diff --git a/fars/booking/templates/base.html b/fars/booking/templates/base.html index 346dd30..78b8daa 100644 --- a/fars/booking/templates/base.html +++ b/fars/booking/templates/base.html @@ -35,19 +35,17 @@ {% if user.is_authenticated %} {{user.get_full_name}} - {% trans "Logout" %} +
+ {% csrf_token %} + +
{% else %} {% endif %} diff --git a/fars/fars/settings.py b/fars/fars/settings.py index ade0729..81e8deb 100644 --- a/fars/fars/settings.py +++ b/fars/fars/settings.py @@ -42,6 +42,7 @@ 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', + 'mozilla_django_oidc', 'booking', 'tabletpage', 'rest_framework', @@ -198,11 +199,19 @@ # Keep ModelBackend around for per-user permissions and maybe a local # superuser. AUTHENTICATION_BACKENDS = ( - 'django_auth_ldap.backend.LDAPBackend', - 'django.contrib.auth.backends.ModelBackend', + 'mozilla_django_oidc.auth.OIDCAuthenticationBackend', + #'django.contrib.auth.backends.ModelBackend', ) # Never require cert AUTH_LDAP_GLOBAL_OPTIONS = { ldap.OPT_X_TLS_REQUIRE_CERT: ldap.OPT_X_TLS_NEVER } + +# OIDC settings +OIDC_RP_CLIENT_ID = env('OIDC_RP_CLIENT_ID') +OIDC_RP_CLIENT_SECRET = env('OIDC_RP_CLIENT_SECRET') + +OIDC_OP_AUTHORIZATION_ENDPOINT = env('OIDC_OP_AUTHORIZATION_ENDPOINT') +OIDC_OP_TOKEN_ENDPOINT = env('OIDC_OP_TOKEN_ENDPOINT') +OIDC_OP_USER_ENDPOINT = env('OIDC_OP_USER_ENDPOINT') diff --git a/fars/fars/urls.py b/fars/fars/urls.py index 633fd7b..383f4a5 100644 --- a/fars/fars/urls.py +++ b/fars/fars/urls.py @@ -28,4 +28,5 @@ path('booking/', include('booking.urls')), path('tablet/', include('tabletpage.urls')), path('', RedirectView.as_view(url='booking/')), + path('oidc/', include('mozilla_django_oidc.urls')), ] diff --git a/requirements.txt b/requirements.txt index 5e0e3d1..714376d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,3 +12,4 @@ django-auth-ldap~=2.1 psycopg2-binary~=2.8 requests~=2.22 requests-futures~=1.0 +mozilla-django-oidc~=1.2.4 \ No newline at end of file