[Feature] OAuth2 Provider (#84)

Fixes #74

Co-authored-by: Tim Lorsbach <tim@lorsba.ch>
Reviewed-on: enviPath/enviPy#84

envipath/settings.py

@@ -43,6 +43,7 @@ INSTALLED_APPS = [
     'django.contrib.staticfiles',
     # 3rd party
     'django_extensions',
+    'oauth2_provider',
     # Custom
     'epdb',
     'migration',
@@ -60,8 +61,13 @@ MIDDLEWARE = [
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
+    'oauth2_provider.middleware.OAuth2TokenMiddleware',
 ]
 
+OAUTH2_PROVIDER = {
+    "PKCE_REQUIRED": False,  # Accept PKCE requests but dont require them
+}
+
 if os.environ.get('REGISTRATION_MANDATORY', False) == 'True':
     MIDDLEWARE.append('epdb.middleware.login_required_middleware.LoginRequiredMiddleware')
 

envipath/urls.py

@@ -25,4 +25,5 @@ urlpatterns = [
     path("admin/", admin.site.urls),
     path("api/v1/", api_v1.urls),
     path("api/legacy/", api_legacy.urls),
+    path("o/", include("oauth2_provider.urls", namespace="oauth2_provider")),
 ]