galicea-odoo-addons-ecosystem/galicea_openid_connect/security/__init__.py

from .. import random_tokens

try:
    from jwcrypto import jwk
except ImportError:
    pass


def init_keys(IrConfigParameter):
    keys = {
        "galicea_openid_connect.authorization_code_jwk": lambda: jwk.JWK.generate(
            kty="oct",
            size=256,
            kid=random_tokens.alpha_numeric(16),
            use="sig",
            alg="HS256",
        ).export(),
        "galicea_openid_connect.id_token_jwk": lambda: jwk.JWK.generate(
            kty="RSA",
            size=2054,
            kid=random_tokens.alpha_numeric(16),
            use="sig",
            alg="RS256",
        ).export(),
    }

    for key, gen in keys.iteritems():
        if not IrConfigParameter.search([("key", "=", key)]):
            IrConfigParameter.create(
                {
                    "key": key,
                    "value": gen(),
                    "group_ids": [
                        (4, IrConfigParameter.env.ref("base.group_erp_manager").id)
                    ],
                }
            )