galicea-odoo-addons-ecosystem/galicea_openid_connect/security/__init__.py

# -*- coding: utf-8 -*-

from .. import random_tokens
try:
    from jwcrypto import jwk
except ImportError:
    pass

def init_keys(IrConfigParameter):
    keys = {
        'galicea_openid_connect.authorization_code_jwk': lambda: \
            jwk.JWK.generate(kty='oct', size=256, kid=random_tokens.alpha_numeric(16), use='sig', alg='HS256').export(),
        'galicea_openid_connect.id_token_jwk': lambda: \
            jwk.JWK.generate(kty='RSA', size=2054, kid=random_tokens.alpha_numeric(16), use='sig', alg='RS256').export()
    }

    for key, gen in keys.iteritems():
        if not IrConfigParameter.search([('key', '=', key)]):
            IrConfigParameter.create({
                'key': key,
                'value': gen(),
                'group_ids': [(4, IrConfigParameter.env.ref('base.group_erp_manager').id)]
            })