Django OAuth Toolkit
3.4.1
Getting started
Installation
Upgrading
Getting started
Tutorials
Django Rest Framework
Django Ninja
Using the toolkit
Using the views
Views code and details
Templates
Models
Signals
Management commands
Advanced topics
RFC 9700 Security Best Current Practice
Security Vulnerability Response and Release Process
Principles
Roles and access
Repositories and data boundaries
Report intake and triage
Advisory and CVE management
Patch development paths
Shared security repository conventions
Required private validation
Multi-advisory release trains
Final private release gate
Public promotion and release
Failure during public cutover
Post-release work
Authorization Server
OAuth 2.0 Authorization Server Metadata
JWT client authentication (RFC 7523)
Pushed Authorization Requests (PAR)
Client ID Metadata Documents (CIMD)
OpenID Connect
Resource Server
Separate Resource Server
Token Audience Binding (RFC 8707)
OAuth 2.0 Protected Resource Metadata
Reference
Settings
Glossary
Project
Contributing
Package Layout
Changelog
Django OAuth Toolkit
Index
Index
A
|
B
|
C
|
D
|
E
|
G
|
H
|
I
|
M
|
O
|
P
|
R
|
S
|
T
|
U
|
V
A
AbstractAccessToken (class in oauth2_provider.models)
AbstractApplication (built-in class)
(class in oauth2_provider.models)
AbstractApplication.RegistrationSource (class in oauth2_provider.models)
AbstractDeviceGrant (class in oauth2_provider.models)
AbstractGrant (class in oauth2_provider.models)
AbstractIDToken (class in oauth2_provider.models)
AbstractPushedAuthorizationRequest (class in oauth2_provider.models)
AbstractRefreshToken (class in oauth2_provider.models)
Access Token
AccessToken (class in oauth2_provider.models)
AccessToken.DoesNotExist
AccessToken.MultipleObjectsReturned
AccessToken.NotUpdated
allow_scopes() (oauth2_provider.models.AbstractAccessToken method)
(oauth2_provider.models.AbstractIDToken method)
allows_audience() (oauth2_provider.models.AbstractAccessToken method)
Application
(class in oauth2_provider.models)
Application.DoesNotExist
Application.MultipleObjectsReturned
Application.NotUpdated
authenticate() (oauth2_provider.contrib.ninja.HttpOAuth2 method)
authenticate_client() (oauth2_provider.views.mixins.ResourceServerViewMixin method)
Authorization Code
Authorization Server
Authorization Token
AuthorizationServerViewMixin (class in oauth2_provider.views.mixins)
B
built-in function
OAuth2Validator.get_or_create_user_from_content()
protected_resource()
rw_protected_resource()
C
check_redirect_to_uri_allowed() (in module oauth2_provider.models)
clean() (oauth2_provider.models.AbstractApplication method)
Client
ClientProtectedResourceMixin (class in oauth2_provider.views.mixins)
ClientSecretField (class in oauth2_provider.models)
create_authorization_response() (oauth2_provider.views.mixins.AuthorizationServerViewMixin method)
create_device_authorization_response() (oauth2_provider.views.mixins.AuthorizationServerViewMixin method)
create_revocation_response() (oauth2_provider.views.mixins.AuthorizationServerViewMixin method)
create_token_response() (oauth2_provider.views.mixins.AuthorizationServerViewMixin method)
create_userinfo_response() (oauth2_provider.views.mixins.AuthorizationServerViewMixin method)
D
default_redirect_uri (oauth2_provider.models.AbstractApplication property)
DeviceCodeResponse (class in oauth2_provider.models)
DeviceGrant (class in oauth2_provider.models)
DeviceGrant.DoesNotExist
DeviceGrant.MultipleObjectsReturned
DeviceGrant.NotUpdated
DeviceRequest (class in oauth2_provider.models)
E
error_response() (oauth2_provider.views.mixins.AuthorizationServerViewMixin method)
G
get_access_token_admin_class() (in module oauth2_provider.models)
get_access_token_model() (in module oauth2_provider.models)
get_allowed_origin_validator() (oauth2_provider.models.AbstractApplication method)
get_allowed_schemes() (oauth2_provider.models.AbstractApplication method)
get_application_admin_class() (in module oauth2_provider.models)
get_application_model() (in module oauth2_provider.models)
get_client_secret_hmac_jwk() (oauth2_provider.models.AbstractApplication method)
get_client_signing_jwks() (oauth2_provider.models.AbstractApplication method)
get_db_prep_value() (oauth2_provider.models.ResourceJSONField method)
get_device_grant_model() (in module oauth2_provider.models)
get_grant_admin_class() (in module oauth2_provider.models)
get_grant_model() (in module oauth2_provider.models)
get_id_token_admin_class() (in module oauth2_provider.models)
get_id_token_model() (in module oauth2_provider.models)
get_oauthlib_backend_class() (oauth2_provider.views.mixins.OAuthLibCoreMixin class method)
get_oauthlib_core() (oauth2_provider.views.mixins.OAuthLibCoreMixin class method)
get_par_request_model() (in module oauth2_provider.models)
get_redirect_uri_validator() (oauth2_provider.models.AbstractApplication method)
get_refresh_token_admin_class() (in module oauth2_provider.models)
get_refresh_token_model() (in module oauth2_provider.models)
get_resource_metadata_url() (oauth2_provider.views.mixins.ProtectedResourceMetadataMixin method)
get_scopes() (oauth2_provider.views.mixins.OAuthLibCoreMixin method)
(oauth2_provider.views.mixins.ReadWriteScopedResourceMixin method)
(oauth2_provider.views.mixins.ScopedResourceMixin method)
get_server() (oauth2_provider.views.mixins.OAuthLibCoreMixin class method)
get_server_class() (oauth2_provider.views.mixins.OAuthLibCoreMixin class method)
get_validator_class() (oauth2_provider.views.mixins.OAuthLibCoreMixin class method)
Grant (class in oauth2_provider.models)
Grant.DoesNotExist
Grant.MultipleObjectsReturned
Grant.NotUpdated
H
HttpOAuth2 (class in oauth2_provider.contrib.ninja)
I
IDToken (class in oauth2_provider.models)
IDToken.DoesNotExist
IDToken.MultipleObjectsReturned
IDToken.NotUpdated
is_expired() (oauth2_provider.models.AbstractAccessToken method)
(oauth2_provider.models.AbstractDeviceGrant method)
(oauth2_provider.models.AbstractGrant method)
(oauth2_provider.models.AbstractIDToken method)
(oauth2_provider.models.AbstractPushedAuthorizationRequest method)
is_origin_allowed() (in module oauth2_provider.models)
is_usable() (oauth2_provider.models.AbstractApplication method)
is_valid() (oauth2_provider.models.AbstractAccessToken method)
(oauth2_provider.models.AbstractIDToken method)
M
module
oauth2_provider.models
oauth2_provider.views.application
oauth2_provider.views.base
oauth2_provider.views.generic
oauth2_provider.views.mixins
oauth2_provider.views.token
O
oauth2_provider.models
module
oauth2_provider.views.application
module
oauth2_provider.views.base
module
oauth2_provider.views.generic
module
oauth2_provider.views.mixins
module
oauth2_provider.views.token
module
OAuth2Validator.get_or_create_user_from_content()
built-in function
OAuthLibCoreMixin (class in oauth2_provider.views.mixins)
OAuthLibMixin (class in oauth2_provider.views.mixins)
OIDCLogoutOnlyMixin (class in oauth2_provider.views.mixins)
OIDCOnlyMixin (class in oauth2_provider.views.mixins)
OpenID Connect Provider
origin_allowed() (oauth2_provider.models.AbstractApplication method)
P
post_logout_redirect_uri_allowed() (oauth2_provider.models.AbstractApplication method)
pre_save() (oauth2_provider.models.ClientSecretField method)
(oauth2_provider.models.ResourceJSONField method)
(oauth2_provider.models.TokenChecksumField method)
protected_resource()
built-in function
ProtectedResourceMetadataMixin (class in oauth2_provider.views.mixins)
ProtectedResourceMixin (class in oauth2_provider.views.mixins)
PushedAuthorizationRequest (class in oauth2_provider.models)
PushedAuthorizationRequest.DoesNotExist
PushedAuthorizationRequest.MultipleObjectsReturned
PushedAuthorizationRequest.NotUpdated
Python Enhancement Proposals
PEP 561
R
ReadWriteScopedResourceMixin (class in oauth2_provider.views.mixins)
redirect_to_uri_allowed() (in module oauth2_provider.models)
redirect_uri_allowed() (oauth2_provider.models.AbstractApplication method)
Refresh Token
refresh_token_expire_timedelta() (in module oauth2_provider.models)
RefreshToken (class in oauth2_provider.models)
RefreshToken.DoesNotExist
RefreshToken.MultipleObjectsReturned
RefreshToken.NotUpdated
Relying Party
Resource Owner
Resource Server
ResourceJSONField (class in oauth2_provider.models)
ResourceServerViewMixin (class in oauth2_provider.views.mixins)
revoke() (oauth2_provider.models.AbstractAccessToken method)
(oauth2_provider.models.AbstractIDToken method)
(oauth2_provider.models.AbstractRefreshToken method)
revoke_access_token() (in module oauth2_provider.models)
revoke_family() (oauth2_provider.models.AbstractRefreshToken class method)
rw_protected_resource()
built-in function
S
ScopedResourceMixin (class in oauth2_provider.views.mixins)
scopes (oauth2_provider.models.AbstractAccessToken property)
(oauth2_provider.models.AbstractIDToken property)
set_token_value() (in module oauth2_provider.models)
T
TokenChecksumField (class in oauth2_provider.models)
U
unauthenticated_response() (oauth2_provider.views.mixins.ProtectedResourceMetadataMixin method)
(oauth2_provider.views.mixins.ResourceServerViewMixin method)
V
validate_authorization_request() (oauth2_provider.views.mixins.AuthorizationServerViewMixin method)
verify_request() (oauth2_provider.views.mixins.ResourceServerViewMixin method)