phlo-oauth2-proxy 0.2.0__py3-none-any.whl

phlo_oauth2_proxy/__init__.py

@@ -0,0 +1 @@
+"""oauth2-proxy authentication gateway for Phlo."""

phlo_oauth2_proxy/plugin.py

@@ -0,0 +1,51 @@
+"""oauth2-proxy service plugin implementation."""
+
+from __future__ import annotations
+
+from phlo.plugins import PackageYamlServicePlugin, PluginMetadata
+
+
+class Oauth2ProxyServicePlugin(PackageYamlServicePlugin):
+    """Service plugin for oauth2-proxy authentication gateway.
+
+    This plugin provides integration with oauth2-proxy, an OAuth2/OIDC
+    authentication proxy that implements forward-auth with Traefik.
+    It reads service configuration from a bundled service.yaml file
+    and exposes standard Phlo plugin metadata.
+
+    Attributes:
+        None
+
+    Example:
+        >>> plugin = Oauth2ProxyServicePlugin()
+        >>> metadata = plugin.metadata
+        >>> print(metadata.name, metadata.version)
+        oauth2-proxy 0.1.0
+        >>> definition = plugin.service_definition
+
+    """
+
+    @property
+    def metadata(self) -> PluginMetadata:
+        """Return plugin metadata for the oauth2-proxy service.
+
+        Returns:
+            PluginMetadata: Plugin metadata containing name, version,
+                description, author, and tags.
+
+        Example:
+            >>> plugin = Oauth2ProxyServicePlugin()
+            >>> meta = plugin.metadata
+            >>> meta.name
+            'oauth2-proxy'
+            >>> meta.tags
+            ['auth', 'proxy', 'oidc']
+
+        """
+        return PluginMetadata(
+            name="oauth2-proxy",
+            version="0.1.0",
+            description="OAuth2/OIDC authentication proxy for Phlo services",
+            author="Phlo Team",
+            tags=["auth", "proxy", "oidc"],
+        )

phlo_oauth2_proxy/service.yaml

@@ -0,0 +1,63 @@
+name: oauth2-proxy
+description: OAuth2/OIDC authentication proxy for forward-auth with Traefik
+category: auth
+default: false
+profile: proxy
+
+image: quay.io/oauth2-proxy/oauth2-proxy:v7.7.1
+
+compose:
+  restart: unless-stopped
+  labels:
+    phlo.metrics.enabled: "false"
+  environment:
+    OAUTH2_PROXY_HTTP_ADDRESS: "0.0.0.0:4180"
+    OAUTH2_PROXY_REVERSE_PROXY: "true"
+    OAUTH2_PROXY_SET_XAUTHREQUEST: "true"
+    OAUTH2_PROXY_PASS_ACCESS_TOKEN: "false"
+    OAUTH2_PROXY_PROVIDER: "${OAUTH2_PROXY_PROVIDER:-oidc}"
+    OAUTH2_PROXY_OIDC_ISSUER_URL: "${OAUTH2_PROXY_OIDC_ISSUER_URL}"
+    OAUTH2_PROXY_CLIENT_ID: "${OAUTH2_PROXY_CLIENT_ID}"
+    OAUTH2_PROXY_CLIENT_SECRET: "${OAUTH2_PROXY_CLIENT_SECRET}"
+    OAUTH2_PROXY_COOKIE_SECRET: "${OAUTH2_PROXY_COOKIE_SECRET}"
+    OAUTH2_PROXY_COOKIE_SECURE: "${OAUTH2_PROXY_COOKIE_SECURE:-false}"
+    OAUTH2_PROXY_REDIRECT_URL: "${OAUTH2_PROXY_REDIRECT_URL:-http://api.phlo.localhost/oauth2/callback}"
+    OAUTH2_PROXY_EMAIL_DOMAINS: "${OAUTH2_PROXY_EMAIL_DOMAINS:-*}"
+    OAUTH2_PROXY_UPSTREAMS: "static://202"
+    OAUTH2_PROXY_SKIP_PROVIDER_BUTTON: "true"
+  healthcheck:
+    test:
+      [
+        "CMD",
+        "wget",
+        "--quiet",
+        "--tries=1",
+        "--spider",
+        "http://127.0.0.1:4180/ping",
+      ]
+    interval: 30s
+    timeout: 5s
+    retries: 3
+    start_period: 10s
+
+env_vars:
+  OAUTH2_PROXY_PROVIDER:
+    default: oidc
+    description: OAuth2 provider type (oidc, google, github, etc.)
+  OAUTH2_PROXY_OIDC_ISSUER_URL:
+    description: OIDC issuer URL (e.g., https://accounts.google.com)
+  OAUTH2_PROXY_CLIENT_ID:
+    description: OAuth2 client ID from your identity provider
+  OAUTH2_PROXY_CLIENT_SECRET:
+    description: OAuth2 client secret (store in .phlo/.env.local)
+  OAUTH2_PROXY_COOKIE_SECRET:
+    description: Random 32-byte base64 string for cookie encryption (generate with python -c "import secrets; print(secrets.token_urlsafe(32))")
+  OAUTH2_PROXY_COOKIE_SECURE:
+    default: "false"
+    description: Set to true when using HTTPS
+  OAUTH2_PROXY_REDIRECT_URL:
+    default: http://api.phlo.localhost/oauth2/callback
+    description: OAuth2 callback URL (must match IdP config)
+  OAUTH2_PROXY_EMAIL_DOMAINS:
+    default: "*"
+    description: Comma-separated list of allowed email domains (use * for any)

phlo_oauth2_proxy-0.2.0.dist-info/METADATA

@@ -0,0 +1,15 @@
+Metadata-Version: 2.4
+Name: phlo-oauth2-proxy
+Version: 0.2.0
+Summary: oauth2-proxy service plugin for Phlo
+Author-email: Phlo Team <team@phlo.dev>
+License: MIT
+Requires-Python: >=3.11
+Description-Content-Type: text/plain
+Requires-Dist: phlo>=0.1.0
+Requires-Dist: pyyaml>=6.0.1
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0; extra == "dev"
+Requires-Dist: ruff>=0.1.0; extra == "dev"
+
+oauth2-proxy authentication gateway service plugin for Phlo.

phlo_oauth2_proxy-0.2.0.dist-info/RECORD

@@ -0,0 +1,8 @@
+phlo_oauth2_proxy/__init__.py,sha256=qIIYaXnxYNC60MKgrFetUeTgszIGF2jvvk3Ddq57bL8,52
+phlo_oauth2_proxy/plugin.py,sha256=XDYhEX-uwa0-jdiygPQPyF4fAOVIyOupKhZlsXgYuLM,1552
+phlo_oauth2_proxy/service.yaml,sha256=338x0hRW1ADc05uxV588SwW08RV3DT4eEmlngW-a2Yk,2289
+phlo_oauth2_proxy-0.2.0.dist-info/METADATA,sha256=GNn7AG0__QekAUX8MgLhWyAb9ztUpy3K2AWR9o9BWtE,445
+phlo_oauth2_proxy-0.2.0.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+phlo_oauth2_proxy-0.2.0.dist-info/entry_points.txt,sha256=-Ze_JeSx0eAvfvU4Zf4z23L3kmCLYWYrZ2Yc0-AAdoU,89
+phlo_oauth2_proxy-0.2.0.dist-info/top_level.txt,sha256=xoAe-BhjiOlPps5JXe7qcMP4cVVPk_r5S-ga8SoYSDI,18
+phlo_oauth2_proxy-0.2.0.dist-info/RECORD,,

phlo_oauth2_proxy-0.2.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (82.0.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

phlo_oauth2_proxy-0.2.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[phlo.plugins.services]
+oauth2-proxy = phlo_oauth2_proxy.plugin:Oauth2ProxyServicePlugin

phlo_oauth2_proxy-0.2.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+phlo_oauth2_proxy