about summary refs log tree commit diff
diff options
context:
space:
mode:
authorFrederick Muriuki Muriithi2024-04-18 20:35:26 +0300
committerFrederick Muriuki Muriithi2024-04-23 11:49:08 +0300
commita1b4e9a245158a9735f5f49b5f12d6df3f8d53c5 (patch)
tree089452a4fb17b31fb3b1ba372d5ff466d2cf37f3
parent3838adf514ce0a5a1dc056521e0282d95ea619c9 (diff)
downloadgenenetwork2-a1b4e9a245158a9735f5f49b5f12d6df3f8d53c5.tar.gz
Use the JWT Bearer grant type
-rw-r--r--gn2/wqflask/oauth2/toplevel.py4
1 files changed, 3 insertions, 1 deletions
diff --git a/gn2/wqflask/oauth2/toplevel.py b/gn2/wqflask/oauth2/toplevel.py
index dffc0a7c..a120fe9b 100644
--- a/gn2/wqflask/oauth2/toplevel.py
+++ b/gn2/wqflask/oauth2/toplevel.py
@@ -18,6 +18,7 @@ def register_client():
     """Register an OAuth2 client."""
     return "USER IS LOGGED IN AND SUCCESSFULLY ACCESSED THIS ENDPOINT!"
 
+
 @toplevel.route("/code", methods=["GET"])
 def authorisation_code():
     """Use authorisation code to get token."""
@@ -42,12 +43,13 @@ def authorisation_code():
     if bool(code):
         base_url = urlparse(request.base_url, scheme=request.scheme)
         request_data = {
-            "grant_type": "authorization_code",
+            "grant_type": "urn:ietf:params:oauth:grant-type:jwt-bearer",
             "code": code,
             "scope": SCOPE,
             "redirect_uri": urljoin(
                 urlunparse(base_url),
                 url_for("oauth2.toplevel.authorisation_code")),
+            "assertion": request.args["jwt"],
             "client_id": app.config["OAUTH2_CLIENT_ID"]
         }
         return no_token_post(