Hi team,

We are evaluating options for PKCE integration into our Python Flask based web app. However we could see there are documentations on the Python based samples for this approach.

If we opt in via the suggested examples in the repo is Client Secret mandatory for the same ?https://github.com/okta/samples-python-flask

Please suggest.

This line fails in Python 2.7 with error:
str() takes at most 1 argument (2 given)

Had to change to:
return str(base64.b64encode(json.dumps(data).encode('utf-8'))).encode('utf-8')
Worth correcting or specifying that the sample is for Python 3

https://github.com/okta/samples-python-flask/blob/master/resource-server/README.md

The readme for the resource-server says that you need the client-id from the SPA, but this is incorrect. You need the client-id and client-secret (SPA doesn't have a client-secret) from a web application. This is adding to the confusion that was identified in this comment. #31 (comment)

wanted to refer to the custom login wiki but its incorrectly routed to okta hosted wiki.

Hi,
flask_oidc package is not well maintained(last release was on last April). Could you make this to the certified version from openid https://github.com/OpenIDC/pyoidc https://openid.net/developers/certified/

I'd rather limit the amount of places that I have secrets saved in a file. I am hosting on google (appspot) and the docs here seem to imply to me that I don't need any secrets if I'm not allowing registration. Am I understanding this correctly?

Error while installing requirements (using requirements.txt)

...
Building wheel for cryptography (PEP 517) ... error
ERROR: Command errored out with exit status 1:
command: /Users/sachinbhandare/samples-python-flask/python3/bin/python3 /Users/sachinbhandare/samples-python-flask/python3/lib/python3.8/site-packages/pip/_vendor/pep517/_in_process.py build_wheel /var/folders/1g/z4l8lqfn3tbg_7pj3006g60w0000gp/T/tmp144jwm0z
cwd: /private/var/folders/1g/z4l8lqfn3tbg_7pj3006g60w0000gp/T/pip-install-bfg30o6e/cryptography
Complete output (165 lines):
running bdist_wheel
running build
running build_py
creating build
creating build/lib.macosx-10.14.6-x86_64-3.8
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography
copying src/cryptography/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography
copying src/cryptography/utils.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography
copying src/cryptography/about.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography
copying src/cryptography/exceptions.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography
copying src/cryptography/fernet.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat
copying src/cryptography/hazmat/_der.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat
copying src/cryptography/hazmat/_types.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat
copying src/cryptography/hazmat/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat
copying src/cryptography/hazmat/_oid.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/oid.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/ocsp.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/general_name.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/extensions.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/name.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/base.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
copying src/cryptography/x509/certificate_transparency.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/x509
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends
copying src/cryptography/hazmat/backends/interfaces.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends
copying src/cryptography/hazmat/backends/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/_serialization.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/cmac.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/_asymmetric.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/_cipheralgorithm.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/poly1305.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/constant_time.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/keywrap.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/hmac.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/hashes.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
copying src/cryptography/hazmat/primitives/padding.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/bindings
copying src/cryptography/hazmat/bindings/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/bindings
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/x448.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/backend.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/ec.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/ciphers.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/ocsp.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/x509.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/aead.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/encode_asn1.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/rsa.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/dh.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/cmac.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/utils.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/poly1305.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/ed25519.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/dsa.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/decode_asn1.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/hmac.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/ed448.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/x25519.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
copying src/cryptography/hazmat/backends/openssl/hashes.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/backends/openssl
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
copying src/cryptography/hazmat/primitives/kdf/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
copying src/cryptography/hazmat/primitives/kdf/scrypt.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
copying src/cryptography/hazmat/primitives/kdf/pbkdf2.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
copying src/cryptography/hazmat/primitives/kdf/hkdf.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
copying src/cryptography/hazmat/primitives/kdf/x963kdf.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
copying src/cryptography/hazmat/primitives/kdf/kbkdf.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
copying src/cryptography/hazmat/primitives/kdf/concatkdf.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/kdf
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/twofactor
copying src/cryptography/hazmat/primitives/twofactor/totp.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/twofactor
copying src/cryptography/hazmat/primitives/twofactor/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/twofactor
copying src/cryptography/hazmat/primitives/twofactor/hotp.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/twofactor
copying src/cryptography/hazmat/primitives/twofactor/utils.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/twofactor
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/serialization
copying src/cryptography/hazmat/primitives/serialization/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/serialization
copying src/cryptography/hazmat/primitives/serialization/pkcs12.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/serialization
copying src/cryptography/hazmat/primitives/serialization/pkcs7.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/serialization
copying src/cryptography/hazmat/primitives/serialization/ssh.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/serialization
copying src/cryptography/hazmat/primitives/serialization/base.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/serialization
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/ciphers
copying src/cryptography/hazmat/primitives/ciphers/algorithms.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/ciphers
copying src/cryptography/hazmat/primitives/ciphers/aead.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/ciphers
copying src/cryptography/hazmat/primitives/ciphers/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/ciphers
copying src/cryptography/hazmat/primitives/ciphers/modes.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/ciphers
copying src/cryptography/hazmat/primitives/ciphers/base.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/ciphers
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/x448.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/ec.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/rsa.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/dh.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/utils.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/ed25519.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/dsa.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/ed448.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/x25519.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
copying src/cryptography/hazmat/primitives/asymmetric/padding.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/primitives/asymmetric
creating build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/bindings/openssl
copying src/cryptography/hazmat/bindings/openssl/init.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/bindings/openssl
copying src/cryptography/hazmat/bindings/openssl/_conditional.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/bindings/openssl
copying src/cryptography/hazmat/bindings/openssl/binding.py -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography/hazmat/bindings/openssl
running egg_info
writing src/cryptography.egg-info/PKG-INFO
writing dependency_links to src/cryptography.egg-info/dependency_links.txt
writing requirements to src/cryptography.egg-info/requires.txt
writing top-level names to src/cryptography.egg-info/top_level.txt
reading manifest file 'src/cryptography.egg-info/SOURCES.txt'
reading manifest template 'MANIFEST.in'
no previously-included directories found matching 'docs/_build'
warning: no previously-included files found matching 'vectors'
warning: no previously-included files matching '' found under directory 'vectors'
warning: no previously-included files matching '' found under directory '.github'
warning: no previously-included files found matching 'release.py'
warning: no previously-included files found matching '.coveragerc'
warning: no previously-included files found matching 'codecov.yml'
warning: no previously-included files found matching '.readthedocs.yml'
warning: no previously-included files found matching 'dev-requirements.txt'
warning: no previously-included files found matching 'tox.ini'
warning: no previously-included files found matching 'mypy.ini'
warning: no previously-included files matching '' found under directory '.zuul.d'
warning: no previously-included files matching '' found under directory '.zuul.playbooks'
adding license file 'LICENSE'
adding license file 'LICENSE.APACHE'
adding license file 'LICENSE.BSD'
adding license file 'LICENSE.PSF'
writing manifest file 'src/cryptography.egg-info/SOURCES.txt'
copying src/cryptography/py.typed -> build/lib.macosx-10.14.6-x86_64-3.8/cryptography
running build_ext
generating cffi module 'build/temp.macosx-10.14.6-x86_64-3.8/_padding.c'
creating build/temp.macosx-10.14.6-x86_64-3.8
generating cffi module 'build/temp.macosx-10.14.6-x86_64-3.8/_openssl.c'
running build_rust

  =============================DEBUG ASSISTANCE=============================
  If you are seeing a compilation error please try the following steps to
  successfully install cryptography:
  1) Upgrade to the latest pip and try again. This will fix errors for most
     users. See: https://pip.pypa.io/en/stable/installing/#upgrading-pip
  2) Read https://cryptography.io/en/latest/installation.html for specific
     instructions for your platform.
  3) Check our frequently asked questions for more information:
     https://cryptography.io/en/latest/faq.html
  4) Ensure you have a recent Rust toolchain installed:
     https://cryptography.io/en/latest/installation.html#rust
  5) If you are experiencing issues with Rust for *this release only* you may
     set the environment variable `CRYPTOGRAPHY_DONT_BUILD_RUST=1`.
  =============================DEBUG ASSISTANCE=============================

error: can't find Rust compiler

If you are using an outdated pip version, it is possible a prebuilt wheel is available for this package but pip is not able to install from it. Installing from the wheel would avoid the need for a Rust compiler.

To update pip, run:

  pip install --upgrade pip

and then retry package installation.

If you did intend to build this package from source, try installing a Rust compiler from your system package manager and ensure it is on the PATH during installation. Alternatively, rustup (available at https://rustup.rs) is the recommended way to download and update the Rust compiler toolchain.

This package requires Rust >=1.41.0.

ERROR: Failed building wheel for cryptography
Running setup.py clean for cryptography
ERROR: Command errored out with exit status 1:
command: /Users/sachinbhandare/samples-python-flask/python3/bin/python3 -u -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/private/var/folders/1g/z4l8lqfn3tbg_7pj3006g60w0000gp/T/pip-install-bfg30o6e/cryptography/setup.py'"'"'; file='"'"'/private/var/folders/1g/z4l8lqfn3tbg_7pj3006g60w0000gp/T/pip-install-bfg30o6e/cryptography/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(file);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, file, '"'"'exec'"'"'))' clean --all
cwd: /private/var/folders/1g/z4l8lqfn3tbg_7pj3006g60w0000gp/T/pip-install-bfg30o6e/cryptography
Complete output (36 lines):
running clean
removing 'build/temp.macosx-10.14.6-x86_64-3.8' (and everything under it)
removing 'build/lib.macosx-10.14.6-x86_64-3.8' (and everything under it)
'build/bdist.macosx-10.14.6-x86_64' does not exist -- can't clean it
'build/scripts-3.8' does not exist -- can't clean it
removing 'build'
running clean_rust

  =============================DEBUG ASSISTANCE=============================
  If you are seeing a compilation error please try the following steps to
  successfully install cryptography:
  1) Upgrade to the latest pip and try again. This will fix errors for most
     users. See: https://pip.pypa.io/en/stable/installing/#upgrading-pip
  2) Read https://cryptography.io/en/latest/installation.html for specific
     instructions for your platform.
  3) Check our frequently asked questions for more information:
     https://cryptography.io/en/latest/faq.html
  4) Ensure you have a recent Rust toolchain installed:
     https://cryptography.io/en/latest/installation.html#rust
  5) If you are experiencing issues with Rust for *this release only* you may
     set the environment variable `CRYPTOGRAPHY_DONT_BUILD_RUST=1`.
  =============================DEBUG ASSISTANCE=============================

error: can't find Rust compiler

If you are using an outdated pip version, it is possible a prebuilt wheel is available for this package but pip is not able to install from it. Installing from the wheel would avoid the need for a Rust compiler.

To update pip, run:

  pip install --upgrade pip

and then retry package installation.

If you did intend to build this package from source, try installing a Rust compiler from your system package manager and ensure it is on the PATH during installation. Alternatively, rustup (available at https://rustup.rs) is the recommended way to download and update the Rust compiler toolchain.

This package requires Rust >=1.41.0.

ERROR: Failed cleaning build dir for cryptography
...
..

To resolve, I had to create a virutual environment.

samples-python-flask % python3 -m venv python3

Activate it

samples-python-flask % source python3/bin/activate

(python3) samples-python-flask % which pip
/Users/MYHOME/samples-python-flask/python3/bin/pip

(python3) samples-python-flask % pip --version
pip 19.2.3 from /Users/MYHOME/samples-python-flask/python3/lib/python3.8/site-packages/pip (python 3.8)

(python3) samples-python-flask % pip install --upgrade pip
...
Successfully installed pip-21.1.3

Then installed the dependencies

samples-python-flask % pip install -r requirements.txt

... Dependencies got installed successfuly .. this time.

okta-hosted-login % python main.py

• Serving Flask app "main" (lazy loading)
• Environment: production
  ...

Remark - this time it worked fine.

Hope these steps helps.

The resource-server README says

Once logged in, you can navigate to the "Messages" page to see the interaction with the resource server.

However, the flask login examples in this repo do not seem to have a /messages endpoint. The resource-server works fine with the js-angular frontend example.

Are okta-hosted-login and resource-server examples in this repo meant to be used as stand-alone examples and not together?

Is it possible to add self registration to the examples? If not, could someone provide an simple example.

I'm having the same problem described in issue #59. I can run the Okta Hosted Login example, but when I click on the login button, I get a KeyError.

Modernized example with pipenv. 😃

It seems like version of dependencies are pretty outdated and gives various errors when run on recent Ubuntu version. I was able to get this working on the following in case someone run into same issues:

requests==2.28.0
Flask==2.1.2
Flask-Cors==3.0.10
pyOpenSSL==22.0.0
Flask-Login==0.6.1
okta-jwt-verifier==0.2.3

okta-hosted-login/main.py needs the following at the top to work out of the box:

import random
import string

Well, I haven't gotten it to run yet, but probably needs to be moved to python 3

As per the instructions in the ReadMe, the resource server needs a frontend to authenticate with. However, the VueJs frontend only works with PKCE Flow whereas the flask resource server uses the implicit flow. As a result, messages page can’t successfully fetch the data.

Is there any chance we could get the flask resource server to work with the PKCE Flow?

Thanks!

Hello there,
I was able to successfully deploy okta-hosted-login and navigate to the application on my localhost.
However, when I click on Login, I run into a KeyError issue.

query_params = {'client_id': config["client_id"],
KeyError: 'client_id'

I am not sure what I am missing. I did not change the code other than adding my details.
In the browser, the URL is
localhost:8080/login?
Could you please help?

Can we just use the redirect_uri from config in this line instead of getting it from request object? A bug in request library that returns the URL with http:// regardless of the original URL is http or https causing an issue in sample app.

First line

#!/suer/bin/env python

Hi,
I ran the okat-hosted-login example (after setting an application on okta with the same redirect_uri as the Login redirect URI).
After clicking on Login I get a bad request page with the message The 'redirect_uri' parameter must be an absolute URI that is whitelisted in the client app settings -

I already double checked my api keys are correct and that the redirect_uri matches the Login redirect URI.

Would appreciate your help.

Running pip install in a clean Python 3.7 env fails.

Reproducible example: Add this docker file to samples-python-flask and build

FROM python:3.7
ADD requirements.txt .

RUN python -m pip install --upgrade pip
RUN python -m pip install -r requirements.txt

The problem has been discussed in the MarkupSafe repo (pallets/markupsafe#57) and is solved by bumping the version of markup to 1.1.1 as described in this comment: pallets/markupsafe#57 (comment)

Hello,

When accessing the example, it says: "This example shows you how to to add the Authorization Code Flow to your PHP application."

Instead it should be "python" application.

Regards,

Jorge

I tried to runt the okta-hosted-login and once the user logs in, no credentials are required to log back in even after a log-out. Is there any function supported by flask-oidc to fully log out the user?

When I try to connect to login I get the following message:

Unable to connect to the server. Please check your network connection.

In the browser console I got the following errors:

1. Failed to load resource: net::ERR_NAME_NOT_RESOLVED
   https://%7B%7Bhttps//dev-933489.okta.com%7D%7D/api/v1/authn

2. name: "UNSUPPORTED_BROWSER_ERROR"
   message: "There was an error sending the request - have you enabled CORS?"