hanzoai/sentinel
2
0
Fork 0
mirror of https://github.com/hanzoai/sentinel.git synced 2026-09-29 22:34:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

auth(hanzo): canonical /v1/iam/oauth/* IAM endpoints

Browse Source 
Defaults pointed at https://hanzo.id/oauth/{authorize,token,userinfo},
served only by the hanzo.id-worker shim. IAM itself 401s them.

Co-authored-by: Hanzo Dev <[email protected]>
This commit is contained in:
zeekay
2026-07-25 13:16:12 -07:00
co-authored by Hanzo Dev
parent 80cb16e7c9
commit 419c4e5047
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/sentry/auth/providers/hanzo/constants.py
+10 -4
View File
@@ -1,9 +1,15 @@
import os
# IAM OIDC endpoints (hanzo.id)
AUTHORIZE_URL = os.environ.get("SENTRY_OIDC_AUTHORIZE_URL", "https://hanzo.id/oauth/authorize")
ACCESS_TOKEN_URL = os.environ.get("SENTRY_OIDC_TOKEN_URL", "https://hanzo.id/oauth/token")
USERINFO_URL = os.environ.get("SENTRY_OIDC_USERINFO_URL", "https://hanzo.id/oauth/userinfo")
# IAM OIDC endpoints (hanzo.id). Canonical HIP-0111 paths — what hanzo.id's
# /.well-known/openid-configuration advertises. The bare /oauth/* forms were
# served only by the hanzo.id-worker shim; IAM itself 401s them.
AUTHORIZE_URL = os.environ.get(
"SENTRY_OIDC_AUTHORIZE_URL", "https://hanzo.id/v1/iam/oauth/authorize"
)
ACCESS_TOKEN_URL = os.environ.get("SENTRY_OIDC_TOKEN_URL", "https://hanzo.id/v1/iam/oauth/token")
USERINFO_URL = os.environ.get(
"SENTRY_OIDC_USERINFO_URL", "https://hanzo.id/v1/iam/oauth/userinfo"
)
CLIENT_ID = os.environ.get("SENTRY_OIDC_CLIENT_ID", "app-sentry")
CLIENT_SECRET = os.environ.get("SENTRY_OIDC_CLIENT_SECRET", "")