šŸ“£ New release v2.3.0 of dash-auth

Dash Python
22

This might be entirely related to Azure AD, but I cannot figure it out.
OIDC works flawlessly while running locally, however once I deploy it Azure throws this error:

AADSTS500117: The reply uri specified in the request isnā€™t using a secure scheme.

Iā€™ve checked the redirect URL set in Azure AD and its the same one Iā€™m using to access.
Not sure where the problem lies. Any help is appreciated!

23

Try setting force_https_callback (boom or environment variable)

24

How can I get a userā€™s email with OIDC?

25

It will be available in the flask session in any dash callback.

from flask import session

@callback()
def some_func(*args):
    user_email = session["user"]["email"]
    # ...
1 Like
26

I have a question. Generally the basic auth shows up as a pop message while logging in. If I want to design a multi page application with a login page - can I connect the Basic Auth USER NAME and password options to the Password Input and Text input fields of that page?

27

How are you testing OIDC locally? I am trying to get into this so hoping to learn

28

@RenaudLN - Does this support multi page apps? Iā€™m trying to integrate into an existing app but Iā€™m not getting redirected to my OIDC provider.

EDIT: I should clarify that Iā€™m running the app in a Docker container and mapping my localhost:8050 to the container 8050. Not sure how this might effect things.

Hereā€™s what I have:

image
image783Ɨ420 34.4 KB

29

Hey @Mattriggs yes this works with multi-page apps and Iā€™ve been using it in production environment without problem.
Do you get any error logs that could point to whatā€™s going wrong?
Havenā€™t tried from a local Docker container but it works fine with Docker on the cloud.

30

Looks like it was from running in the container. Iā€™ve since ran the app locally and had no issues. I wonā€™t be looking further because this shouldnā€™t be an issue once I have this running in a cloud dev environment.

31

@RenaudLN How can I get the groups that a user is apart of when using OIDC? It doesnā€™t seem like that is loaded into any flask session variables. Iā€™m using Microsoft Entra ID as the provider. Does that have to be a separate API request?

32

This is something you need to define on your IDP so that custom claims (like user groups/roles) are passed to the OIDC token.

33

@RenaudLN Iā€™m trying to connect to OIDC provider in Production but https is required. I tried setting the force_https_callback parameter but itā€™s still creating the redirect URI as http. Am I doing it correctly?

image
image902Ɨ482 50.6 KB

Environment variable is set to true:
image

34

Hey @Mattriggs, I think you might need to make the envvar uppercase?

35

@RenaudLN I tried uppercase but still getting the same error :frowning:

36

force_https_callback is set on OIDCAuth, not on register_provider

37

it seems like literally amazing

38

is it possible to manage multiple tenants with the same idp ? should i register a provider for each tenant ?
thx

39

Yes and yes :+1: youā€™ll also need to define an idp selection route to handle the various providers