auth-playground 0.0.1__tar.gz

auth_playground-0.0.1/.claude/settings.local.json

@@ -0,0 +1,46 @@
+{
+  "permissions": {
+    "allow": [
+      "Read(//home/eloi/dev/yaal/canaille/dev/client/**)",
+      "Bash(tree:*)",
+      "WebSearch",
+      "WebFetch(domain:cdn.jsdelivr.net)",
+      "Bash(curl:*)",
+      "WebFetch(domain:docs.astral.sh)",
+      "WebFetch(domain:picocss.com)",
+      "WebFetch(domain:github.com)",
+      "Bash(git mv:*)",
+      "WebFetch(domain:pytest-iam.readthedocs.io)",
+      "Read(//home/eloi/dev/yaal/**)",
+      "Bash(uv sync:*)",
+      "Bash(uv pip index:*)",
+      "Bash(uv run pytest:*)",
+      "Bash(git -C /home/eloi/dev/yaal/pytest-iam log:*)",
+      "Bash(git -C /home/eloi/dev/yaal/pytest-iam describe --tags)",
+      "Bash(git -C /home/eloi/dev/yaal/pytest-iam show ade288e --stat)",
+      "Bash(git -C /home/eloi/dev/yaal/pytest-iam show ade288e)",
+      "Bash(uv run:*)",
+      "Bash(uv pip show:*)",
+      "WebFetch(domain:canaille.yaal.coop)",
+      "WebFetch(domain:datatracker.ietf.org)",
+      "WebFetch(domain:openid.net)",
+      "Bash(prek run:*)",
+      "WebFetch(domain:oauth.net)",
+      "WebFetch(domain:www.sakimura.org)",
+      "Bash(tox:*)",
+      "WebFetch(domain:pyinstaller.org)",
+      "Bash(pybabel compile:*)",
+      "WebFetch(domain:python-babel.github.io)",
+      "WebFetch(domain:stackoverflow.com)",
+      "Bash(msgfmt:*)",
+      "Read(//tmp/**)",
+      "WebFetch(domain:medium.com)",
+      "Bash(python -c:*)",
+      "Bash(git add:*)",
+      "Bash(find:*)",
+      "Bash(test:*)"
+    ],
+    "deny": [],
+    "ask": []
+  }
+}

auth_playground-0.0.1/.dockerignore

@@ -0,0 +1,48 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+*.egg-info/
+dist/
+build/
+.eggs/
+*.egg
+.venv/
+venv/
+ENV/
+env/
+
+# Testing
+.tox/
+.coverage
+.coverage.*
+htmlcov/
+.pytest_cache/
+
+# IDEs
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Git
+.git/
+.gitignore
+
+# Docker
+Dockerfile
+.dockerignore
+docker-compose.yml
+
+# Environment files (security)
+.env
+.env.*
+!example.env
+
+# Build artifacts
+*.spec
+dist/
+build/

auth_playground-0.0.1/.github/workflows/i18n.yml

@@ -0,0 +1,59 @@
+name: Check translation catalogs are up to date
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+jobs:
+  check-translations:
+    name: Verify translation catalogs
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version-file: "pyproject.toml"
+
+      - name: Install dependencies
+        run: uv sync --all-groups --all-extras
+
+      - name: Save current catalog (filtered)
+        run: |
+          grep -v '^"POT-Creation-Date:' src/auth_playground/translations/messages.pot | \
+          grep -v '^"Generated-By:' | \
+          grep -v '^#:' | \
+          grep -v '^#,' > /tmp/messages.pot.before
+
+      - name: Extract translation strings
+        run: uv run pybabel extract --mapping-file pyproject.toml --copyright-holder="Yaal Coop" --output-file src/auth_playground/translations/messages.pot src
+
+      - name: Save new catalog (filtered)
+        run: |
+          grep -v '^"POT-Creation-Date:' src/auth_playground/translations/messages.pot | \
+          grep -v '^"Generated-By:' | \
+          grep -v '^#:' | \
+          grep -v '^#,' > /tmp/messages.pot.after
+
+      - name: Check for uncommitted changes in catalogs
+        run: |
+          # Compare filtered files
+          if diff -u /tmp/messages.pot.before /tmp/messages.pot.after; then
+            echo "Translation catalogs are up to date"
+          else
+            echo "Translation catalogs are not up to date!"
+            echo ""
+            echo "New translatable strings were found or existing ones were modified."
+            echo "Please check instructions in src/auth_playground/README.md and extract the strings."
+            exit 1
+          fi

auth_playground-0.0.1/.github/workflows/publish-docker.yaml

@@ -0,0 +1,47 @@
+---
+name: Publish Docker image
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+jobs:
+  publish:
+    name: Build and publish Docker image
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64,linux/arm64

auth_playground-0.0.1/.github/workflows/release.yml

@@ -0,0 +1,25 @@
+---
+name: release
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - run: |
+          export TZ=UTC
+          uv sync --group release --all-extras --no-dev
+          uv run pyinstaller auth-playground.spec
+          uv cache prune --ci
+      - uses: softprops/action-gh-release@v2
+        if: github.ref_type == 'tag'
+        with:
+          files: |
+            dist/auth-playground

auth_playground-0.0.1/.github/workflows/tests.yaml

@@ -0,0 +1,119 @@
+---
+name: tests
+on:
+  push:
+    branches:
+      - main
+      - '*.*.*'
+  pull_request:
+    branches:
+      - main
+      - '*.*.*'
+jobs:
+  tests:
+    name: py${{ matrix.python }} unit tests
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python:
+          - '3.13'
+          - '3.12'
+          - '3.11'
+          - '3.10'
+    steps:
+      - uses: actions/checkout@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - name: Install Python ${{ matrix.python }}
+        run: uv python install ${{ matrix.python }}
+      - name: Run tests
+        run: |
+          export TZ=UTC
+          uv sync --all-extras
+          uv run pytest
+
+  minversions:
+    name: minimum dependency versions
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - name: Install Python 3.10
+        run: uv python install 3.10
+      - name: Run tests
+        run: |
+          export TZ=UTC
+          uv sync --all-extras --resolution=lowest-direct
+          uv run pytest
+
+  style:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - name: Run tests
+        run: |
+          export TZ=UTC
+          uv sync --all-extras
+          uv run prek run --all-files
+
+  bundle:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - run: |
+          export TZ=UTC
+          uv sync --group release --all-extras --no-dev
+          uv run pyinstaller auth-playground.spec
+          uv cache prune --ci
+
+  docker:
+    name: docker build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: false
+          load: true
+          tags: auth-playground:test
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+      - name: Test Docker image
+        run: |
+          docker run -d --name test-app -p 4000:4000 \
+            -e SECRET_KEY="test-secret-key-for-ci" \
+            -e FLASK_DEBUG="False" \
+            auth-playground:test
+
+          timeout 30 sh -c 'until docker inspect --format="{{.State.Health.Status}}" test-app | grep -q "healthy"; do sleep 1; done' || {
+            echo "Container failed to become healthy"
+            docker logs test-app
+            exit 1
+          }
+
+          curl -f http://localhost:4000/ || {
+            echo "App failed to respond"
+            docker logs test-app
+            exit 1
+          }
+
+          docker stop test-app
+          docker rm test-app

auth_playground-0.0.1/.gitignore

@@ -0,0 +1,12 @@
+.env
+*.pyc
+*.mo
+*.prof
+.tox
+.coverage
+.coverage.*
+htmlcov
+*.egg-info
+build
+_build
+dist

auth_playground-0.0.1/.hgignore

@@ -0,0 +1 @@
+.dotfiles/mercurial/.hgignore

auth_playground-0.0.1/.pre-commit-config.yaml

@@ -0,0 +1,38 @@
+---
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.14.0
+    hooks:
+      - id: ruff
+        args: [--fix, --exit-non-zero-on-fix]
+      - id: ruff-format
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: fix-byte-order-marker
+      - id: trailing-whitespace
+        exclude: "\\.svg$|\\.map$|\\.min\\.css$|\\.min\\.js$|\\.po$|\\.pot$"
+      - id: end-of-file-fixer
+        exclude: "\\.svg$|\\.map$|\\.min\\.css$|\\.min\\.js$|\\.po$|\\.pot$"
+      - id: check-toml
+  - repo: https://github.com/rtts/djhtml
+    rev: 3.0.10
+    hooks:
+      - id: djhtml
+  - repo: https://github.com/codespell-project/codespell
+    rev: v2.4.1
+    hooks:
+    - id: codespell
+      additional_dependencies:
+        - tomli
+      exclude: ".*\\.min\\..*|translations|\\.css$|^tests|fomanticui|doc/locales|auth-playground\\.spec"
+      args: [--write-changes]
+  - repo: local
+    hooks:
+      - id: pybabel-extract
+        name: Extract translatable strings
+        entry: bash -c 'uv run pybabel extract -o src/auth_playground/translations/messages.pot src/auth_playground && git add src/auth_playground/translations/messages.pot'
+        language: system
+        pass_filenames: false
+        files: '\.(py|html)$'
+        exclude: '^tests/'

auth_playground-0.0.1/.python-version

@@ -0,0 +1 @@
+3.14

auth_playground-0.0.1/Dockerfile

@@ -0,0 +1,48 @@
+# syntax=docker/dockerfile:1
+FROM ghcr.io/astral-sh/uv:python3.14-bookworm-slim AS builder
+
+WORKDIR /app
+
+# Install build dependencies for compiling native extensions
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    && rm -rf /var/lib/apt/lists/*
+
+ENV UV_COMPILE_BYTECODE=1
+
+COPY pyproject.toml uv.lock ./
+
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --frozen --no-install-project --no-dev
+
+COPY . .
+
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --frozen --no-dev
+
+
+FROM python:3.14-slim-bookworm
+
+# Create a non-root user
+RUN useradd -m -u 1000 appuser
+
+WORKDIR /app
+
+COPY --from=builder --chown=appuser:appuser /app/.venv /app/.venv
+
+COPY --chown=appuser:appuser . .
+
+ENV PATH="/app/.venv/bin:$PATH"
+ENV PYTHONUNBUFFERED=1
+ENV FLASK_RUN_HOST="0.0.0.0"
+ENV FLASK_RUN_PORT="4000"
+ENV FLASK_DEBUG="False"
+
+USER appuser
+
+EXPOSE 4000
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:4000/').read()" || exit 1
+
+CMD ["auth-playground"]

auth_playground-0.0.1/LICENSE.md

@@ -0,0 +1,21 @@
+# MIT License
+
+Copyright (c) 2025 Yaal Coop
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

auth_playground-0.0.1/PKG-INFO

@@ -0,0 +1,110 @@
+Metadata-Version: 2.4
+Name: auth-playground
+Version: 0.0.1
+Summary: Demonstration OpenID Connect Client
+Project-URL: repository, https://github.com/yaal-coop/auth-playground
+Author-email: Yaal Coop <contact@yaal.coop>
+Maintainer-email: Éloi Rivard <eloi@yaal.coop>
+License: MIT
+License-File: LICENSE.md
+Keywords: authentication,identity,oauth,oauth2,oidc,openid
+Requires-Python: >=3.10
+Requires-Dist: authlib>=1.6.5
+Requires-Dist: cachelib>=0.10.0
+Requires-Dist: flask-babel>=4.0.0
+Requires-Dist: flask-session>=0.8.0
+Requires-Dist: flask-wtf>=1.2.0
+Requires-Dist: flask>=3.1.2
+Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: requests>=2.32.5
+Description-Content-Type: text/markdown
+
+# Auth Playground
+
+[![Tests](https://github.com/authlib/auth-playground/actions/workflows/tests.yaml/badge.svg)](https://github.com/authlib/auth-playground/actions/workflows/tests.yaml)
+[![Docker](https://github.com/authlib/auth-playground/actions/workflows/publish-docker.yaml/badge.svg)](https://github.com/authlib/auth-playground/actions/workflows/publish-docker.yaml)
+[![Docker Image](https://ghcr-badge.egpl.dev/authlib/auth-playground/latest_tag?trim=major&label=latest)](https://github.com/authlib/auth-playground/pkgs/container/auth-playground)
+
+A demonstration OAuth2 / OpenID Connect (OIDC) client application built with [Authlib](https://authlib.org).
+This project illustrates how to integrate with an identity provider for user authentication, registration, and consent management.
+It can be used to play with the different interactions between clients and server, or debug a server implementation.
+
+## Installation
+
+### Using pip
+
+```bash
+pip install auth-playground
+```
+
+### Using uv
+
+```bash
+uv add auth-playground
+```
+
+### Using Docker
+
+Run the pre-built image from GitHub Container Registry:
+
+```bash
+docker run -p 4000:4000 -e SECRET_KEY="your-secret-key" ghcr.io/authlib/auth-playground:latest
+```
+
+Or build locally:
+
+```bash
+docker build -t auth-playground .
+docker run -p 4000:4000 -e SECRET_KEY="your-secret-key" auth-playground
+```
+
+## Configuration
+
+The application is configured using environment variables. Copy the example configuration file:
+
+```bash
+cp example.env .env
+```
+
+Edit `.env` and set the required values:
+
+```bash
+# Required
+export SECRET_KEY="your-secret-key"
+
+# Optional
+export OAUTH_CLIENT_ID="your-client-id"
+export OAUTH_CLIENT_SECRET="your-client-secret"
+export OAUTH_AUTH_SERVER="https://your-identity-provider.example.com"
+```
+
+### Registering with your Identity Provider
+
+When registering this application with your identity provider, configure the following redirect URIs:
+
+```
+http://localhost:4000/login_callback
+http://localhost:4000/logout_callback
+```
+
+## Usage
+
+```bash
+auth-playground
+```
+
+The application will be available at `http://localhost:4000`
+
+## Development
+
+### Running Tests
+
+```bash
+uv run pytest
+```
+
+### Code Style
+
+```bash
+uv run prek run --all-files
+```

auth_playground-0.0.1/README.md

@@ -0,0 +1,89 @@
+# Auth Playground
+
+[![Tests](https://github.com/authlib/auth-playground/actions/workflows/tests.yaml/badge.svg)](https://github.com/authlib/auth-playground/actions/workflows/tests.yaml)
+[![Docker](https://github.com/authlib/auth-playground/actions/workflows/publish-docker.yaml/badge.svg)](https://github.com/authlib/auth-playground/actions/workflows/publish-docker.yaml)
+[![Docker Image](https://ghcr-badge.egpl.dev/authlib/auth-playground/latest_tag?trim=major&label=latest)](https://github.com/authlib/auth-playground/pkgs/container/auth-playground)
+
+A demonstration OAuth2 / OpenID Connect (OIDC) client application built with [Authlib](https://authlib.org).
+This project illustrates how to integrate with an identity provider for user authentication, registration, and consent management.
+It can be used to play with the different interactions between clients and server, or debug a server implementation.
+
+## Installation
+
+### Using pip
+
+```bash
+pip install auth-playground
+```
+
+### Using uv
+
+```bash
+uv add auth-playground
+```
+
+### Using Docker
+
+Run the pre-built image from GitHub Container Registry:
+
+```bash
+docker run -p 4000:4000 -e SECRET_KEY="your-secret-key" ghcr.io/authlib/auth-playground:latest
+```
+
+Or build locally:
+
+```bash
+docker build -t auth-playground .
+docker run -p 4000:4000 -e SECRET_KEY="your-secret-key" auth-playground
+```
+
+## Configuration
+
+The application is configured using environment variables. Copy the example configuration file:
+
+```bash
+cp example.env .env
+```
+
+Edit `.env` and set the required values:
+
+```bash
+# Required
+export SECRET_KEY="your-secret-key"
+
+# Optional
+export OAUTH_CLIENT_ID="your-client-id"
+export OAUTH_CLIENT_SECRET="your-client-secret"
+export OAUTH_AUTH_SERVER="https://your-identity-provider.example.com"
+```
+
+### Registering with your Identity Provider
+
+When registering this application with your identity provider, configure the following redirect URIs:
+
+```
+http://localhost:4000/login_callback
+http://localhost:4000/logout_callback
+```
+
+## Usage
+
+```bash
+auth-playground
+```
+
+The application will be available at `http://localhost:4000`
+
+## Development
+
+### Running Tests
+
+```bash
+uv run pytest
+```
+
+### Code Style
+
+```bash
+uv run prek run --all-files
+```