nothing

deployment/deploy.sh

@@ -15,6 +15,8 @@ pushd $DEPLOYMENT_DIR > /dev/null
 . /tmp/secrets
 rm /tmp/secrets
 
+CLIENT_SECRETS=`cat oidc-config.json | sed -e's!%CLIENT_SECRET%!'$CLIENT_SECRET'!'`
+
 kubectl create namespace $NAMESPACE \
   --dry-run=client \
   -o yaml | \

deployment/oidc-config.json

@@ -5,7 +5,7 @@
         "client_id": "oidc-python-example",
         "client_secret": "%CLIENT_SECRET%",
         "redirect_uris": [
-            "http://localhost:8080/*"
+            "https://oidc-python-example.hottis.de/*"
         ],
         "userinfo_uri": "https://auth2.hottis.de/realms/hottis/protocol/openid-connect/userinfo", 
         "token_uri": "https://auth2.hottis.de/realms/hottis/protocol/openid-connect/token"

deployment/secrets.enc

@@ -1,5 +1,5 @@
-U2FsdGVkX1+uD433QQ1ZrBZgwtJsOHAXSLLhEoqQKwnt6IMztghrgnFihkUxkPo8
-LMjaH2aDwvEFh6BgzHgf+AAsbdQc0eUj1TJnIK9nd5e/5JZTRY9oQW5sMFjx7HDB
-VZ/YLX4/hsPMIsfG1cYXkE0dcpYPGgj2Y/YT33mNVcyU0VQ+DL7qRsMZXwohGQHE
-7R3sRXcUNLAnfdQWXOzkPtOg8UGE01Rki/DLEoDJgsLye6skqyIjrCQ7siaW5fER
-GoJCSzckwUUnzCrVa6b1tg==
+U2FsdGVkX195DRUc+YImk137kP0AjSX5+Y1RPIMKGLK9U2ZJS2tKTvSnZBr2A39E
+C3dHSJq+B8tcXMnWsaAiO355CIXGzSrCRsWxMK4kBPt6C2Z+s9iRya7eM5HOQFc2
+cnZ6gqHYM1ADoX0VbU2atszjZowFhGcuxSw8ZRqmrvIeqW/lCWCgd/gm+R2t8dsI
+h3nhoPqCpfSeeAU8UHl+s1zpeafwx7ADTLsuzi+Pu1oP9oKdI9Gf1NiUq1LxcNAF
+Zf2v/3qwepVKR5dxeb/Wmg==

src/app.py

@@ -5,6 +5,7 @@ import os
 from flask import Flask, g
 from flask_oidc import OpenIDConnect
 import requests
+from werkzeug.middleware.proxy_fix import ProxyFix
 
 logging.basicConfig(level=logging.DEBUG)
 
@@ -70,5 +71,6 @@ def logout():
     return 'Hi, you have been logged out! <a href="/">Return</a>'
 
 
-if __name__ == '__main__':
-    app.run(port=8080)
+app = ProxyFix(app, x_for=1, x_host=1)
+
+

start.sh

@@ -2,3 +2,4 @@
 
 gunicorn 'app:app' --bind 0.0.0.0:8080 --log-level=info --workers=4
 
+