fastapi-oidc

Purpose

Demonstrate how to use OIDC with PKCE with keycloak, fastapi and angular.

Setup

Install miniconda and install the environment with conda env create -f environment.yml. Update with conda env update -f environment.yml.

Install pre-commit hooks: pre-commit install.

Starting

Start keycloak.

Start the python api server with python -m fastapi_oidc.main. Documentation on using SwaggerUI can be found in fastapi oidc.

Then start the angular app.

Keycloak

See keycloak.

Certified Implementations of OIDC

OpenID Connect Provider (Authentication Server, supports PKCE):

• oidc-op
• oidc-op docs

OpenID Connect Relying Party (Client, e.g.Webapp, supports PKCE):

• oidcrp
• oidcrp docs

Angular OIDC Client (supports PKCE):

• angular-auth-oidc-client

React OIDC (based upon certified oidc-client-js):

• oidc-react
• oidc-client-ts

Further Reading

OpenID Connect:

• OpenID Connect Documentation
• Certified OpenID Connect Implementations
• OAuth 2.0 and OpenID Connect Overview (Okta)
• An Illustrated Guide to OAuth and OpenID Connect (Okta)
• Implement the OAuth 2.0 Authorization Code with PKCE Flow (Okta)

Validation of the Access Token

• Validating Access Tokens (Auth0)
• Token Introspection Endpoint (Okta)
• mircoprofile-jwt for Interoperability between Identity and Service Providers

Keycloak:

• Running Keycloak in a Container
• Getting Started Docker
• Automatically Importing a Realm

JWT:

• RFC7519 describing jwt