Example of OpenID Connect with Flask

This includes a simple onboarding/registration workflow.

Setup

pip install -r requirements.txt
python app.py

Then:

• copy env-example to .env
• add your OIDC issuer, client ID and secret key
• generate a secret key for sessions

Registration Example

• Go to 127.0.0.1:5555/onboard?email=[email protected]
• This returns a 'registration link'
• Visit the registration link and log in
• That email is now associated with the logged-in user identity info

Caveats

Needless to say, this is a toy example that should not be used directly in production. To be production-ready, it should at the least:

• limit who can access /onboard
• use a real back-end for user information
• encrypt the registration keys in that back end