I am trying to implement introspection on client side suing Okta as my authorization server but continuously getting error
{"error": "missing_authorization", "error_description": "Missing \"Authorization\" in headers."}
My Implementation
class MyIntrospectTokenValidator(IntrospectTokenValidator):
def introspect_token(self, token_string):
print(f"Introspecting token {token_string}")
url = f'{okta_keys.get("base_url")}/v1/introspect'
data = {'token': token_string, 'token_type_hint': 'access_token'}
auth = (okta_keys.get('client_id'), okta_keys.get('client_secret'))
resp = requests.post(url, headers=headers, data=data, auth=auth)
resp.raise_for_status()
return resp.json()
require_oauth = ResourceProtector()
require_oauth.register_token_validator(MyIntrospectTokenValidator())
okta = oauth.register(
name='okta',
client_id=secrets["internal_client_id"],
client_secret=secrets["internal_client_secret"],
access_token_url=f'{okta_keys.get("base_url")}/v1/token',
authorize_url=f'{okta_keys.get("base_url")}/v1/authorize',
api_base_url=f'{okta_keys.get("base_url")}',
introspect=f'{okta_keys.get("base_url")}/v1/introspect',
jwks_uri=f'{okta_keys.get("base_url")}/v1/keys',
userinfo_endpoint=f'{okta_keys.get("base_url")}/v1/userinfo',
client_kwargs={'scope': 'openid email profile'},
)
@app.route('/authorize', methods=["GET", "POST"])
def authorize():
_okta = oauth.create_client('okta') # create the google oauth client
token = _okta.authorize_access_token() # Access token from google (needed to get user info)
session.permanent = True # make the session permanant so it keeps existing after broweser gets closed
headers = {'Authorization': f'Bearer {token.get("access_token")}'}
print(f"\n\n{headers}\n\n")
return redirect(url_for('index', _external=True))
@app.route('/oauth/hello-world-api', methods=["GET", "POST"])
@require_oauth(['openid', 'email', 'profile'])
def hello_world():
return str('Hello World')
I have been trying to resolve this for a while but could not succeed
- Authlib version 1.0.0a1
CodePudding user response:
I figured out the problem with the code, I just needed to provide Authorization manually to my api
Here is the code
@app.route('/authorize', methods=["GET", "POST"])
def authorize():
_okta = oauth.create_client('okta') # create the google oauth client
token = _okta.authorize_access_token() # Access token from google (needed to get user info)
session.permanent = True # make the session permanant so it keeps existing after broweser gets closed
headers = {'Authorization': f'Bearer {token.get("access_token")}'}
url = url_for('hello_world', _external=True)
r = requests.get(url, headers=headers)
return redirect(url_for('index', _external=True))
Afterwards, I performed post request from Postman.