flask_workos_sso_authentication_quickstart.py

1import os
2from flask import Flask, redirect, request, session, url_for
3import workos
4
5# Initialize Flask app
6app = Flask(__name__)
7app.secret_key = os.getenv("FLASK_SECRET_KEY", "super-secret-key")
8
9# WorkOS Configuration
10workos.api_key = os.getenv("WORKOS_API_KEY")
11workos.client_id = os.getenv("WORKOS_CLIENT_ID")
12REDIRECT_URI = "http://localhost:5000/callback"
13
14@app.route("/")
15def index():
16    if "user" in session:
17        return f"Hello {session['user']['email']}! <a href='/logout'>Logout</a>"
18    return '<a href="/login">Login with SSO</a>'
19
20@app.route("/login")
21def login():
22    # The Organization ID or Connection ID is required to determine the SSO provider
23    # For this example, we assume you have it in an environment variable
24    organization_id = os.getenv("WORKOS_ORGANIZATION_ID")
25
26    authorization_url = workos.client.sso.get_authorization_url(
27        organization=organization_id,
28        redirect_uri=REDIRECT_URI,
29        state="state_parameter",
30    )
31    return redirect(authorization_url)
32
33@app.route("/callback")
34def callback():
35    code = request.args.get("code")
36    profile_and_token = workos.client.sso.get_profile_and_token(code)
37    
38    # Store the user profile in the session
39    session["user"] = profile_and_token.profile.to_dict()
40    return redirect(url_for("index"))
41
42@app.route("/logout")
43def logout():
44    session.clear()
45    return redirect(url_for("index"))
46
47if __name__ == "__main__":
48    app.run(port=5000)