'formatters': {
|
||||
'default': {
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s',
|
||||
},
|
||||
},
|
||||
'handlers': {
|
||||
'console': {
|
||||
'formatter': 'default',
|
||||
'level': 'DEBUG',
|
||||
'class': 'logging.StreamHandler',
|
||||
},
|
||||
},
|
||||
'loggers': {
|
||||
'django': {
|
||||
'handlers': ['console'],
|
||||
'level': 'ERROR',
|
||||
'propagate': False,
|
||||
},
|
||||
'spid_cie_oidc': {
|
||||
'handlers': ['console'],
|
||||
'level': 'INFO',
|
||||
'propagate': False,
|
||||
}
|
||||
}
|
||||
}
|
||||
SESSION_COOKIE_NAME = 'visione_provider_sessionid'
|
||||
CSRF_COOKIE_NAME = 'visione_provider_csrftoken'
|
||||
@@ -0,0 +1,159 @@
|
||||
import aiohttp
|
||||
import os
|
||||
|
||||
# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
|
||||
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
||||
|
||||
# SECURITY WARNING: keep the secret key used in production secret!
|
||||
# CHANGE THIS VALUE
|
||||
SECRET_KEY = 'lrx(fg&+2e=$l=y8$!£$%$/£%412345234534543--345234-dfdfgsdf-myg%r3z!yjm(lg*l%-z'
|
||||
|
||||
# SECURITY WARNING: don't run with debug turned on in production!
|
||||
DEBUG = True
|
||||
|
||||
# the path corresponding the admin backend, default if not defined: admin/
|
||||
# CHANGE THIS VALUE
|
||||
ADMIN_PATH = 'admin/'
|
||||
APPEND_SLASH = False
|
||||
|
||||
# required for onboarding checks and also for all the leafs
|
||||
OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
|
||||
OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
|
||||
OIDCFED_PROVIDER_PROFILE = "cie"
|
||||
#OIDCFED_PROVIDER_MAX_REFRESH = 10 #used in SPID
|
||||
OIDCFED_PROVIDER_MAX_CONSENT_TIMEFRAME = 3600 #used in CIE (seconds)
|
||||
|
||||
OIDCFED_REQUIRED_TRUST_MARKS = []
|
||||
|
||||
#OIDCFED_FEDERATION_TRUST_MARKS_PROFILES = {
|
||||
# "openid_relying_party__public": {},
|
||||
# "openid_relying_party__private": {},
|
||||
#}
|
||||
|
||||
HTTPC_PARAMS = {
|
||||
"connection": {"ssl": True},
|
||||
"session": {"timeout": aiohttp.ClientTimeout(total=4)},
|
||||
}
|
||||
|
||||
LOGIN_REDIRECT_URL = "/oidc/op/landing"
|
||||
LOGOUT_REDIRECT_URL = "/oidc/op/landing"
|
||||
LOGIN_URL = "/oidc/op/landing"
|
||||
|
||||
ALLOWED_HOSTS = ['*']
|
||||
AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
|
||||
|
||||
INSTALLED_APPS = [
|
||||
'spid_cie_oidc.accounts',
|
||||
'django.contrib.admin',
|
||||
'django.contrib.auth',
|
||||
'django.contrib.contenttypes',
|
||||
'django.contrib.sessions',
|
||||
'django.contrib.messages',
|
||||
'django.contrib.staticfiles',
|
||||
|
||||
"bootstrap_italia_template",
|
||||
'spid_cie_oidc.entity',
|
||||
'spid_cie_oidc.authority',
|
||||
'spid_cie_oidc.provider',
|
||||
'djagger'
|
||||
]
|
||||
|
||||
TEMPLATE_LOADERS = (
|
||||
'django.template.loaders.eggs.Loader'
|
||||
)
|
||||
|
||||
DJAGGER_DOCUMENT = {
|
||||
"app_names" : ['spid_cie_oidc'],
|
||||
}
|
||||
|
||||
DATABASES = {
|
||||
# if you need more power
|
||||
# 'default': {
|
||||
# 'ENGINE': 'django.db.backends.mysql',
|
||||
# 'NAME': 'that-username',
|
||||
# 'HOST': 'localhost',
|
||||
# 'USER': 'that-user',
|
||||
# 'PASSWORD': 'that-password',
|
||||
# 'PORT': '',
|
||||
# 'OPTIONS': {'init_command': "SET sql_mode='STRICT_TRANS_TABLES'"}
|
||||
# },
|
||||
'default': {
|
||||
'ENGINE': 'django.db.backends.sqlite3',
|
||||
'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
|
||||
}
|
||||
}
|
||||
|
||||
# https://docs.djangoproject.com/en/2.0/topics/i18n/
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
DATA_UPLOAD_MAX_NUMBER_FIELDS = 65000
|
||||
|
||||
# email notification on errors
|
||||
# DEFAULT_FROM_EMAIL = 'fedauth-noreply@DOMAIN'
|
||||
# SERVER_EMAIL = DEFAULT_FROM_EMAIL
|
||||
# EMAIL_HOST = 'smtpservice.yourdomain.it'
|
||||
# EMAIL_HOST_USER = '[email protected]'
|
||||
# EMAIL_HOST_PASSWORD = 'mypassword'
|
||||
# EMAIL_PORT = 587
|
||||
# EMAIL_USE_TLS = True
|
||||
|
||||
ADMINS = [('name surname', 'user1@DOMAIN'),
|
||||
('name surnale', 'user2@DOMAIN'),]
|
||||
|
||||
# LOGGING
|
||||
LOGGING = {
|
||||
'version': 1,
|
||||
'disable_existing_loggers': False,
|
||||
'formatters': {
|
||||
'default': {
|
||||
# exact format is not important, this is the minimum information
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s',
|
||||
},
|
||||
'detailed': {
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s [%(pathname)s %(funcName)s:%(lineno)s]'
|
||||
},
|
||||
},
|
||||
'filters': {
|
||||
'require_debug_false': {
|
||||
'()': 'django.utils.log.RequireDebugFalse'
|
||||
}
|
||||
},
|
||||
'handlers': {
|
||||
'mail_admins': {
|
||||
'formatter': 'detailed',
|
||||
'level': 'ERROR',
|
||||
'filters': ['require_debug_false'],
|
||||
'class': 'django.utils.log.AdminEmailHandler'
|
||||
},
|
||||
'console': {
|
||||
'formatter': 'default',
|
||||
'level': 'DEBUG',
|
||||
'class': 'logging.StreamHandler',
|
||||
},
|
||||
"daily": {
|
||||
"class": "logging.handlers.TimedRotatingFileHandler",
|
||||
"level": "INFO",
|
||||
"formatter": "default",
|
||||
"filename": f"{BASE_DIR}/logs/provider.log",
|
||||
"when": "midnight",
|
||||
"backupCount": 96
|
||||
}
|
||||
},
|
||||
'loggers': {
|
||||
'django': {
|
||||
'handlers': ['console', 'mail_admins'],
|
||||
'level': 'ERROR',
|
||||
'propagate': False,
|
||||
},
|
||||
'spid_cie_oidc': {
|
||||
'handlers': ['console', 'mail_admins', "daily"],
|
||||
'level': 'INFO',
|
||||
'propagate': False,
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
"""provider URL Configuration
|
||||
|
||||
The `urlpatterns` list routes URLs to views. For more information please see:
|
||||
https://docs.djangoproject.com/en/4.0/topics/http/urls/
|
||||
Examples:
|
||||
Function views
|
||||
1. Add an import: from my_app import views
|
||||
2. Add a URL to urlpatterns: path('', views.home, name='home')
|
||||
Class-based views
|
||||
1. Add an import: from other_app.views import Home
|
||||
2. Add a URL to urlpatterns: path('', Home.as_view(), name='home')
|
||||
Including another URLconf
|
||||
1. Import the include() function: from django.urls import include, path
|
||||
2. Add a URL to urlpatterns: path('blog/', include('blog.urls'))
|
||||
"""
|
||||
from django.conf import settings
|
||||
from django.contrib import admin
|
||||
|
||||
from django.views.static import serve
|
||||
from django.urls import include, path, re_path
|
||||
|
||||
from spid_cie_oidc.entity.urls import urlpatterns as entity_urlpatterns
|
||||
|
||||
admin.site.site_header = "OIDC Federation Provider Administration"
|
||||
admin.site.site_title = "OIDC Federation"
|
||||
admin.site.index_title = "Welcome to OIDC Federation Provider Admin backend"
|
||||
|
||||
ADMIN_PATH = getattr(settings, 'ADMIN_PATH', 'admin/')
|
||||
|
||||
urlpatterns = [
|
||||
path(f"{ADMIN_PATH}", admin.site.urls),
|
||||
re_path('^static/(?P<path>.*)$',
|
||||
serve, {
|
||||
'document_root': settings.STATIC_ROOT,
|
||||
'show_indexes': True
|
||||
}
|
||||
),
|
||||
]
|
||||
|
||||
urlpatterns.extend(entity_urlpatterns)
|
||||
|
||||
if 'spid_cie_oidc.provider' in settings.INSTALLED_APPS:
|
||||
from spid_cie_oidc.provider.urls import urlpatterns as op_urlpatterns
|
||||
urlpatterns.extend(op_urlpatterns)
|
||||
|
||||
from spid_cie_oidc.entity.views import entity_configuration, resolve_entity_statement
|
||||
|
||||
urlpatterns.extend(
|
||||
[
|
||||
path(
|
||||
f"oidc/op/.well-known/openid-federation",
|
||||
entity_configuration,
|
||||
name="op_entity_configuration",
|
||||
),
|
||||
path(
|
||||
"oidc/op/resolve",
|
||||
resolve_entity_statement,
|
||||
name="op_entity_resolve",
|
||||
),
|
||||
]
|
||||
)
|
||||
|
||||
if 'djagger' in settings.INSTALLED_APPS:
|
||||
urlpatterns.append(path('rest/', include('djagger.urls')))
|
||||
@@ -0,0 +1,16 @@
|
||||
"""
|
||||
WSGI config for provider project.
|
||||
|
||||
It exposes the WSGI callable as a module-level variable named ``application``.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/howto/deployment/wsgi/
|
||||
"""
|
||||
|
||||
import os
|
||||
|
||||
from django.core.wsgi import get_wsgi_application
|
||||
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'provider.settings')
|
||||
|
||||
application = get_wsgi_application()
|
||||
@@ -0,0 +1,3 @@
|
||||
#!/bin/bash
|
||||
./manage.py migrate
|
||||
./manage.py runserver 0.0.0.0:8002
|
||||
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
./manage.py dumpdata -e admin -e spid_cie_oidc_relying_party -e auth -e contenttypes -e sessions --indent 2 > dumps/example.json
|
||||
File diff suppressed because one or more lines are too long
Executable
+22
@@ -0,0 +1,22 @@
|
||||
#!/usr/bin/env python
|
||||
"""Django's command-line utility for administrative tasks."""
|
||||
import os
|
||||
import sys
|
||||
|
||||
|
||||
def main():
|
||||
"""Run administrative tasks."""
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'relying_party.settings')
|
||||
try:
|
||||
from django.core.management import execute_from_command_line
|
||||
except ImportError as exc:
|
||||
raise ImportError(
|
||||
"Couldn't import Django. Are you sure it's installed and "
|
||||
"available on your PYTHONPATH environment variable? Did you "
|
||||
"forget to activate a virtual environment?"
|
||||
) from exc
|
||||
execute_from_command_line(sys.argv)
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,16 @@
|
||||
"""
|
||||
ASGI config for relying_party project.
|
||||
|
||||
It exposes the ASGI callable as a module-level variable named ``application``.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/howto/deployment/asgi/
|
||||
"""
|
||||
|
||||
import os
|
||||
|
||||
from django.core.asgi import get_asgi_application
|
||||
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'relying_party.settings')
|
||||
|
||||
application = get_asgi_application()
|
||||
@@ -0,0 +1,89 @@
|
||||
"""
|
||||
Django settings for relying_party project.
|
||||
|
||||
Generated by 'django-admin startproject' using Django 4.0.2.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/topics/settings/
|
||||
|
||||
For the full list of settings and their values, see
|
||||
https://docs.djangoproject.com/en/4.0/ref/settings/
|
||||
"""
|
||||
|
||||
from .settingslocal import * # noqa: F401
|
||||
|
||||
|
||||
MIDDLEWARE = [
|
||||
'django.middleware.security.SecurityMiddleware',
|
||||
'django.contrib.sessions.middleware.SessionMiddleware',
|
||||
'django.middleware.common.CommonMiddleware',
|
||||
'django.middleware.csrf.CsrfViewMiddleware',
|
||||
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
||||
'django.contrib.messages.middleware.MessageMiddleware',
|
||||
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
||||
]
|
||||
|
||||
ROOT_URLCONF = 'relying_party.urls'
|
||||
|
||||
TEMPLATES = [
|
||||
{
|
||||
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
||||
'DIRS': [],
|
||||
'APP_DIRS': True,
|
||||
'OPTIONS': {
|
||||
'context_processors': [
|
||||
'django.template.context_processors.debug',
|
||||
'django.template.context_processors.request',
|
||||
'django.contrib.auth.context_processors.auth',
|
||||
'django.contrib.messages.context_processors.messages',
|
||||
],
|
||||
},
|
||||
},
|
||||
]
|
||||
|
||||
WSGI_APPLICATION = 'relying_party.wsgi.application'
|
||||
|
||||
|
||||
# Database
|
||||
# https://docs.djangoproject.com/en/4.0/ref/settings/#databases
|
||||
|
||||
|
||||
# Password validation
|
||||
# https://docs.djangoproject.com/en/4.0/ref/settings/#auth-password-validators
|
||||
|
||||
AUTH_PASSWORD_VALIDATORS = [
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
|
||||
},
|
||||
]
|
||||
|
||||
|
||||
# Internationalization
|
||||
# https://docs.djangoproject.com/en/4.0/topics/i18n/
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
# Static files (CSS, JavaScript, Images)
|
||||
# https://docs.djangoproject.com/en/4.0/howto/static-files/
|
||||
|
||||
STATIC_URL = 'static/'
|
||||
STATIC_ROOT = os.path.join(BASE_DIR, 'static')
|
||||
|
||||
# Default primary key field type
|
||||
# https://docs.djangoproject.com/en/4.0/ref/settings/#default-auto-field
|
||||
|
||||
DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
|
||||
|
||||
@@ -0,0 +1,110 @@
|
||||
import aiohttp
|
||||
import os
|
||||
|
||||
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
||||
|
||||
SECRET_KEY = 'visione-cie-rp-local-dev'
|
||||
DEBUG = True
|
||||
ADMIN_PATH = 'admin/'
|
||||
APPEND_SLASH = False
|
||||
|
||||
OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
|
||||
OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
|
||||
OIDCFED_REQUIRED_TRUST_MARKS = []
|
||||
|
||||
OIDCFED_IDENTITY_PROVIDERS = {
|
||||
"spid": {
|
||||
"http://127.0.0.1:8000/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
},
|
||||
"cie": {
|
||||
"http://127.0.0.1:8002/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
},
|
||||
}
|
||||
|
||||
HTTPC_PARAMS = {
|
||||
"connection": {"ssl": True},
|
||||
"session": {"timeout": aiohttp.ClientTimeout(total=4)},
|
||||
}
|
||||
|
||||
LOGIN_REDIRECT_URL = "/visione/complete"
|
||||
LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
|
||||
LOGIN_URL = "/oidc/rp/landing"
|
||||
|
||||
VISIONE_BACKEND_EXCHANGE_URL = "http://127.0.0.1:5555/api/v1/auth/cie/exchange"
|
||||
VISIONE_SHARED_SECRET = "change-me-for-local-dev"
|
||||
VISIONE_DEFAULT_PROVIDER = "http://127.0.0.1:8002/oidc/op"
|
||||
VISIONE_DEFAULT_PROFILE = "cie"
|
||||
|
||||
ALLOWED_HOSTS = ['*']
|
||||
AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
|
||||
|
||||
INSTALLED_APPS = [
|
||||
'spid_cie_oidc.accounts',
|
||||
'django.contrib.admin',
|
||||
'django.contrib.auth',
|
||||
'django.contrib.contenttypes',
|
||||
'django.contrib.sessions',
|
||||
'django.contrib.messages',
|
||||
'django.contrib.staticfiles',
|
||||
"bootstrap_italia_template",
|
||||
'spid_cie_oidc.entity',
|
||||
'spid_cie_oidc.authority',
|
||||
'spid_cie_oidc.relying_party',
|
||||
'djagger'
|
||||
]
|
||||
|
||||
TEMPLATE_LOADERS = (
|
||||
'django.template.loaders.eggs.Loader'
|
||||
)
|
||||
|
||||
DJAGGER_DOCUMENT = {
|
||||
"app_names": ['spid_cie_oidc'],
|
||||
}
|
||||
|
||||
DATABASES = {
|
||||
'default': {
|
||||
'ENGINE': 'django.db.backends.sqlite3',
|
||||
'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
|
||||
}
|
||||
}
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
DATA_UPLOAD_MAX_NUMBER_FIELDS = 65000
|
||||
|
||||
ADMINS = [('Visione', '[email protected]')]
|
||||
|
||||
LOGGING = {
|
||||
'version': 1,
|
||||
'disable_existing_loggers': False,
|
||||
'formatters': {
|
||||
'default': {
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s',
|
||||
},
|
||||
},
|
||||
'handlers': {
|
||||
'console': {
|
||||
'formatter': 'default',
|
||||
'level': 'DEBUG',
|
||||
'class': 'logging.StreamHandler',
|
||||
},
|
||||
},
|
||||
'loggers': {
|
||||
'django': {
|
||||
'handlers': ['console'],
|
||||
'level': 'ERROR',
|
||||
'propagate': False,
|
||||
},
|
||||
'spid_cie_oidc': {
|
||||
'handlers': ['console'],
|
||||
'level': 'INFO',
|
||||
'propagate': False,
|
||||
}
|
||||
}
|
||||
}
|
||||
SESSION_COOKIE_NAME = 'visione_rp_sessionid'
|
||||
CSRF_COOKIE_NAME = 'visione_rp_csrftoken'
|
||||
@@ -0,0 +1,161 @@
|
||||
import aiohttp
|
||||
import os
|
||||
|
||||
# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
|
||||
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
||||
|
||||
# SECURITY WARNING: keep the secret key used in production secret!
|
||||
# CHANGE THIS VALUE
|
||||
SECRET_KEY = 'lrx(fg&+2e=$l=y8$!£$%$/£%412345234534543--345234-dfdfgsdf-myg%r3z!yjm(lg*l%-z'
|
||||
|
||||
# SECURITY WARNING: don't run with debug turned on in production!
|
||||
DEBUG = True
|
||||
|
||||
# the path corresponding the admin backend, default if not defined: admin/
|
||||
# CHANGE THIS VALUE
|
||||
ADMIN_PATH = 'admin/'
|
||||
APPEND_SLASH = False
|
||||
|
||||
# required for onboarding checks and also for all the leafs
|
||||
OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
|
||||
OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
|
||||
|
||||
OIDCFED_REQUIRED_TRUST_MARKS = []
|
||||
|
||||
# for RP only
|
||||
OIDCFED_IDENTITY_PROVIDERS = {
|
||||
"spid": {
|
||||
"http://127.0.0.1:8000/oidc/op" : OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
},
|
||||
"cie": {
|
||||
"http://127.0.0.1:8002/oidc/op" : OIDCFED_DEFAULT_TRUST_ANCHOR,
|
||||
}
|
||||
}
|
||||
|
||||
HTTPC_PARAMS = {
|
||||
"connection": {"ssl": True},
|
||||
"session": {"timeout": aiohttp.ClientTimeout(total=4)},
|
||||
}
|
||||
|
||||
LOGIN_REDIRECT_URL = "/oidc/rp/echo_attributes"
|
||||
LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
|
||||
LOGIN_URL = "/oidc/rp/landing"
|
||||
|
||||
ALLOWED_HOSTS = ['*']
|
||||
AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
|
||||
|
||||
INSTALLED_APPS = [
|
||||
'spid_cie_oidc.accounts',
|
||||
'django.contrib.admin',
|
||||
'django.contrib.auth',
|
||||
'django.contrib.contenttypes',
|
||||
'django.contrib.sessions',
|
||||
'django.contrib.messages',
|
||||
'django.contrib.staticfiles',
|
||||
|
||||
"bootstrap_italia_template",
|
||||
'spid_cie_oidc.entity',
|
||||
'spid_cie_oidc.authority',
|
||||
'spid_cie_oidc.relying_party',
|
||||
'djagger'
|
||||
]
|
||||
|
||||
TEMPLATE_LOADERS = (
|
||||
'django.template.loaders.eggs.Loader'
|
||||
)
|
||||
|
||||
DJAGGER_DOCUMENT = {
|
||||
"app_names" : ['spid_cie_oidc'],
|
||||
}
|
||||
|
||||
DATABASES = {
|
||||
# if you need more power
|
||||
# 'default': {
|
||||
# 'ENGINE': 'django.db.backends.mysql',
|
||||
# 'NAME': 'that-username',
|
||||
# 'HOST': 'localhost',
|
||||
# 'USER': 'that-user',
|
||||
# 'PASSWORD': 'that-password',
|
||||
# 'PORT': '',
|
||||
# 'OPTIONS': {'init_command': "SET sql_mode='STRICT_TRANS_TABLES'"}
|
||||
# },
|
||||
'default': {
|
||||
'ENGINE': 'django.db.backends.sqlite3',
|
||||
'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
|
||||
}
|
||||
}
|
||||
|
||||
# https://docs.djangoproject.com/en/2.0/topics/i18n/
|
||||
|
||||
LANGUAGE_CODE = 'it-it'
|
||||
TIME_ZONE = 'Europe/Rome'
|
||||
USE_I18N = True
|
||||
USE_L10N = True
|
||||
USE_TZ = True
|
||||
|
||||
DATA_UPLOAD_MAX_NUMBER_FIELDS = 65000
|
||||
|
||||
# email notification on errors
|
||||
# DEFAULT_FROM_EMAIL = 'fedauth-noreply@DOMAIN'
|
||||
# SERVER_EMAIL = DEFAULT_FROM_EMAIL
|
||||
# EMAIL_HOST = 'smtpservice.yourdomain.it'
|
||||
# EMAIL_HOST_USER = '[email protected]'
|
||||
# EMAIL_HOST_PASSWORD = 'mypassword'
|
||||
# EMAIL_PORT = 587
|
||||
# EMAIL_USE_TLS = True
|
||||
|
||||
ADMINS = [('name surname', 'user1@DOMAIN'),
|
||||
('name surnale', 'user2@DOMAIN'),]
|
||||
|
||||
# LOGGING
|
||||
LOGGING = {
|
||||
'version': 1,
|
||||
'disable_existing_loggers': False,
|
||||
'formatters': {
|
||||
'default': {
|
||||
# exact format is not important, this is the minimum information
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s',
|
||||
},
|
||||
'detailed': {
|
||||
'format': '%(asctime)s %(name)-12s %(levelname)-8s %(message)s [%(pathname)s %(funcName)s:%(lineno)s]'
|
||||
},
|
||||
},
|
||||
'filters': {
|
||||
'require_debug_false': {
|
||||
'()': 'django.utils.log.RequireDebugFalse'
|
||||
}
|
||||
},
|
||||
'handlers': {
|
||||
'mail_admins': {
|
||||
'formatter': 'detailed',
|
||||
'level': 'ERROR',
|
||||
'filters': ['require_debug_false'],
|
||||
'class': 'django.utils.log.AdminEmailHandler'
|
||||
},
|
||||
'console': {
|
||||
'formatter': 'default',
|
||||
'level': 'DEBUG',
|
||||
'class': 'logging.StreamHandler',
|
||||
},
|
||||
"daily": {
|
||||
"class": "logging.handlers.TimedRotatingFileHandler",
|
||||
"level": "INFO",
|
||||
"formatter": "default",
|
||||
"filename": f"{BASE_DIR}/logs/relying_party.log",
|
||||
"when": "midnight",
|
||||
"backupCount": 96
|
||||
}
|
||||
},
|
||||
'loggers': {
|
||||
'django': {
|
||||
'handlers': ['console', 'mail_admins'],
|
||||
'level': 'ERROR',
|
||||
'propagate': False,
|
||||
},
|
||||
'spid_cie_oidc': {
|
||||
'handlers': ['console', 'mail_admins', "daily"],
|
||||
'level': 'INFO',
|
||||
'propagate': False,
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,66 @@
|
||||
"""acsia_agent_proj URL Configuration
|
||||
|
||||
The `urlpatterns` list routes URLs to views. For more information please see:
|
||||
https://docs.djangoproject.com/en/4.0/topics/http/urls/
|
||||
Examples:
|
||||
Function views
|
||||
1. Add an import: from my_app import views
|
||||
2. Add a URL to urlpatterns: path('', views.home, name='home')
|
||||
Class-based views
|
||||
1. Add an import: from other_app.views import Home
|
||||
2. Add a URL to urlpatterns: path('', Home.as_view(), name='home')
|
||||
Including another URLconf
|
||||
1. Import the include() function: from django.urls import include, path
|
||||
2. Add a URL to urlpatterns: path('blog/', include('blog.urls'))
|
||||
"""
|
||||
from django.conf import settings
|
||||
from django.contrib import admin
|
||||
from django.urls import include, path, re_path
|
||||
from django.views.static import serve
|
||||
|
||||
from spid_cie_oidc.entity.urls import urlpatterns as ta_urlpatterns
|
||||
from .visione_views import VisioneCompleteView, VisioneStartView
|
||||
|
||||
admin.site.site_header = "OIDC Federation Relying Party Administration"
|
||||
admin.site.site_title = "OIDC Federation Relying Party"
|
||||
admin.site.index_title = "Welcome to OIDC Federation Relying Party Admin backend"
|
||||
|
||||
ADMIN_PATH = getattr(settings, 'ADMIN_PATH', 'admin/')
|
||||
|
||||
urlpatterns = [
|
||||
path(f"{ADMIN_PATH}", admin.site.urls),
|
||||
path("visione/start", VisioneStartView.as_view(), name="visione_start"),
|
||||
path("visione/complete", VisioneCompleteView.as_view(), name="visione_complete"),
|
||||
re_path('^static/(?P<path>.*)$',
|
||||
serve, {
|
||||
'document_root': settings.STATIC_ROOT,
|
||||
'show_indexes': True
|
||||
}
|
||||
),
|
||||
]
|
||||
|
||||
urlpatterns.extend(ta_urlpatterns)
|
||||
|
||||
if 'spid_cie_oidc.relying_party' in settings.INSTALLED_APPS:
|
||||
from spid_cie_oidc.relying_party.urls import urlpatterns as rp_urlpatterns
|
||||
urlpatterns.extend(rp_urlpatterns)
|
||||
|
||||
from spid_cie_oidc.entity.views import entity_configuration, resolve_entity_statement
|
||||
|
||||
urlpatterns.extend(
|
||||
[
|
||||
path(
|
||||
"oidc/rp/.well-known/openid-federation",
|
||||
entity_configuration,
|
||||
name="rp_entity_configuration",
|
||||
),
|
||||
path(
|
||||
"oidc/rp/resolve",
|
||||
resolve_entity_statement,
|
||||
name="rp_entity_resolve",
|
||||
),
|
||||
]
|
||||
)
|
||||
|
||||
if 'djagger' in settings.INSTALLED_APPS:
|
||||
urlpatterns.append(path('rest/', include('djagger.urls')))
|
||||
@@ -0,0 +1,105 @@
|
||||
import hashlib
|
||||
import hmac
|
||||
import json
|
||||
import urllib.error
|
||||
import urllib.request
|
||||
|
||||
from django.conf import settings
|
||||
from django.http import HttpResponseBadRequest, HttpResponseRedirect, HttpResponseServerError
|
||||
from django.views import View
|
||||
|
||||
|
||||
class _NoRedirectHandler(urllib.request.HTTPRedirectHandler):
|
||||
def redirect_request(self, req, fp, code, msg, headers, newurl):
|
||||
return None
|
||||
|
||||
|
||||
def _normalize_fiscal_code(value):
|
||||
if not value:
|
||||
return value
|
||||
fiscal_code = value.strip().upper()
|
||||
if fiscal_code.startswith("TINIT-"):
|
||||
fiscal_code = fiscal_code[6:]
|
||||
return fiscal_code
|
||||
|
||||
|
||||
class VisioneStartView(View):
|
||||
def get(self, request):
|
||||
state = request.GET.get("state")
|
||||
frontend_redirect_uri = request.GET.get("frontend_redirect_uri")
|
||||
provider = request.GET.get("provider", settings.VISIONE_DEFAULT_PROVIDER)
|
||||
profile = request.GET.get("profile", settings.VISIONE_DEFAULT_PROFILE)
|
||||
if not state or not frontend_redirect_uri:
|
||||
return HttpResponseBadRequest("Missing state or frontend_redirect_uri")
|
||||
|
||||
request.session["visione_state"] = state
|
||||
request.session["visione_frontend_redirect_uri"] = frontend_redirect_uri
|
||||
request.session["visione_provider_issuer"] = provider
|
||||
|
||||
return HttpResponseRedirect(
|
||||
f"/oidc/rp/authorization?provider={provider}&profile={profile}"
|
||||
)
|
||||
|
||||
|
||||
class VisioneCompleteView(View):
|
||||
def get(self, request):
|
||||
user_attrs = request.session.get("oidc_rp_user_attrs", {})
|
||||
state = request.session.get("visione_state")
|
||||
issuer = request.session.get("visione_provider_issuer")
|
||||
|
||||
fiscal_code = user_attrs.get("fiscal_number") or user_attrs.get(
|
||||
"https://attributes.eid.gov.it/fiscal_number"
|
||||
)
|
||||
fiscal_code = _normalize_fiscal_code(fiscal_code)
|
||||
subject = user_attrs.get("sub") or user_attrs.get("username")
|
||||
if not state or not issuer or not subject or not fiscal_code:
|
||||
return HttpResponseBadRequest("Missing Visione auth session or user attributes")
|
||||
|
||||
payload = {
|
||||
"state": state,
|
||||
"issuer": issuer,
|
||||
"subject": subject,
|
||||
"fiscal_code": fiscal_code,
|
||||
"first_name": user_attrs.get("given_name", ""),
|
||||
"last_name": user_attrs.get("family_name", ""),
|
||||
"email": user_attrs.get("email", ""),
|
||||
}
|
||||
raw_body = json.dumps(payload, separators=(",", ":"))
|
||||
signature = hmac.new(
|
||||
settings.VISIONE_SHARED_SECRET.encode("utf-8"),
|
||||
raw_body.encode("utf-8"),
|
||||
hashlib.sha256,
|
||||
).hexdigest().upper()
|
||||
|
||||
req = urllib.request.Request(
|
||||
settings.VISIONE_BACKEND_EXCHANGE_URL,
|
||||
data=raw_body.encode("utf-8"),
|
||||
headers={
|
||||
"Content-Type": "application/json",
|
||||
"X-Visione-Signature": signature,
|
||||
},
|
||||
method="POST",
|
||||
)
|
||||
opener = urllib.request.build_opener(_NoRedirectHandler)
|
||||
|
||||
try:
|
||||
opener.open(req)
|
||||
except urllib.error.HTTPError as exc:
|
||||
if exc.code in (301, 302, 303, 307, 308):
|
||||
location = exc.headers.get("Location")
|
||||
if location:
|
||||
return HttpResponseRedirect(location)
|
||||
return HttpResponseServerError("Visione backend returned redirect without location")
|
||||
error_body = ""
|
||||
try:
|
||||
error_body = exc.read().decode("utf-8").strip()
|
||||
except Exception:
|
||||
error_body = ""
|
||||
detail = f" {error_body}" if error_body else ""
|
||||
return HttpResponseServerError(
|
||||
f"Visione backend exchange failed: {exc.code}{detail}"
|
||||
)
|
||||
except Exception as exc:
|
||||
return HttpResponseServerError(f"Visione backend exchange failed: {exc}")
|
||||
|
||||
return HttpResponseServerError("Visione backend exchange did not redirect")
|
||||
@@ -0,0 +1,16 @@
|
||||
"""
|
||||
WSGI config for relying_party project.
|
||||
|
||||
It exposes the WSGI callable as a module-level variable named ``application``.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/4.0/howto/deployment/wsgi/
|
||||
"""
|
||||
|
||||
import os
|
||||
|
||||
from django.core.wsgi import get_wsgi_application
|
||||
|
||||
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'relying_party.settings')
|
||||
|
||||
application = get_wsgi_application()
|
||||
@@ -0,0 +1,3 @@
|
||||
#!/bin/bash
|
||||
./manage.py migrate
|
||||
./manage.py runserver 0.0.0.0:8001
|
||||
Reference in New Issue
Block a user