add code challenge/PKCE

https://docs.authlib.org/en/latest/client/frameworks.html#oauth-2-0-code-challenge
SUNET · Dec 16, 2024 · 92c5dc0 · 92c5dc0
1 parent 5bfced6
commit 92c5dc0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/cnaas_nms/api/app.py b/src/cnaas_nms/api/app.py
@@ -105,7 +105,7 @@ def handle_error(self, e):
     server_metadata_url=auth_settings.OIDC_CONF_WELL_KNOWN_URL,
     client_id=auth_settings.OIDC_CLIENT_ID,
     client_secret=auth_settings.OIDC_CLIENT_SECRET,
-    client_kwargs={"scope": auth_settings.OIDC_CLIENT_SCOPE},
+    client_kwargs={"scope": auth_settings.OIDC_CLIENT_SCOPE, "code_challenge_method": "S256"},
     authorize_params={"audience": auth_settings.AUDIENCE},
     response_type="code",
     response_mode="query",