trustchain-oc1-orchestral
/
devicehub-teal
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

first step

This commit is contained in:
Cayo Puigdefabregas 2024-03-26 17:52:58 +01:00
parent 55839a26ea
commit f0710e88ec
2 changed files with 28 additions and 51 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ereuse_devicehub/config.py
View File

@ -110,6 +110,7 @@ class DevicehubConfig(Config):
ABAC_TOKEN = config('ABAC_TOKEN', None) ABAC_TOKEN = config('ABAC_TOKEN', None)
ABAC_COOKIE = config('ABAC_COOKIE', None) ABAC_COOKIE = config('ABAC_COOKIE', None)
ABAC_URL = config('ABAC_URL', None) ABAC_URL = config('ABAC_URL', None)
VERIFY_URL = config('VERIFY_URL', None)
"""Definition of oauth jwt details.""" """Definition of oauth jwt details."""
OAUTH2_JWT_ENABLED = config('OAUTH2_JWT_ENABLED', False) OAUTH2_JWT_ENABLED = config('OAUTH2_JWT_ENABLED', False)

78
ereuse_devicehub/modules/oidc/views.py
View File

@ -132,16 +132,18 @@ class SelectInventoryView(GenericMixin):
def dispatch_request(self): def dispatch_request(self):
host = app.config.get('HOST', '').strip("/") host = app.config.get('HOST', '').strip("/")
url = "https://ebsi-pcp-wallet-ui.vercel.app/oid4vp?"
url += f"client_id=https://{host}&"
url += "presentation_definition_uri=https://iotaledger.github.io"
# url += "/ebsi-stardust-components/public/presentation-definition-ex1.json"
url += "/ebsi-stardust-components/public//presentation-definition-ereuse.json&"
url += f"response_uri=https://{host}/allow_code_oidc4vp"
url += "&state=1700822573400&response_type=vp_token&response_mode=direct_post"
url += "&nonce=DybC3A=="
next = request.args.get('next', '#') next = request.args.get('next', '#')
# url = "https://ebsi-pcp-wallet-ui.vercel.app/oid4vp?"
# url += f"client_id=https://{host}&"
# url += "presentation_definition_uri=https://iotaledger.github.io"
# url += "/ebsi-stardust-components/public/presentation-definition-ex1.json"
# url += "/ebsi-stardust-components/public//presentation-definition-ereuse.json&"
# url += f"response_uri=https://{host}/allow_code_oidc4vp"
# url += "&state=1700822573400&response_type=vp_token&response_mode=direct_post"
url = app.config.get('VERIFY_URL')
url += f"?response_uri=http://{host}:5000/allow_code_oidc4vp"
url += '&presentation_definition=["EOperatorClaim"]'
session['next_url'] = next session['next_url'] = next
return redirect(url, code=302) return redirect(url, code=302)
@ -230,10 +232,11 @@ class AllowCodeOidc4vpView(GenericMixin):
def dispatch_request(self): def dispatch_request(self):
vcredential = self.get_credential() vcredential = self.get_credential()
import pdb; pdb.set_trace()
if not vcredential: if not vcredential:
return jsonify({"error": "No there are credentials"}) return jsonify({"error": "No there are credentials"})
roles = self.verify(vcredential) roles = self.get_roles(vcredential)
if not roles: if not roles:
return jsonify({"error": "No there are roles"}) return jsonify({"error": "No there are roles"})
@ -242,47 +245,19 @@ class AllowCodeOidc4vpView(GenericMixin):
return jsonify({"redirect_uri": uri}) return jsonify({"redirect_uri": uri})
def get_credential(self): def get_credential(self):
self.vp_token = request.values.get("vp_token") pv = request.values.get("vp_token")
pv = self.vp_token.split(".") self.code = request.values.get("code")
token = json.loads(base64.b64decode(pv[1]).decode()) token = json.loads(base64.b64decode(pv).decode())
return token.get('vp', {}).get("verifiableCredential") return token.get("verifiableCredential")
def verify(self, vcredential):
WALLET_INX_EBSI_PLUGIN_TOKEN = app.config.get(
'WALLET_INX_EBSI_PLUGIN_TOKEN'
)
WALLET_INX_EBSI_PLUGIN_URL = app.config.get(
'WALLET_INX_EBSI_PLUGIN_URL'
)
headers = {
'Content-Type': 'application/json',
'Authorization': f'Bearer {WALLET_INX_EBSI_PLUGIN_TOKEN}'
}
for v in vcredential:
data = json.dumps({
"type": "VerificationRequest",
"jwtCredential": v
})
result = requests.post(
WALLET_INX_EBSI_PLUGIN_URL,
headers=headers,
data=data
)
if result.status_code != 200:
return
vps = json.loads(result.text)
try:
roles = vps['credential']['credentialSubject'].get('role')
except Exception:
roles = None
if roles:
break
if not vps.get('verified'):
return
def get_roles(self, vps):
try:
for vp in vps:
roles = vp.get('credentialSubject', {}).get('role')
if roles:
return roles
except Exception:
roles = None
return roles return roles
def get_response_uri(selfi, roles): def get_response_uri(selfi, roles):
@ -290,7 +265,7 @@ class AllowCodeOidc4vpView(GenericMixin):
db.session.add(code) db.session.add(code)
db.session.commit() db.session.commit()
url = "https://{host}/allow_code_oidc4vp2?code={code}".format( url = "http://{host}/allow_code_oidc4vp2?code={code}".format(
host=app.config.get('HOST'), host=app.config.get('HOST'),
code=code.code code=code.code
) )
@ -314,6 +289,7 @@ class AllowCodeOidc4vp2View(View):
return redirect(url) return redirect(url)
def get_user_info(self): def get_user_info(self):
import pdb; pdb.set_trace()
code = Code2Roles.query.filter_by(code=self.code).first() code = Code2Roles.query.filter_by(code=self.code).first()
if not code: if not code: