mirror of
https://github.com/suitenumerique/meet.git
synced 2026-07-26 11:58:53 +00:00
Michel-Marie MAUDET
724a4ef3df
Add one-time exchange code mechanism for native app OIDC login. Instead of exposing session ID in redirect URL, generates a short-lived single-use code stored in Redis. Native apps exchange this code for the session ID via a dedicated API endpoint. Includes NativeAppRedirect for custom URL schemes, rate limiting, logging, and whitelist of allowed schemes. Closes #1153 Co-Authored-By: gigi206
64 lines
1.7 KiB
Python
64 lines
1.7 KiB
Python
"""URL configuration for the core app."""
|
|
|
|
from django.conf import settings
|
|
from django.urls import include, path
|
|
|
|
from lasuite.oidc_login.urls import urlpatterns as oidc_urls
|
|
from rest_framework.routers import DefaultRouter
|
|
|
|
from core.api import get_frontend_configuration, viewsets
|
|
from core.authentication.api import session_exchange
|
|
from core.external_api import viewsets as external_viewsets
|
|
|
|
# - Main endpoints
|
|
router = DefaultRouter()
|
|
router.register("users", viewsets.UserViewSet, basename="users")
|
|
router.register("rooms", viewsets.RoomViewSet, basename="rooms")
|
|
router.register("recordings", viewsets.RecordingViewSet, basename="recordings")
|
|
router.register("files", viewsets.FileViewSet, basename="files")
|
|
router.register(
|
|
"resource-accesses", viewsets.ResourceAccessViewSet, basename="resource_accesses"
|
|
)
|
|
|
|
# - External API
|
|
external_router = DefaultRouter()
|
|
external_router.register(
|
|
"application",
|
|
external_viewsets.ApplicationViewSet,
|
|
basename="external_application",
|
|
)
|
|
|
|
external_router.register(
|
|
"rooms",
|
|
external_viewsets.RoomViewSet,
|
|
basename="external_room",
|
|
)
|
|
|
|
urlpatterns = [
|
|
path(
|
|
f"api/{settings.API_VERSION}/",
|
|
include(
|
|
[
|
|
*router.urls,
|
|
*oidc_urls,
|
|
path(
|
|
"auth/session-exchange/", session_exchange, name="session_exchange"
|
|
),
|
|
path("config/", get_frontend_configuration, name="config"),
|
|
]
|
|
),
|
|
),
|
|
]
|
|
|
|
if settings.EXTERNAL_API_ENABLED:
|
|
urlpatterns.append(
|
|
path(
|
|
f"external-api/{settings.EXTERNAL_API_VERSION}/",
|
|
include(
|
|
[
|
|
*external_router.urls,
|
|
]
|
|
),
|
|
)
|
|
)
|