oauth2 grant type authorization code unable to get request.user
Shekar Tippur
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<style>
input.required, error {
border: 2px solid red;
}
</style>
<title>Log in</title>
</head>
<body>
<div id="sidebar">
</div>
<div id="content">
<form method="post" action="" id="loginForm">
<input type='hidden' name='csrfmiddlewaretoken' value='VALUE' />
<p><label for="id_username">Username:</label> <input id="id_username" maxlength="254" name="username" type="text" /></p>
<p><label for="id_password">Password:</label> <input id="id_password" name="password" type="password" /></p>
<input type="hidden" name="next" value="/o/authorize/?state=random_state_string&response_type=code&client_id=VALUE" />
<input type="submit" value="Log in" />
</form>
<p>Forgot your password? <a href="/accounts/password/reset/">Reset it</a>.</p>
<p>Not a member? <a href="/accounts/register/">Register</a>.</p>
</div>
</body>
</html>(env)
I am unable to get a code back as I get stuck at the login screen. Can someone please explain me on how to get complete authentication to work using django oauth2 framework.
I have followed http://django-oauth-toolkit.readthedocs.org/en/latest/tutorial/tutorial_01.html
Shekar Tippur
Shekar Tippur
Any updates on this please? I am stuck with this issue for quite a while now.
Chris Foresman
Zoltan Szalai
1. Visit in your browser (normally you direct your users here from your application):
http://localhost:8000/o/authorize/?client_id=<client_id>&response_type=code&state=<state>
You can optionally specify redirect_uri and scope params here.
2. Login with a user and authorize
3. You get redirected to: <redirect_uri>?state=<state>&code=<authorization_code>
4. The view that gets called here should verify the state and can exchange the code for an access token with a POST request like this (I'm using httpie to demonstrate):
http POST http://localhost:8000/o/token/ grant_type=authorization_code client_id=<client_id> client_secret=<client_secret> code=<authorization_code> redirect_uri=<one_of_the_redirect_uris_of_the_application> --form
If success, you should get back an access_token among others.
Note 1: the request Content-Type is application/x-www-form-urlencoded
Note 2: you only have AUTHORIZATION_CODE_EXPIRE_SECONDS to make a successful call. (https://django-oauth-toolkit.readthedocs.org/en/latest/settings.html#authorization-code-expire-seconds)
5. You can now call a protected API endpoint by adding the "Authorization: Bearer <access_token>" header to the request. In the API view you can access the authenticated user (from step 2) in request.user and the access token in request.auth.
--
You received this message because you are subscribed to the Google Groups "Django REST framework" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-rest-fram...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Shekar Tippur
Shekar Tippur
Shekar Tippur
{% extends "base.html" %}
{% block content %}
{% if form.errors %}
<p>Your username and password didn't match. Please try again.</p>
{% endif %}
<form method="post" action="{% url 'django.contrib.auth.views.login' %}">
{% csrf_token %}
<table>
<tr>
<td>{{ form.username.label_tag }}</td>
<td>{{ form.username }}</td>
</tr>
<tr>
<td>{{ form.password.label_tag }}</td>
<td>{{ form.password }}</td>
</tr>
</table>
<input type="submit" value="login" />
<input type="hidden" name="next" value="{{ next }}" />
</form>
{% endblock %}