-
-
Notifications
You must be signed in to change notification settings - Fork 8.8k
wip: Zulip as OAuth2 Provider #16529
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
ff29d9b to
325ccbd
Compare
Right now we manually install django-oauth-toolkit.
This includes:
- help Django find the relevant templates
for the application view
- add in relevant views from the toolkit
- validate access tokens for Zulip views
TODO:
We should lock down the views and only allow admin
users to create applications, probably.
And we should automatically install the toolkit.
We should refine read/write scopes. (For now we
assume users just authorize with write scope.)
We can clean up the template-related code (to
de-duplicate the logic we use for the two-factor
templates).
And still lots else to do, like writing tests, etc.
|
Heads up @aero31aero, we just merged some commits that conflict with the changes your made in this pull request! You can review this repository's recent commits to see where the conflicts occur. Please rebase your feature branch against the |
|
Just to give a status of this:
But, overall, if anybody ever needs to take this over, they have a pretty solid foundation. It's likely to have rebase conflicts, but they will generally just be around the pip/requirements stuff. |
|
@showell can i take this PR forward? |
|
@edith007 Sure, give it a shot. |
4ec3636 to
88b200c
Compare
Continuing from #16455 with @showell.
Testing Plan:
GIFs or Screenshots: