Headless Google Social Auth #4046

davidyytan · 2024-08-19T08:15:53Z

davidyytan
Aug 19, 2024
Sponsor

Does anyone knows how can I edit the redirect_uri from the oauth redirect?

Right now my django settings look like this,

# django-allauth settings
AUTHENTICATION_BACKENDS = [
    # Needed to login by username in Django admin, regardless of `allauth`
    'django.contrib.auth.backends.ModelBackend',
    # `allauth` specific authentication methods, such as login by email
    'allauth.account.auth_backends.AuthenticationBackend',
]

# django-allauth settings
# These are the URLs to be implemented by your single-page application.
HEADLESS_FRONTEND_URLS = {
    "account_confirm_email": "https://app.project.org/account/verify-email/{key}",
    "account_reset_password_from_key": "https://app.org/account/password/reset/key/{key}",
    "account_signup": "https://app.org/account/signup",
}

# HEADLESS_TOKEN_STRATEGY = 'core.tokenstrategy.DRFTokenStrategy'
HEADLESS_TOKEN_STRATEGY = 'core.tokenstrategy.SimpleJWTTokenStrategy'

ACCOUNT_AUTHENTICATION_METHOD="username_email"
ACCOUNT_EMAIL_REQUIRED = False
ACCOUNT_USERNAME_REQUIRED = False

SOCIALACCOUNT_PROVIDERS = {
    "github": {
        "VERIFIED_EMAIL": True,
        'SCOPE': [
            'user',
            'repo',
            'read:org',
        ],
        'APP': {
            'client_id': '',
            'secret': '',
            'key': ''
        },
    },
    'google': {
        "APPS": [
            {
                "client_id": "",
                "secret": "",
                "key": ""
            },
        ],
        'SCOPE': [
            'profile',
            'email',
        ],
        'AUTH_PARAMS': {
            'access_type': 'online',
        },
        'OAUTH_PKCE_ENABLED': True,
    }
}

SIMPLE_JWT = {
    'ACCESS_TOKEN_LIFETIME': timedelta(minutes=60),
    'REFRESH_TOKEN_LIFETIME': timedelta(days=1),
}


GENEIQ_BACKEND_CELERY_ADDRESS = os.getenv('GENEIQ_BACKEND_CELERY_ADDRESS', default='localhost:8002')


# django-cors-headers (remove when not needed)
# CORS_ORIGIN_ALLOW_ALL = DEBUG
CORS_ALLOWED_ORIGINS = [
    "http://localhost:5173",
    "https://web-10-4-73-61.nip.io/",
    "https://backend-10-4-73-61.nip.io",
    "http://backend-10-4-73-61.nip.io"
]
CORS_ALLOW_CREDENTIALS = True

MEDIA_URL = '/media/'
MEDIA_ROOT = os.path.join(BASE_DIR,'media')

and I am calling the headless Provider redirect which works but doing the auth flow, the redirect uri is wrong but I dont know where to set it in the DB

I cant get the redirect_uri to point to https://backend-10-4-73-61.nip.io/accounts/google/login/callback/

Right now it is pointing to http://10.4.73.61:9001/accounts/google/login/callback/

I am hosting both the backend and frontend under nip.io to try out google social auth, with self signed cert, using nginx.
https://web-10-4-73-61.nip.io/
https://backend-10-4-73-61.nip.io/

Do let me know if more information is needed. Thanks!

This is the allauth react example for reference of the same log in.