53 lines
2.1 KiB
Python
53 lines
2.1 KiB
Python
import urllib.request
|
|
import ssl
|
|
import json
|
|
import sys
|
|
|
|
sys.stdout.reconfigure(encoding='utf-8')
|
|
|
|
ctx = ssl.create_default_context()
|
|
ctx.check_hostname = False
|
|
ctx.verify_mode = ssl.CERT_NONE
|
|
|
|
AK_BASE = "https://authentik.snarfnet.net"
|
|
AK_TOKEN = "SnarfNetPermanentAutomationToken2026"
|
|
|
|
headers = {
|
|
"Authorization": f"Bearer {AK_TOKEN}",
|
|
"Content-Type": "application/json",
|
|
"Accept": "application/json"
|
|
}
|
|
|
|
# 1. Fetch current provider 15
|
|
req = urllib.request.Request(f"{AK_BASE}/api/v3/providers/oauth2/15/", headers=headers)
|
|
with urllib.request.urlopen(req, timeout=10, context=ctx) as r:
|
|
prov = json.loads(r.read().decode())
|
|
|
|
print("Current redirect URIs:")
|
|
for u in prov.get("redirect_uris", []):
|
|
print(" -", u)
|
|
|
|
new_uris = [
|
|
{"matching_mode": "strict", "url": "https://snarfhome.snarfnet.net/auth/external/callback"},
|
|
{"matching_mode": "strict", "url": "https://snarfhome.snarfnet.net/auth/oidc/callback"},
|
|
{"matching_mode": "strict", "url": "https://snarfhome.snarfnet.net/"},
|
|
{"matching_mode": "regex", "url": r"https://snarfhome\.snarfnet\.net.*"},
|
|
{"matching_mode": "strict", "url": "https://4qwu1vav8er84pjh1r9x7qt1ajwq9siw.ui.nabu.casa/auth/external/callback"},
|
|
{"matching_mode": "strict", "url": "https://4qwu1vav8er84pjh1r9x7qt1ajwq9siw.ui.nabu.casa/auth/oidc/callback"},
|
|
{"matching_mode": "strict", "url": "https://4qwu1vav8er84pjh1r9x7qt1ajwq9siw.ui.nabu.casa/"},
|
|
{"matching_mode": "regex", "url": r"https://4qwu1vav8er84pjh1r9x7qt1ajwq9siw\.ui\.nabu\.casa.*"},
|
|
{"matching_mode": "regex", "url": r".*nabu\.casa.*"},
|
|
{"matching_mode": "regex", "url": r"http://14\.4\.4\.20:8123.*"},
|
|
]
|
|
|
|
# 2. Patch provider 15
|
|
patch_data = json.dumps({"redirect_uris": new_uris}).encode('utf-8')
|
|
patch_req = urllib.request.Request(f"{AK_BASE}/api/v3/providers/oauth2/15/", data=patch_data, headers=headers, method="PATCH")
|
|
with urllib.request.urlopen(patch_req, timeout=10, context=ctx) as r:
|
|
updated = json.loads(r.read().decode())
|
|
|
|
print("\nSuccessfully updated Authentik Provider 15 redirect URIs:")
|
|
for u in updated.get("redirect_uris", []):
|
|
print(" +", u)
|
|
|