docker: deposit-keycloak: connection ok
ActivePublic
Actions

Authored by ardumont on Feb 23 2021, 2:27 PM.

Tags

Subscribers

None

	```
	from typing import Any, Dict

	import requests

	from swh.deposit.exception import (
	AuthenticationError,
	AuthenticationMisconfigurationError,
	BadRequestError,
	)


	def token_url(auth_server: str) -> str:
	return f"{auth_server.rstrip('/')}/protocol/openid-connect/token"


	def authenticate(auth_server: str, username: str, password: str) -> Dict[str, Any]:
	"""Login and create new offline OpenID Connect session.

	Args:
	auth_server: Keycloak authentication server url including the realm (e.g
	https://auth.softwareheritage.org/SoftwareHeritage)
	username: an existing username in the realm
	password: password associated to username

	Returns:
	The OpenID Connect session info

	"""
	response = requests.post(
	url=token_url(auth_server),
	data={
	"grant_type": "password",
	"client_id": "swh-deposit",
	"scope": "openid offline_access",
	"username": username,
	"password": password,
	},
	)

	if response.ok:
	data = response.json()
	import pdb; pdb.set_trace()
	return data

	try:
	# try to parse some specific detail coming from keycloak if any
	data = response.json()
	except Exception:
	# No specific error (e.g. not found, ...), plainly raise the error
	response.raise_for_status()

	# Specific keycloak authentication issue
	map_error_code = {
	"invalid_grant": AuthenticationMisconfigurationError,
	"unsupported_grant_type": AuthenticationMisconfigurationError,
	"invalid_scope": AuthenticationMisconfigurationError,
	"invalid_client": AuthenticationError,
	"unauthorized_client": AuthenticationError,
	}

	error_code = data["error"]
	error_description = data.get("error_description", "")
	exception_factory = map_error_code.get(error_code, BadRequestError)
	raise exception_factory(f"{error_code}: {error_description}")

	url = "http://keycloak:8080/keycloak/auth/realms/SoftwareHeritage"

	username = "hal"
	password = "test"

	authenticate(url, username, password)

	```

	Finally!

	```
	In [7]: response = requests.post(
	...: url=token_url(auth_server),
	...: data={
	...: "grant_type": "password",
	...: "client_id": "deposit",
	...: "scope": "offline_access",
	...: "username": username,
	...: "password": password,
	...: },
	...: )
	...:

	In [8]: response.json()
	Out[8]:
	{'error': 'invalid_client',
	'error_description': 'INVALID_CREDENTIALS: Invalid client credentials'}

	In [9]: response = requests.post(
	...: url=token_url(auth_server),
	...: data={
	...: "grant_type": "password",
	...: "client_id": "swh-deposit",
	...: "scope": "openid offline_access",
	...: "username": username,
	...: "password": password,
	...: },
	...: )
	...:

	In [10]: response.ok
	Out[10]: True


	In [12]: response.json()
	Out[12]:
	{'access_token': 'eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJtSzh2S28tNTlNZ0xZc0EyU1hvNDhYb1NoV2g4NXZMWFN0blE3d3M2Yl9ZIn0.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.AXd_8vRsezWuBXdz380NvIOO2NDPTsi3zrTQam5Kn22_TIDVKX2dXY9qUIfm8S4c-WKYXxooTeA9qu-p5fHrVUddNFjKli4X23Fl05KvT4h8bgljlWD00XP2BWD87_5zxZaBolNQMa-4krNtfoTrAzXpQptmjDG4cJA9EbHYv8pb0DSgCv2gdZC94L8xxliQvJXN5X7Xuu8wstCJpSitT-AyTqtBwxoBuKhxy457RIdxRstjFSjwZYstRbJI8q7OtQ929VfznZsvbBmrzucrbUsgyqlCdO7p_D_aLNpv7uQ1cZdyAhNYFVXyIrJ1csRd9CR3rzp-Sx_JYZ1dXn4NlA',
	'expires_in': 300,
	'refresh_expires_in': 0,
	'refresh_token': 'eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIzNjExNTc2YS05OWFlLTRhMmMtYWJlOS1kZmQyNmY2ZGRlN2UifQ.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.itjGoq7M2OcD6zVpn1339HRJYPRIAwNN5ms6-8kuYW0',
	'token_type': 'Bearer',
	'id_token': 'eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJtSzh2S28tNTlNZ0xZc0EyU1hvNDhYb1NoV2g4NXZMWFN0blE3d3M2Yl9ZIn0.eyJleHAiOjE2MTQwODcwOTYsImlhdCI6MTYxNDA4Njc5NiwiYXV0aF90aW1lIjowLCJqdGkiOiIyYjUyYTU4My0xMmY4LTRhZTQtYjY4OC0yNzJhYjA5MDJkZGEiLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjUwODAva2V5Y2xvYWsvYXV0aC9yZWFsbXMvU29mdHdhcmVIZXJpdGFnZSIsImF1ZCI6InN3aC1kZXBvc2l0Iiwic3ViIjoiYzk3Y2UxMzYtZmUxNC00MWI4LTg4NzEtNzE0YzhlZTM1ZWE2IiwidHlwIjoiSUQiLCJhenAiOiJzd2gtZGVwb3NpdCIsInNlc3Npb25fc3RhdGUiOiIyOTFiYzI0NC03MjRkLTQzMjQtYjRhOC0yNGNkZTI3NzkzMWYiLCJhdF9oYXNoIjoiMXV5djEtVVRha0g2R2QzTUxwUmViUSIsImFjciI6IjEiLCJlbWFpbF92ZXJpZmllZCI6ZmFsc2UsIm5hbWUiOiJIQUwgQUkiLCJncm91cHMiOltdLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJoYWwiLCJnaXZlbl9uYW1lIjoiSEFMIiwiZmFtaWx5X25hbWUiOiJBSSJ9.AsthzCrFxoR96WACS3NXkFYsCV7rjM7kr3PM0f1_4DWa2mvgjCKoihtPhFnnxWOWNFmWm5rVfONoosjiArOI_Lh7EbVyQi2D2JpaLebPc725Ww2ARqNlUcepm_FyXRG3eQCmwnHWht37j91Jt3Q8FbWcJYHjIJgjg0tf2YMvdKLxEZHrl45GaqH_sJIF20pVDMd8vzRPiFQmixzwp_oqPvdpQ7vosk5BI6fanUMC_ZE1GzVicmW90bEMxVYAL8Sf8JLoXhkN2x6GEp_321C24DsBiIDHo3o6kafOuieJbYA7qdIgDztTTf-I042z0Uxa2xEJljWn5_Livi9fQh4qQg',
	'not-before-policy': 0,
	'session_state': '291bc244-724d-4324-b4a8-24cde277931f',
	'scope': 'openid offline_access profile email'}
	```

Event Timeline

ardumont created this paste.Feb 23 2021, 2:27 PM

Related to T2858

ardumont changed the title of this paste from docker: deposit-keycloak: connection ok finally to docker: deposit-keycloak: connection ok.Feb 23 2021, 2:31 PM

ardumont edited the content of this paste. (Show Details)Feb 23 2021, 2:35 PM

docker: deposit-keycloak: connection okActivePublicActions

Event Timeline

docker: deposit-keycloak: connection ok
ActivePublic
Actions