angee.integrate.connect

OAuth account-connect completion: link an external account and store its credential.

The connect counterpart to OIDC login. It authenticates out to a provider on behalf of the already-signed-in user, labels their ExternalAccount from the userinfo profile, and stores the OAuth Credential the integration runtime acts with. No ID token, no user resolution, no session — that is login, and lives in iam_integrate_oidc. Works for any OAuthClient (an OIDC refinement is not required).

AccountConnectCompletion

@dataclass(frozen=True, slots=True)
class AccountConnectCompletion()

Connected account, captured credential, and provider profile claims.

enabled_oauth_client_from_hint

def enabled_oauth_client_from_hint(hint: Any,
                                   *,
                                   owner_label: str,
                                   reason: str,
                                   vendor_slug: str = "") -> Any

Resolve an enabled OAuth client from a backend-declared client hint.

complete_account_connect

def complete_account_connect(oauth_client: Any, *, code: str, state_token: str,
                             redirect_uri: str) -> AccountConnectCompletion

Complete an authenticated OAuth account-connect redirect.

The connecting user is the one captured in state when the flow started; the account is labelled from the provider userinfo and its OAuth credential stored under (user, provider).

complete_external_account_link

def complete_external_account_link(
        oauth_client: Any,
        *,
        user: AbstractBaseUser,
        external_id: str,
        tokens: dict[str, Any],
        claims: dict[str, Any],
        next_path: str = "/",
        integration_id: str = "",
        reason: str = "integrate.oauth.connect") -> AccountConnectCompletion

Link an external account to user and store its OAuth credential.