[v7r3] Tokens auth

dirac.cfg

@@ -419,6 +419,19 @@ Systems
 }
 Resources
 {
+  IdProviders
+  {
+    CheckIn
+    {
+      # What supported type of provider does it belong to
+      ProviderType = OAuth2
+      # Description of the client parameters registered on the identity provider side.
+      # Look here for information about client parameters description https://tools.ietf.org/html/rfc8414#section-2
+      issuer = https://aai-dev.egi.eu/oidc
+      client_id = type_client_id_here_receved_after_client_registration
+      scope = openid, profile, offline_access, eduperson_entitlement, cert_entitlement
+    }
+  }
 
   # Section for proxy providers, subsections is the names of the proxy providers
   # https://dirac.readthedocs.org/en/latest/AdministratorGuide/Resources/proxyprovider.html

environment.yml

@@ -69,6 +69,9 @@ dependencies:
   - typing >=3.6.6
   # Pin OpenSSL to avoid: https://github.com/DIRACGrid/DIRAC/issues/4489
   - openssl <1.1
+  # OAuth
+  - authlib ==0.15.3
+  - termcolor
   - pip:
     - diraccfg
     # This is a fork of tornado with a patch to allow for configurable iostream

requirements.txt

@@ -61,5 +61,3 @@ caniusepython3
 subprocess32
 flaky
 ldap3
-# setuptools_scm comes via tornado. newer versions of setuptools_scm do not support py2
-setuptools_scm<6.0