sources/oauth: add mastodon

authentik/sources/oauth/apps.py

@@ -21,6 +21,7 @@
     "authentik.sources.oauth.types.reddit",
     "authentik.sources.oauth.types.twitch",
     "authentik.sources.oauth.types.twitter",
+    "authentik.sources.oauth.types.mastodon",
 ]
 
 

authentik/sources/oauth/models.py

@@ -253,6 +253,16 @@ class Meta:
         verbose_name = _("Okta OAuth Source")
         verbose_name_plural = _("Okta OAuth Sources")
 
+class MastodonOauthSource(OAuthSource):
+    """Social Login using a specific mastodon instance."""
+
+    class Meta:
+
+        abstract = True
+        verbose_name = _("Mastodon OAuth Source")
+        verbose_name_plural = _("Mastodon OAuth Sources")
+
+
 
 class RedditOAuthSource(CreatableType, OAuthSource):
     """Social Login using reddit.com."""

authentik/sources/oauth/types/mastodon.py

@@ -0,0 +1,55 @@
+"""OpenID Connect OAuth Views"""
+from typing import Any
+
+from authentik.sources.oauth.clients.oauth2 import UserprofileHeaderAuthClient
+from authentik.sources.oauth.models import OAuthSource
+from authentik.sources.oauth.types.registry import SourceType, registry
+from authentik.sources.oauth.views.callback import OAuthCallback
+from authentik.sources.oauth.views.redirect import OAuthRedirect
+
+
+class MastodonClient(OAuth2Client):
+    """Mastodon OAuth2 Client"""
+
+    def get_access_token(self, **request_kwargs):
+        "Fetch access token from callback request."
+        auth = HTTPBasicAuth(self.source.consumer_key, self.source.consumer_secret)
+        return super().get_access_token(auth=auth)
+
+class MastodonOAuthRedirect(OAuthRedirect):
+    """Mastodon OAuth2 Redirect"""
+
+    def get_additional_parameters(self, source: OAuthSource):  # pragma: no cover
+        return {
+            "scope": ["read"]
+        }
+
+
+class MastodonOAuth2Callback(OAuthCallback):
+    """Mastodon OAuth2 Callback"""
+
+    client_class = MastodonClient
+
+    def get_user_id(self, info: dict[str, str]) -> str:
+        return info.get("username", "")
+
+    def get_user_enroll_context(
+        self,
+        info: dict[str, Any],
+    ) -> dict[str, Any]:
+        return {
+            "username": info.get("username"),
+            "name": info.get("display_name")
+        }
+
+
+@registry.register()
+class MastodonType(SourceType):
+    """Mastodon Type definition"""
+
+    callback_view = MastodonOAuth2Callback
+    redirect_view = MastodonOAuthRedirect
+    name = "Mastodon"
+    slug = "Mastodon"
+
+    urls_customizable = True

web/src/admin/sources/oauth/OAuthSourceViewPage.ts

@@ -59,6 +59,8 @@ export function ProviderToLabel(provider?: ProviderTypeEnum): string {
             return "Patreon";
         case ProviderTypeEnum.Reddit:
             return "Reddit";
+        case ProviderTypeEnum.Mastodon:
+            return "Mastodon";
         case ProviderTypeEnum.Twitter:
             return "Twitter";
         case ProviderTypeEnum.Twitch:

website/sidebarsIntegrations.js

@@ -193,5 +193,52 @@ module.exports = {
                 },
             ],
         },
+        {
+            type: "category",
+            label: "Federation & Social login",
+            link: {
+                type: "generated-index",
+                title: "Sources",
+                slug: "sources",
+                description:
+                    "Sources of users which can be federated with authentik",
+            },
+            items: [
+                {
+                    type: "category",
+                    label: "Directory syncronization",
+                    items: [
+                        "sources/active-directory/index",
+                        "sources/freeipa/index",
+                    ],
+                },
+                "sources/general",
+                {
+                    type: "category",
+                    label: "Protocols",
+                    items: [
+                        "sources/ldap/index",
+                        "sources/oauth/index",
+                        "sources/saml/index",
+                    ],
+                },
+                {
+                    type: "category",
+                    label: "Social Logins",
+                    items: [
+                        "sources/apple/index",
+                        "sources/azure-ad/index",
+                        "sources/discord/index",
+                        "sources/github/index",
+                        "sources/google/index",
+                        "sources/mailcow/index",
+                        "sources/twitch/index",
+                        "sources/plex/index",
+                        "sources/twitter/index",
+                        "sources/mastodon/index",
+                    ],
+                },
+            ],
+        },
     ],
 };