Refs <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-i

<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clip

Next step: build the URL: <div class="snippet-clipboard-content notranslate positi

Authorization request about datasette-indieauth HOT 4 CLOSED

simonw commented on September 26, 2024

Authorization request

from datasette-indieauth.

Comments (4)

simonw commented on September 26, 2024

The client first creates a code verifier for each authorization request by generating a random string using the characters [A-Z] / [a-z] / [0-9] / - / . / _ / ~ with a minimum length of 43 characters and maximum length of 128 characters.

Then:

The client then creates the code challenge derived from the code verifier by calculating the SHA256 hash of the code verifier and Base64-URL-encoding the result.
code_challenge = BASE64URL-ENCODE(SHA256(ASCII(code_verifier)))

So I need to generate a code_verifier, code_challenge pair

from datasette-indieauth.

simonw commented on September 26, 2024

Maybe challenge_verifier_pair().

from datasette-indieauth.

simonw commented on September 26, 2024

In [1]: from datasette_indieauth import utils
In [2]: utils.challenge_verifier_pair()
Out[2]: 
('QeFH7Re2_jAJfCVpB4WtEo3alBB7LuW19EXQatMX5Gg=',
 'a6e024deddd984fd7a43c445fa2e1b875f7306f1d9d3e3d0024c9d26ff84e3f5')

from datasette-indieauth.

simonw commented on September 26, 2024

Next step: build the URL:

https://example.org/auth?response_type=code&
                          client_id=https://app.example.com/&
                          redirect_uri=https://app.example.com/redirect&
                          state=1234567890&
                          code_challenge=OfYAxt8zU2dAPDWQxTAUIteRzMsoj9QBdMIVEDOErUo&
                          code_challenge_method=S256&
                          scope=profile+create+update+delete&
                          me=https://user.example.net/

from datasette-indieauth.

Recommend Projects