Michael McGuinness
79 lines
2.2 KiB
Python
79 lines
2.2 KiB
Python
import streamlit as st
|
|
import msal
|
|
import requests
|
|
import boto3
|
|
from botocore.exceptions import ClientError
|
|
import json
|
|
|
|
# Replace with your own values
|
|
CLIENT_ID = "effafe90-7ed7-43a3-ab03-19a0be2f1758"
|
|
# CLIENT_SECRET = 'bjQ8Q~lpR2uBcGI34VDu16t73doz8Crj0YY_~dgD'
|
|
# TENANT_ID = ''
|
|
|
|
AUTHORITY = "https://login.microsoftonline.com/organizations/"
|
|
SCOPE = ["User.Read"]
|
|
REDIRECT_URI = "https://172.29.20.102:8501"
|
|
|
|
# Initialize boto3 client to interact with AWS Secrets Manager
|
|
|
|
|
|
def get_secret():
|
|
|
|
secret_name = "doczy-sso-azure-app-key"
|
|
region_name = "us-east-2"
|
|
|
|
# Create a Secrets Manager client
|
|
# session = boto3.session.Session()
|
|
# client = session.client(
|
|
# service_name='secretsmanager',
|
|
# region_name=region_name
|
|
# )
|
|
client = boto3.client("secretsmanager", region_name=region_name)
|
|
try:
|
|
get_secret_value_response = client.get_secret_value(SecretId=secret_name)
|
|
except ClientError as e:
|
|
raise e
|
|
|
|
secret = get_secret_value_response["SecretString"]
|
|
secret = json.loads(secret)["CLIENT_SECRET"]
|
|
|
|
return secret
|
|
|
|
|
|
CLIENT_SECRET = get_secret()
|
|
|
|
app = msal.ConfidentialClientApplication(
|
|
CLIENT_ID, authority=AUTHORITY, client_credential=CLIENT_SECRET
|
|
)
|
|
|
|
|
|
def get_auth_url(REDIRECT_URI):
|
|
auth_url = app.get_authorization_request_url(SCOPE, redirect_uri=REDIRECT_URI)
|
|
return auth_url
|
|
|
|
|
|
@st.cache_data
|
|
def get_token_from_code(auth_code, REDIRECT_URI):
|
|
app = msal.ConfidentialClientApplication(
|
|
CLIENT_ID, authority=AUTHORITY, client_credential=CLIENT_SECRET
|
|
)
|
|
result = app.acquire_token_by_authorization_code(
|
|
auth_code, scopes=SCOPE, redirect_uri=REDIRECT_URI
|
|
)
|
|
return result["access_token"]
|
|
|
|
|
|
def get_user_info(access_token):
|
|
headers = {"Authorization": f"Bearer {access_token}"}
|
|
response = requests.get("https://graph.microsoft.com/v1.0/me", headers=headers)
|
|
return response.json()
|
|
|
|
|
|
def handle_redirect(REDIRECT_URI):
|
|
if not st.session_state.get("access_token"):
|
|
code = st.query_params.get("code")
|
|
if code:
|
|
access_token = get_token_from_code(code, REDIRECT_URI)
|
|
st.session_state["access_token"] = access_token
|
|
st.session_state
|