feat: link local library

2026-06-17 20:43:56 +02:00
parent 9a770a2af0
commit db59882f33
327 changed files with 22274 additions and 1 deletions
@@ -0,0 +1,124 @@
+from django.conf import settings
+from spid_cie_oidc.provider.schemas.authn_requests import (
+    AcrValues,
+    AuthenticationRequestCie,
+    AuthenticationRequestDoc,
+    AuthenticationRequestSpid,
+)
+from spid_cie_oidc.entity.schemas.rp_metadata import RPMetadataSpid, RPMetadataCie
+from spid_cie_oidc.provider.schemas.authn_response import AuthenticationResponse, AuthenticationResponseCie
+from spid_cie_oidc.provider.schemas.token_response import TokenResponse
+
+
+RP_PREFS = {
+    "application_name": "that_fancy_rp",
+    "application_type": "web",
+    "contacts": ["[email protected]"],
+    "response_types": ["code"],
+    "scope": ["openid", "offline_access"],
+    "token_endpoint_auth_method": ["private_key_jwt"],
+}
+
+
+OIDCFED_ACR_PROFILES = getattr(
+    settings,
+    "OIDCFED_ACR_PROFILES",
+    AcrValues.l2.value
+)
+
+RP_PROVIDER_PROFILES = getattr(
+    settings,
+    "RP_PROVIDER_PROFILES",
+    {
+        "spid": {
+            "authorization_request": AuthenticationRequestSpid,
+            "authorization_request_doc": AuthenticationRequestDoc,
+            "rp_metadata": RPMetadataSpid,
+            "authn_response": AuthenticationResponse,
+            "token_response": TokenResponse
+        },
+        "cie": {
+            "authorization_request": AuthenticationRequestCie,
+            "authorization_request_doc": AuthenticationRequestDoc,
+            "rp_metadata": RPMetadataCie,
+            "authn_response": AuthenticationResponseCie,
+            "token_response": TokenResponse
+        },
+    },
+)
+
+RP_USER_LOOKUP_FIELD = getattr(settings, "RP_USER_LOOKUP_FIELD", "fiscal_number")
+RP_USER_CREATE = getattr(settings, "RP_USER_CREATE", True)
+
+RP_ATTR_MAP = getattr(
+    settings,
+    "RP_ATTR_MAP",
+    {
+        "sub": ("sub",),
+        "username": (
+            {
+                "func": "spid_cie_oidc.relying_party.processors.issuer_prefixed_sub",
+                "kwargs": {"sep": "__"},
+            },
+        ),
+        "first_name": ("given_name", "given_name"),
+        "last_name": (
+            "family_name",
+            "last_name",
+        ),
+        "email": (
+            "email",
+            "email",
+        ),
+        "fiscal_number": ("https://attributes.eid.gov.it/fiscal_number", "fiscal_number"),
+    },
+)
+
+
+SPID_REQUESTED_CLAIMS = getattr(
+    settings,
+    "RP_REQUIRED_CLAIMS",
+    {
+        "id_token": {
+            "given_name": {"essential": True},
+            "email": {"essential": True},
+        },
+        "userinfo": {
+            "given_name": None,
+            "family_name": None,
+            "email": None,
+            "https://attributes.eid.gov.it/fiscal_number": None,
+        },
+    },
+)
+
+CIE_REQUESTED_CLAIMS = getattr(
+    settings,
+    "RP_REQUIRED_CLAIMS",
+    {
+        "id_token": {"family_name": {"essential": True}, "given_name": {"essential": True}},
+        "userinfo": {
+            "given_name": None,
+            "family_name": None,
+            "email": None,
+            "https://attributes.eid.gov.it/fiscal_number": None
+        },
+    },
+)
+
+RP_PKCE_CONF = getattr(
+    settings,
+    "RP_PKCE_CONF",
+    {
+        "function": "spid_cie_oidc.relying_party.utils.get_pkce",
+        "kwargs": {"code_challenge_length": 64, "code_challenge_method": "S256"},
+    },
+)
+
+RP_REQUEST_CLAIM_BY_PROFILE = {
+    "spid": SPID_REQUESTED_CLAIMS,
+    "cie": CIE_REQUESTED_CLAIMS,
+}
+
+RP_DEFAULT_PROVIDER_PROFILES = getattr(settings, "RP_DEFAULT_PROVIDER_PROFILES", "spid")
+RP_REQUEST_EXP = getattr(settings, "RP_REQUEST_EXP", 60)