cardo-python-utils 0.5.dev25__tar.gz → 0.5.dev27__tar.gz

{cardo_python_utils-0.5.dev25/cardo_python_utils.egg-info → cardo_python_utils-0.5.dev27}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev25
+Version: 0.5.dev27
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT

{cardo_python_utils-0.5.dev25 → cardo_python_utils-0.5.dev27/cardo_python_utils.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev25
+Version: 0.5.dev27
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT

{cardo_python_utils-0.5.dev25 → cardo_python_utils-0.5.dev27}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cardo-python-utils"
-version = "0.5.dev25"
+version = "0.5.dev27"
 description = "Python library enhanced with a wide range of functions for different scenarios."
 readme = "README.rst"
 requires-python = ">=3.8"

{cardo_python_utils-0.5.dev25 → cardo_python_utils-0.5.dev27}/python_utils/keycloak/django/admin/auth.py

@@ -6,15 +6,18 @@ from ...utils import get_keycloak_confidential_client_token
 
 class AdminAuthenticationBackend(OIDCAuthenticationBackend):
     def get_token(self, payload):
-        return get_keycloak_confidential_client_token()
+        # Instead of passing client_id and client_secret,
+        # client_assertion with service account token will be used
+        payload.pop("client_id", None)
+        payload.pop("client_secret", None)
+
+        return get_keycloak_confidential_client_token(**payload)
 
     def _get_user_data(self, claims) -> dict:
         client_roles = (
-            claims.get("resource_access", {})
-            .get(getattr(settings, "OIDC_RP_CLIENT_ID", ""), {})
-            .get("roles", [])
+            claims.get("resource_access", {}).get(getattr(settings, "OIDC_RP_CLIENT_ID", ""), {}).get("roles", [])
         )
-        is_superuser = "Admin" in client_roles
+        is_superuser = "AdminPanel" in client_roles
 
         return {
             "username": claims.get("preferred_username"),

{cardo_python_utils-0.5.dev25 → cardo_python_utils-0.5.dev27}/python_utils/keycloak/utils.py

@@ -31,17 +31,19 @@ def get_confidential_client_service_account_token() -> str:
     return token
 
 
-def get_keycloak_confidential_client_token() -> dict:
+def get_keycloak_confidential_client_token(**kwargs) -> dict:
     """
     Obtains token for a Keycloak confidential client with the client credentials grant,
     using a service account token for authentication.
     """
+
     response = requests.post(
         KEYCLOAK_TOKEN_ENDPOINT,
         data={
             "grant_type": KEYCLOAK_CLIENT_CREDENTIALS_GRANT_TYPE,
             "client_assertion_type": KEYCLOAK_CLIENT_ASSERTION_TYPE,
             "client_assertion": get_confidential_client_service_account_token(),
+            **kwargs,
         },
     )
     response.raise_for_status()