AdmMabe/ai-chat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: update auth_callback to support HTTP Basic auth for OIDC providers

Browse Source
This commit is contained in:
Mabe
2026-06-21 16:55:34 +02:00
parent f0a2c5bdca
commit f7ef2de4e9
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/main.py
+8 -3
View File
@@ -75,16 +75,21 @@ async def auth_callback(payload: AuthCallbackRequest):
data = { data = {
"grant_type": "authorization_code", "grant_type": "authorization_code",
"client_id": settings.oidc_client_id,
"code": payload.code, "code": payload.code,
"code_verifier": payload.code_verifier, "code_verifier": payload.code_verifier,
"redirect_uri": str(payload.redirect_uri), "redirect_uri": str(payload.redirect_uri),
} }
# Some OIDC providers expect client credentials via HTTP Basic auth
auth = None
if settings.oidc_client_secret: if settings.oidc_client_secret:
data["client_secret"] = settings.oidc_client_secret auth = (settings.oidc_client_id, settings.oidc_client_secret)
else:
# public client: include client_id in the request body
data["client_id"] = settings.oidc_client_id
async with httpx.AsyncClient(timeout=15.0) as client: async with httpx.AsyncClient(timeout=15.0) as client:
response = await client.post(token_endpoint, data=data, headers={"Accept": "application/json"}) response = await client.post(token_endpoint, data=data, headers={"Accept": "application/json"}, auth=auth)
if response.status_code != 200: if response.status_code != 200:
raise HTTPException(status_code=400, detail=f"OIDC token exchange failed: {response.text}") raise HTTPException(status_code=400, detail=f"OIDC token exchange failed: {response.text}")