pas.plugins.oidc 2.0.0b1__tar.gz → 2.0.0b3__tar.gz

{pas.plugins.oidc-2.0.0b1 → pas.plugins.oidc-2.0.0b3}/CHANGES.md

@@ -9,6 +9,33 @@
 
 <!-- towncrier release notes start -->
 
+## 2.0.0b3 (2025-02-03)
+
+
+### New features:
+
+- Register the adapter as needed by the @login endpoint present in plone.restapi @erral [#47](https://github.com/collective/pas.plugins.oidc/issues/47)
+
+
+### Internal:
+
+- Bump plone.restapi to 9.10.0 [@ericof]
+
+
+## 2.0.0b2 (2024-12-09)
+
+
+### New features:
+
+- Update the Deutsch translation [macagua] [#60](https://github.com/collective/pas.plugins.oidc/issues/60)
+- Implement control panel to configure pas.plugins.oidc [@ericof] [#65](https://github.com/collective/pas.plugins.oidc/issues/65)
+
+
+### Documentation:
+
+- Fixed port numbers on README file [macagua] [#51](https://github.com/collective/pas.plugins.oidc/issues/51)
+
+
 ## 2.0.0b1 (2024-06-25)
 
 

{pas.plugins.oidc-2.0.0b1 → pas.plugins.oidc-2.0.0b3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pas.plugins.oidc
-Version: 2.0.0b1
+Version: 2.0.0b3
 Summary: OIDC support for Plone sites
 Home-page: https://github.com/collective/pas.plugins.oidc
 Author: mamico
@@ -31,10 +31,13 @@ Requires-Dist: Plone
 Requires-Dist: Zope
 Requires-Dist: Products.CMFCore
 Requires-Dist: plone.api
+Requires-Dist: plone.app.registry
 Requires-Dist: plone.base
 Requires-Dist: plone.protect
-Requires-Dist: plone.restapi>=8.34.0
+Requires-Dist: plone.restapi>=9.10.0
 Requires-Dist: oic
+Requires-Dist: requests
+Requires-Dist: z3c.form
 Provides-Extra: test
 Requires-Dist: zope.pytestlayer; extra == "test"
 Requires-Dist: plone.app.contenttypes; extra == "test"
@@ -86,11 +89,11 @@ OAuth 2.0 should work as well because OpenID Connect is built on top of this pro
 
 ### Group Enumeration
 
-If you need to support group enumeration from a Keycloak server, we recommend installing the package `[pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/)`.
+If you need to support group enumeration from a Keycloak server, we recommend installing the package [pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/).
 
 ## Installation
 
-This package supports Plone sites using Volto and ClassicUI.
+This package supports Plone sites using Volto and Classic UI.
 
 For proper Volto support, the requirements are:
 
@@ -218,9 +221,9 @@ So, for Keycloak, it does not matter if we use the default or legacy mode if the
 *Notes:*
 
 * If legacy `redirect_uri` parameter is disabled in Keycloak, this is the default since version 18 of Keycloak according
-  to this comment in *Starck Overflow*: https://stackoverflow.com/a/72142887.
+  to this comment in *Stack Overflow*: https://stackoverflow.com/a/72142887.
 * The plugin will work only if the `Use deprecated redirect_uri for logout url(/Plone/acl_users/oidc/logout)`
-  option is un-checked at the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm.
+  option is un-checked at the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm.
 
 #### Additional Documentation
 
@@ -232,9 +235,9 @@ Specifically, here we will use a Docker image, so follow the instructions on how
 * Make sure **pas.plugins.oidc** is installed.
 * Start Plone and create a Plone site with id Plone.
 * In the Add-ons control panel, install `pas.plugins.oidc`.
-* In the ZMI go to the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm
+* In the ZMI go to the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm
 * Set these properties:
-  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8081/realms/plone/
+  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8180/realms/plone/
   * `Client ID`: *plone* (**Warning:** This property must match the `Client ID` you have set in Keycloak.)
   * `Client secret`: *12345678* (**Warning:** This property must match the `Client secret` you have get in Keycloak.)
   * `Use deprecated redirect_uri for logout url` checked. Use this if you need to run old versions of Keycloak.
@@ -252,10 +255,10 @@ See this screenshot:
 
 #### Login
 
-Go to the other browser, or logout as admin from [Keycloak Admin Console](http://localhost:8080/admin).
+Go to the other browser, or logout as admin from [Keycloak Admin Console](http://127.0.0.1:8180/admin).
 Currently, the Plone login form is unchanged.
 
-Instead, for testing go to the login page of the plugin: http://localhost:8081/Plone/acl_users/oidc/login,
+Instead, for testing go to the login page of the plugin: http://localhost:8080/Plone/acl_users/oidc/login,
 this will take you to Keycloak to login, and then return. You should now be logged in to Plone, and see the
 *full name* and *email*, if you have set this in Keycloak.
 
@@ -264,7 +267,7 @@ this will take you to Keycloak to login, and then return. You should now be logg
 If the login did work as expected you can try to Plone logout.
 Currently, the Plone logout form is unchanged.
 
-Instead, for testing go to the logout page of the plugin: http://localhost:8081/Plone/acl_users/oidc/logout,
+Instead, for testing go to the logout page of the plugin: http://localhost:8080/Plone/acl_users/oidc/logout,
 this will take you to Keycloak to logout, and then return to the post-logout redirect URL.
 
 ## Technical Decisions
@@ -277,8 +280,8 @@ and comes back from there.
 The plugin has 2 ways of working with sessions:
 
 - Use the Zope Session Management: if the `Use Zope session data manager` option in the plugin configuration is enabled,
-  the plugin will use the sessioning configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
-  to save the session data in a memcached based storage. Otherwise Zope will try to use ZODB based sessioning
+  the plugin will use the session configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
+  to save the session data in a memcached based storage. Otherwise, Zope will try to use a ZODB-based session
   which has shown several problems in the past.
 
 - Use the cookie-based session management: if the `Use Zope session data manager` option in the plugin
@@ -408,6 +411,33 @@ The project is licensed under the GPLv2.
 
 <!-- towncrier release notes start -->
 
+## 2.0.0b3 (2025-02-03)
+
+
+### New features:
+
+- Register the adapter as needed by the @login endpoint present in plone.restapi @erral [#47](https://github.com/collective/pas.plugins.oidc/issues/47)
+
+
+### Internal:
+
+- Bump plone.restapi to 9.10.0 [@ericof]
+
+
+## 2.0.0b2 (2024-12-09)
+
+
+### New features:
+
+- Update the Deutsch translation [macagua] [#60](https://github.com/collective/pas.plugins.oidc/issues/60)
+- Implement control panel to configure pas.plugins.oidc [@ericof] [#65](https://github.com/collective/pas.plugins.oidc/issues/65)
+
+
+### Documentation:
+
+- Fixed port numbers on README file [macagua] [#51](https://github.com/collective/pas.plugins.oidc/issues/51)
+
+
 ## 2.0.0b1 (2024-06-25)
 
 

{pas.plugins.oidc-2.0.0b1 → pas.plugins.oidc-2.0.0b3}/README.md

@@ -32,11 +32,11 @@ OAuth 2.0 should work as well because OpenID Connect is built on top of this pro
 
 ### Group Enumeration
 
-If you need to support group enumeration from a Keycloak server, we recommend installing the package `[pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/)`.
+If you need to support group enumeration from a Keycloak server, we recommend installing the package [pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/).
 
 ## Installation
 
-This package supports Plone sites using Volto and ClassicUI.
+This package supports Plone sites using Volto and Classic UI.
 
 For proper Volto support, the requirements are:
 
@@ -164,9 +164,9 @@ So, for Keycloak, it does not matter if we use the default or legacy mode if the
 *Notes:*
 
 * If legacy `redirect_uri` parameter is disabled in Keycloak, this is the default since version 18 of Keycloak according
-  to this comment in *Starck Overflow*: https://stackoverflow.com/a/72142887.
+  to this comment in *Stack Overflow*: https://stackoverflow.com/a/72142887.
 * The plugin will work only if the `Use deprecated redirect_uri for logout url(/Plone/acl_users/oidc/logout)`
-  option is un-checked at the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm.
+  option is un-checked at the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm.
 
 #### Additional Documentation
 
@@ -178,9 +178,9 @@ Specifically, here we will use a Docker image, so follow the instructions on how
 * Make sure **pas.plugins.oidc** is installed.
 * Start Plone and create a Plone site with id Plone.
 * In the Add-ons control panel, install `pas.plugins.oidc`.
-* In the ZMI go to the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm
+* In the ZMI go to the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm
 * Set these properties:
-  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8081/realms/plone/
+  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8180/realms/plone/
   * `Client ID`: *plone* (**Warning:** This property must match the `Client ID` you have set in Keycloak.)
   * `Client secret`: *12345678* (**Warning:** This property must match the `Client secret` you have get in Keycloak.)
   * `Use deprecated redirect_uri for logout url` checked. Use this if you need to run old versions of Keycloak.
@@ -198,10 +198,10 @@ See this screenshot:
 
 #### Login
 
-Go to the other browser, or logout as admin from [Keycloak Admin Console](http://localhost:8080/admin).
+Go to the other browser, or logout as admin from [Keycloak Admin Console](http://127.0.0.1:8180/admin).
 Currently, the Plone login form is unchanged.
 
-Instead, for testing go to the login page of the plugin: http://localhost:8081/Plone/acl_users/oidc/login,
+Instead, for testing go to the login page of the plugin: http://localhost:8080/Plone/acl_users/oidc/login,
 this will take you to Keycloak to login, and then return. You should now be logged in to Plone, and see the
 *full name* and *email*, if you have set this in Keycloak.
 
@@ -210,7 +210,7 @@ this will take you to Keycloak to login, and then return. You should now be logg
 If the login did work as expected you can try to Plone logout.
 Currently, the Plone logout form is unchanged.
 
-Instead, for testing go to the logout page of the plugin: http://localhost:8081/Plone/acl_users/oidc/logout,
+Instead, for testing go to the logout page of the plugin: http://localhost:8080/Plone/acl_users/oidc/logout,
 this will take you to Keycloak to logout, and then return to the post-logout redirect URL.
 
 ## Technical Decisions
@@ -223,8 +223,8 @@ and comes back from there.
 The plugin has 2 ways of working with sessions:
 
 - Use the Zope Session Management: if the `Use Zope session data manager` option in the plugin configuration is enabled,
-  the plugin will use the sessioning configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
-  to save the session data in a memcached based storage. Otherwise Zope will try to use ZODB based sessioning
+  the plugin will use the session configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
+  to save the session data in a memcached based storage. Otherwise, Zope will try to use a ZODB-based session
   which has shown several problems in the past.
 
 - Use the cookie-based session management: if the `Use Zope session data manager` option in the plugin

{pas.plugins.oidc-2.0.0b1 → pas.plugins.oidc-2.0.0b3}/setup.py

@@ -14,7 +14,7 @@ long_description = f"""
 
 setup(
     name="pas.plugins.oidc",
-    version="2.0.0b1",
+    version="2.0.0b3",
     description="OIDC support for Plone sites",
     long_description=long_description,
     long_description_content_type="text/markdown",
@@ -56,10 +56,13 @@ setup(
         "Zope",
         "Products.CMFCore",
         "plone.api",
+        "plone.app.registry",
         "plone.base",
         "plone.protect",
-        "plone.restapi>=8.34.0",
+        "plone.restapi>=9.10.0",
         "oic",
+        "requests",
+        "z3c.form",
     ],
     extras_require={
         "test": [

{pas.plugins.oidc-2.0.0b1 → pas.plugins.oidc-2.0.0b3}/src/pas/plugins/oidc/configure.zcml

@@ -20,6 +20,7 @@
   <i18n:registerTranslations directory="locales" />
 
   <include package=".browser" />
+  <include package=".controlpanel" />
   <include package=".services" />
 
   <genericsetup:registerProfile
@@ -40,13 +41,7 @@
       post_handler=".setuphandlers.uninstall"
       />
 
-  <genericsetup:upgradeStep
-      title="Activate challenge plugin"
-      profile="pas.plugins.oidc:default"
-      source="1000"
-      destination="1001"
-      handler=".setuphandlers.activate_challenge_plugin"
-      />
+  <include package=".upgrades" />
 
   <utility
       factory=".setuphandlers.HiddenProfiles"

pas.plugins.oidc-2.0.0b3/src/pas/plugins/oidc/controlpanel/classic.py

@@ -0,0 +1,174 @@
+from pas.plugins.oidc import _
+from pas.plugins.oidc import PLUGIN_ID
+from pas.plugins.oidc.interfaces import IOIDCSettings
+from plone import api
+from plone.app.registry.browser import controlpanel
+from plone.base.interfaces import IPloneSiteRoot
+from zope.component import adapter
+from zope.interface import implementer
+
+
+@adapter(IPloneSiteRoot)
+@implementer(IOIDCSettings)
+class OIDCControlPanelAdapter:
+
+    def __init__(self, context):
+        self.context = context
+        self.portal = api.portal.get()
+        self.encoding = "utf-8"
+        self.settings = self.portal.acl_users[PLUGIN_ID]
+
+    @property
+    def issuer(self):
+        return self.settings.issuer
+
+    @issuer.setter
+    def issuer(self, value):
+        self.settings.issuer = value
+
+    @property
+    def client_id(self):
+        return self.settings.client_id
+
+    @client_id.setter
+    def client_id(self, value):
+        self.settings.client_id = value
+
+    @property
+    def client_secret(self):
+        return self.settings.client_secret
+
+    @client_secret.setter
+    def client_secret(self, value):
+        self.settings.client_secret = value
+
+    @property
+    def redirect_uris(self):
+        return self.settings.redirect_uris
+
+    @redirect_uris.setter
+    def redirect_uris(self, value):
+        self.settings.redirect_uris = value
+
+    @property
+    def use_session_data_manager(self):
+        return self.settings.use_session_data_manager
+
+    @use_session_data_manager.setter
+    def use_session_data_manager(self, value):
+        self.settings.use_session_data_manager = value
+
+    @property
+    def create_user(self):
+        return self.settings.create_user
+
+    @create_user.setter
+    def create_user(self, value):
+        self.settings.create_user = value
+
+    @property
+    def create_groups(self):
+        return self.settings.create_groups
+
+    @create_groups.setter
+    def create_groups(self, value):
+        self.settings.create_groups = value
+
+    @property
+    def user_property_as_groupid(self):
+        return self.settings.user_property_as_groupid
+
+    @user_property_as_groupid.setter
+    def user_property_as_groupid(self, value):
+        self.settings.user_property_as_groupid = value
+
+    @property
+    def create_ticket(self):
+        return self.settings.create_ticket
+
+    @create_ticket.setter
+    def create_ticket(self, value):
+        self.settings.create_ticket = value
+
+    @property
+    def create_restapi_ticket(self):
+        return self.settings.create_restapi_ticket
+
+    @create_restapi_ticket.setter
+    def create_restapi_ticket(self, value):
+        self.settings.create_restapi_ticket = value
+
+    @property
+    def scope(self):
+        return self.settings.scope
+
+    @scope.setter
+    def scope(self, value):
+        self.settings.scope = value
+
+    @property
+    def use_pkce(self):
+        return self.settings.use_pkce
+
+    @use_pkce.setter
+    def use_pkce(self, value):
+        self.settings.use_pkce = value
+
+    @property
+    def use_deprecated_redirect_uri_for_logout(self):
+        return self.settings.use_deprecated_redirect_uri_for_logout
+
+    @use_deprecated_redirect_uri_for_logout.setter
+    def use_deprecated_redirect_uri_for_logout(self, value):
+        self.settings.use_deprecated_redirect_uri_for_logout = value
+
+    @property
+    def use_modified_openid_schema(self):
+        return self.settings.use_modified_openid_schema
+
+    @use_modified_openid_schema.setter
+    def use_modified_openid_schema(self, value):
+        self.settings.use_modified_openid_schema = value
+
+    @property
+    def user_property_as_userid(self):
+        return self.settings.user_property_as_userid
+
+    @user_property_as_userid.setter
+    def user_property_as_userid(self, value):
+        self.settings.user_property_as_userid = value
+
+    @property
+    def identity_domain_name(self):
+        return self.settings.identity_domain_name
+
+    @identity_domain_name.setter
+    def identity_domain_name(self, value):
+        self.settings.identity_domain_name = value
+
+
+class OIDCSettingsForm(controlpanel.RegistryEditForm):
+    schema = IOIDCSettings
+    schema_prefix = "oidc_admin"
+    label = _("OIDC Plugin Settings")
+    description = ""
+
+    def getContent(self):
+        portal = api.portal.get()
+        return OIDCControlPanelAdapter(portal)
+
+    def applyChanges(self, data):
+        """See interfaces.IEditForm"""
+        content = self.getContent()
+        changes = {}
+        for name in data:
+            current = getattr(content, name)
+            value = data[name]
+            if current != value:
+                setattr(content, name, value)
+                changes.setdefault(IOIDCSettings, []).append(name)
+        return changes
+
+
+class OIDCSettingsControlPanel(controlpanel.ControlPanelFormWrapper):
+    form = OIDCSettingsForm

pas.plugins.oidc-2.0.0b3/src/pas/plugins/oidc/controlpanel/configure.zcml

@@ -0,0 +1,27 @@
+<configure
+    xmlns="http://namespaces.zope.org/zope"
+    xmlns:browser="http://namespaces.zope.org/browser"
+    i18n_domain="pas.plugins.oidc"
+    >
+
+  <!-- ClassicUI Control panel -->
+  <adapter factory=".classic.OIDCControlPanelAdapter" />
+  <browser:page
+      name="oidc-controlpanel"
+      for="Products.CMFPlone.interfaces.IPloneSiteRoot"
+      class=".classic.OIDCSettingsControlPanel"
+      permission="cmf.ManagePortal"
+      layer="pas.plugins.oidc.interfaces.IDefaultBrowserLayer"
+      />
+
+  <!-- Restapi Controlpanel -->
+  <adapter factory=".serializer.OIDCControlpanelSerializeToJson" />
+  <adapter factory=".deserializer.OIDCControlpanelDeserializeFromJson" />
+
+  <adapter
+      factory=".oidc.OIDCSettingsConfigletPanel"
+      provides="pas.plugins.oidc.interfaces.IOIDCControlpanel"
+      name="oidc_admin"
+      />
+
+</configure>

pas.plugins.oidc-2.0.0b3/src/pas/plugins/oidc/controlpanel/deserializer.py

@@ -0,0 +1,80 @@
+from pas.plugins.oidc import PLUGIN_ID
+from pas.plugins.oidc.interfaces import IOIDCControlpanel
+from plone import api
+from plone.restapi.deserializer import json_body
+from plone.restapi.deserializer.controlpanels import ControlpanelDeserializeFromJson
+from plone.restapi.deserializer.controlpanels import FakeDXContext
+from plone.restapi.interfaces import IDeserializeFromJson
+from plone.restapi.interfaces import IFieldDeserializer
+from z3c.form.interfaces import IManagerValidator
+from zExceptions import BadRequest
+from zope.component import adapter
+from zope.component import queryMultiAdapter
+from zope.interface import implementer
+from zope.interface.exceptions import Invalid
+from zope.schema import getFields
+from zope.schema.interfaces import ValidationError
+
+
+@implementer(IDeserializeFromJson)
+@adapter(IOIDCControlpanel)
+class OIDCControlpanelDeserializeFromJson(ControlpanelDeserializeFromJson):
+    @property
+    def proxy(self):
+        portal = api.portal.get()
+        plugin = portal.acl_users[PLUGIN_ID]
+        return plugin
+
+    def __call__(self, mask_validation_errors=True):
+        controlpanel = self.controlpanel
+        request = controlpanel.request
+        data = json_body(request)
+
+        proxy = self.proxy
+
+        schema_data = {}
+        errors = []
+
+        # Make a fake context
+        fake_context = FakeDXContext()
+
+        for name, field in getFields(self.schema).items():
+            field_data = schema_data.setdefault(self.schema, {})
+
+            if field.readonly:
+                continue
+
+            if name in data:
+                deserializer = queryMultiAdapter(
+                    (field, fake_context, request), IFieldDeserializer
+                )
+                try:
+                    # Make it sane
+                    value = deserializer(data[name])
+                    # Validate required etc
+                    field.validate(value)
+                    # Set the value.
+                    setattr(proxy, name, value)
+                except ValidationError as e:
+                    errors.append({"message": e.doc(), "field": name, "error": e})
+                except (ValueError, Invalid) as e:
+                    errors.append({"message": str(e), "field": name, "error": e})
+                else:
+                    field_data[name] = value
+
+        # Validate schemata
+        for schema, field_data in schema_data.items():
+            validator = queryMultiAdapter(
+                (self.context, request, None, schema, None), IManagerValidator
+            )
+            for error in validator.validate(field_data):
+                errors.append({"error": error, "message": str(error)})
+
+        if errors:
+            for error in errors:
+                if mask_validation_errors:
+                    # Drop Python specific error classes in order to
+                    # be able to better handle errors on front-end
+                    error["error"] = "ValidationError"
+                error["message"] = api.env.translate(error["message"], context=request)
+            raise BadRequest(errors)

pas.plugins.oidc-2.0.0b3/src/pas/plugins/oidc/controlpanel/oidc.py

@@ -0,0 +1,20 @@
+from pas.plugins.oidc import _
+from pas.plugins.oidc.interfaces import IDefaultBrowserLayer
+from pas.plugins.oidc.interfaces import IOIDCControlpanel
+from pas.plugins.oidc.interfaces import IOIDCSettings
+from plone.restapi.controlpanels import RegistryConfigletPanel
+from zope.component import adapter
+from zope.interface import implementer
+from zope.interface import Interface
+
+
+@adapter(Interface, IDefaultBrowserLayer)
+@implementer(IOIDCControlpanel)
+class OIDCSettingsConfigletPanel(RegistryConfigletPanel):
+    """Control Panel endpoint"""
+
+    schema = IOIDCSettings
+    configlet_id = "oidc_admin"
+    configlet_category_id = "plone-users"
+    title = _("OIDC settings")
+    group = ""

pas.plugins.oidc-2.0.0b3/src/pas/plugins/oidc/controlpanel/serializer.py

@@ -0,0 +1,45 @@
+from pas.plugins.oidc import PLUGIN_ID
+from pas.plugins.oidc.interfaces import IOIDCControlpanel
+from pas.plugins.oidc.plugins import OIDCPlugin
+from plone import api
+from plone.restapi.interfaces import ISerializeToJson
+from plone.restapi.serializer.controlpanels import ControlpanelSerializeToJson
+from plone.restapi.serializer.controlpanels import get_jsonschema_for_controlpanel
+from plone.restapi.serializer.controlpanels import SERVICE_ID
+from zope.component import adapter
+from zope.interface import implementer
+
+
+@implementer(ISerializeToJson)
+@adapter(IOIDCControlpanel)
+class OIDCControlpanelSerializeToJson(ControlpanelSerializeToJson):
+    def config_data(self) -> dict:
+        data = {}
+        portal = api.portal.get()
+        plugin = portal.acl_users[PLUGIN_ID]
+        properties = OIDCPlugin._properties
+        for prop in properties:
+            key = prop["id"]
+            data[key] = getattr(plugin, key, "")
+        return data
+
+    def __call__(self):
+        json_data = self.config_data()
+        controlpanel = self.controlpanel
+        context = controlpanel.context
+        request = controlpanel.request
+        url = context.absolute_url()
+        json_schema = get_jsonschema_for_controlpanel(
+            controlpanel,
+            context,
+            request,
+        )
+        response = {
+            "@id": f"{url}/{SERVICE_ID}/{controlpanel.__name__}",
+            "title": "OIDC settings",
+            "description": "Configure OIDC connection strings",
+            "group": controlpanel.group,
+            "data": json_data,
+            "schema": json_schema,
+        }
+        return response