Python OIDC client and Shibboleth Idp with OIDC plugin

Julien Cochennec julien.cochennec at
Tue Nov 24 09:10:57 UTC 2020


Interesting, we switched to Flask-PyOIDC on another branch, and a 
problem still happens, but further.

That lib seems more clearly coded, more standard, but has very few 

Anyway, here's what happens now.

The auth decorator works and redirect to the login page, but then, after 
login, we always get

 > Something went wrong with the authentication, please try to login again.

I fear it may be related to this post

Were a member of this list says :

 > The problem was, in fact, that they weren't including the HTTP 
authentication header to do HTTP basic auth.

 > They added this, and it fixed the problem. Those for the post 
endpoint information, though. That could come in handy in the future.

More info about that :

The idp logs

|> 2020-11-23 14:38:19,281 - - WARN 
- Profile Action ValidateEndpointAuthentication: Unrecognized client 
authentication com.nimbusds.oauth2.sdk.auth.ClientSecretBasic at 15d10d97 
for client_secret_post|

My code (maybe wrong, I just discovered that lib, commented code are for 
last test)

pmd  =  ProviderMetadata(

pc  =  ProviderConfiguration(
     # provider_metadata=pmd,

auth  =  OIDCAuthentication({'default':pc},app)

Thanks for your help. Have a nice day.

Le 19/11/2020 à 10:05, Peter Schober a écrit :
> * Julien COCHENNEC <julien.cochennec at> [2020-11-18 21:23]:
>> We're testing a Python client that is developed with Flask (web
>> microframework) and Flask-OIDC (OIDC add-on with oauth-client lib
>> embedded).
> No comment on your current issue but given that pyoidc is an OIDC
> reference implementation (AFAIR) why not use Flask-pyoidc then?
> -peter

Julien Cochennec
Pôle de compétences - gestion des identités

Mél julien.cochennec at
Tél 02 38 83 48 88

DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list