soliplex 0.82.2__tar.gz → 0.82.4__tar.gz

{soliplex-0.82.2/src/soliplex.egg-info → soliplex-0.82.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: soliplex
-Version: 0.82.2
+Version: 0.82.4
 Summary: An AI-powered Retrieval-Augmented Generation (RAG) system with a modern web interface.
 Author-email: Enfold <info@enfoldsystems.net>
 Classifier: Programming Language :: Python :: 3

{soliplex-0.82.2 → soliplex-0.82.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "soliplex"
-version = "0.82.2"
+version = "0.82.4"
 description = "An AI-powered Retrieval-Augmented Generation (RAG) system with a modern web interface."
 authors = [{ name = "Enfold", email = "info@enfoldsystems.net" }]
 readme = "README.md"

{soliplex-0.82.2 → soliplex-0.82.4}/src/soliplex/config/authsystem.py

@@ -81,7 +81,7 @@ class OIDCAuthSystemConfig:
     @property
     def oauth_client_kwargs(self) -> dict:
         """Registered kwargs for this authsystem's 'ouath' client factory"""
-        client_kwargs = {}
+        client_kwargs = {"code_challenge_method": "S256"}
 
         if self.scope is not None:
             client_kwargs["scope"] = self.scope

{soliplex-0.82.2 → soliplex-0.82.4}/src/soliplex/views/authn.py

@@ -29,9 +29,27 @@ depend_the_unauth_logger = views.depend_the_unauth_logger
 depend_the_logger = views.depend_the_logger
 
 
+_DEFAULT_PORT_SUFFIXES = {"http": ":80", "https": ":443"}
+
+
+def _normalize_origin(scheme: str, netloc: str) -> tuple[str, str]:
+    """Lower-case 'netloc', dropping any default port for 'scheme'
+
+    A proxy may forward 'Host: example.com:443', which names the same
+    origin as 'https://example.com'.
+    """
+    netloc = netloc.lower()
+    default_port_suffix = _DEFAULT_PORT_SUFFIXES.get(scheme)
+
+    if default_port_suffix is not None:
+        netloc = netloc.removesuffix(default_port_suffix)
+
+    return scheme, netloc
+
+
 def _scheme_netloc(url: str) -> tuple[str, str]:
     scheme, netloc = urllib_parse.urlparse(url)[:2]
-    return scheme, netloc.lower()
+    return _normalize_origin(scheme, netloc)
 
 
 def _is_loopback(host: str) -> bool:
@@ -91,7 +109,7 @@ def _classify_return_to(
         return ReturnTo.MALFORMED
 
     trusted = {
-        (request.url.scheme, request.url.netloc.lower()),
+        _normalize_origin(request.url.scheme, request.url.netloc),
         *(_scheme_netloc(afo) for afo in allowed_frontend_origins),
     }
 
@@ -459,7 +477,9 @@ async def get_auth_system(
 ):
     """Complete the OIDC token auth flow with the specified provider
 
-    On success, redirect to client-specified URL.
+    On success, redirect to client-specified URL, passing 'token',
+    'refresh_token', 'expires_in', and (when the provider returns one)
+    'id_token' as callback parameters.
     """
     bound_logger = the_unauth_logger.bind(oidc_system=system)
 
@@ -504,15 +524,19 @@ async def get_auth_system(
     refresh_token = tokendict["refresh_token"]
     expires_in = tokendict["expires_in"]
 
-    return_to = _with_callback_params(
-        return_to,
-        dict(
-            token=access_token,
-            refresh_token=refresh_token,
-            expires_in=expires_in,
-        ),
+    callback_params = dict(
+        token=access_token,
+        refresh_token=refresh_token,
+        expires_in=expires_in,
     )
 
+    # Absent unless the configured scope includes 'openid'.
+    id_token = tokendict.get("id_token")
+    if id_token is not None:
+        callback_params["id_token"] = id_token
+
+    return_to = _with_callback_params(return_to, callback_params)
+
     return responses.RedirectResponse(return_to)
 
 

{soliplex-0.82.2 → soliplex-0.82.4/src/soliplex.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: soliplex
-Version: 0.82.2
+Version: 0.82.4
 Summary: An AI-powered Retrieval-Augmented Generation (RAG) system with a modern web interface.
 Author-email: Enfold <info@enfoldsystems.net>
 Classifier: Programming Language :: Python :: 3