Scribd
Upload
86 views3 pages

Simple Application Using OAuth 2.0 and Single Sign-On (SSO)

Uploaded by

sangeetha.ram
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
86 views3 pages

Simple Application Using OAuth 2.0 and Single Sign-On (SSO)

Uploaded by

sangeetha.ram
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 3

Creating a simple application using OAuth 2.

0 and Single Sign-On (SSO) involves


setting up an authentication flow where users can sign in with a third-party
service (like Google or GitHub) to access your application. Here’s a step-by-step
guide to help you build a basic example application with OAuth 2.0 and SSO using
Python with Flask and the OAuth 2.0 library `authlib`.

### **Step-by-Step Guide**

#### **1. Set Up the Environment**

- **Install Required Packages:**


Make sure you have Python installed. Install Flask and Authlib using pip:
```bash
pip install Flask Authlib
```

#### **2. Create a New Flask Application**

- **Create a Directory for Your Project:**


```bash
mkdir flask_oauth_app
cd flask_oauth_app
```

- **Create `app.py`:**
Create a file named `app.py` in the project directory with the following content:

```python
from flask import Flask, redirect, url_for, session
from flask import render_template_string
from authlib.integrations.flask_client import OAuth

app = Flask(__name__)
app.secret_key = 'your_secret_key'
app.config['SESSION_COOKIE_NAME'] = 'your_session_cookie_name'

# Configure OAuth
oauth = OAuth(app)
oauth.register(
name='google',
client_id='YOUR_GOOGLE_CLIENT_ID',
client_secret='YOUR_GOOGLE_CLIENT_SECRET',
authorize_url='https://accounts.google.com/o/oauth2/auth',
authorize_params=None,
access_token_url='https://accounts.google.com/o/oauth2/token',
access_token_params=None,
refresh_token_url=None,
redirect_uri='http://localhost:5000/auth',
redirect_uri_params=None,
scope='openid profile email',
client_kwargs={'scope': 'openid profile email'},
)

@app.route('/')
def index():
if 'user' in session:
user = session['user']
return render_template_string('''
<h1>Hello {{ user['name'] }}</h1>
<a href="/logout">Logout</a>
''', user=user)
return '<a href="/login">Login with Google</a>'

@app.route('/login')
def login():
redirect_uri = url_for('auth', _external=True)
return oauth.google.authorize_redirect(redirect_uri)

@app.route('/auth')
def auth():
token = oauth.google.authorize_access_token()
user = oauth.google.parse_id_token(token)
session['user'] = user
return redirect('/')

@app.route('/logout')
def logout():
session.pop('user', None)
return redirect('/')

if __name__ == '__main__':
app.run(debug=True)
```

Replace `'YOUR_GOOGLE_CLIENT_ID'` and `'YOUR_GOOGLE_CLIENT_SECRET'` with the


credentials obtained from the Google Developer Console.

#### **3. Register Your Application with Google**

- **Create a Project in Google Developer Console:**


- Go to the [Google Cloud Console](https://console.cloud.google.com/).
- Create a new project or select an existing one.

- **Set Up OAuth 2.0 Credentials:**


- Navigate to `APIs & Services` > `Credentials`.
- Click `Create Credentials` > `OAuth 2.0 Client IDs`.
- Configure the consent screen and add `http://localhost:5000/auth` as an
authorized redirect URI.

- **Obtain Client ID and Secret:**


- Note the `Client ID` and `Client Secret` and update your `app.py` file
accordingly.

#### **4. Run Your Application**

- **Start the Flask App:**


```bash
python app.py
```

- **Access the Application:**


Open your web browser and go to `http://localhost:5000`. You should see a link to
log in with Google. Click it, and you will be redirected to Google’s login page.
After logging in, you will be redirected back to your application with a welcome
message and a logout link.

### **Summary**
This simple Flask application demonstrates how to integrate OAuth 2.0 and SSO using
Google as the identity provider. It covers:
- Setting up OAuth 2.0 with Google
- Handling authentication and user sessions
- Using Flask to build a basic web application

You can adapt this example to other identity providers and enhance it with
additional features like error handling, more sophisticated user interfaces, and
additional functionality based on your needs.

You might also like