fastapi-commons 0.8.4__tar.gz → 0.8.6__tar.gz

fastapi_commons-0.8.6/AUTHORS.md

@@ -0,0 +1,3 @@
+# Contributors
+
+- Oleg Korsak <kamikaze.is.waiting.you@gmail.com>

fastapi_commons-0.8.4/CHANGELOG.rst → fastapi_commons-0.8.6/CHANGELOG.md

@@ -1,14 +1,9 @@
-=========
-Changelog
-=========
+# Changelog
 
-Version 0.1.0
-=============
+## Version 0.1.0
 
 - Breaking change: made absolute path generation for object storage to be optional.
 
-
-Version 0.0.1
-=============
+## Version 0.0.1
 
 - Initial commit

fastapi_commons-0.8.6/PKG-INFO

@@ -0,0 +1,212 @@
+Metadata-Version: 2.4
+Name: fastapi-commons
+Version: 0.8.6
+Summary: Re-usable FastAPI code
+Keywords: 
+Author: Oleg Korsak
+Author-email: Oleg Korsak <kamikaze.is.waiting.you@gmail.com>
+License-Expression: GPL-3.0-only
+License-File: AUTHORS.md
+License-File: LICENSE
+Classifier: Development Status :: 4 - Beta
+Classifier: Programming Language :: Python
+Requires-Dist: aiohttp[speedups]>=3.14.3,<3.15.0
+Requires-Dist: asyncpg~=0.31.0
+Requires-Dist: fastapi~=0.141.1
+Requires-Dist: msgspec~=0.21.1
+Requires-Dist: pydantic[email]~=2.13.5
+Requires-Dist: pydantic-settings~=2.15.0
+Requires-Dist: python-jose~=3.5.0
+Requires-Dist: sqlalchemy[asyncio]~=2.1.1
+Requires-Dist: opentelemetry-api~=1.45.0
+Requires-Dist: opentelemetry-sdk~=1.45.0
+Requires-Dist: opentelemetry-exporter-otlp~=1.45.0
+Requires-Dist: opentelemetry-instrumentation-fastapi~=0.65b0
+Requires-Dist: opentelemetry-instrumentation-logging~=0.65b0
+Requires-Dist: prometheus-client~=0.26.0
+Requires-Dist: python3-commons[authn]~=0.24.6
+Requires-Dist: starlette~=1.7.0
+Requires-Python: >=3.14.0, <3.15.0
+Project-URL: Homepage, https://github.com/kamikaze/fastapi-commons
+Project-URL: Documentation, https://github.com/kamikaze/fastapi-commons/wiki
+Description-Content-Type: text/markdown
+
+# fastapi-commons
+
+Common utilities, middleware, security, and observability helpers for production-ready [FastAPI](https://fastapi.tiangolo.com/) microservices.
+
+---
+
+## Overview
+
+`fastapi-commons` provides shared building blocks across FastAPI services to eliminate boilerplate. It integrates Prometheus metrics, OpenTelemetry distributed tracing, contextual logging with correlation IDs, OpenID Connect (OIDC) JWT and database API key authentication, and structured exception handling.
+
+---
+
+## Features
+
+### 1. Observability & Prometheus Metrics
+- **`PrometheusMiddleware`**: Tracks HTTP request counts, response statuses, in-progress requests, and request durations.
+  - Automatically resolves parameterized route templates (e.g. `/items/{id}` instead of `/items/123`) to prevent metric cardinality explosion.
+  - Supports OpenTelemetry trace exemplars on duration histograms to link metrics to traces.
+- **`metrics`**: Pre-configured route handler exposing metrics in OpenMetrics / Prometheus exposition format.
+- **Access log filtering**: Built-in `EndpointFilter` suppresses noisy `GET /metrics` access logs in Uvicorn.
+
+### 2. Distributed Tracing (OpenTelemetry)
+- **`setup_opentelemetry`**: One-line configuration for OpenTelemetry tracing.
+  - Configures `TracerProvider`, `Resource` attributes, and `BatchSpanProcessor` with an OTLP gRPC exporter.
+  - Instruments FastAPI endpoints and Python logging for trace correlation.
+
+### 3. Correlation ID & Contextual Logging
+- **`CorrelationIDMiddleware`**: Inspects or generates an `X-Correlation-ID` HTTP header, propagating it across request context and returning it in responses.
+- **`LogContextMiddleware`**: Captures client information (such as client IP, respecting `X-Forwarded-For`).
+- **`CorrelationIDFilter` & `LogContextFilter`**: Logging filters that inject correlation IDs and request context into Python log records.
+- **`SHARED_LOG_CONFIG`**: Standard log format containing timestamps, log levels, logger names, trace IDs, span IDs, and service names.
+
+### 4. Authentication & Authorization
+- **OIDC Token Verification (`get_token_verifier`)**:
+  - Validates Bearer JWT tokens against OpenID Connect (OIDC) JSON Web Key Sets (JWKS) via RS256.
+  - Deserializes and validates token claims into custom models using `msgspec`.
+  - Can be toggled via environment settings (`API_AUTH_ENABLED`).
+- **Database API Key Verification (`get_api_key_verifier`)**:
+  - FastAPI dependency for validating API keys from request headers against database records using SQLAlchemy async sessions.
+
+### 5. Exception Handling
+- **`@handle_exceptions`**: Decorator for endpoint functions and handlers that catches common application errors and maps them to standard HTTP exceptions:
+  - `PermissionError` $\to$ `401 Unauthorized`
+  - `LookupError` $\to$ `404 Not Found`
+  - `ValueError` $\to$ `400 Bad Request`
+  - `ConnectionRefusedError` $\to$ `503 Service Unavailable`
+  - `NotImplementedError` $\to$ `501 Not Implemented`
+  - `AppError` / `ValidationError` $\to$ `500 Internal Server Error`
+
+---
+
+## Installation
+
+Using `uv` (recommended):
+
+```bash
+uv add fastapi-commons
+```
+
+Or using `pip`:
+
+```bash
+pip install fastapi-commons
+```
+
+---
+
+## Usage Guide
+
+### Metrics & OpenTelemetry Setup
+
+```python
+from fastapi import FastAPI
+from fastapi_commons import PrometheusMiddleware, metrics, setup_opentelemetry
+
+app = FastAPI(title="My Service")
+
+# Setup OpenTelemetry tracing
+setup_opentelemetry(app, app_name="my-service")
+
+# Setup Prometheus metrics middleware and endpoint
+app.add_middleware(PrometheusMiddleware, app_name="my-service")
+app.add_route("/metrics", metrics)
+
+@app.get("/items/{item_id}")
+async def get_item(item_id: int):
+    return {"item_id": item_id}
+```
+
+### Correlation ID & Logging
+
+```python
+import logging
+from fastapi import FastAPI
+from fastapi_commons.middleware.correlation_id import CorrelationIDMiddleware
+from fastapi_commons.middleware.log_context import LogContextMiddleware
+from fastapi_commons.log.filters import CorrelationIDFilter, LogContextFilter
+
+app = FastAPI()
+
+# Add middlewares
+app.add_middleware(CorrelationIDMiddleware)
+app.add_middleware(LogContextMiddleware)
+
+# Attach filters to your log handlers
+handler = logging.StreamHandler()
+handler.addFilter(CorrelationIDFilter())
+handler.addFilter(LogContextFilter())
+logging.basicConfig(
+    level=logging.INFO,
+    format="%(asctime)s [%(correlation_id)s] [%(client_ip)s] %(message)s",
+    handlers=[handler],
+)
+```
+
+### OIDC Authentication
+
+```python
+from fastapi import Depends, FastAPI
+from python3_commons.auth import TokenData
+from fastapi_commons.auth import get_token_verifier
+
+app = FastAPI()
+
+class UserClaims(TokenData):
+    sub: str
+    email: str | None = None
+
+verify_token = get_token_verifier(UserClaims)
+
+@app.get("/protected")
+async def protected_route(claims: UserClaims = Depends(verify_token)):
+    return {"message": f"Hello, {claims.sub}!"}
+```
+
+### Exception Handling Decorator
+
+```python
+from fastapi import FastAPI
+from fastapi_commons.handlers import handle_exceptions
+
+app = FastAPI()
+
+@app.get("/find/{item_id}")
+@handle_exceptions
+async def find_item(item_id: int):
+    if item_id < 0:
+        raise ValueError("Item ID must be positive")
+    if item_id == 404:
+        raise LookupError("Item not found")
+    return {"item_id": item_id}
+```
+
+---
+
+## Configuration
+
+Settings can be customized via environment variables:
+
+| Environment Variable | Default             | Description                                      |
+|----------------------|---------------------|--------------------------------------------------|
+| `API_AUTH_ENABLED`   | `true`              | Enable or disable API authentication enforcement |
+| `OTLP_GRPC_ENDPOINT` | `http://tempo:4317` | OpenTelemetry gRPC collector endpoint            |
+| `OIDC_AUTHORITY_URL` | -                   | OpenID Connect authority / issuer URL            |
+| `OIDC_CLIENT_ID`     | -                   | OpenID Connect client ID                         |
+| `OIDC_CLIENT_SECRET` | -                   | OpenID Connect client secret                     |
+| `OIDC_AUDIENCE`      | -                   | Expected token audience                          |
+| `OIDC_TIMEOUT`       | `10.0`              | OIDC HTTP request timeout (seconds)              |
+| `OIDC_VERIFY_CERT`   | `true`              | Verify TLS certificates for OIDC requests        |
+
+---
+
+## License
+
+This project is licensed under the GNU General Public License v3 (`GPL-3.0`). See [LICENSE](LICENSE) for details.
+
+## Contributors
+
+See [AUTHORS.md](AUTHORS.md).

fastapi_commons-0.8.6/README.md

@@ -0,0 +1,179 @@
+# fastapi-commons
+
+Common utilities, middleware, security, and observability helpers for production-ready [FastAPI](https://fastapi.tiangolo.com/) microservices.
+
+---
+
+## Overview
+
+`fastapi-commons` provides shared building blocks across FastAPI services to eliminate boilerplate. It integrates Prometheus metrics, OpenTelemetry distributed tracing, contextual logging with correlation IDs, OpenID Connect (OIDC) JWT and database API key authentication, and structured exception handling.
+
+---
+
+## Features
+
+### 1. Observability & Prometheus Metrics
+- **`PrometheusMiddleware`**: Tracks HTTP request counts, response statuses, in-progress requests, and request durations.
+  - Automatically resolves parameterized route templates (e.g. `/items/{id}` instead of `/items/123`) to prevent metric cardinality explosion.
+  - Supports OpenTelemetry trace exemplars on duration histograms to link metrics to traces.
+- **`metrics`**: Pre-configured route handler exposing metrics in OpenMetrics / Prometheus exposition format.
+- **Access log filtering**: Built-in `EndpointFilter` suppresses noisy `GET /metrics` access logs in Uvicorn.
+
+### 2. Distributed Tracing (OpenTelemetry)
+- **`setup_opentelemetry`**: One-line configuration for OpenTelemetry tracing.
+  - Configures `TracerProvider`, `Resource` attributes, and `BatchSpanProcessor` with an OTLP gRPC exporter.
+  - Instruments FastAPI endpoints and Python logging for trace correlation.
+
+### 3. Correlation ID & Contextual Logging
+- **`CorrelationIDMiddleware`**: Inspects or generates an `X-Correlation-ID` HTTP header, propagating it across request context and returning it in responses.
+- **`LogContextMiddleware`**: Captures client information (such as client IP, respecting `X-Forwarded-For`).
+- **`CorrelationIDFilter` & `LogContextFilter`**: Logging filters that inject correlation IDs and request context into Python log records.
+- **`SHARED_LOG_CONFIG`**: Standard log format containing timestamps, log levels, logger names, trace IDs, span IDs, and service names.
+
+### 4. Authentication & Authorization
+- **OIDC Token Verification (`get_token_verifier`)**:
+  - Validates Bearer JWT tokens against OpenID Connect (OIDC) JSON Web Key Sets (JWKS) via RS256.
+  - Deserializes and validates token claims into custom models using `msgspec`.
+  - Can be toggled via environment settings (`API_AUTH_ENABLED`).
+- **Database API Key Verification (`get_api_key_verifier`)**:
+  - FastAPI dependency for validating API keys from request headers against database records using SQLAlchemy async sessions.
+
+### 5. Exception Handling
+- **`@handle_exceptions`**: Decorator for endpoint functions and handlers that catches common application errors and maps them to standard HTTP exceptions:
+  - `PermissionError` $\to$ `401 Unauthorized`
+  - `LookupError` $\to$ `404 Not Found`
+  - `ValueError` $\to$ `400 Bad Request`
+  - `ConnectionRefusedError` $\to$ `503 Service Unavailable`
+  - `NotImplementedError` $\to$ `501 Not Implemented`
+  - `AppError` / `ValidationError` $\to$ `500 Internal Server Error`
+
+---
+
+## Installation
+
+Using `uv` (recommended):
+
+```bash
+uv add fastapi-commons
+```
+
+Or using `pip`:
+
+```bash
+pip install fastapi-commons
+```
+
+---
+
+## Usage Guide
+
+### Metrics & OpenTelemetry Setup
+
+```python
+from fastapi import FastAPI
+from fastapi_commons import PrometheusMiddleware, metrics, setup_opentelemetry
+
+app = FastAPI(title="My Service")
+
+# Setup OpenTelemetry tracing
+setup_opentelemetry(app, app_name="my-service")
+
+# Setup Prometheus metrics middleware and endpoint
+app.add_middleware(PrometheusMiddleware, app_name="my-service")
+app.add_route("/metrics", metrics)
+
+@app.get("/items/{item_id}")
+async def get_item(item_id: int):
+    return {"item_id": item_id}
+```
+
+### Correlation ID & Logging
+
+```python
+import logging
+from fastapi import FastAPI
+from fastapi_commons.middleware.correlation_id import CorrelationIDMiddleware
+from fastapi_commons.middleware.log_context import LogContextMiddleware
+from fastapi_commons.log.filters import CorrelationIDFilter, LogContextFilter
+
+app = FastAPI()
+
+# Add middlewares
+app.add_middleware(CorrelationIDMiddleware)
+app.add_middleware(LogContextMiddleware)
+
+# Attach filters to your log handlers
+handler = logging.StreamHandler()
+handler.addFilter(CorrelationIDFilter())
+handler.addFilter(LogContextFilter())
+logging.basicConfig(
+    level=logging.INFO,
+    format="%(asctime)s [%(correlation_id)s] [%(client_ip)s] %(message)s",
+    handlers=[handler],
+)
+```
+
+### OIDC Authentication
+
+```python
+from fastapi import Depends, FastAPI
+from python3_commons.auth import TokenData
+from fastapi_commons.auth import get_token_verifier
+
+app = FastAPI()
+
+class UserClaims(TokenData):
+    sub: str
+    email: str | None = None
+
+verify_token = get_token_verifier(UserClaims)
+
+@app.get("/protected")
+async def protected_route(claims: UserClaims = Depends(verify_token)):
+    return {"message": f"Hello, {claims.sub}!"}
+```
+
+### Exception Handling Decorator
+
+```python
+from fastapi import FastAPI
+from fastapi_commons.handlers import handle_exceptions
+
+app = FastAPI()
+
+@app.get("/find/{item_id}")
+@handle_exceptions
+async def find_item(item_id: int):
+    if item_id < 0:
+        raise ValueError("Item ID must be positive")
+    if item_id == 404:
+        raise LookupError("Item not found")
+    return {"item_id": item_id}
+```
+
+---
+
+## Configuration
+
+Settings can be customized via environment variables:
+
+| Environment Variable | Default             | Description                                      |
+|----------------------|---------------------|--------------------------------------------------|
+| `API_AUTH_ENABLED`   | `true`              | Enable or disable API authentication enforcement |
+| `OTLP_GRPC_ENDPOINT` | `http://tempo:4317` | OpenTelemetry gRPC collector endpoint            |
+| `OIDC_AUTHORITY_URL` | -                   | OpenID Connect authority / issuer URL            |
+| `OIDC_CLIENT_ID`     | -                   | OpenID Connect client ID                         |
+| `OIDC_CLIENT_SECRET` | -                   | OpenID Connect client secret                     |
+| `OIDC_AUDIENCE`      | -                   | Expected token audience                          |
+| `OIDC_TIMEOUT`       | `10.0`              | OIDC HTTP request timeout (seconds)              |
+| `OIDC_VERIFY_CERT`   | `true`              | Verify TLS certificates for OIDC requests        |
+
+---
+
+## License
+
+This project is licensed under the GNU General Public License v3 (`GPL-3.0`). See [LICENSE](LICENSE) for details.
+
+## Contributors
+
+See [AUTHORS.md](AUTHORS.md).

fastapi_commons-0.8.6/pyproject.toml

@@ -0,0 +1,170 @@
+[build-system]
+requires = ["uv_build>=0.12.18,<0.13.0"]
+build-backend = "uv_build"
+
+[project]
+name = "fastapi-commons"
+version = "0.8.6"
+description = "Re-usable FastAPI code"
+license = "GPL-3.0-only"
+license-files = [
+    "LICENSE",
+    "AUTHORS.md",
+]
+readme = "README.md"
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Programming Language :: Python",
+]
+keywords = []
+requires-python = ">=3.14.0,<3.15.0"
+dependencies = [
+    "aiohttp[speedups]>=3.14.3,<3.15.0",
+    "asyncpg~=0.31.0",
+    "fastapi~=0.141.1",
+    "msgspec~=0.21.1",
+    "pydantic[email]~=2.13.5",
+    "pydantic-settings~=2.15.0",
+    "python-jose~=3.5.0",
+    "SQLAlchemy[asyncio]~=2.1.1",
+    "opentelemetry-api~=1.45.0",
+    "opentelemetry-sdk~=1.45.0",
+    "opentelemetry-exporter-otlp~=1.45.0",
+    "opentelemetry-instrumentation-fastapi~=0.65b0",
+    "opentelemetry-instrumentation-logging~=0.65b0",
+    "prometheus-client~=0.26.0",
+    "python3-commons[authn]~=0.24.6",
+    "starlette~=1.7.0",
+]
+
+[[project.authors]]
+name = "Oleg Korsak"
+email = "kamikaze.is.waiting.you@gmail.com"
+
+[project.urls]
+Homepage = "https://github.com/kamikaze/fastapi-commons"
+Documentation = "https://github.com/kamikaze/fastapi-commons/wiki"
+
+[dependency-groups]
+dev = [
+    "pre-commit",
+    "pyright",
+    "ruff",
+    "ty",
+    "types-aiobotocore-s3",
+]
+testing = [
+    "pytest",
+    "pytest-asyncio",
+    "pytest-cov",
+    "pytest-mock",
+]
+
+[tool.uv.build-backend]
+source-include = [
+    "CHANGELOG.md",
+    "tests/**",
+]
+
+[tool.ruff]
+line-length = 120
+indent-width = 4
+target-version = "py314"
+
+[tool.ruff.analyze]
+detect-string-imports = true
+
+[tool.ruff.lint]
+select = [
+    "A",
+    "ANN",
+    "ARG",
+    "ASYNC",
+    "B",
+    "C4",
+    "DTZ",
+    "E",
+    "EM",
+    "EXE",
+    "F",
+    "FA",
+    "FAST",
+    "FBT",
+    "FLY",
+    "FURB",
+    "G",
+    "I",
+    "ICN",
+    "INP",
+    "ISC",
+    "LOG",
+    "N",
+    "NPY",
+    "PD",
+    "PERF",
+    "PIE",
+    "PLC",
+    "PLE",
+    "PLR",
+    "PLW",
+    "PT",
+    "PTH",
+    "PYI",
+    "Q",
+    "RET",
+    "RSE",
+    "RUF",
+    "S",
+    "SIM",
+    "SLF",
+    "SLOT",
+    "T20",
+    "TC",
+    "TID",
+    "TRY",
+    "UP",
+    "W",
+    "YTT",
+]
+ignore = [
+    "TC001",
+    "TC002",
+    "TC003",
+]
+
+[tool.ruff.lint.per-file-ignores]
+"tests/*.py" = [
+    "DTZ",
+    "S101",
+]
+
+[tool.ruff.lint.flake8-quotes]
+docstring-quotes = "double"
+inline-quotes = "single"
+
+[tool.ruff.format]
+exclude = ["*.pyi"]
+indent-style = "space"
+quote-style = "single"
+
+[tool.pyright]
+pythonVersion = "3.14"
+venvPath = "."
+venv = ".venv"
+reportMatchNotExhaustive = "error"
+reportUnnecessaryComparison = "error"
+
+[tool.ty.rules]
+unknown-argument = "ignore"
+
+[tool.pytest.ini_options]
+pythonpath = ["src"]
+asyncio_mode = "strict"
+asyncio_default_fixture_loop_scope = "function"
+addopts = "--cov fastapi_commons --cov-fail-under=0 --cov-report term-missing --verbose"
+norecursedirs = [
+    "dist",
+    "build",
+    ".tox",
+]
+testpaths = ["tests"]

fastapi_commons-0.8.4/pyproject.toml → fastapi_commons-0.8.6/pyproject.toml.orig

@@ -1,16 +1,17 @@
 [build-system]
-requires = ["setuptools", "wheel", "setuptools_scm"]
-build-backend = "setuptools.build_meta"
+requires = ["uv_build>=0.12.18,<0.13.0"]
+build-backend = "uv_build"
 
 [project]
 name = "fastapi-commons"
-dynamic = ["version"]
+version = "0.8.6"
 description = "Re-usable FastAPI code"
 authors = [
     { name = "Oleg Korsak", email = "kamikaze.is.waiting.you@gmail.com" }
 ]
-license = "GPL-3.0"
-readme = { file = "README.rst", content-type = "text/x-rst" }
+license = "GPL-3.0-only"
+license-files = ["LICENSE", "AUTHORS.md"]
+readme = "README.md"
 classifiers = [
     "Development Status :: 4 - Beta",
     "Programming Language :: Python"
@@ -22,32 +23,27 @@ dependencies = [
     "asyncpg~=0.31.0",
     "fastapi~=0.141.1",
     "msgspec~=0.21.1",
-    "pydantic[email]~=2.13.4",
+    "pydantic[email]~=2.13.5",
     "pydantic-settings~=2.15.0",
     "python-jose~=3.5.0",
-    "SQLAlchemy[asyncio]~=2.0.52",
-    "opentelemetry-api~=1.44.0",
-    "opentelemetry-sdk~=1.44.0",
-    "opentelemetry-exporter-otlp~=1.44.0",
+    "SQLAlchemy[asyncio]~=2.1.1",
+    "opentelemetry-api~=1.45.0",
+    "opentelemetry-sdk~=1.45.0",
+    "opentelemetry-exporter-otlp~=1.45.0",
     "opentelemetry-instrumentation-fastapi~=0.65b0",
     "opentelemetry-instrumentation-logging~=0.65b0",
     "prometheus-client~=0.26.0",
-    "python3-commons[authn]~=0.24.5",
-    "starlette~=1.6.0",
+    "python3-commons[authn]~=0.24.6",
+    "starlette~=1.7.0",
 ]
 
 [dependency-groups]
 dev = [
-    "build",
-    "pip",
     "pre-commit",
     "pyright",
     "ruff",
-    "setuptools",
-    "setuptools_scm",
     "ty",
     "types-aiobotocore-s3",
-    "wheel",
 ]
 testing = [
     "pytest",
@@ -60,14 +56,9 @@ testing = [
 Homepage = "https://github.com/kamikaze/fastapi-commons"
 Documentation = "https://github.com/kamikaze/fastapi-commons/wiki"
 
-[tool.setuptools.packages.find]
-where = ["src"]
-exclude = ["tests"]
+[tool.uv.build-backend]
+source-include = ["CHANGELOG.md", "tests/**"]
 
-[tool.setuptools_scm]
-
-[tool.bdist_wheel]
-universal = true
 
 [tool.ruff]
 line-length = 120

fastapi_commons-0.8.4/.coveragerc

@@ -1,28 +0,0 @@
-# .coveragerc to control coverage.py
-[run]
-branch = True
-source = fastapi_commons
-# omit = bad_file.py
-
-[paths]
-source =
-    src/
-    */site-packages/
-
-[report]
-# Regexes for lines to exclude from consideration
-exclude_lines =
-    # Have to re-enable the standard pragma
-    pragma: no cover
-
-    # Don't complain about missing debug-only code:
-    def __repr__
-    if self\.debug
-
-    # Don't complain if tests don't hit defensive assertion code:
-    raise AssertionError
-    raise NotImplementedError
-
-    # Don't complain if non-runnable code isn't run:
-    if 0:
-    if __name__ == .__main__.:

fastapi_commons-0.8.4/.env_template

@@ -1,7 +0,0 @@
-LOGGING_LEVEL=DEBUG
-
-API_AUTH_ENABLED=false
-OIDC_AUTHORITY_URL=https://oidc.provider.com/auth
-OIDC_CLIENT_ID=12345-54321
-#OIDC_REDIRECT_URI=
-#OIDC_SCOPES=openid,profile,email