1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
from typing import Any, Optional, Union, List, Dict
from .base import AuthenticationBase
import json
class BackChannelLogin(AuthenticationBase):
"""Back-Channel Login endpoint"""
def back_channel_login(
self,
binding_message: str,
login_hint: str,
scope: str,
authorization_details: Optional[Union[str, List[Dict]]] = None,
requested_expiry: Optional[int] = None,
**kwargs
) -> Any:
"""Send a Back-Channel Login.
Args:
binding_message (str): Human-readable string displayed on both the device calling /bc-authorize and the user’s
authentication device to ensure the user is approves the correct request.
login_hint (str): JSON string containing user details for authentication in the iss_sub format.Ensure
serialization before passing.
scope(str): "openid" is a required scope.Multiple scopes are separated
with whitespace.
authorization_details (str, list of dict, optional): JSON string or a list of dictionaries representing
Rich Authorization Requests (RAR) details to include in the CIBA request.
requested_expiry (int, optional): Number of seconds the authentication request is valid for.
Auth0 defaults to 300 seconds (5 mins) if not provided.
**kwargs: Other fields to send along with the request.
Returns:
auth_req_id, expires_in, interval
"""
data = {
"client_id": self.client_id,
"binding_message": binding_message,
"login_hint": login_hint,
"scope": scope,
**kwargs,
}
if authorization_details is not None:
if isinstance(authorization_details, str):
data["authorization_details"] = authorization_details
elif isinstance(authorization_details, list):
data["authorization_details"] = json.dumps(authorization_details)
if requested_expiry is not None:
if not isinstance(requested_expiry, int) or requested_expiry <= 0:
raise ValueError("requested_expiry must be a positive integer")
data["requested_expiry"] = str(requested_expiry)
data.update(kwargs)
return self.authenticated_post(
f"{self.protocol}://{self.domain}/bc-authorize",
data = data,
headers={"Content-Type": "application/x-www-form-urlencoded"},
)
|
