OpenID Connect Client implementation using Python and Flask

This project is meant to provide a starting point for building a website using python and flask that is secured using OpenID Connect. Functionality is initially limited to a home page that displays login, logout, and profile links. The profile page will display the currently authenticated user's userinfo extracted from their id_token.

• Python 3.x
• pip
• venv or virtualenv

Depending on your Operating System and envirinment you may need to install these tools yourself. Google is your friend.

Note: For Windows WSL see this article

• Flask
• AuthLib
• python-dotenv
• requests

Note: Most of the OIDC functionality in this project is provided by AuthLib.

If you are using vscode and have the python extension you should see a Create Environment... button if you click on the requirements.txt file. See Creating Environments for additional help. This method requires venv.

If you are using a different editor or prefer to do things in a shell you can use the following resources:

• Python: How To Create, Activate, Deactivate, And Delete Virtual Environments
• How to install Python packages with pip and requirements.txt

All configuration for this project is done using a .env file. You can start by renaming the file .example.env to .env and then providing the missing values described below. The values that start with OIDC_ must be acquired from your OpenID Connect provider.

Other configuration values may be needed depending on your OpenID Provider. See the AuthLib documentation for help with other options.

Once you have finished updating your configuration you can run your website locally by executing flask run in your terminal shell.