My portfolio.

Goal

In this project, 3 servers are developed: a client server, an authorization server and a resource server. A user goes to the authorization server via the client server. The user authenticates to the authorization server without revealing the credentials to the client server. The client server can access the resource on the resources server on behalf of the user by means of an access code which can be checked by the resources server. Note: this project was inspired by the following tutorial.

Techniques used

The following techniques were used:

• PKI: the public key of the auth. server is known to the client server and the resources server; the private key of the auth. server is used for signing.
• OAuth: client server, authorization server, resources server
• openssl: generating a PKI key pair on Windows
• redirections
• authorization code, access code (a JWT token: Json Web Token)
• Flask server + Jinja2 templates
• Python libraries: flask (Flask, make_response, render_template, redirect, request, url_for), requests, json, urllib.parse, base64, cryptography, jwt, secrets, time

Screenshots

A visual impression:

Link to the code.

The code can be found at this link.