Function configure_fief

deploy/deploy.py:204–261

()

def configure_fief():
    fief_settings = FiefSettings()
    carbonserver_settings = CarbonServerSettings()

    api = requests.Session()
    api.headers["Authorization"] = f"Bearer {fief_settings.fief_main_admin_api_key}"
    # TODO: https
    url = f"http://{fief_settings.fief_domain}/admin/api"
    print(f"configuring fief at {url}")

    # fief server might not be running yet
    for _ in range(5):
        if api.get(url + "/clients", verify=False).status_code == 200:
            break
        print("waiting for fief server to come online...")
        time.sleep(5)

    client = api.get(url + "/clients", verify=False).json()["results"][0]
    redir_uris = [
        f"https://{carbonserver_settings.app_hostname}/auth/login",
        f"http://{carbonserver_settings.app_hostname}/auth/login",
        f"https://{fief_settings.fief_domain}/docs/oauth2-redirect",
        f"https://{fief_settings.fief_domain}/admin/auth/callback",
        f"http://{fief_settings.fief_domain}/docs/oauth2-redirect",
        f"http://{fief_settings.fief_domain}/admin/auth/callback",
        f"http://{fief_settings.fief_domain}/callback",
        "http://localhost/callback",
        "http://localhost:51562/callback",
    ]
    api.patch(
        f"{url}/clients/{client['id']}",
        json={"redirect_uris": redir_uris},
        verify=False,
    )
    client = api.get(url + "/clients", verify=False).json()["results"][0]

    # cli client
    cli_client = api.post(
        url + "/clients",
        json={
            "name": "cli",
            "first_party": True,
            "client_type": "public",
            "redirect_uris": redir_uris,
            # "authorization_code_lifetime_seconds": 0,
            # "access_id_token_lifetime_seconds": 0,
            # "refresh_token_lifetime_seconds": 0,
            "tenant_id": client["tenant_id"],
        },
    ).json()
    cli_client_id = cli_client["id"]
    print(
        f"""Run the following setup to use the cli:
    export AUTH_SERVER_URL=http://{fief_settings.fief_domain}
    export API_URL=http://{carbonserver_settings.app_hostname}/api
    export AUTH_CLIENT_ID={cli_client_id}
    """
    )